{"vulnerability": "-077", "sightings": [{"uuid": "964f457c-0183-4c46-b9a5-e7f0972cb284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0773", "type": "seen", "source": "MISP/52fa24b7-65d4-4e0f-961c-249bac1d4fa4", "content": "", "creation_timestamp": "2014-02-11T13:39:27.000000Z"}, {"uuid": "e104ae14-9e96-4cd9-bad5-23e8e4f365c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0779", "type": "seen", "source": "MISP/53774a97-be48-4d6f-8291-4066950d2109", "content": "", "creation_timestamp": "2014-05-17T11:51:26.000000Z"}, {"uuid": "d944775e-5145-4b99-8789-1e3d4357d353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0779", "type": "seen", "source": "MISP/53804616-c6a8-48ea-b511-dbf1950d210b", "content": "", "creation_timestamp": "2014-05-24T07:23:07.000000Z"}, {"uuid": "97fce78d-3dd3-4f37-afdb-8b41a0ff7302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0774", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43715", "content": "", "creation_timestamp": "2018-01-17T00:00:00.000000Z"}, {"uuid": "8b830ce2-acdb-432f-b991-1cacb3e7588f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0770", "type": "exploited", "source": "https://www.exploit-db.com/exploits/44075", "content": "", "creation_timestamp": "2018-02-15T00:00:00.000000Z"}, {"uuid": "7608821a-6bab-4067-aa73-196fcb2cc151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0777", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43718", "content": "", "creation_timestamp": "2018-01-17T00:00:00.000000Z"}, {"uuid": "4407ea88-4556-4892-9633-1a04b9227f0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0775", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43717", "content": "", "creation_timestamp": "2018-01-17T00:00:00.000000Z"}, {"uuid": "04e0a998-7db4-4dd2-8e7a-6293d90a5ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0776", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43723", "content": "", "creation_timestamp": "2018-01-17T00:00:00.000000Z"}, {"uuid": "0b7fb462-6a0c-4083-9ee2-a25db420de67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://bsky.app/profile/krzyzanowskim.com/post/3leqvfwa3zs2x", "content": "", "creation_timestamp": "2025-01-02T10:44:13.464391Z"}, {"uuid": "cd9cd590-a0fd-4a15-8f40-8dc1ab54a298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0777", "type": "seen", "source": "https://bsky.app/profile/daffyduke.bsky.social/post/3lg3xswkxdb24", "content": "", "creation_timestamp": "2025-01-19T13:51:46.093333Z"}, {"uuid": "305e4643-0ffc-4ed4-be05-efb6dcd73a60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0778", "type": "seen", "source": "https://bsky.app/profile/daffyduke.bsky.social/post/3lg3xswkxdb24", "content": "", "creation_timestamp": "2025-01-19T13:51:46.136526Z"}, {"uuid": "9695a93c-9f83-4535-bf06-c039fe0d82c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-0774", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:38.000000Z"}, {"uuid": "2c4ecb1a-cae8-49ac-a320-8ec39a4993ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0779", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "36f3ccde-36f2-4549-9273-2739c96581d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0779", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:40.000000Z"}, {"uuid": "97305a2a-894c-4ebb-ba6a-3c7e83239ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-0771", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:38.000000Z"}, {"uuid": "c7411dd8-5087-4ecb-91a9-5dc5da87221a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-0773", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:38.000000Z"}, {"uuid": "23062064-65b2-492a-b086-d303eb1b4f00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0778", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-08)", "content": "", "creation_timestamp": "2025-03-08T00:00:00.000000Z"}, {"uuid": "56a1cec2-685c-4052-9b5a-7a0b884e3f68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-0774", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:21.000000Z"}, {"uuid": "fa0cb116-e600-41aa-aec5-5e88ce006b1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-0771", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:11.000000Z"}, {"uuid": "1e2676fa-3b79-4770-b3ef-f41457ae78bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-0773", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:11.000000Z"}, {"uuid": "76c3af29-e94c-47e1-82ce-0092f9245f14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0779", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:35.000000Z"}, {"uuid": "30f84946-be67-47fd-89fa-0525ebee7ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0779", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:02.000000Z"}, {"uuid": "67230c2d-95e3-46a6-b63a-4242a8933fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0778", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-26)", "content": "", "creation_timestamp": "2025-04-26T00:00:00.000000Z"}, {"uuid": "c045e966-c5aa-45c2-a3db-d391684d2b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0778", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-26)", "content": "", "creation_timestamp": "2025-04-26T00:00:00.000000Z"}, {"uuid": "29ff4ad1-daf3-419a-9806-640bb9e8aa86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-0773", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/backupexec/remote_agent.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "a2a962ef-0096-4549-9072-8aec502ba673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0779", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_rtmp.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "3101fac5-4e86-42e6-be76-742f8a9b3ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-0774", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/apache_modjk_overflow.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "3cb27ab9-a9ae-447a-93f4-265888f4228e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-21", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "f29fef22-5a9d-441c-aa53-37f7e4f694b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-0771", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/backupexec/registry.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "7d69ef8c-c7e6-46c0-a0af-cb157d90de57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0779", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:44.000000Z"}, {"uuid": "e900573c-d280-4d91-b6a3-cf0b79bb04f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0779", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:00.000000Z"}, {"uuid": "4188a461-5b96-4a8d-b644-84acfe480feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-259-06", "content": "", "creation_timestamp": "2025-09-16T10:00:00.000000Z"}, {"uuid": "387a18d1-ac67-4cbb-8747-995e8665c52a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lyy4ihc3eo2f", "content": "", "creation_timestamp": "2025-09-16T20:03:25.128098Z"}, {"uuid": "32aa71d1-98e9-4b0e-86a6-37f90a6ccb0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0779", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/zenworks_configuration_management_upload.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "f4d42b5f-8079-45a3-8221-b067829a38b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0777", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-069/", "content": "", "creation_timestamp": "2026-02-06T05:00:00.000000Z"}, {"uuid": "dbc751f3-37d2-4095-a3e7-5aa2ac2b6131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0777", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfddvwhury2s", "content": "", "creation_timestamp": "2026-02-21T00:17:50.719881Z"}, {"uuid": "c91039a7-5134-4336-bdc8-88a46d6a1a5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0777", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfde2ure4k2s", "content": "", "creation_timestamp": "2026-02-21T00:20:36.577898Z"}, {"uuid": "1be0dd04-d088-41ca-912e-cd7749415924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfkkg736ie2h", "content": "", "creation_timestamp": "2026-02-23T21:02:56.766849Z"}, {"uuid": "261574b7-5ead-4a8a-a89d-eb7ec2b37fbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0777", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfdz6d3fwi2n", "content": "", "creation_timestamp": "2026-02-21T06:38:20.548526Z"}, {"uuid": "d782bc23-e131-4c3f-89d8-fe040f08b255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meyx52yyyq24", "content": "", "creation_timestamp": "2026-02-16T21:02:35.491960Z"}, {"uuid": "cbddf150-ed11-4c50-ac80-6c57126a824d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2016-0778", "type": "seen", "source": "https://gist.github.com/W3SS/2b4cc2fd45e200ea4e703a92db5f5a7f", "content": "", "creation_timestamp": "2026-02-22T16:21:44.000000Z"}, {"uuid": "9fe6b8d3-2dbc-4a56-8afc-9042e69fd3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2016-0777", "type": "seen", "source": "https://gist.github.com/W3SS/2b4cc2fd45e200ea4e703a92db5f5a7f", "content": "", "creation_timestamp": "2026-02-22T16:21:44.000000Z"}, {"uuid": "61e6bd22-789f-4a0c-8236-e770da9d245f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0779", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-001/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "68c42e31-60e7-4560-a52f-5e2fa98a7c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0773", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-042/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "a9a0f18f-bc06-447a-b7a8-ae42c4883d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0778", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-041/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "4bacac59-635f-4d97-813a-b80a8ab80a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0776", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-040/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "47aaafb4-6137-440b-8477-e5179f094059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0774", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-039/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "029de5fc-b655-45d9-9098-36a88e4b6ac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0772", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-038/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "9f6b1989-d625-4a41-9f3d-0f206f9ec613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0771", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-037/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "2d780887-47f2-4db7-9fdf-7ad343ad1eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-036/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "290be516-ea44-4a3a-ab5e-43f7e17ffd29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0775", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-043/", "content": "", "creation_timestamp": "2026-01-12T05:00:00.000000Z"}, {"uuid": "759ba93d-ac74-4c29-bb3c-754cde32458d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0775", "type": "seen", "source": "https://gist.github.com/Darkcrai86/5f300d37409ffdb7bb232443d40d988b", "content": "", "creation_timestamp": "2026-01-13T08:29:07.000000Z"}, {"uuid": "66ac8775-04be-4593-9697-635cb91a612c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2012-0779", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/19369", "content": "", "creation_timestamp": "2012-06-25T00:00:00.000000Z"}, {"uuid": "b82f59b3-3cda-4dd0-8309-0be4a8dd8204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0778", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2xvokdng2x", "content": "", "creation_timestamp": "2026-01-23T05:31:16.321760Z"}, {"uuid": "fa2ce237-16c2-4e7e-bbd2-d12f2a4f1fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zecuky22h", "content": "", "creation_timestamp": "2026-01-23T05:57:21.406560Z"}, {"uuid": "feb1e745-8d24-4644-98e8-253486579d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0772", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zejlbhd2a", "content": "", "creation_timestamp": "2026-01-23T05:57:28.408598Z"}, {"uuid": "7112d172-c1ce-481f-a91e-6a58efb97aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0773", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zerlyet2r", "content": "", "creation_timestamp": "2026-01-23T05:57:36.718088Z"}, {"uuid": "cfd22bed-9a81-4f66-b610-3136c9d16772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0774", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zetkhj622", "content": "", "creation_timestamp": "2026-01-23T05:57:39.496329Z"}, {"uuid": "e3054031-57bf-4b59-9c6e-2045a3edb5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0772", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zghmimk24", "content": "", "creation_timestamp": "2026-01-23T05:58:33.272200Z"}, {"uuid": "90f0ee68-3930-4d0c-8bd0-4bed6751b2f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0773", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zgp6ucc2h", "content": "", "creation_timestamp": "2026-01-23T05:58:41.602454Z"}, {"uuid": "f06731ea-4238-48ea-9f1f-6c18ace8ab76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0774", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zgwxfud2r", "content": "", "creation_timestamp": "2026-01-23T05:58:49.665077Z"}, {"uuid": "9678d3df-473e-4338-914a-a48a9e717e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0775", "type": "seen", "source": "https://gist.github.com/Darkcrai86/89e65cf2a5ab0a0c1f6f196182bbb6e6", "content": "", "creation_timestamp": "2026-01-23T07:46:03.000000Z"}, {"uuid": "940fbd61-864d-42be-af57-8be48c5b9444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0773", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3b25x7d42c", "content": "", "creation_timestamp": "2026-01-23T08:14:49.785513Z"}, {"uuid": "a7327b7c-3a0a-42be-875b-539dbaea0f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3bcrstqg2c", "content": "", "creation_timestamp": "2026-01-23T08:19:39.092219Z"}, {"uuid": "f42da3c0-0df9-4192-88b3-4cd380020dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0774", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3bzq7vnd2i", "content": "", "creation_timestamp": "2026-01-23T08:32:29.391021Z"}, {"uuid": "aaeffeac-685e-41c5-824d-d8e2b2a7533d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0778", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3do5vemn2i", "content": "", "creation_timestamp": "2026-01-23T09:01:49.272753Z"}, {"uuid": "396a48ac-6b24-4ff0-bf0e-2c05fb112cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2011-0773", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/35254", "content": "", "creation_timestamp": "2011-01-25T00:00:00.000000Z"}, {"uuid": "303a7843-0d7e-460e-95e2-c4a7a9748fd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2011-0772", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/35259", "content": "", "creation_timestamp": "2011-01-25T00:00:00.000000Z"}, {"uuid": "a2ea3140-0a30-4b52-af26-1173224d413a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2011-0772", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/35260", "content": "", "creation_timestamp": "2011-01-25T00:00:00.000000Z"}, {"uuid": "f74f1f53-3006-4c9e-b366-cdcf5c04ffc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2015-0779", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/36964", "content": "", "creation_timestamp": "2015-05-08T00:00:00.000000Z"}, {"uuid": "d7065da7-b112-427b-9374-593e6e70d8e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2015-0779", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/36678", "content": "", "creation_timestamp": "2015-04-08T00:00:00.000000Z"}, {"uuid": "55ea4352-bb6b-4673-a841-0c73324c4634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2007-0774", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16798", "content": "", "creation_timestamp": "2010-07-25T00:00:00.000000Z"}, {"uuid": "c6d4d529-bd9d-4c90-904d-095f65b7d4f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2005-0773", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16332", "content": "", "creation_timestamp": "2010-07-03T00:00:00.000000Z"}, {"uuid": "f7a79dab-3c34-41da-b31d-82cfb24301bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0772", "type": "published-proof-of-concept", "source": "https://t.me/bug_bounty_channel/62", "content": "Hacktivity from hxd\n \nCVE-2016-0772 - python: smtplib StartTLS stripping attack\n\nhttps://hackerone.com/reports/144782", "creation_timestamp": "2016-08-30T19:19:49.000000Z"}, {"uuid": "b8c9108a-c7f2-4ea2-b0ce-93d659d181f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0776", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/8/nodejs-trust-falls-dangerous-module-resolution-on-windows", "content": "", "creation_timestamp": "2026-04-08T14:18:48.000000Z"}, {"uuid": "69949ad9-6ee8-428a-839f-dafc46b77e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0775", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/8/nodejs-trust-falls-dangerous-module-resolution-on-windows", "content": "", "creation_timestamp": "2026-04-08T14:18:48.000000Z"}, {"uuid": "7f68da72-aeec-4bbc-a3a4-6b3349d81cd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/cKure/9297", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 Zero-Day: Palo Alto Networks firewalls, VPNs vulnerable to OpenSSL bug.\n\nThreat actors can exploit this security vulnerability (tracked as CVE-2022-0778) to trigger a denial of service state and remotely crash devices running unpatched software.\n\nhttps://www.bleepingcomputer.com/news/security/palo-alto-networks-firewalls-vpns-vulnerable-to-openssl-bug/", "creation_timestamp": "2022-04-07T06:55:26.000000Z"}, {"uuid": "8e02bbdd-f700-442c-9231-48dfda831591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjhhd6zgtz2a", "content": "", "creation_timestamp": "2026-04-14T13:10:23.656865Z"}, {"uuid": "f6220d8e-f64e-4697-9fff-8b429a5878c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "cd6eba8f-a631-4b9d-a629-0d839048fa94", "vulnerability": "CVE-2022-0778", "type": "exploited", "source": "https://github.com/range42/range42-catalog/tree/main/03_container_layer/docker/_ctf/cve/crypto/openssl/CVE-2022-0778", "content": "", "creation_timestamp": "2026-04-15T14:28:35.974761Z"}, {"uuid": "0dcd343c-dd4e-4a22-8abf-9044034c3560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0776", "type": "seen", "source": "https://t.me/br0wsec/22", "content": "\u041d\u043e\u0432\u044b\u0439 \u0434\u0435\u043d\u044c - \u043d\u043e\u0432\u044b\u0435 \u0431\u0430\u0433\u0438! Lokihardt \u0438\u0437 Google \u0441\u043d\u043e\u0432\u0430 \u043e\u0442\u043a\u0440\u044b\u043b \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0441\u0442\u0435\u043a\u0430 \u0432 heap \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 JavaScript \u0432 Chakra(CVE-2017-0776). https://bugs.chromium.org/p/project-zero/issues/detail?id=1420.", "creation_timestamp": "2018-01-18T06:41:40.000000Z"}, {"uuid": "2a46d5dd-7998-4580-afb9-068a18430599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1668", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aExploring and exploiting CVE-2022-0778. \nURL\uff1ahttps://github.com/BobTheShoplifter/CVE-2022-0778-POC", "creation_timestamp": "2022-03-16T06:33:19.000000Z"}, {"uuid": "c9b777fb-f15a-4019-8e40-5e2d231a0e96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1666", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aProof of concept for CVE-2022-0778, which triggers an infinite loop in parsing X.509 certificates due to a bug in BN_mod_sqrt\nURL\uff1ahttps://github.com/drago-96/CVE-2022-0778", "creation_timestamp": "2022-03-15T19:11:50.000000Z"}, {"uuid": "00c0d79f-cffe-4a1b-8fe2-963e56de21aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-07", "content": "", "creation_timestamp": "2026-04-21T10:00:00.000000Z"}, {"uuid": "98449f9a-89fa-48cf-b081-621e188ac33c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1996", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aProof of concept for CVE-2022-0778 with P12 format\nURL\uff1ahttps://github.com/0xUhaw/CVE-2022-0778\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-04-21T11:24:16.000000Z"}, {"uuid": "666e1605-344b-495a-8495-eef7fb778343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "Telegram/PYoXNzyZrYaKFbj-BEEJp3q5SxJy9E0IbGus7zdCQfw4dWs", "content": "", "creation_timestamp": "2026-04-03T15:00:07.000000Z"}, {"uuid": "31142bf9-0bd7-4eb2-b613-cb0d2088ba9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0779", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1403", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0779\n\ud83d\udd39 Description: At the most basic level, an invalid pointer can be input that crashes the device, but with more knowledge of the device\u2019s memory layout, further exploitation is possible.\n\ud83d\udccf Published: 2023-05-30T00:00:00\n\ud83d\udccf Modified: 2025-01-13T20:35:53.652Z\n\ud83d\udd17 References:\n1. https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-9xj8-6989-r549", "creation_timestamp": "2025-01-13T21:12:30.000000Z"}, {"uuid": "590868ff-9acd-43a8-8e0d-4db6f01b9780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0778", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5198", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0778\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system.\n\ud83d\udccf Published: 2023-03-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-24T17:25:59.179Z\n\ud83d\udd17 References:\n1. https://bugzilla.redhat.com/show_bug.cgi?id=2168256", "creation_timestamp": "2025-02-24T18:26:40.000000Z"}, {"uuid": "5e6d3d43-a132-4a6a-abc3-21c96c60ee24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0772", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5800", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0772\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Popup Builder by OptinMonster WordPress plugin before 2.12.2 does not ensure that the campaign to be loaded via some shortcodes is actually a campaign, allowing any authenticated users such as subscriber to retrieve the content of arbitrary posts, like draft, private or even password protected ones.\n\ud83d\udccf Published: 2023-03-13T16:03:30.688Z\n\ud83d\udccf Modified: 2025-02-27T21:10:26.369Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/28754886-b7b4-44f7-9042-b81c542d3c9c", "creation_timestamp": "2025-02-27T21:26:05.000000Z"}, {"uuid": "5e5f19af-1c77-49d3-bdb0-1353bbfb4ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0777", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8462", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0777\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4.\n\ud83d\udccf Published: 2023-02-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T16:18:28.474Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/a17e7a9f-0fee-4130-a522-5a0466fc17c7\n2. https://github.com/modoboa/modoboa/commit/47d17ac6643f870719691073956a26e4be0a4806\n3. http://packetstormsecurity.com/files/171744/modoboa-2.0.4-Admin-Takeover.html", "creation_timestamp": "2025-03-24T16:22:51.000000Z"}, {"uuid": "03a28e96-a394-42b1-8e38-fb548f0fcc59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0771", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8464", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0771\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop.\n\ud83d\udccf Published: 2023-02-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T16:17:19.069Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/2493f350-271b-4c38-9e1d-c8fa189c5ce1\n2. https://github.com/ampache/ampache/commit/c456e66ef6fd8d11390181a40c66910ae01fbf4c", "creation_timestamp": "2025-03-24T16:22:53.000000Z"}, {"uuid": "a41cdbfc-55c2-4f77-a401-28d4ca206467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0771", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15569", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-0771\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability has been found in Nsasoft Product Key Explorer 4.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Registration Handler. The manipulation of the argument Name/Key leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251671. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2024-01-21T23:00:07.048Z\n\ud83d\udccf Modified: 2025-05-08T18:10:33.242Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.251671\n2. https://vuldb.com/?ctiid.251671\n3. https://youtu.be/eecN5mC0avU", "creation_timestamp": "2025-05-08T18:24:10.000000Z"}, {"uuid": "1fb4aa52-d122-498a-96c2-0eb10f5496cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0775", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18095", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-0775\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment\n\ud83d\udccf Published: 2024-01-16T15:52:36.869Z\n\ud83d\udccf Modified: 2025-06-11T17:11:59.017Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/b76dbf37-a0a2-48cf-bd85-3ebbc2f394dd/\n2. https://plugins.trac.wordpress.org/changeset/2683324\n3. https://developer.woocommerce.com/2022/02/22/woocommerce-6-2-1-security-fix/", "creation_timestamp": "2025-06-11T17:34:23.000000Z"}, {"uuid": "1bf58f7d-4a70-4b4f-8186-ae902e581ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0776", "type": "seen", "source": "https://t.me/antichat/659", "content": "\u041d\u043e\u0432\u044b\u0439 \u0434\u0435\u043d\u044c - \u043d\u043e\u0432\u044b\u0435 \u0431\u0430\u0433\u0438! Lokihardt \u0438\u0437 Google \u0441\u043d\u043e\u0432\u0430 \u043e\u0442\u043a\u0440\u044b\u043b \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0441\u0442\u0435\u043a\u0430 \u0432 heap \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 JavaScript \u0432 Chakra(CVE-2017-0776). https://bugs.chromium.org/p/project-zero/issues/detail?id=1420.", "creation_timestamp": "2018-01-18T09:29:05.000000Z"}, {"uuid": "65e4641a-caff-473f-8175-f96bd5807521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0777", "type": "published-proof-of-concept", "source": "https://t.me/antichat/651", "content": "ProjectZero \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u043e \u0434\u0432\u0443\u043c \u043d\u043e\u0432\u044b\u043c \u0438 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u043c memory corruption \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 Ms Edge. \u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u044d\u0442\u043e out of bounds write \u0432 Chakra Jit (CVE-2018-0777 \u0438 CVE-2018-0769), \u0434\u0435\u0442\u0430\u043b\u0438 \u0438 PoC\u0438 \u0435\u0441\u0442\u044c \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0430\u043c: https://bugs.chromium.org/p/project-zero/issues/detail?id=1429, https://bugs.chromium.org/p/project-zero/issues/detail?id=1390.", "creation_timestamp": "2018-01-17T07:18:26.000000Z"}, {"uuid": "00491315-7468-45ee-9216-95669be377d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/habr_com_news/4598", "content": "\u200bQNAP \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430 \u0432 OpenSSL\n\n\u0422\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0430\u044f QNAP \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0435\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 (NAS) \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 OpenSSL. \u041a\u0430\u043a \u0437\u0430\u044f\u0432\u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043f\u0440\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0442\u0438\u043f\u0430 \u00ab\u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-0778 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0432 7,5 \u0431\u0430\u043b\u043b\u0430. \u041e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0431\u043e\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \n\n#QNAP #OpenSSL #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c", "creation_timestamp": "2022-04-01T08:55:03.000000Z"}, {"uuid": "a34fbcaf-8439-4dee-93fc-2b40393d2069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-0216-0778", "type": "seen", "source": "https://t.me/ict_security/107", "content": "\ud83d\udcccHow To Patch and Protect OpenSSH Client Vulnerability CVE-2016-0777 and CVE-2016-0778 [ 14/Jan/2016 ]\n\nby Vivek Gite on January 15, 2016 last updated January 16, 2016\n in CentOS, Cryptography, Debian / Ubuntu, FreeBSD, Linux, Openbsd, RedHat and Friends, UNIX\n\nThe OpenSSH project released an ssh client bug info that can leak private keys to malicious servers. A man-in-the-middle kind of attack identified and fixed in OpenSSH are dubbed CVE-2016-0777 and CVE-2016-0778. How do I fix OpenSSH's client vulnerability on a Linux or Unix-like operating system?\nhttp://www.cyberciti.biz/faq/howto-openssh-client-security-update-cve-0216-0777-cve-0216-0778/\n\u2014-------\n\ud83d\udca1\u062f\u0631 \u0632\u0645\u06cc\u0646\u0647 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0628\u0627 \u0634\u0645\u0627 \u062e\u0648\u0627\u0647\u06cc\u0645 \u0628\u0648\u062f.\n\u2705 \u062f\u0631\u06cc\u0627\u0641\u062a \u0622\u062e\u0631\u06cc\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062f\u0631 \u06a9\u0627\u0646\u0627\u0644 \n@information_security_management \ud83d\udc48 join \ud83d\udc47\nhttps://telegram.me/joinchat/BaPoBjumXnCYx_E1GT62pw", "creation_timestamp": "2016-01-20T11:57:40.000000Z"}, {"uuid": "5a9291d1-f1ae-4609-8800-98528ad0fdea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0777", "type": "seen", "source": "https://t.me/ict_security/107", "content": "\ud83d\udcccHow To Patch and Protect OpenSSH Client Vulnerability CVE-2016-0777 and CVE-2016-0778 [ 14/Jan/2016 ]\n\nby Vivek Gite on January 15, 2016 last updated January 16, 2016\n in CentOS, Cryptography, Debian / Ubuntu, FreeBSD, Linux, Openbsd, RedHat and Friends, UNIX\n\nThe OpenSSH project released an ssh client bug info that can leak private keys to malicious servers. A man-in-the-middle kind of attack identified and fixed in OpenSSH are dubbed CVE-2016-0777 and CVE-2016-0778. How do I fix OpenSSH's client vulnerability on a Linux or Unix-like operating system?\nhttp://www.cyberciti.biz/faq/howto-openssh-client-security-update-cve-0216-0777-cve-0216-0778/\n\u2014-------\n\ud83d\udca1\u062f\u0631 \u0632\u0645\u06cc\u0646\u0647 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0628\u0627 \u0634\u0645\u0627 \u062e\u0648\u0627\u0647\u06cc\u0645 \u0628\u0648\u062f.\n\u2705 \u062f\u0631\u06cc\u0627\u0641\u062a \u0622\u062e\u0631\u06cc\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062f\u0631 \u06a9\u0627\u0646\u0627\u0644 \n@information_security_management \ud83d\udc48 join \ud83d\udc47\nhttps://telegram.me/joinchat/BaPoBjumXnCYx_E1GT62pw", "creation_timestamp": "2016-01-20T11:57:40.000000Z"}, {"uuid": "a106864c-2031-4ece-bf62-a3539f447642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-0216-0777", "type": "seen", "source": "https://t.me/ict_security/107", "content": "\ud83d\udcccHow To Patch and Protect OpenSSH Client Vulnerability CVE-2016-0777 and CVE-2016-0778 [ 14/Jan/2016 ]\n\nby Vivek Gite on January 15, 2016 last updated January 16, 2016\n in CentOS, Cryptography, Debian / Ubuntu, FreeBSD, Linux, Openbsd, RedHat and Friends, UNIX\n\nThe OpenSSH project released an ssh client bug info that can leak private keys to malicious servers. A man-in-the-middle kind of attack identified and fixed in OpenSSH are dubbed CVE-2016-0777 and CVE-2016-0778. How do I fix OpenSSH's client vulnerability on a Linux or Unix-like operating system?\nhttp://www.cyberciti.biz/faq/howto-openssh-client-security-update-cve-0216-0777-cve-0216-0778/\n\u2014-------\n\ud83d\udca1\u062f\u0631 \u0632\u0645\u06cc\u0646\u0647 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0628\u0627 \u0634\u0645\u0627 \u062e\u0648\u0627\u0647\u06cc\u0645 \u0628\u0648\u062f.\n\u2705 \u062f\u0631\u06cc\u0627\u0641\u062a \u0622\u062e\u0631\u06cc\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062f\u0631 \u06a9\u0627\u0646\u0627\u0644 \n@information_security_management \ud83d\udc48 join \ud83d\udc47\nhttps://telegram.me/joinchat/BaPoBjumXnCYx_E1GT62pw", "creation_timestamp": "2016-01-20T11:57:40.000000Z"}, {"uuid": "b7573540-1058-4a23-ba53-a1f02b44ab03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0778", "type": "seen", "source": "https://t.me/ict_security/107", "content": "\ud83d\udcccHow To Patch and Protect OpenSSH Client Vulnerability CVE-2016-0777 and CVE-2016-0778 [ 14/Jan/2016 ]\n\nby Vivek Gite on January 15, 2016 last updated January 16, 2016\n in CentOS, Cryptography, Debian / Ubuntu, FreeBSD, Linux, Openbsd, RedHat and Friends, UNIX\n\nThe OpenSSH project released an ssh client bug info that can leak private keys to malicious servers. A man-in-the-middle kind of attack identified and fixed in OpenSSH are dubbed CVE-2016-0777 and CVE-2016-0778. How do I fix OpenSSH's client vulnerability on a Linux or Unix-like operating system?\nhttp://www.cyberciti.biz/faq/howto-openssh-client-security-update-cve-0216-0777-cve-0216-0778/\n\u2014-------\n\ud83d\udca1\u062f\u0631 \u0632\u0645\u06cc\u0646\u0647 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0628\u0627 \u0634\u0645\u0627 \u062e\u0648\u0627\u0647\u06cc\u0645 \u0628\u0648\u062f.\n\u2705 \u062f\u0631\u06cc\u0627\u0641\u062a \u0622\u062e\u0631\u06cc\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062f\u0631 \u06a9\u0627\u0646\u0627\u0644 \n@information_security_management \ud83d\udc48 join \ud83d\udc47\nhttps://telegram.me/joinchat/BaPoBjumXnCYx_E1GT62pw", "creation_timestamp": "2016-01-20T11:57:40.000000Z"}, {"uuid": "ee0df1fe-5b1d-42f2-851f-12723fc81fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/ggfcvj/3265", "content": "\u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u062e\u0637\u0623 \u062e\u0637\u064a\u0631 \u0641\u064a OpenSSL \u060c \u0627\u0644\u0630\u064a \u062a\u0645 \u062a\u0639\u0642\u0628\u0647 \u0643\u0640 CVE-2022-0778.\n\n\u062a\u062a\u0646\u0627\u0648\u0644 \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u062a\u0647\u062f\u064a\u062f \u0631\u0641\u0636 \u0627\u0644\u062e\u062f\u0645\u0629 (DoS) \u0627\u0644\u0630\u064a \u064a\u0624\u062b\u0631 \u0639\u0644\u0649 \u0648\u0638\u064a\u0641\u0629 BN mod sqrt () \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0629 \u0641\u064a \u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0634\u0647\u0627\u062f\u0627\u062a. \u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0645\u0646 \u0642\u0628\u0644 \u0627\u0644\u0628\u0627\u062d\u062b \u0627\u0644\u0645\u0639\u0631\u0648\u0641 \u062a\u0627\u0641\u064a\u0633 \u0623\u0648\u0631\u0645\u0627\u0646\u062f\u064a \u0645\u0646 Google Project Zero.\n\n\u062a\u062d\u0633\u0628 \u0627\u0644\u062f\u0627\u0644\u0629 BN mod sqrt () \u0645\u0639\u0627\u0645\u0644 \u0627\u0644\u062c\u0630\u0631 \u0627\u0644\u062a\u0631\u0628\u064a\u0639\u064a \u0648\u0644\u062f\u064a\u0647\u0627 \u062e\u0637\u0623 \u0642\u062f \u064a\u062a\u0633\u0628\u0628 \u0641\u064a \u062a\u0643\u0631\u0627\u0631\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u0623\u0628\u062f. \u062f\u0627\u062e\u0644\u064a\u064b\u0627 \u060c \u062a\u064f\u0633\u062a\u062e\u062f\u0645 \u0647\u0630\u0647 \u0627\u0644\u0648\u0638\u064a\u0641\u0629 \u0639\u0646\u062f \u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0634\u0647\u0627\u062f\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0645\u0641\u0627\u062a\u064a\u062d \u0639\u0627\u0645\u0629 \u0645\u0646\u062d\u0646\u0649 \u0628\u064a\u0636\u0627\u0648\u064a \u0627\u0644\u0634\u0643\u0644 \u0645\u0636\u063a\u0648\u0637 \u0623\u0648 \u0645\u0639\u0644\u0645\u0627\u062a \u0645\u0646\u062d\u0646\u0649 \u0628\u064a\u0636\u0627\u0648\u064a \u0648\u0627\u0636\u062d \u0645\u0639 \u0646\u0642\u0637\u0629 \u0623\u0633\u0627\u0633\u064a\u0629 \u0645\u0634\u0641\u0631\u0629 \u0641\u064a \u0634\u0643\u0644 \u0645\u0636\u063a\u0648\u0637. \u0628\u0647\u0630\u0647 \u0627\u0644\u0637\u0631\u064a\u0642\u0629 \u060c \u064a\u0645\u0643\u0646\u0643 \u0628\u062f\u0621 \u062d\u0644\u0642\u0629 \u0644\u0627 \u0646\u0647\u0627\u0626\u064a\u0629 \u0639\u0646 \u0637\u0631\u064a\u0642 \u0625\u0646\u0634\u0627\u0621 \u0634\u0647\u0627\u062f\u0629 \u0645\u0639 \u0645\u0639\u0644\u0645\u0627\u062a \u0645\u0646\u062d\u0646\u0649 \u0635\u0631\u064a\u062d\u0629 \u063a\u064a\u0631 \u0635\u0627\u0644\u062d\u0629 \u060c \u0645\u0645\u0627 \u0633\u064a\u0624\u062f\u064a \u0641\u064a \u0627\u0644\u0648\u0627\u0642\u0639 \u0625\u0644\u0649 \u0641\u0634\u0644.\n\n\u062a\u0624\u062b\u0631 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0639\u0644\u0649 \u0625\u0635\u062f\u0627\u0631\u0627\u062a OpenSSL 1.0.2 \u0648 1.1.1 \u0648 3.0 \u0648\u0642\u062f \u062a\u0645 \u0628\u0627\u0644\u0641\u0639\u0644 \u0625\u0635\u0644\u0627\u062d \u0627\u0644\u0639\u064a\u0648\u0628 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u062c\u062f\u064a\u062f\u0629. \u0648\u0645\u0639 \u0630\u0644\u0643 \u060c \u064a\u064f\u0646\u0635\u062d \u0623\u0648\u0644\u0626\u0643 \u0627\u0644\u0630\u064a\u0646 \u0644\u062f\u064a\u0647\u0645 OpenSSL 1.1.0 \u0628\u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0623\u062d\u062f\u062b \u0644\u0623\u0646 \u0647\u0630\u0627 \u0627\u0644\u0625\u0635\u062f\u0627\u0631 \u0644\u0645 \u064a\u0639\u062f \u064a\u062a\u0645 \u0627\u0644\u0627\u062d\u062a\u0641\u0627\u0638 \u0628\u0647 \u0648\u0644\u0627 \u064a\u062a\u0644\u0642\u0649 \u062a\u062d\u062f\u064a\u062b\u0627\u062a.\n@A_X_YG\n#\u0627\u0644\u0642\u0627\u0626\u062f_A_X_Y \n#The_Yemeni_ghost", "creation_timestamp": "2022-03-17T17:37:10.000000Z"}, {"uuid": "183b0183-0702-40ec-833a-d538a3156272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0777", "type": "published-proof-of-concept", "source": "https://t.me/br0wsec/20", "content": "ProjectZero \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u043e \u0434\u0432\u0443\u043c \u043d\u043e\u0432\u044b\u043c \u0438 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u043c memory corruption \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 Ms Edge. \u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u044d\u0442\u043e out of bounds write \u0432 Chakra Jit (CVE-2018-0777 \u0438 CVE-2018-0769), \u0434\u0435\u0442\u0430\u043b\u0438 \u0438 PoC\u0438 \u0435\u0441\u0442\u044c \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0430\u043c: https://bugs.chromium.org/p/project-zero/issues/detail?id=1429, https://bugs.chromium.org/p/project-zero/issues/detail?id=1390. \u0410 \u0442\u0430\u043a\u0436\u0435 out of bounds read \u0432 ChakraAsmJs (CVE-2018-0780): https://bugs.chromium.org/p/project-zero/issues/detail?id=1433. \u042d\u0442\u043e \u0442\u043e, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e MS \u0432 \u044f\u043d\u0432\u0430\u0440\u0435.", "creation_timestamp": "2018-01-17T08:44:45.000000Z"}, {"uuid": "252f49f8-c559-47a4-8986-9b1d2954223c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/ctinow/48586", "content": "CVE-2022-0778 DoS flaw in OpenSSL was fixed\n\nhttps://ift.tt/gEaYGds", "creation_timestamp": "2022-03-15T23:46:40.000000Z"}, {"uuid": "e1a45db5-9040-4cd8-b6a8-eb94ee21597c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0778", "type": "published-proof-of-concept", "source": "Telegram/H7lK3nUpC0mRy_HOMC2Efj8LSEYXH-2h4-ofgR3OSVOLKw", "content": "", "creation_timestamp": "2024-08-10T00:36:10.000000Z"}, {"uuid": "8c7c63a1-cf9c-4502-81f5-a5199cb6140c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0778", "type": "published-proof-of-concept", "source": "Telegram/kr7Ohy0kCux9XxUt9uuveXj3FxKXvYpnI4IpH_bL8ZTn0g", "content": "", "creation_timestamp": "2024-08-09T22:25:27.000000Z"}, {"uuid": "f4411004-52ad-4a02-9f5d-29528d0a4c64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/anwar1213xx/1816", "content": "\u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u062e\u0637\u0623 \u062e\u0637\u064a\u0631 \u0641\u064a OpenSSL \u060c \u0627\u0644\u0630\u064a \u062a\u0645 \u062a\u0639\u0642\u0628\u0647 \u0643\u0640 CVE-2022-0778.\n\n\u062a\u062a\u0646\u0627\u0648\u0644 \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u062a\u0647\u062f\u064a\u062f \u0631\u0641\u0636 \u0627\u0644\u062e\u062f\u0645\u0629 (DoS) \u0627\u0644\u0630\u064a \u064a\u0624\u062b\u0631 \u0639\u0644\u0649 \u0648\u0638\u064a\u0641\u0629 BN mod sqrt () \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0629 \u0641\u064a \u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0634\u0647\u0627\u062f\u0627\u062a. \u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0645\u0646 \u0642\u0628\u0644 \u0627\u0644\u0628\u0627\u062d\u062b \u0627\u0644\u0645\u0639\u0631\u0648\u0641 \u062a\u0627\u0641\u064a\u0633 \u0623\u0648\u0631\u0645\u0627\u0646\u062f\u064a \u0645\u0646 Google Project Zero.\n\n\u062a\u062d\u0633\u0628 \u0627\u0644\u062f\u0627\u0644\u0629 BN mod sqrt () \u0645\u0639\u0627\u0645\u0644 \u0627\u0644\u062c\u0630\u0631 \u0627\u0644\u062a\u0631\u0628\u064a\u0639\u064a \u0648\u0644\u062f\u064a\u0647\u0627 \u062e\u0637\u0623 \u0642\u062f \u064a\u062a\u0633\u0628\u0628 \u0641\u064a \u062a\u0643\u0631\u0627\u0631\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u0623\u0628\u062f. \u062f\u0627\u062e\u0644\u064a\u064b\u0627 \u060c \u062a\u064f\u0633\u062a\u062e\u062f\u0645 \u0647\u0630\u0647 \u0627\u0644\u0648\u0638\u064a\u0641\u0629 \u0639\u0646\u062f \u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0634\u0647\u0627\u062f\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0645\u0641\u0627\u062a\u064a\u062d \u0639\u0627\u0645\u0629 \u0645\u0646\u062d\u0646\u0649 \u0628\u064a\u0636\u0627\u0648\u064a \u0627\u0644\u0634\u0643\u0644 \u0645\u0636\u063a\u0648\u0637 \u0623\u0648 \u0645\u0639\u0644\u0645\u0627\u062a \u0645\u0646\u062d\u0646\u0649 \u0628\u064a\u0636\u0627\u0648\u064a \u0648\u0627\u0636\u062d \u0645\u0639 \u0646\u0642\u0637\u0629 \u0623\u0633\u0627\u0633\u064a\u0629 \u0645\u0634\u0641\u0631\u0629 \u0641\u064a \u0634\u0643\u0644 \u0645\u0636\u063a\u0648\u0637. \u0628\u0647\u0630\u0647 \u0627\u0644\u0637\u0631\u064a\u0642\u0629 \u060c \u064a\u0645\u0643\u0646\u0643 \u0628\u062f\u0621 \u062d\u0644\u0642\u0629 \u0644\u0627 \u0646\u0647\u0627\u0626\u064a\u0629 \u0639\u0646 \u0637\u0631\u064a\u0642 \u0625\u0646\u0634\u0627\u0621 \u0634\u0647\u0627\u062f\u0629 \u0645\u0639 \u0645\u0639\u0644\u0645\u0627\u062a \u0645\u0646\u062d\u0646\u0649 \u0635\u0631\u064a\u062d\u0629 \u063a\u064a\u0631 \u0635\u0627\u0644\u062d\u0629 \u060c \u0645\u0645\u0627 \u0633\u064a\u0624\u062f\u064a \u0641\u064a \u0627\u0644\u0648\u0627\u0642\u0639 \u0625\u0644\u0649 \u0641\u0634\u0644.\n\n\u062a\u0624\u062b\u0631 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0639\u0644\u0649 \u0625\u0635\u062f\u0627\u0631\u0627\u062a OpenSSL 1.0.2 \u0648 1.1.1 \u0648 3.0 \u0648\u0642\u062f \u062a\u0645 \u0628\u0627\u0644\u0641\u0639\u0644 \u0625\u0635\u0644\u0627\u062d \u0627\u0644\u0639\u064a\u0648\u0628 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u062c\u062f\u064a\u062f\u0629. \u0648\u0645\u0639 \u0630\u0644\u0643 \u060c \u064a\u064f\u0646\u0635\u062d \u0623\u0648\u0644\u0626\u0643 \u0627\u0644\u0630\u064a\u0646 \u0644\u062f\u064a\u0647\u0645 OpenSSL 1.1.0 \u0628\u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0623\u062d\u062f\u062b \u0644\u0623\u0646 \u0647\u0630\u0627 \u0627\u0644\u0625\u0635\u062f\u0627\u0631 \u0644\u0645 \u064a\u0639\u062f \u064a\u062a\u0645 \u0627\u0644\u0627\u062d\u062a\u0641\u0627\u0638 \u0628\u0647 \u0648\u0644\u0627 \u064a\u062a\u0644\u0642\u0649 \u062a\u062d\u062f\u064a\u062b\u0627\u062a.\n@A_X_YG\n#\u0627\u0644\u0642\u0627\u0626\u062f_A_X_Y \n#The_Yemeni_ghost", "creation_timestamp": "2022-03-17T18:37:10.000000Z"}, {"uuid": "b4eedd72-c457-4446-a84a-0c846581aa6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0778", "type": "published-proof-of-concept", "source": "Telegram/SxKtx6aqpJzN32Yy6wpH3EXVpAEGIzhv3ifhV-Bb4iL1y4o", "content": "", "creation_timestamp": "2024-08-09T22:27:25.000000Z"}, {"uuid": "814d3a8b-2380-406f-af86-b88f7f4f00b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0778", "type": "published-proof-of-concept", "source": "https://t.me/richddos/32216", "content": "TP-Link Archer AX21 exploit (x86)\n\nBased on:\nCVE-2023-1389\nCVE-2024-0778\n\nStart with zmap:\nzmap -p8080 -B 30M -q -o- | awk {'print $0\":8080\"'} | python3 tplink.py\n\nStart with list:\ncat tplink.txt | python3 tplink.py\n\ncredits: @wertyddos | @richddos | @cyber_raw", "creation_timestamp": "2024-08-09T22:29:03.000000Z"}, {"uuid": "5082c0a7-41be-4f93-ba10-51461d7762d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0772", "type": "seen", "source": "Telegram/0z-dbRWEke-A35HcF8JB7joUdPe9ua1bRZjYd9lB_yQnfPGM", "content": "", "creation_timestamp": "2025-03-02T11:44:20.000000Z"}, {"uuid": "76d67d97-d52c-4a95-8415-9bc14b7886da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/piratesofyemen/611", "content": "\u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u062e\u0637\u0623 \u062e\u0637\u064a\u0631 \u0641\u064a OpenSSL \u060c \u0627\u0644\u0630\u064a \u062a\u0645 \u062a\u0639\u0642\u0628\u0647 \u0643\u0640 CVE-2022-0778.\n\n\u062a\u062a\u0646\u0627\u0648\u0644 \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u062a\u0647\u062f\u064a\u062f \u0631\u0641\u0636 \u0627\u0644\u062e\u062f\u0645\u0629 (DoS) \u0627\u0644\u0630\u064a \u064a\u0624\u062b\u0631 \u0639\u0644\u0649 \u0648\u0638\u064a\u0641\u0629 BN mod sqrt () \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0629 \u0641\u064a \u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0634\u0647\u0627\u062f\u0627\u062a. \u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0645\u0646 \u0642\u0628\u0644 \u0627\u0644\u0628\u0627\u062d\u062b \u0627\u0644\u0645\u0639\u0631\u0648\u0641 \u062a\u0627\u0641\u064a\u0633 \u0623\u0648\u0631\u0645\u0627\u0646\u062f\u064a \u0645\u0646 Google Project Zero.\n\n\u062a\u062d\u0633\u0628 \u0627\u0644\u062f\u0627\u0644\u0629 BN mod sqrt () \u0645\u0639\u0627\u0645\u0644 \u0627\u0644\u062c\u0630\u0631 \u0627\u0644\u062a\u0631\u0628\u064a\u0639\u064a \u0648\u0644\u062f\u064a\u0647\u0627 \u062e\u0637\u0623 \u0642\u062f \u064a\u062a\u0633\u0628\u0628 \u0641\u064a \u062a\u0643\u0631\u0627\u0631\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u0623\u0628\u062f. \u062f\u0627\u062e\u0644\u064a\u064b\u0627 \u060c \u062a\u064f\u0633\u062a\u062e\u062f\u0645 \u0647\u0630\u0647 \u0627\u0644\u0648\u0638\u064a\u0641\u0629 \u0639\u0646\u062f \u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0634\u0647\u0627\u062f\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0645\u0641\u0627\u062a\u064a\u062d \u0639\u0627\u0645\u0629 \u0645\u0646\u062d\u0646\u0649 \u0628\u064a\u0636\u0627\u0648\u064a \u0627\u0644\u0634\u0643\u0644 \u0645\u0636\u063a\u0648\u0637 \u0623\u0648 \u0645\u0639\u0644\u0645\u0627\u062a \u0645\u0646\u062d\u0646\u0649 \u0628\u064a\u0636\u0627\u0648\u064a \u0648\u0627\u0636\u062d \u0645\u0639 \u0646\u0642\u0637\u0629 \u0623\u0633\u0627\u0633\u064a\u0629 \u0645\u0634\u0641\u0631\u0629 \u0641\u064a \u0634\u0643\u0644 \u0645\u0636\u063a\u0648\u0637. \u0628\u0647\u0630\u0647 \u0627\u0644\u0637\u0631\u064a\u0642\u0629 \u060c \u064a\u0645\u0643\u0646\u0643 \u0628\u062f\u0621 \u062d\u0644\u0642\u0629 \u0644\u0627 \u0646\u0647\u0627\u0626\u064a\u0629 \u0639\u0646 \u0637\u0631\u064a\u0642 \u0625\u0646\u0634\u0627\u0621 \u0634\u0647\u0627\u062f\u0629 \u0645\u0639 \u0645\u0639\u0644\u0645\u0627\u062a \u0645\u0646\u062d\u0646\u0649 \u0635\u0631\u064a\u062d\u0629 \u063a\u064a\u0631 \u0635\u0627\u0644\u062d\u0629 \u060c \u0645\u0645\u0627 \u0633\u064a\u0624\u062f\u064a \u0641\u064a \u0627\u0644\u0648\u0627\u0642\u0639 \u0625\u0644\u0649 \u0641\u0634\u0644.\n\n\u062a\u0624\u062b\u0631 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0639\u0644\u0649 \u0625\u0635\u062f\u0627\u0631\u0627\u062a OpenSSL 1.0.2 \u0648 1.1.1 \u0648 3.0 \u0648\u0642\u062f \u062a\u0645 \u0628\u0627\u0644\u0641\u0639\u0644 \u0625\u0635\u0644\u0627\u062d \u0627\u0644\u0639\u064a\u0648\u0628 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u062c\u062f\u064a\u062f\u0629. \u0648\u0645\u0639 \u0630\u0644\u0643 \u060c \u064a\u064f\u0646\u0635\u062d \u0623\u0648\u0644\u0626\u0643 \u0627\u0644\u0630\u064a\u0646 \u0644\u062f\u064a\u0647\u0645 OpenSSL 1.1.0 \u0628\u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0623\u062d\u062f\u062b \u0644\u0623\u0646 \u0647\u0630\u0627 \u0627\u0644\u0625\u0635\u062f\u0627\u0631 \u0644\u0645 \u064a\u0639\u062f \u064a\u062a\u0645 \u0627\u0644\u0627\u062d\u062a\u0641\u0627\u0638 \u0628\u0647 \u0648\u0644\u0627 \u064a\u062a\u0644\u0642\u0649 \u062a\u062d\u062f\u064a\u062b\u0627\u062a.\n@A_X_YG\n#\u0627\u0644\u0642\u0627\u0626\u062f_A_X_Y \n#The_Yemeni_ghost", "creation_timestamp": "2022-03-17T18:36:54.000000Z"}, {"uuid": "09b2aa93-734a-435b-82ed-aad48612fd47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/piratesofyemen1213/444", "content": "\u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u062e\u0637\u0623 \u062e\u0637\u064a\u0631 \u0641\u064a OpenSSL \u060c \u0627\u0644\u0630\u064a \u062a\u0645 \u062a\u0639\u0642\u0628\u0647 \u0643\u0640 CVE-2022-0778.\n\n\u062a\u062a\u0646\u0627\u0648\u0644 \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u062a\u0647\u062f\u064a\u062f \u0631\u0641\u0636 \u0627\u0644\u062e\u062f\u0645\u0629 (DoS) \u0627\u0644\u0630\u064a \u064a\u0624\u062b\u0631 \u0639\u0644\u0649 \u0648\u0638\u064a\u0641\u0629 BN mod sqrt () \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0629 \u0641\u064a \u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0634\u0647\u0627\u062f\u0627\u062a. \u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0645\u0646 \u0642\u0628\u0644 \u0627\u0644\u0628\u0627\u062d\u062b \u0627\u0644\u0645\u0639\u0631\u0648\u0641 \u062a\u0627\u0641\u064a\u0633 \u0623\u0648\u0631\u0645\u0627\u0646\u062f\u064a \u0645\u0646 Google Project Zero.\n\n\u062a\u062d\u0633\u0628 \u0627\u0644\u062f\u0627\u0644\u0629 BN mod sqrt () \u0645\u0639\u0627\u0645\u0644 \u0627\u0644\u062c\u0630\u0631 \u0627\u0644\u062a\u0631\u0628\u064a\u0639\u064a \u0648\u0644\u062f\u064a\u0647\u0627 \u062e\u0637\u0623 \u0642\u062f \u064a\u062a\u0633\u0628\u0628 \u0641\u064a \u062a\u0643\u0631\u0627\u0631\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u0623\u0628\u062f. \u062f\u0627\u062e\u0644\u064a\u064b\u0627 \u060c \u062a\u064f\u0633\u062a\u062e\u062f\u0645 \u0647\u0630\u0647 \u0627\u0644\u0648\u0638\u064a\u0641\u0629 \u0639\u0646\u062f \u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0634\u0647\u0627\u062f\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0645\u0641\u0627\u062a\u064a\u062d \u0639\u0627\u0645\u0629 \u0645\u0646\u062d\u0646\u0649 \u0628\u064a\u0636\u0627\u0648\u064a \u0627\u0644\u0634\u0643\u0644 \u0645\u0636\u063a\u0648\u0637 \u0623\u0648 \u0645\u0639\u0644\u0645\u0627\u062a \u0645\u0646\u062d\u0646\u0649 \u0628\u064a\u0636\u0627\u0648\u064a \u0648\u0627\u0636\u062d \u0645\u0639 \u0646\u0642\u0637\u0629 \u0623\u0633\u0627\u0633\u064a\u0629 \u0645\u0634\u0641\u0631\u0629 \u0641\u064a \u0634\u0643\u0644 \u0645\u0636\u063a\u0648\u0637. \u0628\u0647\u0630\u0647 \u0627\u0644\u0637\u0631\u064a\u0642\u0629 \u060c \u064a\u0645\u0643\u0646\u0643 \u0628\u062f\u0621 \u062d\u0644\u0642\u0629 \u0644\u0627 \u0646\u0647\u0627\u0626\u064a\u0629 \u0639\u0646 \u0637\u0631\u064a\u0642 \u0625\u0646\u0634\u0627\u0621 \u0634\u0647\u0627\u062f\u0629 \u0645\u0639 \u0645\u0639\u0644\u0645\u0627\u062a \u0645\u0646\u062d\u0646\u0649 \u0635\u0631\u064a\u062d\u0629 \u063a\u064a\u0631 \u0635\u0627\u0644\u062d\u0629 \u060c \u0645\u0645\u0627 \u0633\u064a\u0624\u062f\u064a \u0641\u064a \u0627\u0644\u0648\u0627\u0642\u0639 \u0625\u0644\u0649 \u0641\u0634\u0644.\n\n\u062a\u0624\u062b\u0631 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0639\u0644\u0649 \u0625\u0635\u062f\u0627\u0631\u0627\u062a OpenSSL 1.0.2 \u0648 1.1.1 \u0648 3.0 \u0648\u0642\u062f \u062a\u0645 \u0628\u0627\u0644\u0641\u0639\u0644 \u0625\u0635\u0644\u0627\u062d \u0627\u0644\u0639\u064a\u0648\u0628 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u062c\u062f\u064a\u062f\u0629. \u0648\u0645\u0639 \u0630\u0644\u0643 \u060c \u064a\u064f\u0646\u0635\u062d \u0623\u0648\u0644\u0626\u0643 \u0627\u0644\u0630\u064a\u0646 \u0644\u062f\u064a\u0647\u0645 OpenSSL 1.1.0 \u0628\u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0623\u062d\u062f\u062b \u0644\u0623\u0646 \u0647\u0630\u0627 \u0627\u0644\u0625\u0635\u062f\u0627\u0631 \u0644\u0645 \u064a\u0639\u062f \u064a\u062a\u0645 \u0627\u0644\u0627\u062d\u062a\u0641\u0627\u0638 \u0628\u0647 \u0648\u0644\u0627 \u064a\u062a\u0644\u0642\u0649 \u062a\u062d\u062f\u064a\u062b\u0627\u062a.\n@A_X_YG\n#\u0627\u0644\u0642\u0627\u0626\u062f_A_X_Y \n#The_Yemeni_ghost", "creation_timestamp": "2022-03-17T18:36:59.000000Z"}, {"uuid": "608d9ed9-60de-464e-a314-9b65f1e07010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0773", "type": "published-proof-of-concept", "source": "Telegram/qsvuXEzB-99bMDsNRGA41GQAeXIqpLGuc11u3iQNGiWqmzQ", "content": "", "creation_timestamp": "2024-05-18T10:52:32.000000Z"}, {"uuid": "d0ccb644-4e04-4f52-a5ab-ef5b83b9ae5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "Telegram/mVnixbasCYvzbZmxw8Zgu5IiTOSU443zM3VpL2uiqfGyOVk", "content": "", "creation_timestamp": "2022-04-08T07:33:35.000000Z"}, {"uuid": "c4bfc39f-d56f-4168-a6cf-e179ca4e40ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0773", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5574", "content": "\u0412\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u0430\u043c\u0435\u0440 Uniview IPC2322LB \u0441\u0442\u043e\u0438\u0442 \u043f\u043e\u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0437\u0430\u0431\u043e\u0442\u0438\u0442\u044c\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c, \u0432\u0435\u0434\u044c \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-0773 \u0441 CVSS 9,1 \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d PoC.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 SSD-disclosure \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u0441 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0438\u0437 CLI \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u043b\u0435\u0433\u0438\u0439, \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u043c \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Uniview \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0437\u0434\u0435\u0441\u044c) \u0441 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435\u043c \u0432\u0441\u0435\u0445 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.", "creation_timestamp": "2024-03-27T15:40:05.000000Z"}, {"uuid": "06b54053-b01a-44b7-901b-4faa503939ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "published-proof-of-concept", "source": "Telegram/ijXYWthDd2nRlayb228KVE7AFHSJg6ElqkMwgFep_EmFZtI", "content": "", "creation_timestamp": "2022-04-11T20:18:34.000000Z"}, {"uuid": "b00eaca7-5241-4b1b-b64e-178ef585dd84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/true_secator/2794", "content": "\u0417\u0430 \u0437\u0430\u0432\u0438\u0434\u043d\u043e\u0439 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f QNAP \u0441\u0442\u0430\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445. \u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u043d\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0435\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449 (NAS) \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 OpenSSL \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443\u0433\u0440\u043e\u0437\u0443 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430 \u0432 OpenSSL \u0438 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0442\u0438\u043f\u0430 \u00ab\u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2022-0778 (CVSS 7,5) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0431\u043e\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u0441\u043b\u043e\u0436\u043d\u0430 \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438, \u043d\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043e DoS. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439, \u2014 \u044d\u0442\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043b\u0438\u0435\u043d\u0442\u0430 TLS \u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442. \n\nQNAP, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0441\u0432\u043e\u044e \u043b\u0438\u043d\u0435\u0439\u043a\u0443, \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b: QTS 5.0.x \u0438 \u0432\u044b\u0448\u0435, 4.5.4 \u0438 \u0432\u044b\u0448\u0435, 4.3.6 \u0438 \u0432\u044b\u0448\u0435, 4.3.4 \u0438 \u0432\u044b\u0448\u0435, 4.3.3 \u0438 \u0432\u044b\u0448\u0435, 4.2.6 \u0438 \u0432\u044b\u0448\u0435, QuTS hero h5.0.x \u0438 \u0432\u044b\u0448\u0435, h4.5.4 \u0438 \u0432\u044b\u0448\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 QuTScloud c5.0.x.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u0430\u0442\u0447 \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434, \u043a\u043e\u0433\u0434\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430, QNAP \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u0447\u0442\u043e \u0435\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0436\u0434\u0430\u0442\u044c, \u043f\u043e\u043a\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041a \u043e\u0431\u0449\u0435\u0439 \u0440\u0430\u0434\u043e\u0441\u0442\u0438 \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0430 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c QTS \u0438 QuTScloud \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n\u0412 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u043d\u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442, \u0434\u0430\u0431\u044b \u043e\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u0438\u0442\u044c \u0441\u0435\u0431\u044f \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.", "creation_timestamp": "2022-03-31T18:10:00.000000Z"}, {"uuid": "50704579-3d55-487f-a821-b9dd11abc8c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/true_secator/2855", "content": "\u041f\u0440\u043e\u0437\u0432\u0443\u0447\u0438\u0442 \u0441\u043c\u0435\u0448\u043d\u043e, \u043d\u043e \u0441\u043d\u043e\u0432\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043f\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 Palo Alto Networks \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0435\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e Cortex XDR \u2013 \u0441\u0432\u043e\u044e \u0442\u043e\u043f\u043e\u0432\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u043f\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e \u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b \u0441 \u043e\u0431\u0448\u0438\u0440\u043d\u044b\u043c \u043f\u043e\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u2013 \u043e\u0442 \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u0434\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0442 \u044d\u043d\u0442\u0443\u0437\u0438\u0430\u0441\u0442\u0430 \u0441 \u043d\u0438\u043a\u043e\u043c mr.d0x, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0435\u0435 \u0430\u0433\u0435\u043d\u0442 Cortex XDR \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u043e\u0439\u0434\u0435\u043d \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u0430\u0433\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u043f\u0440\u043e\u0441\u0442\u043e \u0438\u0437\u043c\u0435\u043d\u0438\u0432 \u043a\u043b\u044e\u0447 \u0440\u0435\u0435\u0441\u0442\u0440\u0430 \u0438 \u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0434\u043b\u044f \u0430\u0442\u0430\u043a. \u041f\u0440\u0438\u0447\u0435\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0435 \u043f\u043e\u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430.\n\n\u0415\u0449\u0435 Mr.d0x \u0432\u044b\u044f\u0432\u0438\u043b, \u0447\u0442\u043e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u00ab\u043f\u0430\u0440\u043e\u043b\u044c \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u2014 \u0435\u0441\u043b\u0438 \u043e\u043d \u043d\u0435 \u0431\u044b\u043b \u0438\u0437\u043c\u0435\u043d\u0435\u043d \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u2014 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0430\u0433\u0435\u043d\u0442\u0430 XDR. \u0410 \u0435\u0441\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u0441\u0435 \u0436\u0435 \u0431\u044b\u043b \u0438\u0437\u043c\u0435\u043d\u0435\u043d, \u0445\u044d\u0448 \u043d\u043e\u0432\u043e\u0433\u043e \u043f\u0430\u0440\u043e\u043b\u044f \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0438\u0437 \u0444\u0430\u0439\u043b\u0430, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043f\u044b\u0442\u0430\u0442\u044c\u0441\u044f \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0442\u043e\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u044d\u0442\u043e\u0442 \u0445\u044d\u0448.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0435\u0449\u0435 \u043b\u0435\u0442\u043e\u043c 2021 \u0433\u043e\u0434\u0430, \u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0439\u0447\u0430\u0441 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0432 \u0431\u043b\u043e\u0433\u0435 \u0441 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u0434\u0430\u0442\u044c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u043b\u044f \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043c\u0435\u0440. \u041e\u0434\u043d\u0430\u043a\u043e Palo Alto Networks \u0432\u0441\u0435 \u0435\u0449\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430\u0434 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u044e DNS-\u043f\u0440\u043e\u043a\u0441\u0438 \u0432 \u0435\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 PAN-OS. \u041f\u0440\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f MitM-\u0430\u0442\u0430\u043a\u0438 (\u0447\u0435\u043b\u043e\u0432\u0435\u043a \u043f\u043e\u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435), \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u0434\u043b\u044f \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432. \u041f\u0430\u0442\u0447\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 PAN-OS. \n\n\u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 MitM \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 PAN-OS, \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 GlobalProtect \u0438 \u0430\u0433\u0435\u043d\u0442 Cortex XDR, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c OpenSSL, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u043a\u0430\u043a CVE-2022-0778.\n\n\u0412 Palo Alto Networks \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u0438 \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u044d\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0438\u043c\u0435\u044e\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u00ab\u0441\u0440\u0435\u0434\u043d\u0438\u0439\u00bb, \u00ab\u043d\u0438\u0437\u043a\u0438\u0439\u00bb \u0438\u043b\u0438 \u00ab\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439\u00bb.", "creation_timestamp": "2022-04-15T16:38:01.000000Z"}, {"uuid": "45f07885-1f0f-4241-9d9e-41568accd8a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/true_secator/2845", "content": "HP \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 (1\u00a0,\u00a02) \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435 Teradici PCoIP \u0434\u043b\u044f Windows, Linux \u0438 macOS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 15 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f, \u0432\u043e\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b, IT-\u0441\u0435\u043a\u0442\u043e\u0440, \u043c\u0435\u0434\u0438\u0430\u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u0438, \u0421\u041c\u0418 \u0438 \u043f\u0440.\n\nTeradici PCoIP - \u044d\u0442\u043e \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430, \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438,\u00a0\u043a\u043e\u0442\u043e\u0440\u044b\u0439 HP \u043f\u0440\u0438\u043e\u0431\u0440\u0435\u043b\u0430 \u0432 2021\u00a0\u0433\u043e\u0434\u0443 \u0438 \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0432 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 HP Teradici PCoIP \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u044b \u0432\u043b\u0438\u044f\u043d\u0438\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u00a0OpenSSL, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 Expat.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 3 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043c\u0435\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS v3: 9,8), \u0432\u043e\u0441\u0435\u043c\u044c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438 \u043e\u0434\u043d\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u0441\u0440\u0435\u0434\u043d\u0438\u0445.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c \u043e\u0448\u0438\u0431\u043a\u0430\u00a0CVE-2022-0778\u00a0\u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432 OpenSSL \u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u043e\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0446\u0438\u043a\u043b\u0443, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u041f\u041e \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043d\u0435\u0442 \u043f\u043e\u043f\u0440\u043e\u0441\u0442\u0443 \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u0438 \u0442\u0430\u043a\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u0431\u0443\u0434\u0435\u0442 \u0438\u043c\u0435\u0442\u044c \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u0441\u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u0414\u0440\u0443\u0433\u0438\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043d\u0430\u0431\u043e\u0440\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f\u00a0CVE-2022-22822,\u00a0CVE-2022-22823\u00a0\u0438\u00a0CVE-2022-22824, \u043a\u0430\u0441\u0430\u0435\u043c\u044b\u0435  libexpat \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0435 \u043a \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u043c\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044e \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043a\u043e\u0434\u0443.\n\n\u041e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2021-45960, CVE-2022-22825, CVE-2022-22826, CVE-2022-22827 \u0438 CVE-2021-46143.\n\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442 PCoIP, \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0439 SDK, \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u0433\u0435\u043d\u0442 \u0438 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0439 \u0430\u0433\u0435\u043d\u0442 \u0434\u043b\u044f Windows, Linux \u0438 macOS.\n\n\u0414\u043b\u044f \u0438\u0437\u0431\u0435\u0436\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 22.01.3 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f OpenSSL 1.1.1n \u0438 libexpat 2.4.7, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Teradici \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b 4 \u0438 5 \u0430\u043f\u0440\u0435\u043b\u044f.", "creation_timestamp": "2022-04-13T18:10:03.000000Z"}, {"uuid": "189e83ce-6263-4dc8-b803-72aee75c0bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/true_secator/2819", "content": "\u034f\u0423 Palo Alto Networks \u0432\u0435\u0447\u043d\u043e \u0447\u0442\u043e-\u0442\u043e \u043b\u043e\u043c\u0430\u0435\u0442\u0441\u044f: \u0442\u043e \u0441\u043b\u0443\u0436\u0431\u0430 \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043e\u0442\u0432\u0430\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f, \u0442\u043e \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b \u0438 VPN \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 OpenSSL.\n\n\u0412 \u0441\u0440\u0435\u0434\u0443 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f \u0438\u043d\u0444\u043e\u0441\u0435\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0447\u0442\u043e PAN-OS 8.1 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 (\u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043a\u0430\u043a \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435, \u0442\u0430\u043a \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Panorama \u0438 Prisma), \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f GlobalProtect \u0438 \u0430\u0433\u0435\u043d\u0442\u0430 Cortex XDR \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL \u0441\u00a0\u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u0442\u0440\u0438 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 Prisma Cloud \u0438 Cortex XSOAR.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-0778 \u0434\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043e \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u043e\u0435 \u041f\u041e. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Cortex XDR \u0438 GlobalProtect \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0445\u043e\u0434\u0435 MITM.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u0430 OpenSSL \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0435\u0449\u0435 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c Palo Alto Network \u0432\u0441\u0435 \u0436\u0435 \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0436\u0434\u0430\u0442\u044c \u0434\u043e 18 \u0430\u043f\u0440\u0435\u043b\u044f: \u0438\u043c\u0435\u043d\u043d\u043e \u043d\u0430 \u044d\u0442\u0443 \u0434\u0430\u0442\u0443 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u043a\u0430 \u0436\u0435 \u0434\u043b\u044f \u043f\u0440\u0435\u043c\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u043e\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0443\u0433\u0440\u043e\u0437 92409 \u0438 92411, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0438 \u0441\u043d\u0438\u0436\u0430\u0442\u044c \u0440\u0438\u0441\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c PoC \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0438 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e, \u0430 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043e \u0432\u044b\u0437\u043e\u0432\u043e\u043c \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 Palo Alto \u043f\u0440\u0438\u0437\u043d\u0430\u044e\u0442 \u0432\u0441\u0435 \u0436\u0435, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c OpenSSL \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0437\u0430\u043c\u043e\u0440\u043e\u0447\u0435\u043a.", "creation_timestamp": "2022-04-07T14:29:01.000000Z"}, {"uuid": "c0d6a125-fc96-4b05-8e1c-6b369a030070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/true_secator/2739", "content": "\u0412 OpenSSL \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0431\u0430\u0433\u0443, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u043a\u0430\u043a CVE-2022-0778 .\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044e BN mod sqrt(), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0422\u044d\u0432\u0438\u0441 \u041e\u0440\u043c\u0430\u043d\u0434\u0438 \u0438\u0437 Google Project Zero.\n\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f BN mod sqrt() \u0432\u044b\u0447\u0438\u0441\u043b\u044f\u0435\u0442 \u043c\u043e\u0434\u0443\u043b\u044c \u043a\u0432\u0430\u0434\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043a\u043e\u0440\u043d\u044f \u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043e\u0448\u0438\u0431\u043a\u0443, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0432\u0435\u0447\u043d\u043e \u0437\u0430\u0446\u0438\u043a\u043b\u0438\u0432\u0430\u0442\u044c\u0441\u044f. \u0412\u043d\u0443\u0442\u0440\u0438 \u044d\u0442\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u044d\u043b\u043b\u0438\u043f\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043a\u0440\u0438\u0432\u043e\u0439 \u0432 \u0441\u0436\u0430\u0442\u043e\u0439 \u0444\u043e\u0440\u043c\u0435 \u0438\u043b\u0438 \u044f\u0432\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u044d\u043b\u043b\u0438\u043f\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043a\u0440\u0438\u0432\u043e\u0439 \u0441 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0442\u043e\u0447\u043a\u043e\u0439, \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432 \u0441\u0436\u0430\u0442\u043e\u0439 \u0444\u043e\u0440\u043c\u0435. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0446\u0438\u043a\u043b, \u0441\u043e\u0437\u0434\u0430\u0432 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0441 \u043d\u0435\u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u043c\u0438 \u044f\u0432\u043d\u044b\u043c\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u043a\u0440\u0438\u0432\u043e\u0439, \u0447\u0442\u043e \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043e\u0442\u043a\u0430\u0437\u0443.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 OpenSSL \u0432\u0435\u0440\u0441\u0438\u0439 1.0.2, 1.1.1 \u0438 3.0 \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u041e\u0434\u043d\u0430\u043a\u043e \u0442\u0435, \u0443 \u043a\u043e\u0433\u043e OpenSSL 1.1.0, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0441\u0432\u0435\u0436\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0442\u0430\u043a \u043a\u0430\u043a \u044d\u0442\u0430 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0438 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439.", "creation_timestamp": "2022-03-16T18:44:21.000000Z"}, {"uuid": "6e7c3a1d-4425-4c93-9427-214a6c7e4fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0779", "type": "seen", "source": "https://t.me/ctinow/210911", "content": "https://ift.tt/zFtPK9E\nCVE-2024-0779", "creation_timestamp": "2024-03-18T20:26:46.000000Z"}, {"uuid": "73ea955e-54c9-4eab-a3f3-983424564221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0774", "type": "seen", "source": "https://t.me/ctinow/186038", "content": "https://ift.tt/mr9sQpD\nCVE-2024-0774 | Any-Capture Any Sound Recorder 2.93 Registration User Name/Key Code memory corruption", "creation_timestamp": "2024-02-16T01:31:52.000000Z"}, {"uuid": "c4a57318-44f6-46fa-a217-8fbd86787ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0772", "type": "seen", "source": "https://t.me/ctinow/186025", "content": "https://ift.tt/vzUGrQw\nCVE-2024-0772 | Nsasoft ShareAlarmPro 2.1.4 Registration Name/Key memory corruption", "creation_timestamp": "2024-02-16T01:06:13.000000Z"}, {"uuid": "957641b8-6762-4679-8ade-31c91732e2e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0771", "type": "seen", "source": "https://t.me/ctinow/186020", "content": "https://ift.tt/FoIdlu7\nCVE-2024-0771 | Nsasoft Product Key Explorer 4.0.9 Registration Name/Key memory corruption", "creation_timestamp": "2024-02-16T00:36:10.000000Z"}, {"uuid": "8366d78d-12d4-45e4-afa9-25d665b79700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0778", "type": "seen", "source": "https://t.me/ctinow/186191", "content": "https://ift.tt/ORkr3BH\nCVE-2024-0778 | Uniview ISC 2500-S up to 20210930 VM.php setNatConfig natAddress/natPort/natServerPort os command injection", "creation_timestamp": "2024-02-16T08:46:19.000000Z"}, {"uuid": "35a0946f-6a1e-4c7b-8b09-15c92d31fd34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0776", "type": "seen", "source": "https://t.me/ctinow/186152", "content": "https://ift.tt/HBFcMny\nCVE-2024-0776 | LinZhaoguan pb-cms 2.0 Comment cross site scripting", "creation_timestamp": "2024-02-16T07:36:41.000000Z"}, {"uuid": "ad2f04cc-a432-41ad-b0e0-03b491f275be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0773", "type": "seen", "source": "https://t.me/ctinow/186151", "content": "https://ift.tt/NoD2iKX\nCVE-2024-0773 | CodeAstro Internet Banking System 1.0 pages_client_signup.php Client Full Name cross site scripting", "creation_timestamp": "2024-02-16T07:36:40.000000Z"}, {"uuid": "1ee9627e-f445-45bf-a5ad-ca8e2a5674ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0775", "type": "seen", "source": "https://t.me/ctinow/186143", "content": "https://ift.tt/mrPhDvj\nCVE-2024-0775 | Linux Kernel up to 6.4-rc1 EXT4 File System fs/ext4/super.c __ext4_remount use after free", "creation_timestamp": "2024-02-16T07:11:42.000000Z"}, {"uuid": "4e60b703-f487-4dab-bb5c-b59705a6f9d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0775", "type": "seen", "source": "https://t.me/ctinow/180027", "content": "https://ift.tt/ZMEqxcH\nCVE-2022-0775 | Automattic WooCommerce Plugin up to 6.2.0 on WordPress Delete Review improper authorization (ID 2683324)", "creation_timestamp": "2024-02-06T14:46:31.000000Z"}, {"uuid": "5cca221f-e2ef-48b9-8476-9ea5f744ff7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0773", "type": "seen", "source": "https://t.me/cibsecurity/70701", "content": "\u203c CVE-2023-0773 \u203c\n\nThe vulnerability exists in Uniview IP Camera due to identification and authentication failure at its web-based management interface. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device.Successful exploitation of this vulnerability could allow the attacker to gain complete control of the targeted device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-19T14:29:13.000000Z"}, {"uuid": "e047f108-8101-4496-b086-64696cffc51b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0774", "type": "seen", "source": "https://t.me/ctinow/170950", "content": "https://ift.tt/rM9Ewjd\nCVE-2024-0774", "creation_timestamp": "2024-01-22T02:21:31.000000Z"}, {"uuid": "bea2f76a-17d9-4a87-84cc-891856e66772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0778", "type": "seen", "source": "https://t.me/ctinow/171315", "content": "https://ift.tt/RQM7b85\nCVE-2024-0778", "creation_timestamp": "2024-01-22T17:31:27.000000Z"}, {"uuid": "cca0dd97-3c57-4c77-aa02-f0003a899e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0776", "type": "seen", "source": "https://t.me/ctinow/170951", "content": "https://ift.tt/0315ijy\nCVE-2024-0776", "creation_timestamp": "2024-01-22T02:21:32.000000Z"}, {"uuid": "d607dc93-0132-4bf6-9984-1e3deb08aa07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0773", "type": "seen", "source": "https://t.me/ctinow/170944", "content": "https://ift.tt/nUQ3ijJ\nCVE-2024-0773", "creation_timestamp": "2024-01-22T01:21:39.000000Z"}, {"uuid": "1181fd97-2cdb-4379-a1b7-121922758f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0772", "type": "seen", "source": "https://t.me/ctinow/170943", "content": "https://ift.tt/A2NsSLi\nCVE-2024-0772", "creation_timestamp": "2024-01-22T01:21:38.000000Z"}, {"uuid": "94a07171-eb0c-444d-9aca-2ea8f7b8cb60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0771", "type": "seen", "source": "https://t.me/ctinow/170938", "content": "https://ift.tt/iKXkjz3\nCVE-2024-0771", "creation_timestamp": "2024-01-22T00:22:12.000000Z"}, {"uuid": "caeef579-4b25-475a-a9a0-23d76a7a9c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0770", "type": "seen", "source": "https://t.me/ctinow/170937", "content": "https://ift.tt/wVUoRcr\nCVE-2024-0770", "creation_timestamp": "2024-01-22T00:22:11.000000Z"}, {"uuid": "463e64f3-2715-45ad-9097-39b1c7daa046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0775", "type": "seen", "source": "https://t.me/ctinow/171172", "content": "https://ift.tt/UTfwm8P\nCVE-2024-0775", "creation_timestamp": "2024-01-22T14:21:52.000000Z"}, {"uuid": "3a460a48-e9dc-4474-b51e-53ce76d61de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0770", "type": "seen", "source": "https://t.me/ctinow/170910", "content": "https://ift.tt/8K6x49M\nCVE-2024-0770 | European Chemicals Agency IUCLID 7.10.3 on Windows Desktop Installer iuclid6.exe default permission", "creation_timestamp": "2024-01-21T19:51:47.000000Z"}, {"uuid": "b95edf41-7179-4b41-bb51-281ed854db47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0778", "type": "seen", "source": "https://t.me/ctinow/176149", "content": "https://ift.tt/RZeJDF7\nCVE-2024-0778 Exploit", "creation_timestamp": "2024-01-30T18:17:15.000000Z"}, {"uuid": "9311b7ca-6eda-42c8-b810-e328b95e4a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0773", "type": "seen", "source": "https://t.me/ctinow/174475", "content": "https://ift.tt/U8CbI4a\nCVE-2024-0773 Exploit", "creation_timestamp": "2024-01-26T21:16:18.000000Z"}, {"uuid": "f8119316-8eba-48ed-8bab-ab70947f9b40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/sysadm_in_up/1141", "content": "CVE-2022-0778\n\nThe discovered vulnerability triggers an infinite loop in the function BN_mod_sqrt() of OpenSSL while parsing an elliptic curve key. This means that a maliciously crafted X.509 certificate can DoS any unpatched server.\n\nPoC\n\nhttps://github.com/drago-96/CVE-2022-0778", "creation_timestamp": "2026-07-30T00:03:06.272481Z"}, {"uuid": "d57d0dec-99c4-4b11-8587-e9a62df6994a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0775", "type": "seen", "source": "https://t.me/cibsecurity/60904", "content": "\u203c CVE-2023-0775 \u203c\n\nAn invalid \u00e2\u20ac\u02dcprepare write request\u00e2\u20ac\u2122 command can cause the Bluetooth LE stack to run out of memory and fail to be able to handle subsequent connection requests, resulting in a denial-of-service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-28T20:39:38.000000Z"}, {"uuid": "60a6f9d9-28cc-40d5-9d09-d24120d27d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0772", "type": "seen", "source": "https://t.me/cibsecurity/59916", "content": "\u203c CVE-2023-0772 \u203c\n\nThe Popup Builder by OptinMonster WordPress plugin before 2.12.2 does not ensure that the campaign to be loaded via some shortcodes is actually a campaign, allowing any authenticated users such as subscriber to retrieve the content of arbitrary posts, like draft, private or even password protected ones.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-13T19:23:18.000000Z"}, {"uuid": "2937c1ca-9068-47c3-a42b-5c410051b9c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0774", "type": "seen", "source": "https://t.me/cibsecurity/57892", "content": "\u203c CVE-2023-0774 \u203c\n\nA vulnerability has been found in SourceCodester Medical Certificate Generator App 1.0 and classified as critical. This vulnerability affects unknown code of the file action.php. The manipulation of the argument lastname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-220558 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-10T16:57:35.000000Z"}, {"uuid": "aad7b10e-23e0-47fe-ad32-72e14bbf6d72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0771", "type": "seen", "source": "https://t.me/cibsecurity/57889", "content": "\u203c CVE-2023-0771 \u203c\n\nSQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-10T16:57:31.000000Z"}, {"uuid": "3d951295-887f-47b1-82b2-10c9955b521e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0779", "type": "seen", "source": "https://t.me/cibsecurity/43994", "content": "\u203c CVE-2022-0779 \u203c\n\nThe User Meta WordPress plugin before 2.4.4 does not validate the filepath parameter of its um_show_uploaded_file AJAX action, which could allow low privileged users such as subscriber to enumerate the local files on the web server via path traversal payloads\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-08T15:32:05.000000Z"}, {"uuid": "a81fb285-0e99-42d6-9773-01f4f1b4bfb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/1141", "content": "CVE-2022-0778\n\nThe discovered vulnerability triggers an infinite loop in the function BN_mod_sqrt() of OpenSSL while parsing an elliptic curve key. This means that a maliciously crafted X.509 certificate can DoS any unpatched server.\n\nPoC\n\nhttps://github.com/drago-96/CVE-2022-0778", "creation_timestamp": "2026-08-04T04:00:03.585930Z"}, {"uuid": "c2a9d76a-cc0b-4ded-b851-45d56f2dc960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0773", "type": "seen", "source": "https://t.me/cibsecurity/41751", "content": "\u203c CVE-2022-0773 \u203c\n\nThe Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, leading to an SQL Injection exploitable by unauthenticated users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-02T20:28:23.000000Z"}, {"uuid": "4d024b98-1e31-490d-9a61-500580e654d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0771", "type": "seen", "source": "https://t.me/cibsecurity/41742", "content": "\u203c CVE-2022-0771 \u203c\n\nThe SiteSuperCharger WordPress plugin before 5.2.0 does not validate, sanitise and escape various user inputs before using them in SQL statements via AJAX actions (available to both unauthenticated and authenticated users), leading to Unauthenticated SQL Injections\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-02T20:28:11.000000Z"}, {"uuid": "b98e4333-6d60-4af7-a55c-b816fb74871d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0776", "type": "seen", "source": "https://t.me/cibsecurity/38252", "content": "\u203c CVE-2022-0776 \u203c\n\nCross-site Scripting (XSS) - DOM in GitHub repository hakimel/reveal.js prior to 4.3.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-01T12:23:59.000000Z"}, {"uuid": "ce4da21c-d343-4f29-9e28-4d2c933f9a7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0777", "type": "seen", "source": "https://t.me/cibsecurity/38250", "content": "\u203c CVE-2022-0777 \u203c\n\nWeak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-01T12:23:57.000000Z"}, {"uuid": "a6b1918d-e5c2-4a2f-9107-72bb77a20915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0770", "type": "seen", "source": "https://t.me/cibsecurity/39667", "content": "\u203c CVE-2022-0770 \u203c\n\nThe Translate WordPress with GTranslate WordPress plugin before 2.9.9 does not have CSRF check in some files, and write debug data such as user's cookies in a publicly accessible file if a specific parameter is used when requesting them. Combining those two issues, an attacker could gain access to a logged in admin cookies by making them open a malicious link or page\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-28T22:41:56.000000Z"}, {"uuid": "5dba278e-48d5-4809-bd3e-b3971154d4a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/cibsecurity/38937", "content": "\u203c CVE-2022-0778 \u203c\n\nThe BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-15T19:19:28.000000Z"}, {"uuid": "3aabdbc9-23fa-483d-8fec-5dfe70e27f97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/2300", "content": "Exploiting CVE-2022-0778, a bug in OpenSSL vis-\u00e0-vis WebRTC platforms https://www.rtcsec.com/article/exploiting-cve-2022-0778-in-openssl-vs-webrtc-platforms/", "creation_timestamp": "2026-08-03T00:02:19.730188Z"}, {"uuid": "dc52df06-8d3b-41c1-8c3f-107a989bfb09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/14139", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *PoC-CVE-2022-0778-*\nGithub: https://github.com/Mrlucas5550100/PoC-CVE-2022-0778-", "creation_timestamp": "2026-07-31T00:00:25.885721Z"}, {"uuid": "d47ba57d-f6be-4b72-8e44-3525dbd2a0eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/thehackernews/1985", "content": "A new infinite loop vulnerability (CVE-2022-0778) in OpenSSL could allow attackers to crash remote servers by passing a malformed certificate.\n\nRead details: https://thehackernews.com/2022/03/new-infinite-loop-bug-in-openssl-could.html", "creation_timestamp": "2022-03-16T14:55:11.000000Z"}, {"uuid": "d26fece4-a58f-404b-8382-b45654078e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/1918", "content": "#Red_Team\n1. HTB: Overflow\nhttps://0xdf.gitlab.io/2022/04/09/htb-overflow.html\n2. Exploiting CVE-2022-0778, a bug in OpenSSL vis-\u00e0-vis WebRTC platforms\nhttps://www.rtcsec.com/article/exploiting-cve-2022-0778-in-openssl-vs-webrtc-platforms\n\n@BlueRedTeam", "creation_timestamp": "2022-04-10T10:20:20.000000Z"}, {"uuid": "9451be26-3559-4499-9895-ca44db98ec0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0778", "type": "published-proof-of-concept", "source": "Telegram/ZeP5vajwBjRtVQ5JRxWlsGO4FPItGOx5n-9omDq1pchppCB8Hg", "content": "", "creation_timestamp": "2024-08-09T22:27:33.000000Z"}, {"uuid": "65f56414-77cb-4217-840b-63b1ebca43e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5692", "content": "#exploit\n1. CVE-2022-26904:\nSuperProfile User Profile LPE\nhttps://github.com/rapid7/metasploit-framework/pull/16382\n\n2. CVE-2022-0778:\nOpenSSL - Illegal x.509 certificate construction\nhttps://github.com/drago-96/CVE-2022-0778", "creation_timestamp": "2022-03-28T11:00:54.000000Z"}, {"uuid": "f22f39a6-5aea-46e8-abe0-397239d3ca56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5778", "content": "#Red_Team_Tactics\n1. HTB: Overflow\nhttps://0xdf.gitlab.io/2022/04/09/htb-overflow.html\n2. Exploiting CVE-2022-0778, a bug in OpenSSL vis-\u00e0-vis WebRTC platforms\nhttps://www.rtcsec.com/article/exploiting-cve-2022-0778-in-openssl-vs-webrtc-platforms", "creation_timestamp": "2022-04-10T13:43:01.000000Z"}, {"uuid": "a17900ce-4f7d-49be-8f91-51df3843b2ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/5786", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Mar 1-31)\n\nCVE-2022-1096 - Type Confusion in V8\nhttps://github.com/Maverick-cmd/Chrome-and-Edge-Version-Dumper\nCVE-2022-0847 - Dirty Pipe Vuln\nhttps://t.me/CyberSecurityTechnologies/5560\nCVE-2022-0778 - OpenSSL Illegal x.509 certificate construction\nhttps://t.me/CyberSecurityTechnologies/5692\nCVE-2022-0492 - Privilege escalation vuln causing container escape\nhttps://sysdig.com/blog/detecting-mitigating-cve-2022-0492-sysdig\nCVE-2022-22947 - Spring Cloud Gateway RCE\nhttps://t.me/CyberSecurityTechnologies/5554\nCVE-2022-22963 - Spring Core RCE\nhttps://t.me/CyberSecurityTechnologies/5711\nCVE-2022-25636 - net/netfilter/nf_dup_netdev.c in the Linux kernel <5.6.10 allows local users to gain privileges because of a heap out-of-bounds write\nhttps://t.me/CyberSecurityTechnologies/5570\nCVE-2022-27254 - Vuln in Honda's Remote Keyless System\nhttps://github.com/nonamecoder/CVE-2022-27254\nCVE-2022-0609 - https://blog.google/threat-analysis-group/countering-threats-north-korea", "creation_timestamp": "2022-04-11T11:00:21.000000Z"}, {"uuid": "96799020-3566-477e-9974-f8ceb1a7e765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-10811, CVE-2024-13161, CVE-2024-13160, CVE-2024-13159 \u2014 \u0447\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Ivanti EPM \u0434\u043b\u044f \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83d\udd35CVE-2024-12510 \u0438 CVE-2024-12511 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041c\u0424\u0423 Xerox VersaLink, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e pass-back \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 LDAP \u0438 SMB/FTP.\n\n\ud83d\udd35CVE-2025-26465 \u0438 CVE-2025-26466 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 VerifyHostKeyDNS \u0438 Dos-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-0999 \u0438 CVE-2025-1426 \u2014 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Google Stable Channel \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 heap-buffer-overflow \u0432 V8, JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 \u043e\u0442 Chrome, \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u0441 heap-buffer-overflo \u0432 GPU.\n\n\ud83d\udd35CVE-2024-12284 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetScaler Console, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0430\u044f \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2022-0778 \u0438 CVE-2025-0867 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u0430\u0442\u0447\u0438\u043a\u043e\u0432 MEAC300 \u043e\u0442 SICK. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:23.047826Z"}, {"uuid": "5e8bf832-96e0-4295-a8a9-bb5b2dc4720a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "published-proof-of-concept", "source": "Telegram/ANS38Tnb5PEkm47pB7X_8bHd2EsMjoenOWDM-Y_1dwBijno", "content": "", "creation_timestamp": "2026-08-02T00:01:09.575722Z"}, {"uuid": "2b303a73-bad9-472a-9c1c-110e3c5475ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "Telegram/SPkAtc-f-3zjDr2IkUob25JrS1fRsbZ9hJqaKBbJSbHihZQ", "content": "", "creation_timestamp": "2026-08-02T00:01:11.282605Z"}, {"uuid": "6c7921d5-62dc-4429-a4ca-42268bfd52f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-10811, CVE-2024-13161, CVE-2024-13160, CVE-2024-13159 \u2014 \u0447\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Ivanti EPM \u0434\u043b\u044f \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83d\udd35CVE-2024-12510 \u0438 CVE-2024-12511 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041c\u0424\u0423 Xerox VersaLink, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e pass-back \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 LDAP \u0438 SMB/FTP.\n\n\ud83d\udd35CVE-2025-26465 \u0438 CVE-2025-26466 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 VerifyHostKeyDNS \u0438 Dos-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-0999 \u0438 CVE-2025-1426 \u2014 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Google Stable Channel \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 heap-buffer-overflow \u0432 V8, JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 \u043e\u0442 Chrome, \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u0441 heap-buffer-overflo \u0432 GPU.\n\n\ud83d\udd35CVE-2024-12284 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetScaler Console, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0430\u044f \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2022-0778 \u0438 CVE-2025-0867 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u0430\u0442\u0447\u0438\u043a\u043e\u0432 MEAC300 \u043e\u0442 SICK. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:10.763585Z"}, {"uuid": "7d771b01-bb47-41cb-b5f9-1d6465f8403a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "Telegram/tjgrzpu_dxl6dwKI7zyqcFMKKJNj87hWK2Sc-mpFVOelTAw", "content": "", "creation_timestamp": "2026-05-15T09:00:04.000000Z"}, {"uuid": "0bd3d663-297f-4b95-8746-c7a33f87a500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "published-proof-of-concept", "source": "Telegram/ANS38Tnb5PEkm47pB7X_8bHd2EsMjoenOWDM-Y_1dwBijno", "content": "", "creation_timestamp": "2026-08-01T09:00:06.013195Z"}, {"uuid": "08eea850-4981-4c2a-bd33-a6e991cf7e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "Telegram/SPkAtc-f-3zjDr2IkUob25JrS1fRsbZ9hJqaKBbJSbHihZQ", "content": "", "creation_timestamp": "2026-08-01T09:00:06.054841Z"}, {"uuid": "f5115db6-06de-45b0-8bc8-f97afbe04ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/85607", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-0770\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a diamorphine666\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-23 21:28:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLangflow remote code execution exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-23T22:00:06.000000Z"}, {"uuid": "f363a062-3b27-48de-96bb-c812b7398eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "Telegram/aIPIWoZyEYzzX9nHUVKB1aA0s_e1mj3mQ8Eug10fFDw9pT4", "content": "", "creation_timestamp": "2026-05-24T03:00:05.000000Z"}, {"uuid": "78d0a027-1d61-440a-b533-487abbc88687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/1141", "content": "CVE-2022-0778\n\nThe discovered vulnerability triggers an infinite loop in the function BN_mod_sqrt() of OpenSSL while parsing an elliptic curve key. This means that a maliciously crafted X.509 certificate can DoS any unpatched server.\n\nPoC\n\nhttps://github.com/drago-96/CVE-2022-0778", "creation_timestamp": "2026-08-05T00:00:56.216188Z"}, {"uuid": "4bc43e3e-b67a-454a-9471-da7a122f9602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/pphm_HackerNews/2244", "content": "\ud83d\udd34 CISA orders urgent action on actively exploited Langflow RCE flaw\n\nThe Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for building AI agents.\n\nTracked as CVE-2026-0770, this critical security flaw allows unauthenticated threat actors to gain remote code execution as root in low-complexity attacks.\n\n\"The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint,\" Trend Micro researchers who found and reported the flaw explain. \"The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root.\"", "creation_timestamp": "2026-08-21T23:00:07.996251Z"}, {"uuid": "4f9ad46c-fcb7-418e-935d-c80a7ce94649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0776", "type": "published-proof-of-concept", "source": "Telegram/s-lekd_CMiFUG7sttPbwaSIszWWV6asQx86IxAh3lgAbVW0", "content": "", "creation_timestamp": "2026-06-10T19:00:12.000000Z"}, {"uuid": "531b6eeb-6dfc-47d1-bd5c-34de6558130c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/df04a959-d76a-4e15-a9ce-2d5524fb5762", "content": "", "creation_timestamp": "2026-06-19T12:45:35.385685Z"}, {"uuid": "8ec47574-15e0-40f2-8836-09cc482892da", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0778", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1e4d7100-4095-469c-86a1-e54363517eb4", "content": "", "creation_timestamp": "2026-06-19T12:46:20.266619Z"}, {"uuid": "6089a67a-4aa4-43d6-8181-7fbd18fc2731", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0779", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5de7b48b-534d-47c7-a549-d0f7e9ea9930", "content": "", "creation_timestamp": "2026-06-19T16:45:37.317331Z"}, {"uuid": "2ec22dd2-3c53-4a8a-b851-a762fde75eaa", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0779", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9bb20a10-e265-4e37-9d10-ab396e52292e", "content": "", "creation_timestamp": "2026-06-23T14:04:09.358739Z"}, {"uuid": "1382b902-3586-44cd-8382-ee8241180669", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0778", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ebaa8879-77d5-47ea-a591-3fb34c058f33", "content": "", "creation_timestamp": "2026-06-23T14:04:23.025140Z"}, {"uuid": "edb57ddc-0288-4f25-af7c-3c8113d36b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/pphm_HackerNews/2244", "content": "\ud83d\udd34 CISA orders urgent action on actively exploited Langflow RCE flaw\n\nThe Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for building AI agents.\n\nTracked as CVE-2026-0770, this critical security flaw allows unauthenticated threat actors to gain remote code execution as root in low-complexity attacks.\n\n\"The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint,\" Trend Micro researchers who found and reported the flaw explain. \"The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root.\"", "creation_timestamp": "2026-08-22T00:00:11.585985Z"}, {"uuid": "bd332d46-fa04-4ca9-91f2-d3c422be03ec", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-0778", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fb1753c1-a793-4b70-9733-4244bfd97ddb", "content": "", "creation_timestamp": "2026-06-30T10:01:22.354802Z"}, {"uuid": "3d83bd97-1578-451f-b97c-20260443085f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://gist.github.com/dantte-lp/cad234b97fb6a943106614b7dff85806", "content": "# \u0413\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0435 Release Notes \u2014 Cisco Catalyst 8000V Edge Software (IOS-XE)\n\n\u041a\u043e\u043d\u0441\u043e\u043b\u0438\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u043f\u043e \u0432\u0441\u0435\u043c \u0432\u0435\u0440\u0441\u0438\u044f\u043c IOS-XE \u0434\u043b\u044f C8000V.\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 Cisco Release Notes (PDF \u2192 MD \u043a\u043e\u043d\u0432\u0435\u0440\u0442\u0430\u0446\u0438\u044f).\n\n## \u0421\u0432\u043e\u0434\u043d\u0430\u044f \u0442\u0430\u0431\u043b\u0438\u0446\u0430 \u0432\u0435\u0440\u0441\u0438\u0439\n\n| \u0412\u0435\u0440\u0441\u0438\u044f | \u0422\u0438\u043f | \u0414\u0430\u0442\u0430 RN | \u041d\u043e\u0432\u044b\u0445 \u0444\u0438\u0447 | Resolved bugs | Open bugs |\n|--------|-----|---------|-----------|---------------|-----------|\n| 17.10 | Standard | \u2014 | 10 | 7 | 14 |\n| 17.11 | Standard | \u2014 | 12 | 58 | 12 |\n| 17.12 | Extended | \u2014 | 17 | 263 | 159 |\n| 17.13 | Standard | \u2014 | 19 | 7 | 26 |\n| 17.14 | Standard | \u2014 | 15 | 25 | 26 |\n| 17.15 | Extended | \u2014 | 23 | 183 | 67 |\n| 17.16 | Standard | \u2014 | 11 | 16 | 17 |\n| 17.18 | Extended | \u2014 | 33 | 41 | 0 |\n| 17.6 | Extended | \u2014 | 10 | 156 | 144 |\n| 17.7 | Standard | \u2014 | 17 | 39 | 19 |\n| 17.8 | Standard | \u2014 | 10 | 5 | 2 |\n| 17.9 | Extended | \u2014 | 15 | 290 | 173 |\n| 26.1 | Extended (new) | \u2014 | 12 | 12 | 0 |\n\n## IOS-XE 17.10\n\n### \u041d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438\n\n- **Support for ED25519 SSH Key in AWS and GCPDeployments**: Cisco Catalyst 8000V supports ED25519 SSH keytype for authentication when you deploy an instancein Amazon Web Services 9 (AWS) and Google CloudPlatform (GCP). Although SSH-RSA keys are\n- **Support for PCI Passthrough on NIC port with ixgbeDriver**: Cisco Catalyst 8000V now supports the ixgbeNetwork Interface (vNIC) card for deployments inESXi, KVM, and NFVIS (CSP) environments. Thisdriver enables the Peripheral Component Interconnect\n- **Packet Tracer with UDF Offset**: Using this feature you can configure to match thepackets based on user defined field position andlength. This can be used by an ACL to match packetsthat cannot be classified easily with th\n- **Support for Secure Real-time Transport Protocol(SRTP) Dual-Tone Multi-Frequency (DTMF)Interworking**: This feature provides support for Dual-ToneMulti-Frequency (DTMF) interworking betweenCisco Unified Communications Manager (CUCM)and Secure Software MTP in pass-through mode. Itis supp\n- **Layer 2 BGP VXLAN EVPN**: Border Gateway Protocol (BGP) Ethernet VPN(EVPN) Virtual Extensible LAN (VXLAN) is acampus and data center network solution for Ciscodevices that run on Cisco IOS XE software. Thisfeat\n- **Segment Routing Absolute One-Way Link LossMeasurement for GRE-IPSec Tunnel**: This feature provides a mechanism for link lossmeasurement for point-to-point GRE-IPSec tunneland identifies paths that meet specified loss criteria.\n- **SHA2 support for SNMP v3 User Authentication**: This feature provides support for SHA-2 as anadditional authentication protocol to create anSNMPv3 user and associate a security level to eachuser. The SHA-256, SHA-384, and SHA-512 are th\n- **Support for YANG Operational Model in theGETVPN architecture**: This feature enables the YANG operational model inthe GETVPN architecture to support the crypto gdoicommand which was previously enabled only for theCLI and SNMP models.\n- **YANG model enhancements for Unified SRST andCUBE**: Additional YANG configuration models are includedin this release to enable Unified SRST secure calling,applications for CUBE, and additional codecs forvoice class codec lists.\n- **Permanent License Reservation (PLR) in SmartLicensing Using Policy**: A PLR enables you to use an unlimited count of anylicense on the product instance. It is suited to ahigh-security deployment or entirely air-gappednetworks where a product instance cannot<\n\n### \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 (7)\n\n- CSCwc77981: C8000V crashed - track the FMAN-FP's memory leak caused by cond-debug\n- CSCwc70511: Router reloads unexpectedly during NHRP processing\n- CSCwb35303: X25 FRMR seen when switching from XOT to low speed serial\n- CSCwc29735: Improve debug for reload at crypto_dev_proxy_ipc_ipsec_sa_crt_hndlr when scale exceedlimit\n- CSCwc06327: PFP policy in SRTE, RIB resolution in FC bring down ipsec tunnel interface- stuck at linestatedown\n- CSCwc78021: Standby WLC crash @ fman_acl_remove_default_ace\n- CSCwd16664: GetVPN long SA - GM re-registration after encrypting 2^32-1 of packets in one IPSEC SA\n\n### \u041e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0431\u0430\u0433\u0438 (14)\n\n- CSCwc77570: C8000V: IOS-XE Web UI Licensing Service Settings page doesn't load\n- CSCwd07580: C8000V QFP uCode crash due to MLX4 low level drivers\n- CSCwd25107: Interface Vlan1 placed in \"shutdown\" state when configured with IP address pool\n- CSCwd23810: IOS-XE: A high CPU utilization caused by NHRP\n- CSCwd45402: MSR Unicast-To-Multicast not working if DST and SRC are the same in Service Reflectconfiguration\n- CSCwd61255: Data Plane Crash on the device when making QoS configuration changes\n- CSCwc65697: Device crashes and restarts during call flow with the new image\n- CSCwd53205: IKEv2 The RRI routes intermittently disappear from a FlexVPN hub\n- CSCwc99823: FMAN crash seen in SGACL@ fman_sgacl_calloc\n- CSCwd59722: Unexpected reboot due to IOSXE-WATCHDOG: Process = Crypto IKMP\n- CSCwd12828: Segmentation fault crash in CCSIP_SPI_CONTROL process\n- CSCwd74089: CUBE call leak at FPI layer\n- CSCwc66646: Unexpected reload due to segmentation fault in the CCSIP_SPI_CONTROL process\n- CSCwc23645: When using SRTP with higher ciphers, CUBE is inserting distortion in voice\n\n## IOS-XE 17.11\n\n### \u041d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438\n\n- **Attaching Extended Color Communities to BGP VRF**: This feature introduces new methods of attachingextended color communities to a prefix. A colorcommunity is an indicator of the bandwidth or latencylevel of the traffic sent to the prefix.\n- **Bridge Domain VIF Support on Layer 2 EVPN**: This enhancement allows configuring a Layer 2 EVPNnetwork to support a Bridge Domain Interface (BDI)to act as an interface to a routing domain. Also, youcan attach one or more bridge domai\n- **Device Telemetry**: This functionality enables collection of anonymoususage telemetry data for Cisco products, which helpsin continuous product improvements. From Cisco IOSXE 17.11.1a, this functionality is e\n- **Deprecation of Weak Ciphers**: The minimum Rivest, Shamir, and Adleman (RSA)key pair size must be 2048 bits. The compliance shieldon the device must be disabled using the**crypto****engine compliance shield disable**com\n- **MAC and IP Addressing Learning from a Static ARPAlias Entry**: This enhancement allows you to configure an EVPNVXLAN network to learn an EVPN MAC addressand IP binding from a static Address ResolutionProtocol (ARP) alias entry. After learning the MAC<\n- **Quantum-Safe Encryption Using Post-QuantumPreshared Keys**: This feature implements RFC 8784 and Cisco SecureKey Integration Protocol (SKIP) for quantum-safeencryption of IKEv2 and IPsec packets usingPost-quantum Preshared Key (PPK). The PPKsco\n- **Redirecting Deprecated LISP Commands to RevisedVersions**: The feature includes a list of deprecated LISPcommands which will automatically redirect the userto the updated command and associated output whenexecuted. A banner will appear on the scre\n- **Replication of Broadcast, Unknown-unicast, andMulticast Traffic**: With this enhancement, the multi-destination Layer2 broadcast, unknown-unicast, and multicast (BUM)traffic in an EVPN VXLAN network is replicatedthrough a multicast group in the underlay n\n- **Support for RAR PPPoE IPv6 Multicast**: This feature provides support for IPv6 multicast inPPPoE-based Radio Aware Routing (RAR) networks.\n- **Support for 16 vCPU in KVM**: Cisco Catalyst 8000V now supports 16 vCPUinstances in a KVM environment.\n- **Unified SRST: Concurrent use of Webex CallingSurvivability Gateway and Unified SRST**: From Cisco IOS XE 17.11.1a, concurrent use of CiscoWebex Calling Survivability Gateway and UnifiedSRST is supported on the same router.\n- **Snapshots for Product Activation Key (PAK) licenses**: Starting with Cisco IOS XE Dublin 17.11.1a, thePAK-managing library is discontinued and theprovision to_take_a snapshot is no longer available.Software images from Cisco IOS XE Dublin 17.1\n\n### \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 (58)\n\n- CSCwe19394: Device may boot up into prev_packages.conf due to power outage\n- CSCwc99038: C8000V stuck in Day-0 prompt with the customdata having invalid syntax\n- CSCwd62953: C8000V : error platform provided UDI list has invalid values: ; udi_sn is empty\n- CSCwe37002: C8000V does not accept two file formats during day 0 configuration in OpenStack\n- CSCwe09916: QoS shaping parameter range is shown in [8000-10000000000] (only up to 10G)\n- CSCwd47940: PMTU Discovery is not working after interface flap\n- CSCwd45402: MSR Unicast-To-Multicast does not work if DST and SRC are the same in the service reflectconfiguration\n- CSCwc79115: Device policy commit failure notification and alarm from vsmart\n- CSCwd16559: ISG FFR: ARP request to reroute nexthop IP is not triggered if ARP entry not in ARP table\n- CSCwe28204: Control connection over L3 Tloc extension failing as no NAT table entry created\n- CSCwe34808: FMAN FP leak due to the punt-policer command\n- CSCwe09805: OID for SNMP monitoring of DSP resources are not working as expected\n- CSCwd89012: Tested flap-based auto-suspension - minimum duration value - no results as expected\n- CSCwe29430: Critical process fpmd fault on rp_0_0 (rc=134)\n- CSCwd87195: NAT configuration with redundancy, mapping id and match-in-vrf options with no-aliassupport.\n- CSCwd81357: QoS Classification does not work for DSCP or ACL + MPLS EXP\n- CSCwc99823: Fman crash seen in SGACL@ fman_sgacl_calloc\n- CSCwd90168: Unexpected reload after running the**show voice dsp**command while an ISDN call disconnects\n- CSCwd44439: Device crashes at fman_sdwan_nh_indirect_delete_from_hash_table\n- CSCwd34941: NAT configuration with no-alias option is not preserved after reload\n- CSCwc72588: Router does not allow weak cryptographic algorithms to be configured for IPsec\n- CSCwd25107: Interface VLAN1 placed in \"shutdown\" state when configured with \"ip address pool\"\n- CSCwc68069: RTP packets are not forwarded when packet duplication is enabled. No issue without duplicationfeature\n- CSCwe00946: System crash after disabling endpoint-tracker on tunnel interfaces\n- CSCwe18058: Unexpected reload with IPS is configured\n- CSCwd61255: Data Plane Crash on the device when Making Per-Tunnel QoS configuration changes withscale\n- CSCwe01015: IKEv2/IPSec - phase 2 rekey fails when peer is behind NAT\n- CSCwd17272: UTD Packet drops due to fragmentation for ER-SPAN traffic\n- CSCwe27241: NBAR classification error with custom app-aware routing policy\n- CSCwc37465: Unable to push \"no-alias\" option on static NAT mapping from the management system\n- ... \u0438 \u0435\u0449\u0451 28\n\n### \u041e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0431\u0430\u0433\u0438 (12)\n\n- CSCwe40024: 98% memory utilization for C8000V\n- CSCwd07580: Azure: C8000V QFP uCode crash due to MLX4 driver\n- CSCwd97676: VMware C8000V 'show interfaces' counters are incorrect and display extremely large values\n- CSCwd42523: Same label is assigned to different VRFs\n- CSCwd45508: Device does not form BFD across serial link during upgrade\n- CSCwe52971: Bfd tunnels via Starlink remain in down state\n- CSCwe54089: ZTP process does not work\n- CSCwe37123: Device uses excessive memory when configuring ACLs with large object groups\n- CSCwe19394: Device may boot up into prev_packages.conf due to power outage\n- CSCwe18276: Route-map not getting effect when its applied in OMP for BGP routes\n- CSCwd68111: Device object group called in ZBFW gives error after upgrade\n- CSCwe49684: BFD sessions keep flapping intermittently\n\n## IOS-XE 17.12\n\n### \u041d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438\n\n- **Support for RHEL 9.2**: From Cisco IOS XE 17.12.4a, you can deploy CiscoCatalyst 8000V on RedHat RHEL 9.2 operatingsystem with KVM hypervisor.\n- **Support for VMware ESXi 8.0**: From Cisco IOS XE 17.12.4a, you can deploy CiscoCatalyst 8000V on VMware ESXi 8.0 Update 2hypervisor operating system.\n- **Support for N2 instances for Google Cloud Platformdeployments**: Cisco IOS XE 17.12.4a supports n2-standard-8,n2-standard-4 instance types for Cisco Catalyst 8000Vdeployments in Google Cloud Platform.\n- **Support for SUSE SLES15 SP5**: From Cisco IOS XE 17.12.2, you can deploy Cisco Catalyst 8000V on SUSESLES 15 SP5 operating system with KVM hypervisor.\n- **Cisco Managed CellularActivation (eSIM)**: The Managed Cellular Activation solution provides a programmable subscriberidentity module (SIM), called an eSIM, a physical SIM card that you can configurewith a cellular service plan of your\n- **Support for Intel Atom\u00ae C3000 Processor Series(Denverton)**: From Cisco IOS XE 17.12.1a onwards, Cisco Catalyst8000V is supported on Intel Atom\u00ae C3000 processor(Denverton) CPU-based servers with Intel x550 NICon the following hypervisors:\n- **Support for Intel i350 NICs**: Cisco Catalyst 8000V includes drivers to supportSR-IOV connectivity to Intel i350 NICs on Intel XeonCPU based x86 servers with SUSE SLES 15 SP3KVM hypervisor.You can run Cisco Catalyst\n- **Support for D16_v5 instance in Microsoft Azureenvironment**: Cisco Catalyst 8000V supports the D16_v5 instancetype with 8 NICs (maximum) in the Microsoft AzureMarketplace for increased throughput.\n- **Cisco Catalyst 8000V Performance Enhancements**: Cisco Catalyst 8000V supports improved, 16-coreperformance for on-prem deployments in the KVMand ESXi environments.\n- **IPv6 Unicast Support with DLEP**: The IPv6 Unicast Support feature introduces supportfor IPv6 dataplane to RAR Dynamic Link ExchangeProtocol.\n- **Managing the SD-Routing Devices Using CiscoSD-WAN Manager**: This feature allows you to perform managementoperations for SD-Routing devices using CiscoCatalyst SD-WAN Manager. You can use a singlenetwork manage system ( Cisco Catalyst SD-WANMana\n- **Segment Routing over IPv6 Dataplane**: Segment Routing (SR) can currently be applied onMultiprotocol Label Switching (MPLS) dataplane.From Cisco IOS XE 17.12.1a, SR is supported overthe IPv6 dataplane for the following protocol\n- **Support for Automatic Log Deletion**: This feature allows you to delete the entries from thelogging buffer. You can configure the local syslogretention period after which the entries are purgedfrom the device automatically. To\n- **TrustSec and Software-Defined Access ScaleMeasurement**: With this feature, the scale numbers for TrustSec andSoftware-Defined Access (SDA) are measured for thefollowing:\u2022 Security Group Tag (SGT) or Destination GroupTag (DGT) Policies\u2022 \n- **CUBE: GCM Ciphers for WebSocket-based MediaForking**: From Cisco IOS XE Dublin 17.12.1a onwards, GCMcipher negotiation supports secure connectivity ofWebSocket server.\n- **CUBE: IPv6 Flows in High Availability**: From Cisco IOS XE Dublin 17.12.1a onwards, HighAvailability in CUBE supports IPv6 flows.\n- **CUBE/LGW: Cover Buffer Enhancements for VoIPTrace**: From Cisco IOS XE Dublin 17.12.1a onwards, VoIPTrace for SIP messages displays cause code in thecover buffer.\n\n### \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 (263)\n\n- CSCwr27127: Azure C8000V deployment fails with provisioning timedout error\n- CSCwr83968: Unexpected reload on device with Static NAT when polling NAT translation data\n- CSCwo57783: NHRP Encap Error for Purge Request populates on spoke despite correct routing atHUB\n- CSCwn85623: Missing Calling-Station-ID in radius messages\n- CSCwp96706: Memory leak in MallocLite and Crypto IKEv2\n- CSCwq22471: Device unexpectedly reboots when importing CA chains\n- CSCwq21566: HSL entries are missing when configuration is pushed via vManage\n- CSCwq51358: Device might experience high memory utilization and unexpected reloads during IKEv2operations\n- CSCwn18874: DMVPN spoke crashed at Process = NHRP\n- CSCwo14975: Memory leak in DNS Proxy/SKA triggers unexpected reloads\n- CSCwj88080: IOS XE device continuously crashes after configuring UTD and reboots\n- CSCwp40010: RP crashes while debugging IKEv2\n- CSCwp38609: CTS trustpoint loop triggers PKI segfault\n- CSCwq49981: Call Failures due to FPI resource leaks\n- CSCwo60972: C8000V: Device shows high memory usage and cpp_ha_top_leve keeps increasing\n- CSCwp03641: Multiple inside local addreses are translated to the same inside global IP address andport\n- CSCwo91955: Endpoint tracker remains in the Up state when DNS is reachable from the other interface\n- CSCwn99822: Large number of BFD sessions stuck due to out of window drops reported with controlconnections NAT flaps\n- CSCwp28915: SNMP walk fails to consistently return tunnel names due to incomplete tunnel setup\n- CSCwo89784: Unexpected reload of standby occurs during PKI trustpoint removal\n- CSCwn99723: The**request platform software package expand**commands are deprecated forupgrades\n- CSCwp12923: IKEv2 fails to parse certain route-set prefix Cisco VSA attributes from the Radiusserver\n- CSCwo47118: Crash occurs when clearing L2TP tunnels with the clear VPDN tunnel L2TP command\n- CSCwb24403: BFD flap on public IP change on a private color TLOC\n- CSCwo66822: Router reboots due to ucode core dump\n- CSCwo90396: Serial interface configuration lost after reload\n- CSCwm33545: FlexVPN - IP address assigned to spoke changes to unassigned\n- CSCwo12453: The login block-for xx attempts xx within xx? does not function when you set?access-class xx in vrf Mgmt-vrf? on the line vty\n- CSCwn57838: Startup configuration is lost for NIM interfaces\n- CSCwo51627: Unexpected reload occurs due to Critical process linux_iosd_image fault\n- ... \u0438 \u0435\u0449\u0451 233\n\n### \u041e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0431\u0430\u0433\u0438 (159)\n\n- CSCwr60310: SDWAN Template push or CLI config update fails due to the duplication of VTY orAsync lines in the configuration\n- CSCwr00088: Add CLI to change per MPLS label CEF statistics query interval on FMAN FP\n- CSCwn29062: Device might see Cosmetic DATACORRUPTION logs during IPSec tunnel up/downevents\n- CSCwk55051: polaris_vconfd_cfgpull_t logging denials observed during configuration push trigger\n- CSCwr31999: Using the Azure Portal GUI stop button initiates reload before forcefully shutting downin 10 minutes\n- CSCwm54978: polaris_iosd_t denials 2024-09-16 06:43:22 errors seen during system boot or**dir****bootflash:**command\n- CSCwn85623: Missing Calling-Station-ID in radius messages\n- CSCwq22471: Device unexpectedly reloads after importing subca chain\n- CSCwq08151: Unexpected reload occurs while running a speed test from and leaves the page beforeit completes\n- CSCwo57783: A NHRP Encap Error for Purge Request error message populates on the spoke despitecorrect routing at HUB\n- CSCwm54978: The following alert is seen when you boot the device or when you run the**dir bootflash:**command`%SELINUX-1-VIOLATION: Chassis 1 R0/0: audispd: type=AVC``msg=audit(1724681880.369:235): avc: denied { getattr } for pid=4585``comm=417578696C69617279205468726561 path=\"/bootflash/pd_info\" dev=\"sda1\"``ino=1444321 scontext=system_u:system_r:polaris_iosd_t:s0``tcontext=system_u:object_r:polaris_pd_info_t:s0 tclass=dir permissive=0.`\n- CSCwp40010: RP crashes while debugging IKEv2\n- CSCwp38609: CTS trustpoint loop triggers PKI segfault\n- CSCwq49981: Call failures due to FPI resource leaks\n- CSCwn97600: BFD flapping is seen intermittently with PWK IPsec-rekey\n- CSCwe23188: Upgrade from vmanage declared successful even though device boots up with differentversion than requested\n- CSCwk87338: SNMPv3 user credentials to be stored as part of running-configuration with encryption.\n- CSCwj05500: Accelerated Networking stops working due to driver issue\n- CSCwj85529: C8000V license boot level configuration done through customdata is getting lost afterreload\n- CSCwh91039: C8000V faces high system CPU load reported due to unsupported number of vCPUsallocated\n- ... \u0438 \u0435\u0449\u0451 139\n\n## IOS-XE 17.13\n\n### \u041d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438\n\n- **Support for Intel E810 NIC for**: Cisco Catal\n- **on-prem ESXi and KVM hosts**: optimizes h\n- **Support for c6in Instance types inAWS Deployments**: Cisco Catalyst 8000V now supports c6in instance types for AWS deploymenthird Generation Intel Xeon Scalable processors that provide greater networkperformance.\n- **Support for Mellanox CX-5 on Ubuntu16.04 LTS**: Cisco Catalyst 8000V now supports Mellanox CX-5 on Ubuntu 16.04 LTS.\n- **Application Performance Monitor**: The Application Performance Monitor feature is a simplified framework thatintent-based performance monitors. With this feature, you can view real-timeperformance filtered by client segments, n\n- **Cisco SD-Routing Cloud OnRamp forMulticloud**: Cisco SD-Routing Cloud OnRamp for Multicloud extends enterprise WAN to pusolution helps to integrate public cloud infrastructure into the Cisco Catalystthese capabilities, the devices can acce\n- **Enhancements to BGP MaximumPrefix**: \u2022 Discard Extra Prefixes: This enhancement introduces the**neighbor maxi**command to drop all excess prefixes received from the neighbor when tprefixes exceed the maximum limit.b - Logging enh\n- **Initiating GARP for NAT Mapping**: This feature introduces support for configuring retry time intervals for GARPinterface. You can configure this feature using the**global ip arp nat-garp-ret****static**commands.\n- **Schedule Software Upgrade onSD-Routing Devices**: With this feature, you can upgrade the software image on the supported Ciscoan option to schedule the upgrade process at specified time. This allows you tto the software upgrade process.\n- **SD-Routing Configuration Group**: The Configuration Group feature provides a simple, reusable, and structuredSD-Routing device using Cisco Catalyst SD-WAN Manager.\n- **Segment Routing over IPv6 Dataplane**: From Cisco IOS XE 17.13.1a, Segment Routing is supported over the IPv6 daProtocol (BGP) on L3VPN networks using On-Demand Next Hop (ODN).\n- **Speed Test for SD-Routing Devices**: Cisco SD-WAN Manager allows you to measure the network speed and availdevice and an iPerf3 server. The speed tests measure the upload speed from theor specified iperf3 server, and measure the \n- **Strength Enforcement for IKE SecurityAssociation (SA)**: This feature introduces an algorithm to ensure that the strength of the IKE (IKEvcipher is greater than or equal to the strength of its child IPsec SA encryptionTo enable this algorithm, use t\n- **Support for Flexible NetFlowApplication Visibility on SD-RoutingDevices**: The Flexible NetFlow (FNF) feature provides statistics on packets flowing thto identify the tunnel or service VPNs. Also, it provides visibility for all the trVPN0 on Cisco SD-Routing devices \n- **Support for Packet Capture forSD-Routing**: This feature allows you to capture the bidirectional IPv6 traffic data to troubleshSD-Routing devices.\n- **Support for Persistence of BGPDynamic Neighbors**: From IOS XE 17.13.1a, the device maintains the neighbor information even after tTo configure this, use the**bgp listen persistent**command for all dynamic neighb**range peer-group persistent**\n- **Support for Security-Enhanced Linux**: SELinux (Security-Enhanced Linux) is a solution designed to incorporate a stronaccess control (MAC) architecture into Cisco IOS XE platforms.From Cisco IOS XE 17.13.1a, SELinux is enabled by d\n- **Support for Suite B ciphers with GETVPN**: This enhancement introduces support for Suite B ciphers with GET VPN on Cisc\n- **NAT Traversal using RTP Keepalive**: From Cisco IOS XE 17.13.1a onwards, using RTPkeepalive packets, CUBE supports media transmissionin the NAT environment.\n\n### \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 (7)\n\n- CSCwh10813: Add verbose log to indicate grant ra-auto un configures grant auto in PKI server\n- CSCwf25735: Device QoS more than four remark with set-cos not work\n- CSCwf44703: NAT64 prefix is not originated into OMP\n- CSCwf80400: IOS XE router may experience unexpected reset while executing the**show utd engine****standard statistics**command\n- CSCwf14607: Crash observed when exporting PKCS12 to terminal via SSH CLI\n- CSCwf71116: Static route keeps advertising via OMP even though there is no route\n- CSCwf45486: OMP to BGP redistribution leads to incorrect AS_Path installation on the chosenNext-Hop\n\n### \u041e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0431\u0430\u0433\u0438 (26)\n\n- CSCwh84068: C8000V crashes after changing NAT HSL configuration\n- CSCwi19182: C8000V throttles throughput to 20Mbps while it must be 250Mbps\n- CSCwh94906: WLC segmentation fault crashes with Network Mobility Services Protocol (nmsp)\n- CSCwh77221: SNMP unable to poll tunnel data after a minute\n- CSCwi06843: Endpoint tracker triggers a CPU hog\n- CSCwh76453: Tracker for TLOC extension is down even though TLOC is up and there is ICMPreachability\n- CSCwi14178: Failed to connect to device : x.x.x.x Port: 830 user : vmanage-admin error : Connectionfailed\n- CSCwi08171: Router crashes due to crypto IKMP process\n- CSCwh01678: Device FTM crashes with SIG enabled\n- CSCwi05395: SNMPbulkget cannot get loss, latency and jitter for ProbeClassTable &ClassIntervalTable OIDs\n- CSCwi23562: When RADIUS is down and there is an IKE-AUTH request received, the box stopsreplying to DPD packets\n- CSCwi11807: SNMPbulkget breaks the OID appRouteStatisticsTable after minute not returning thecorrect order\n- CSCwi00369: Device loses security parameter after upgrade\n- CSCwi06404: Device undergoes PKI related crash after failing a CRL fetch\n- CSCwi13563: IP SLA probe for endpoint tracker does not work once endpoint tracker is changeduntil reload\n- CSCwh65016: Device unexpectedly reboots due to QFP exception\n- CSCwi15688: Unexpected NAT translation occurs in a specific network\n- CSCwh91136: IOS XE:Traffic not encrypted and droped over IPSEC SVTI tunnel\n- CSCwi16452: 20.13 SSE:401 Error thrown when switching from SSE to SIG\n- CSCwi16015: [SIT]: SSE tunnels don't come up with dialer interface relax check in IKE\n- ... \u0438 \u0435\u0449\u0451 6\n\n## IOS-XE 17.14\n\n### \u041d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438\n\n- **AWS Migration Tool**: From Cisco IOS XE 17.14.1a, an AWS migration toolis available as a CloudFormation template, to migrateyour AWS instances from Cisco CSR1000V to CiscoCatalyst 8000V. This one-click solution\n- **Configuration Group Enhancements**: This release introduces support for the following inCisco SD-WAN Manager:\u2022 Transport Profiles\u2022 Management Profile\u2022 Service Profile\u2022 CLI Profile\u2022 Policy Object Profile\n- **Configure Secure Service Edge**: Secure Service Edge is a cloud solution that providesseamless, transparent, and secure Direct InternetAccess (DIA) to protect against internet-based threats.This solution can be configured\n- **Configure SSL/TLS Proxy for Decryption of TLSTraffic on SD-Routing Devices**: The SSL/TLS Proxy feature allows you to configurean autonomous device as a transparent SSL/TLSproxy. Such proxy devices can then decrypt incomingand outgoing TLS traffic to enable their in\n- **View Unmodelled Commands on SD-Routing Devices**: After an SD-Routing device is deployed, you can viewthe unmodelled commands on Cisco SD-WANManager. The list of unmodelled commands areregenerated if the device reboots\n- **YANG Configurational Model Support forSD-Routing Devices**: This release introduces support for the followingYANG Configurational Models:\u2022 BGP\u2022 MPLS\u2022 RSVP\u2022 SNMP\u2022 AAA\u2022 QOS\u2022 ACL\u2022 DHCP\n- **Support to Configure VPN Solutions for SD-Routingdevices**: This release introduces support for the following VPNsolutions:\u2022 FlexVPN\u2022 GETVPN\u2022 DMVPN\u2022 L3VPNThese VPN solutions can be configured by using**Configuration**>**Configuratio\n- **Enhanced IS-IS Fast Flooding**: The IS-IS Fast Flooding feature optimizes LSPtransmission to accelerate network convergence bydynamically adjusting the LSP rate based on receivercapability. From Cisco IOS XE 17.14.1a, IS\n- **Enhancement to the show reload-history Command**: From Cisco IOS XE 17.14.1a, the**show****reload-history**command is modified to**show reload****history**. The output for the command is updated toinclude crash data, Cisco High Availabili\n- **IP Endpoint Delay Measurement and LivenessMonitoring**: This feature enables you to measure the end-to-enddelay and monitor liveness towards either a specifiedIPv4 or IPv6 endpoint. From Cisco IOS XE 17.14.1a,you can be configure this feature u\n- **gNMI: Stream Subscriptions with On-Change Mode**: gNMI telemetry supports on-change subscriptions onthe same set of models as other telemetry protocols.\n- **gNMI - SubscribeResponse with sync_response**: The sync_response is a boolean field that is part ofthe SubscribeResponse response message. Thesync_response message is sent after the first updatemessage.\n- **CUBE: Secure SIP with TLS 1.3 support**: From Cisco IOS XE 17.14.1a onwards, security ofthe communication between the client and the serveris enhanced with the support of Transport LayerSecurity (TLS) version 1.3 and associated c\n- **SRST: Secure SIP with TLS 1.3 support**: Starting from Cisco Unified SRST 14.4 release, theSRST security feature is enhanced to support TLSversion 1.3 and associated ciphers.\n- **500 Mbps Aggregate for Tier 1 and 250 MbpsThroughput Configuration in Autonomous Mode**: Starting with this release, when you configure athroughput of 250 Mbps or T1,_if_an HSECK9 licenseis available on the device, then throughput is cappedat 500 Mbps (transmitted or Tx data o\n\n### \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 (25)\n\n- CSCwi49846: FMTD crashes when SIG GRE tunnels configs are removed\n- CSCwi55725: SDR CLI config group issue\n- CSCwi61369: Device unexpectedly reloads due to SIGABRT\n- CSCwi35716: AAR backup preferred color is not working as expected\n- CSCwi53306: Unknown appID in ZBFW HSL log\n- CSCwf84567: Unexpected reload after re-connecting to vsmart\n- CSCwi14178: Failed to connect to device : x.x.x.x Port: 830 user : vmanage-admin error : Connectionfailed\n- CSCwj25493: Device crashes twice with_Critical process linux_iosd_image fault on rp_0_0_error\n- CSCwi40603: Memory leak in the Crypto IKMP process\n- CSCwf08658: Devices will flap the BFD sessions if we are in a non equilibrium state and havesymmetric NAT\n- CSCwi35177: Device crash caused by continuous interface flap; interface associated to many ipsecinterfaces\n- CSCwi60266: Device with enterprise certificates not forming control connections with controllersafter upgrade\n- CSCwi67983: Tracker state log is missing when DNS Query fails\n- CSCwi53951: Packets with Unicast MAC get dropped on a Port Channel L2 Sub-intf after a routerreboot\n- CSCwb25507: Add vendor specific parameter for NBAR protocol pack version\n- CSCwi53549: Device crashes with reason_Critical process fman_fp_image fault on fp_0_0 (rc=134)_\n- CSCwi82548: Crash in IKEv2 Cluster Load Balancer\n- CSCwi51381: TrapOID of ciscoSdwanBfdStateChange is different from MIB file\n- CSCwi85293: IKEv2 IPv6 Cluster Load balance: Secondary in cluster unable to connect to clusterin case of FVRF\n- CSCwi86698: No error message is seen while using multicast address as system-IP in SD-routingdevice.\n- CSCwj06622: Segmentation fault and core files are seen on IOS-XE in controller-manged devicesdue to speedtest\n- CSCwi16111: IPv6 TCP adjust-mss does not work after delete and reconfigure\n- CSCwi62230: SIG tunnel: 'SIG STATE\u00e2 is showing blank value\n- CSCwj27545: Device crashes due to FTMD\n- CSCwj70773: Unable to create a portchannel interface with maximum number limit\n\n### \u041e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0431\u0430\u0433\u0438 (26)\n\n- CSCwj05500: Accelerated Networking stops working due to driver issue\n- CSCwh91039: High System CPU load reported due to unsupported number of vCPUs allocated\n- CSCwj48393: ISG: Service with no priority is not working as expected\n- CSCwj48421: After onboarding device on IOTOD, OD was not able to connect with the device\n- CSCwj09284: Unexpected reboot in WLC due to SSL\n- CSCwj40589: Endpoint tracker using DNS does not log the DOWN message when the DNS serverreachability is lost\n- CSCwj26085: [SIT]: control connections in TLS with mode; vsmart & vmanage goes to 'trying' statewith UTD\n- CSCwj29381: Service-policy will not be applied to a new Tunnel interface when sourced usingsub-interface\n- CSCwj45177: A_dmidecode: command not found_error is seen when executing the**show sdwan****certificate validity**command\n- CSCwj34578: NAT46 translations are dropped when router is configured with NAT64 and as a CarrierSupporting Carrier CE\n- CSCwi91887: IPsec PWK SPI mismatch causes cEdge bfd tunnels to remain in down state\n- CSCwi81026: SDWAN BFD Sessions flapping during IPSec Rekey in scaled environment\n- CSCwi59854: The**show sdwan policy service-path**command gives inconsistent results when appname is specified\n- CSCwj02661: UTD signature update fails and device does not record the update\n- CSCwj43905: Unexpected reboot due to QFP-Ucode-Radium failure\n- CSCwj38804: ZBFW FQDN patterns missing from QFP patten-list\n- CSCwj02628: Speed-test does not work for cEdge device\n- CSCwj30334: CVLA ucode crashes when attempting merge on used block\n- CSCwj49941: dns-snoop-agent has TCAM entry with all zeros for some regex patterns\n- CSCwi77159: Some of the objects of CISCO-SDWAN-APP-ROUTE-MIB are not implemented\n- ... \u0438 \u0435\u0449\u0451 6\n\n## IOS-XE 17.15\n\n### \u041d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438\n\n- **Support for Nutanix AHV Hypervisor**: Cisco IOS XE 17.15.5 supports the on-premisesdeployment of Cisco Catalyst 8000V virtual routeron Nutanix AHV (Acropolis Hypervisor) bundled inNutanix AOS version 7.3 (Acropolis Operatingcertified servers**: Cisco IOS XE 17.15.5 supports the deployment ofCisco Catalyst 8000V virtual router on MicrosoftHyperV hypervisor in Microsoft HCI OS version23H2 operating system software that runs onM\n- **Support for RHEL 9.6 hypervisor for KVM hosts**: Cisco IOS XE 17.15.5 supports the deployment ofCisco Catalyst 8000V on Red Hat RHEL 9.6 operatingsystem with KVM hypervisor.\n- **Support for Nvidia Mellanox ConnectX-7 networkinterface cards**: Cisco IOS XE 17.15.5 supports SR-IOV connectivityfor Nvidia Mellanox ConnectX-7 Network InterfaceCards (NICs) that deliver higher throughput andperformance for the supported hypervisors.\n- **Support for DSv5 instances for Microsoft Azuredeployments**: Cisco IOS XE 17.15.3a supports DSv5 instances forCisco Catalyst 8000V deployments in MicrosoftAzure.\n- **Support for N2 instances for Google Cloud Platformdeployments**: Cisco IOS XE 17.15.3a supports n2-standard-8,n2-standard-4 instance types for Cisco Catalyst 8000Vdeployments in Google Cloud Platform.\n- **Support for AWS Local Zones**: AWS Local Zones (LZs) enable you to deploy latencysensitive applications closer to end-users. Startingwith Cisco IOS XE 17.15.1a, you can deploy CiscoCatalyst 8000V on c5d.2xlarge instance\n- **Support for Interface speed setting of 40000**: From Cisco IOS XE 17.15.1a, you can set an interfacespeed of upto 40000 in Cisco Catalyst 8000V. Thisenables some traffic profiles to see higher throughputs.\n- **Support for RHEL 9.2 hypervisor for KVM hosts**: From Cisco IOS XE 17.15.1a, you can deploy CiscoCatalyst 8000V on RedHat RHEL 9.2 operatingsystem with KVM hypervisor.Note that support for RHEL 7.x is deprecated fromthis release.\n- **Support for SUSE Linux\u00ae Enterprise Server 15 SP5**: From Cisco IOS XE 17.15.1a, you can deploy CiscoCatalyst 8000V on SUSE Linux\u00ae Enterprise Server15 SP5 operating system with KVM hypervisor.\n- **Support for VMware ESXi 8.0**: From Cisco IOS XE 17.15.1a, you can deploy CiscoCatalyst 8000V on VMware ESXi 8.0 Update 2hypervisor operating system.Note that ESXi hypervisor version 6.0 will no longerbe supported f\n- **Absolute Path for HTTP or HTTPS File Transfer**: The File Transfer using HTTP or HTTPs featureallows you to copy files from a remote server to yourlocal device, using the**copy**command. From CiscoIOS XE 17.15.1a, you must provide the ab\n- **Cisco Umbrella Scope Credentials**: From Cisco IOS XE 17.15.1a, this feature providesthe ability to define and configure a new single CiscoUmbrella credential for both Umbrella SIG andUmbrella DNS.\n- **Configure DMVPN for SD-Routing Devices**: Cisco DMVPN (Dynamic Multipoint VPN) is arouting technique to build a VPN network withmultiple sites without having to statically configureall devices. This technique uses tunnelling proto\n- **Configure Multiple WAN Interfaces on CiscoSD-Routing Devices Using a Custom VRF**: You can now create a custom VRF that hosts one ormore WAN interfaces. You can extend thisfunctionality to create multiple custom VRFs witheach VRF hosting multiple WAN interfaces. TheseConfiguration Groups**: This release introduces support to configure site tocloud connectivity from an SD-Routing branch toAmazon Web Services using Configuration Groups.This is an enhancement over the existingSD-Routing Devices**: The Flow-level Flexible NetFlow (FNF) feature allowsyou to monitor the NetFlow traffic and view all theflow-level FNF data that is captured includingapplication-level statistics.\n- **Enhanced NAT Management**: From Cisco IOS XE 17.15.1a, the Enhanced NATManagement feature enables network operators tosafeguard system performance by limiting NATtranslations based on CPU usage with theip nattra\n- **Enhancements to Segment Routing over IPv6Dataplane**: From Cisco IOS XE 17.15.1a, Segment Routing overIPv6 dataplane supports these functionalities:\u2022IS-IS Microloop Avoidance\u2022IS-IS Loop-Free Alternate Fast Reroute\u2022IS-IS Topology-Independe\n- **Monitoring Software Defined (SD) - Routing Alarms**: From Cisco IOS XE 17.15.1a, network administratorscan monitor SD-Routing device alarms on CiscoCatalyst SD-WAN Manager. This feature enablesSD-Routing devices to record and store various a\n- **Network-Wide Path Insights on Software Defined(SD) - Routing Devices**: Network-Wide Path Insights (NWPI) is a tool thatallows network administrators to monitor CiscoSD-Routing deployment, identify network andapplication issues, and optimize the network.\n- **SD-Routing License Management**: This release introduces license management supportfor SD-Routing devices. The supported licensingworkflows include license assignment orconfiguration, license use, and license usage report\n- **Classic CLI**: This feature provides support for including Cisco IOSXE CLI configuration commands that do not have anassociated yang model. When used with the currentconfiguration group, Classic CLI prov\n\n### \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 (183)\n\n- CSCwr55240: C8000v experiences critical failure with OMPd process\n- CSCwr31999: Using Azure Portal GUI stop button initiates reload before forcefully shutting downin 10 minutes\n- CSCwp06956: NGFW Policy deployment fails due to long rule name\n- CSCwr03611: The LWM \"memory free low-watermark processor\" value ts changing itself afterupgrade\n- CSCwr83968: Device reloads unexpectedly with static NAT when polling NAT translation data\n- CSCwq79503: Device reloads unexpectedly during startup due to segmentation fault\n- CSCwr19450: EVPN type-2 locally originated route is not withdrawn even if there is no informationabout the MAC/IP in SISF/EVPN Manager/L2RIB.\n- CSCwr19564: After migration event and receiving the route via the EVPN Fabric, locally originatedBGP route and L2RIB route stuck even if the SISF entry and EVPN Manager entrydoes not exist.\n- CSCwq29468: BGP routes are advertised with 0 in AS PATH attribute when replacing ASN\n- CSCwm85778: After VRRS flaps AAA overflows the packet buffers causing an Out of Memory crash\n- CSCwr51490: DMVPN hub routers experiences an unexpected reload after tunnel down in specifictiming scenario\n- CSCws09528: Device experiences an issue where all line interfaces become blocked and unable toforward traffic\n- CSCwn18874: DMVPN spoke crashes at NHRP Process\n- CSCwp17828: uCode core is not getting generated when specific interrupt instructions are executed\n- CSCwo14975: Memory leak is seen in DNS Proxy; SKA triggers unexpected reloads\n- CSCwp67808: ZBFW invalid zone drops after upgrade\n- CSCwn85623: Missing Calling-Station-ID in radius messages\n- CSCws15533: IPv6 stale entries are not expiring\n- CSCwr05809: PKI: Discard CRL of greater than 5MB. Large CRL processing can take significanttime causing CPUHOG and subsequent crash if it continues\n- CSCwq22471: Device unexpectedly reboots when importing CA chains\n- CSCwr10159: Even after the 5-minute \u2018block-for\u2019 timer expires, ACL remains active on the VTYlines, preventing SSH access\n- CSCwq26347: Device accepts under object-group service tcp port range where the end port is lessthan the starting port\n- CSCws30834: Device ignores the keepalive command under the SIG tunnel interface\n- CSCwq32935: After running the**show policy-map type inspect zone-pair sessions**command,memory increase for a couple of hours until it crashes\n- CSCwk55051: IR1101: polaris_vconfd_cfgpull_t denials observed during config push trigger\n- CSCwr02964: Initial Authc/Authz does not go to first TACACS server even when the server is alive\n- CSCwp06965: SNMPv3 user with encrypted password is not seen in**show run**command withoutre-configuring all SNMPv3 configurations\n- CSCwr69613: cpp_cp_svr crash if CEF OCE points to MPLS-SR-Tunnel interface\n- CSCwm01063: Device unexpectedly reload due to segmentation fault on IP SLA DynHostNameprocess\n- CSCwr09289: Device crashes when collecting backtrace for callsite\n- ... \u0438 \u0435\u0449\u0451 153\n\n### \u041e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0431\u0430\u0433\u0438 (67)\n\n- CSCws51814: Increased CPU utilization caused by BGP scanner process\n- CSCwo60972: Device shows high memory usage as `cpp_ha_top_leve`keeps increasing\n- CSCws75443: IPv6 neighbour table entries are not timing out causing High TCAM utilisation whenno default timers are configured\n- CSCwr00088: Add CLI to change the per MPLS label CEF statistics query interval on FMAN FP\n- CSCws71815: Behaviour change for the**ip dhcp use class**command on device\n- CSCws35452: Device attempts DHCP relay instead of local assignment leading to clients losingconnectivity\n- CSCwq08151: Device experiences unexpected reload due to DBGD process\n- CSCwo57783: A_NHRP Encap Error for Purge Request_message populates on spoke despite correctrouting at HUB\n- CSCwp28915: SNMP walk fails to consistently return tunnel names due to incomplete tunnel setup\n- CSCwh91039: C8000V: High system CPU load is reported due to unsupported number of vCPUsallocated\n- CSCwm71868: Stopping C8000V in Azure results in the device reloading and stopping after 10 minutes\n- CSCwo45527: C8000V: Hot add and delete do not work in AWS\n- CSCwn85623: Missing Calling-Station-ID in radius messages\n- CSCwn92976: PPP is not establishing when L2tp over ipsec\n- CSCwn60286: IOS-XE: Memory leak is observed in IPSEC/IKE session bringup with cert-basedauthentication\n- CSCwn44339: Router crashes due to failed DLC license conversion when contacting CSSM\n- CSCwo47118: Crash observed when clearing L2TP tunnels with the**clear vpdn tunnel l2tp****<ID>**command\n- CSCwn48140: Failing to ping to service-side IPv4 interface from remote cEdge with IPv6 tunnel andLTE cellular\n- CSCwm33545: FlexVPN - IP address assigned to spoke changes to unassigned\n- CSCwj65057: BFD sessions stuck in down state due to SA_NOT_FOUND\n- ... \u0438 \u0435\u0449\u0451 47\n\n## IOS-XE 17.16\n\n### \u041d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438\n\n- **Configure Source Interface for High Speed Logging**: From Cisco IOS XE 17.16.1a, you can configuresource interfaces for High-Speed Logging (HSL) andSysLog for security logging in Cisco SD-WANManager. You can also enable HSL for your firewall\n- **Disablement of Weak SSH Algorithms**: From Cisco IOS XE 17.16.1a, the ssh-rsa algorithmis disabled by default on port 22 to improve security.\n- **Enhanced Support for Binary Tracing**: From Cisco IOS XE 17.16.1a onwards, you canretrieve events sent to the IOS process in the binarytrace using the**show logging process IOS module****nhrp**command, without enabling DMVPN ev\n- **Enhancement to the**show cellular 0/x/0 connection**Command**: From Cisco IOS XE 17.16.1a, the output for the**show****cellular 0/x/0 connection**command includes thefollowing parameters:\u2022 Access Point Name (APN), and\u2022 Cellular Link Uptime\n- **Enhancements to Segment Routing over IPv6Dataplane**: From Cisco IOS XE 17.16.1a, Segment Routing overIPv6 dataplane supports these functionalities:\u2022 eBGP Inter-AS\u2022 PCE-Delegated Path Computation\u2022 Enhancements to OAM Traffic Engineering\n- **Improved Workflow to Configure Branch ConnectSolution**: This release introduces a simplified guided workflowto ease each step of configuring site to cloudconnectivity.\n- **Monitoring Application Performance on SD-RoutingDevices**: In Cisco IOS XE 17.16.1a, you can now monitor TCPand RTP traffic on DMVPN tunnels for IKEv2 trafficusing Application Response Time (ART) monitor andMedia monitor respectively. This functio\n- **Monitoring Crypto VPN Solutions on SD-RoutingDevices**: If you have configured crypto VPN solutions such asDMVPN, FlexVPN or Layer 3 VPNs on SD-Routingdevices, you can use Cisco Catalyst SD-WANManager to visualize the VPN solution deployed inSD-WAN Manager enables site-to-site speed tests tomeasure bandwidth between devices over DMVPNtunnels. These tests check upload speed from the\n- **Support for Enrollment over Secure Transport (EST)**: From Cisco IOS XE 17.16.1a onwards, you can useHTTP-based authentication for EST Client Support,using the**enrollment http username****[http_username] password [http_password]**command\n- **UTD Container Management for SD-Routing Devices**: When Cisco IOS-XE autonomous devices transitionto Cisco SD-Routing mode, the Unified ThreatDefense (UTD) Container Migration feature ensuresthat existing container functionalities are pres\n\n### \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 (16)\n\n- CSCwn07540: C8000v crashed due to IOSXE_INFRA-2-FATAL_NO_PUNT_KEEPALIVE.\n- CSCwm56800: FIA trace packet decode displays incorrect value for fragmentation offset.\n- CSCwk78018: SD-ROUTING: Yang model does not handle properly default ikev2 authorisationpolicy.\n- CSCwm67178: Cannot configure MD5 for the hash under the ikev2 proposal when compliance shieldis disabled.\n- CSCwk42493: Cellular interface in last-resort mode should be admin up, line protocol down.\n- CSCwk62954: Multiple \"match address local interface \" not pushed under crypto profile.\n- CSCwk79606: PKI trustpoint password command only allows encryption type 0 and 7 on all IOS XEplatforms.\n- CSCwj33723: Config not synced between active and 3rd member of stack.\n- CSCwm48459: Software crash with critical process vip_confd_startup_sh fault on rp_0_0 (rc=6).\n- CSCwm50619: Data policy commit failure occurs when export-spread is enabled in Cflowdconfiguration.\n- CSCwn29062: Traceback log output with \"DATACORRUPTION\" error logs.\n- CSCwm62981: Device crashes with PKI \"revocation-check ocsp none\" enabled.\n- CSCwm70520: LNS tracebacks generation.\n- CSCwm74317: Syslog message'%CRYPTO_ENGINE-4-CSDL_COMPLIANCE_RSA_WEAK_KEYS:RSA keypairCISCO_IDEVID_CMCA_SUDI.\n- CSCwm54978: Selinux: Subject polaris_iosd_t denials 2024-09-16 06:43:22.\n- CSCwm77426: Unexpected reload in NHRP, cache freed prior to function call.\n\n### \u041e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0431\u0430\u0433\u0438 (17)\n\n- CSCwn09185: Traffic loss observed on minimal values with time based policy-map.\n- CSCwn26353: BFD sessions via TLOC-Ext do not come up when IPv6 is dynamically changed.\n- CSCwn40906: Router crash observed when optimizing encrypted traffic with DRE.\n- CSCwm71639: cpp_cp_svr crash noticed when configured service-policy to a dialer interface.\n- CSCwm73195: C8000V 'show interfaces' counters are incorrect and unreasonably large.\n- CSCwn02485: Fragmented UDP SIP packets dropped on PE with IpFragErr on IP VFR and MPLSenabled tunnel interface.\n- CSCwn24226: GETVPN mismatch in GMs reported across COOP due to KEK sync issue betweenprimary & secondary KSs.\n- CSCwn34457: Post power cycle, unable to login to router due to error authentication failed.\n- CSCwn19586: Certificate-based MACsec flapping when dot1x reauth timers are set and after reload.\n- CSCwk20995: PPPoE session with sub-interface getting stuck after reboot.\n- CSCwm87270: MKA session down with \"ICV Verification of a MKPDU failed for\" error on one ofthe interfaces.\n- CSCwn39447: Speed test might work abnormally after changing system-ip.\n- CSCwm43089: Low throughput with C8000v.\n- CSCwm71868: Stopping C8000v in Azure results in device reload, then stop after 10 minutes.\n- CSCwn35476: cflowd source interface for sub-interface does not get pushed.\n- CSCwm28388: Traceback seen - EVENTLIB-3-CPUHOG - fman_fp_image.\n- CSCwo39530: Applied changes in the filter of pcap fileds are not reflecting after refreshing.\n\n## IOS-XE 17.18\n\n### \u041d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438\n\n- **Ease of set up**: Support for MicrosoftAzure on MANAEnabled Hosts\n- **Ease of set up**: Support for MicrosoftHyperV on Azure Localcertified servers\n- **Ease of set up**: Support for NutanixAHV Hypervisor\n- **Ease of use**: Support for RHEL 9.6hypervisor for KVMhosts\n- **Ease of use**: Support for NvidiaMellanox ConnectX-7network interfacecards\n- **Security**: Resilient Infrastructure\n- **Software Reliability**: High availability forDHCP servers\n- **Ease of Setup**: IPv6 Rule and Rule SetSupport in SecurityPolicies\n- **Upgrade**: IPv6 GRE-TP tunnel asprotected link supportfor SRv6 TI-LFA withIS-IS\n- **Upgrade**: IPv4 GRE-TP tunnel asprotected link supportfor SR-MPLS TI-LFAwith OSPFv2\n- **Upgrade**: IPv4 GRE-TP tunnel asprotected link supportfor SR-MPLS TI-LFAwith IS-IS\n- **Upgrade**: Directional attributecompliance for SIPRECresponses\n- **Security**: Security warnings forusage of legacy TLSand associated weakerciphers \u2013CUBE andSRST\n- **Ease of Use**: Support fordeployment of Catalyst8000V in Oracle CloudInfrastructure\n- **Ease of Use**: Support for N4 and N2compute instancefamilies in Googlecloud Platform\n- **Ease of Use**: Support for D[s]_v5compute instancefamily in Microsoft\n- **Software Reliability**: Support for NvidiaMellanox ConnectX-6network interfacecards\n- **Ease of Use**: Support for Ubuntu22.04 LTS\n- **Software Reliability**: Throughputperformanceoptimizations\n- **Licensing Process**: Licensing compliance,reporting, andnotificationenhancements\n- **Ease of Use**: Hosted Edge Servicesfor SD-RoutingDevices\n- **Ease of use**: Managing NGFWPolicies from SecurityCloud Control\n- **Security**: Custom IPS signaturesets\n- **Ease of Use**: CertificateManagement on SD-Routing Devices\n- **Upgrade**: MVPN Ingress\n- **Replication (IR) overSRv6**: network. It simplifies multicast deployment by using the existing SRv6unicast infrastructure as the underlay. With this feature, the ingress PErouter receives multicast traffic and creates a s\n- **Upgrade**: SRv6 Path MTUDiscovery\n- **Upgrade**: SRv6 Flex-Algo withTI-LFA and uLoopAvoidance\n- **Upgrade**: MVPN IngressReplication (IR) overSRv6\n- **Licensing Process**: Product Analytics forrouters\n- **Ease of Use**: Enhanced support forserviceability in SIPrecording\n- **Upgrade**: Third-Party GUIDcapture for correlationbetween call transfersand SIP-basedrecording\n- **Upgrade**: IOS UC apps reportssmart licensing flexsubscriptionentitlement tag\n\n### \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 (41)\n\n- CSCwr42574: C8Kv MLX5 main interface ping fails if subinterfaces are configured\n- CSCws72902: C8200/C8300/C8500L: Overrun drops due to uneven GRE traffic distribution across data plane cores\n- CSCwr90843: SD-WAN Edge: Device may reload unexpectedly under heavy IPSec Traffic Load\n- CSCwr72709: Router crash in TDM-TDM call when debug voip fpi enabled\n- CSCws66278: Unable to install Cisco PKI controller certs on MT overlay\n- CSCws68039: C8200: Unable to configure HSRP Groups up to the maximum limit\n- CSCws28994: CPP crash while processing QoS rate profile\n- CSCwr95551: c8kv crashes when configuring SSL VPN with Policy-Based Routing (PBR) and NAT\n- CSCwr84985: dmiauthd process crashes, due to which the configuration does not sync between startup-config andthe running-config.\n- CSCws32991: C1100TGX does not honor jumbo MTU on WAN ports after reboot\n- CSCws95993: Seeing T1 license in use even after configuring T2.\n- CSCws30718: Dataplane Crash Observed on CGN NAT Scale Router after \"clear ip nat translation *\"\n- CSCwt18839: Segmentation Fault in cpp_cp_svr while Printing FIA Trace Data\n- CSCws77372: Software crash with fman_fp core due to NAT-related show commands\n- CSCwr44547: SDWAN Manager: Reporting abnormal loss value for tunnel stats in the UI\n- CSCws80232: SD-WAN Edge: Zone-Based Firewall Not Programmed Correctly Resulting in Class-Default Match\n- CSCwt46335: MAP-E: stop sending IPv4 traffic during MAP rule refresh\n- CSCwq60752: Catalyst 8000 FP Crash After Clearing NAT Translations\n- CSCws58529: When the name server is specified using IPv6, half entries are created due to unintended NAT.\n- CSCws76668: Memory leak udner \"fman_fp_image\" on CAT8500 routers when NAT is enabled.\n- CSCwt22873: High QFP Caused by \"all-host\" Limit in - Carrier Grade NAT mode\n- CSCwr42950: On-demand tunnels in SD-WAN do not expire when Universal Mobile Telecommunications System(UMTS) is enabled.\n- CSCwq51935: A NAT64 static entry is removed when a command to delete a non-existent entry is applied.\n- CSCwe19394: The device may boot up with the previous packages configuration file due to a power outage.\n- CSCwr77958: Network-Based Packet Inspection (NWPI) is not capturing self-generated syslog traffic.\n- CSCwj61730: The router may crash when Security Group Tag (SGT) caching is removed from an interface.\n- CSCwq77322: The router sends a 2-byte packet for the FLOW_SAMPLER_RANDOM_INTERVAL field instead of a 4-byte packet.\n- CSCwr24031: After an upgrade, the SD-WAN service tracker in a VRF instance may select the source IP addressfrom the global routing table when Multiprotocol Label Switching (MPLS) Inter-AS Virtual PrivateNetwork (VPN) option B is configured.\n- CSCwr49794: Integrated Services Router (ISR) exporters with Encrypted Traffic Analytics (ETA) enabled generateinvalid template data errors in Secure Network Analytics (SNA).\n- CSCwq98206: The Enhanced Policy-Based Routing (EPBR) set interface action is missing after a reboot.\n- ... \u0438 \u0435\u0449\u0451 11\n\n## IOS-XE 17.6\n\n### \u041d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438\n\n- **AWS Metadata Version 2**: Earlier, when you deployed Cisco Catalyst 8000V onAmazon Web Services, only version 1 or V1 wasapplicable for the**Metadata Accessible**field. Startingfrom Cisco IOS XE Release 17.6.1a, me\n- **Automatic Mapping of Cisco CSR 1000V or CiscoISRv Licenses to DNA Tier Licenses**: The Cisco Smart Software Manager (CSSM) manageslicenses of all the Cisco devices including Cisco CSR1000V and Cisco ISRv, which have an end-of-lifemilestone of year 2022. To continue to ke\n- **Support for ESXi 7.0**: Cisco Catalyst 8000V supports ESXi 7.0 and 6.7 fromCisco IOS XE 17.6.1a. Note that support for ESXi6.5 has been deprecated.\n- **Zone-Based Firewall Policy Reclassification**: The Zone-Based Firewall (ZBFW) PolicyReclassification feature is an enhancement to theZone-Based Firewall feature. With this enhancement,any changes you make to the policy configuration on\n- **Asymmetric Lease for DHCPv6 Relay PrefixDelegation**: This feature allows you to manage or change the leaserenewal. It provides options to force renewal of leaseand also detects when the lease is nearing the expirydate.\n- **Upgrade to pyang version 2.x**: The updated pyang plugin version 2.x fixes existingissues such as XPATH validation and upstream pyangissues. Additionally, this version reports all errors inthe YANG models to the users an\n- **WebSocket Based Forking for Cloud Speech Servicesin CUBE**: From Cisco IOS XE Bengaluru 17.6.1, CUBE canuse WebSockets to handle media forking in a CiscoUnified Contact Center Enterprise (UCCE) solutiondeployment with Cloud Speech Services. WebSock\n- **Support for OPUS Codec Transcoding in CUBE**: From Cisco IOS XE 17.6.1 onwards, CUBE cantranscode Opus encoded media streams. Because Opuscodecs perform very well over the Internet, this featureis particularly beneficial when routing \n- **Class of Restriction YANG Configuration Modelupdates:**: YANG models were developed for the following CLIsas part of the Class of Restriction configuration:\u2022 dial-peer voice  pots/voip corlist\u2022 dial-peer voice vad\u2022 dial-peer cor custom \n- **Snapshots for PAK Licenses**: The library that manages product activation key(PAK) licenses is being deprecated from the softwareimage. To continue supporting and honouring anyexisting PAK licenses you may have, the sy\n\n### \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 (156)\n\n- CSCwh73350: Device keeps crashing when processing a firewall feature\n- CSCwh99399: FTMD crash observed in ENCS platform while running PWK suite\n- CSCvo01546: NHRP reply processing may dequeue an unrelated request\n- CSCwh49644: CSDL Compliance failure: Use of 3DES by IPSec is denied\n- CSCwi01046: PoE module does not provide enough power to bring the ports after an unexpectedreload\n- CSCwh01425: ITU channel configuration does not work\n- CSCwh20577: Crashed by TRACK client thread at access; invalid memory location\n- CSCwh70449: PMTUD incorrectly converges without attempting to learn a higher MTU\n- CSCwf34171: The**configure replace**command fails due to the`license udi PID XXX SN:XXXX`lineon IOS-XE devices\n- CSCwh36801: Crash in IP input process during tunnel encapsulation\n- CSCwh87343: Cisco IOS XE Software Web UI Privilege Escalation Vulnerability.\n- CSCwf70596: Fix VLAN replay for SRIOV i40e interface after link flap\n- CSCwe09745: Memory leak in Pubd when continuously trying to connect to remote peer\n- CSCwd63063: Standby BGP session receives incorrect routes from Active\n- CSCwe19084: NAT: Traffic is not translated to the same global address though PAP is configured\n- CSCwd90168: Unexpected reload after running the**show voice dsp**command while an ISDN calldisconnects\n- CSCwe60059: Crash when using dial-peer groups with STCAPP\n- CSCwe36122: ISIS crash when performing TI-LFA calculation\n- CSCwf59173: Segmentation fault at IPv6 BGP backup route notification\n- CSCwf00769: L2RIB thread crash after removing EVPN member from bridge domain\n- CSCwf83301: Device displays incorrect values for Call Quality statistics(RTT/MOS)\n- CSCwe72462: Username/Password under voice register pool gets deleted post CME reload\n- CSCwe25006: An unexpected removal of the underlay S,G entry resulting ~20s disruption in themulticast flow SDA\n- CSCwe21042: NBAR DP traceback - \"Failed to process non-graph batch message: wrong batch id\"is logged\n- CSCwf47796: NHRP cache entries flood matching a /32 default route\n- CSCwe32862: Router IOS-XE crashes while executing AES crypto functions\n- CSCwf09758: Watchdog crashes while importing a large CRL file into the device\n- CSCwf67564: Memory Leak at process SSS Manager\n- CSCvy87339: Telemetry subscription fails to connect to grpc receiver when multiple XPATH changesare made to it\n- CSCwe41946: DTMF is failing through IOS MTP during call on-hold\n- ... \u0438 \u0435\u0449\u0451 126\n\n### \u041e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0431\u0430\u0433\u0438 (144)\n\n- CSCwe92277: Performance degradation on C8000V hosted in Azure cloud when the traffic flow isasymmetrical\n- CSCvz96485: Azure: C8000V NETVSC PMD DPDK Support\n- CSCwe37016: The output rate on the port channel does not match the total physical interface outputrate\n- CSCwh14083: High CPU due to MPLS MIB poll\n- CSCwd16559: ARP request to reroute nexthop IP is not triggered if ARP entry not in ARP table\n- CSCwf99647: SRTP cipher failure for RTCP packets when AEAD_AES_256_GCM Cipher is usedfor call\n- CSCwh21376: Unable to disable the call-home feature on devices\n- CSCwe93070: Tracebacks seen when configuring VRF with 32 characters or more\n- CSCwf80400: IOS XE Router may experience unexpected reset while executing the**show utd engine****standard statistics**command\n- CSCwd46688: Unable to apply the Service Policy on tunnel interfaces\n- CSCwf55243: Device is crashing while adding a trustpoint to the router\n- CSCwe29301: AOM objects (FMAN_OBJ_ACL_REF) might be missing intermittently after MMAflapping\n- CSCwe90119: Device-tracking database entry stuck on UNKNOWN state with temporal mac address.\n- CSCwh15021: QFP crash when configuring S2S VPN (IKEv2/IPSEC) with Azure vWAN/HUB\n- CSCwf55145: SFP transceiver DOM does not work after some time; however interface forwards thetraffic as expected\n- CSCvu85539: Unable to delete wrong interface name in C8000V\n- CSCwd97212: UNIX-EXT-SIGNAL: Segmentation fault(11), Process = IOSXE-RP Punt ServiceProcess\n- CSCwe14885: VPN is established although the peer is using a revoked certificate for authentication\n- CSCwc67429: CTS PI changes for adding new binding source priority for LISP sourced local hostbindings\n- CSCwh45169: Unexpected reboot while dispalying information from a cleared SSS session\n- ... \u0438 \u0435\u0449\u0451 124\n\n## IOS-XE 17.7\n\n### \u041d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438\n\n- **Factory-installed Trust Code**: For new hardware and software orders, a trust codeis now installed at the time of manufacturing.You cannot use a factory-installed trustcode to communicate with CSSM.**Note**\n- **Installing Cisco Catalyst 8000V in an OpenStackEnvironment**: Starting with the Cisco IOS XE Release 17.7.1a, youcan now install Cisco Catalyst 8000V on OpenStacksoftware (Train release) which acts as a hypervisormanager. The OpenStack Train release \n- **Flexible NetFlow Support on BD-VIF**: This feature introduces Flexible NetFlow (FNF)support on Bridge Domain Virtual IP Interfaces(BD-VIF). Flexible Netflow provides improvedoptimization and performance, enhanced security, and\n- **Marking Packets Sent Via ATM Interface WithCOS(BITP) Value**: This feature introduces the \u2018set cos 3\u2019 command usingwhich you can configure the router to mark thepackets with a cos (bitp) value. The marked packetsare indicators of priority for the use\n- **Multicast - mcast group calculation**: The**show ip multicast overlay-mapping**commanddisplays an underlay group address from the overlaygroup address which is used to troubleshoot orconfigure the network. The output includes t\n- **Secure Web Socket-based Media Forking on Cisco4431, 4451-X, and 4461 Integrated Services Routers**: From Cisco IOS XE Cupertino 17.7.1a, CUBE canuse WebSockets to handle media forking with CloudSpeech Services on the Cisco 4431, 4451-X, and 4461Integrated Services Routers platforms apart\n- **YANG Configuration Models for CUBE**: From Cisco IOS XE Cupertino 17.7.1a, YANGmodels are now available to configure and manageCUBE.\n- **Converting IOS Commands to XML**: This feature helps to automatically translate IOScommands into relevant NETCONF-XML orRESTCONF/JSON request messages.\n- **ZTP Configuration through YANG**: ZTP is enabled through YANG models whenNETCONF is enabled.\n- **Ability to save authorization code request and returnin a file and simpler upload in the CSSM Web UI**: If your product instance is in an air-gapped network,you can now save a SLAC request in a file on theproduct instance. The SLAC request file must beuploaded to the CSSM Web UI. You can the\n- **Account information included in the ACK and showcommand outputs**: A RUM acknowledgement (ACK) includes the SmartAccount and Virtual Account that was reported to, inCSSM. You can then display account informationusing various**show**commands. The accountdesktop) running Linux.See:CSLU,Workflow for Topology: Connected toCSSM Through CSLU,Workflow for Topology:CSLU Disconnected from CSSM\n- **Factory-installed trust code**: For new hardware and software orders, a trust codeis now installed at the time of manufacturing.You cannot use a factory-installed trustcode to communicate with CSSM.**Note**See:Ov\n- **RUM Report optimization and availability of statistics**: RUM report generation and related processes havebeen optimized. This includes a reduction in the timeit takes to process RUM reports, better memory anddisk space utilization, and visibilit\n- **Support for trust code in additional topologies**: A trust code is automatically obtained in topologieswhere the product instance initiates the sending ofdata to Cisco Smart License Utility (CSLU) and intopologies where the product instanc\n- **Support to collect software version in a RUM report**: If version privacy is disabled (**no license smart****privacy version global configuration**) command,the Cisco IOS-XE software version running on theproduct instance and the Smart Agent v\n- **Tier- Based Licenses**: You can now configure tier-based throughput valuesif the license PID is tier-based. For example, for PIDDNA-C-T0-E-3Y, you can configure Tier 0 (T0) asthe throughput value on the platform.\n\n### \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 (39)\n\n- CSCwa17720: Router rebooted due to watchdogs after issuing the show crypto mib ipsec command\n- CSCwa11150: E1 configurations (under Serial interface) lost after reload.\n- CSCwa76260: IKEv2 Deprecated Ciphers denied by Crypto Engine CDSL - PSB Security Compliance -DES, 3DES, DH1/2/5\n- CSCwa37006: VXE: IOSd watchdog crash while printing to syslogs to console\n- CSCwa15085: Router crash due to stuck thread with appnav-xe dual controller mode.\n- CSCvx28426: Router may crash due to Crypto IKMP process\n- CSCwa80474: IKEv2 Deprecated Ciphers denied by Crypto Engine CDSL - PSB Security Compliance -MD5, SHA1\n- CSCwa15132: DMVPN over DMVPN with IPSEC - return packets are dropped with BadIpChecksum CSCwa01293 ZBFW: Optimized policy traffic failure due to OG edit error CSCwa18177 Flapping bidirectional/unidirectional packet capture option with ipv4 filter for long time failed\n- CSCvy34805: Consecutive Multicast Crashes in device\n- CSCvy38743: CISCO-CLASS-BASED-QOS-MIB doesn't work with LTE Cellular interface on the routerafter reload\n- CSCvy92696: Cosmetic: `Logging host` configuration inconsistent between sdwan and IOS configuration\n- CSCvz30670: Qos issue on IPv6 Virtual access (tunnel ipsec) interface\n- CSCvz14745: Memory leak seen when using DNS with IP SLA\n- CSCvy27721: IOS-XE Router may experience unexpected reboot with X25 RBP\n- CSCvz98446: Device crashes when changing Debug Level\n- CSCvy45095: IPv6 ebgp multihop session remains in \"idle\" state after removal and recreation of the config\n- CSCvy72210: CIsco IOS XE crashes after executing 'show flowspec ipv4' command\n- CSCvy53885: ip pim rp-candidate command removed after reload when group list is configured\n- CSCvz21812: QoS policy update with \"random-detect dscp\" configuration get rejected on device side\n- CSCvy54964: Large tx/rx rate on Dialer interface in show interface output.\n- CSCvy23400: MC-LAG feature cannot preserve administratively shut down sub-interfaces\n- CSCvy08748: OSPF summary-address isn't generated though candidate exists\n- CSCvy99942: Netconf: Logging to syslog stops working in certain scenarios\n- CSCvy93946: Removal of SHA-1 HMAC Impacting ability to SSH\n- CSCvy83154: MAG is not detecting the path UP after several reboots\n- CSCvw16093: Secure key agent trace levels set to Noise by default\n- CSCvy29106: Device crashed on a Eigrp enabled device when Netconf get operation was used\n- CSCvw13682: L3 connected lite session not coming up , stuck in data-plane(qfp)\n- CSCvt66541: Crypto PKI-CRL-IO process crash when PKI trustpoint is being deleted\n- CSCvx62167: Route-map corruption when configured using Netconf with ncclient manager\n- ... \u0438 \u0435\u0449\u0451 9\n\n### \u041e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0431\u0430\u0433\u0438 (19)\n\n- CSCvz65764: Peer MSS value showing incorrect CSCwb25137 [XE NAT] Source address translation for multicast traffic fails with route-map CSCwb78423 Excessive packet loss observed during DMVPN tunnel flapping CSCwb66749 When configration ip nat inside/outside on VASI intereface, the ack/seq number is abnormal CSCwb55683 Large number of IPSec tunnel flapping occurs when underlay is restored CSCwb74821 Yang-management process confd is not running CSCwa13553 C8000V QFP core due to NAT scaling issue CSCwb11389 NAT translation stops suddenly; ip nat inside doesn't work CSCwb51238 Router reloads two times unexpectedly with the netflow show command CSCwb34625 Static ip from bootstrap config overwritten by dhcp on fresh install CSCwb25913 After configuring match input-interface on class-map, router goes into a reboot loop CSCwa08378 C8000V Day0 ZTP ignores crypto configuration before licensing CSCvz89354 Router Running 17.x.x crashes due to CPUHOG when walking ciscoFlashMIB CSCwb08186 E1 R2 - dnis-digits CLI not working CSCvz91309 Crash due to IOSXE-WATCHDOG due to management port traffic storm CSCwb39822 MLX5 Driver Error on a C8000V in Microsoft Azure causes excessive debug printing CSCwb12647 Device crash for stuck threads in cpp on packet processing CSCwa48512 CoR intercepted DNS reply packets dropped with drop code 52 (FirewallL4Insp) if UTD also enabled CSCwb41907 CPP uCode crash due to ipc congestion from dp to cp CSCvz99455 36% Degradation seen with FNF on C8000V 1v CPU KVM CSCwa67398 NAT translations do not work for FTP traffic in the device CSCwb76509 Assert failure while showing FTM (Forwarding Traffic Manager) data in NH TYPE switch case CSCwa84919 \"Revocation-check crl none\" does not failover to NONE DNAC-CA CSCwb78173 CSDL failure: IPSec QM Use of DES by encrypt proc is denied CSCwb46649 NAT translation dont show (or use) correct timeout value for an established TCP session\n- CSCwb68897: \"Total output drops\" counter in \"show interface\" on Port-channel doesn't work properly\n- CSCwb02142: Traceback: fman_fp_image core after clearing packet-trace conditions\n- CSCwb29362: Evaluation of IOS-XE for OpenSSL CVE-2022-0778 and CVE-2021-4160\n- CSCvz34668: Static mapping for the hub lost on one of the spokes\n- CSCwa74499: ZBFW sees the SIP ALG incorrectly, dropping traffic and resetting connection\n- CSCwb76866: CSDL failure: Use of MD5 by IPSEC key engine is denied\n- CSCwa68540: FTP data traffic is broken when UTD IPS enabled in both service VPN\n- CSCwb79138: Device drops GRE tunnel packets after the upgrade starts\n- CSCvz92954: C8000V UTD Container doesn't come up after a reboot\n- CSCwa07494: IPSec tunnel not passing traffic when IPSec tunnel is sourced from VASI interface\n- CSCwa46001: VRRP traffic sent while the device boots will congest the interface queue causing taildrops\n- CSCwa08378: C8000V Day0 ZTP ignores crypto configuration before licensing\n- CSCvz72871: Multicast traffic received over DMVPN tunnel are dropped on RP and not forwardeddownstream.\n- CSCwa27659: virtual VRRP IP address unreachable from the BACKUP VRRP\n- CSCvz41067: IP Community-list config out of sync in sdwan and ios-xe\n- CSCwa22665: Memory leak in scaled EIGRP DMVPN implementation due to EIGRP: mgd_timer\n- CSCvz99455: 36% Degradation seen with FNF on C8000V 1v CPU KVM\n- CSCvz55553: BGP routes refreshing in the routing table after adding \"bgp advertise-best-external\"\n\n## IOS-XE 17.8\n\n### \u041d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438\n\n- **Support for Software Media Termination Point**: A Software Media Termination Point (SWMTP) isan essential component of large-scale deploymentsof Cisco Unified Communications Manager (CUCM).In these deployments, the SWMTP bridges the med\n- **Show Command to Debug Packet Drops**: The Show Drops command introduced in this releaseallows you to troubleshoot the root cause for packetdrops and identify:\u2022 The reason for the packet drop.\u2022 The dropped interface with Rx\n- **Download AnyConnect Profiles with IPSec IKEv2VPN**: This feature allows you to configure Internet ProtocolSecurity (IPSec)-Internet Key Exchange (IKEv2) VPNto download AnyConnect profiles over SSL, forIOS-XE headends.\n- **Support for bidirectional debugging**: You can now enable bidirectional debugging of trafficusing debug platform condition match command.\n- **mTLS Client CN-SAN Validation**: It is now possible to verify a client through thevalidation of the common name or subject alternatename fields in its certificate.\n- **Unified Secure SRST: SHA2-Cipher-only Mode**: To ensure that only the most robust cipher suites areused, Secure SRST (SCCP) may now be configuredto only use TLS 1.2 Cipher Suites. Secure SIP SRSTnow supports the granular control of ci\n- **Unified Secure SRST: SIP oAuth Client Registration**: IP Phones, Jabber clients, and the Webex app maynow failover and register to Secure SIP SRST usingOAuth authentication.\n- **VRF-aware Listen Port per Tenant**: SIP trunks configured using the CUBE tenant featuremay now be configured with a specific listen port,allowing more flexibility in routing inbound calls tothe correct trunk. This feature ma\n- **IPSec YANG model**: This feature introduces an YANG model for the showplatform hardware qfp active feature ipsec statecommand. This model displays the Cisco QuantumFlow Processor (QFP) IPsec state information\n- **YANG Model Version 1.1**: Cisco IOS XE Cupertino 17.8.1a uses the YANGversion 1.0; however, you can download the YANGversion 1.1 from GitHub athttps://github.com/YangModels/yang/tree/master/vendor/cisco/xefolde\n\n### \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 (5)\n\n- CSCvz99455: 36% Degradation seen with FNF on C8000V 1v CPU KVM\n- CSCwa15132: DMVPN over DMVPN with IPSEC - return packets are dropped with BadIpChecksum\n- CSCwa07494: IPSec tunnel not passing traffic when IPSec tunnel is sourced from VASI interface\n- CSCwa08378: C8000V Day0 ZTP ignores crypto configuration before licensing\n- CSCwa13553: C8000V QFP core due to NAT scaling issue CSCvz34380 Multiple Cisco Products Snort Modbus Denial of Service Vulnerability CSCwa92411 Slowness issues caused by intermittent traffic drop on Cisco ISRv ingress from GRE tunnel CSCwa47219 Crash on ipv4_nat_get_all_mapping_stats due to NULL pointer of mapping_hash_table CSCwb11389 NAT translation stops suddenly(ip nat inside doesn't work) CSCvz98373 ZBFW : FirewallPolicy drops seen with RTSP traffic in steady state CSCwa26412 ZBFW: OG lookups are missing from device for optimized policy CSCwa36699 Prefetch CRL Download Fails CSCvz74773 Discrepancies in CLI and GUI interface details (Truncating interface numbers) CSCvt15177 Certificate Signing Request made by IOS-XE never show the Subject Alternate Name CSCwa67398 NAT translations do not work for FTP traffic in the device CSCvy78501 AAR not working properly as configured SLA classes are not shown under app-route stats CSCwa51443 Incorrect check of the TCP sequence number causing return ICMP error packets to drop (ThousandEyes) CSCwa93930 \"alarms alarm bfd-state-change syslog\" command is getting rejected while reconfiguring the device. CSCvz80101 Policy XML pruning without ConfD dependency CSCvz34668 Static mapping for the hub lost on one of the spokes CSCwa15085 Router Crash due to Stuck Thread with appnav-xe dual controller mode.\n\n### \u041e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0431\u0430\u0433\u0438 (2)\n\n- CSCwb13850: License boot level not detected with Day0 after C8000V boots on the latest polaris image CSCwb34625 C8000V auto mode: static IP from bootstrap config overwritten by dhcp on fresh install CSCwb13820 C8000V crashes at high scale with IPSEC and heavy features configured CSCvz28950 DMVPN phase 2 connectivity issue between two spokes CSCvz65764 Peer MSS value shows incorrect CSCwb11389 NAT translation stops suddenly(IP nat inside doesn't work) CSCwa84919 \"Revocation-check crl none\" does not failover CSCwb42807 After Enforce Software Version (ZTP) completes successfully, it automatically rolls back CSCwb04815 NHRP process takes more CPU with IP nhrp redirect configured CSCwa72273 ZBFW drops return packets post device upgrade CSCwb25137 [XE NAT] Source address translation for multicast traffic fails with route-map\n- CSCwb18223: SNMP v2 community name encryption problem CSCwb55683 Large number of IPSec tunnel flapping occurs when underlay is restored CSCwb12647 Device crashes for stuck threads in cpp on packet processing CSCwb24123 Registration of spoke fails with dissimilar capabilities CSCwb21645 NAT traffic gets dropped when default route changes from OMP to NAT DIA route CSCwa08847 ZBFW policy stops working after modifying the zone pair CSCwb45422 Crash due to IPv4 reassembly CSCvw50622 Nhrp network resolution not working with link-local ipv6 address. CSCwb29362 Evaluation of IOS-XE for OpenSSL CVE-2022-0778 and CVE-2021-4160 CSCwa74499 ZBFW seeing the SIP ALG incorrectly dropping traffic and resetting connection CSCwa68540 FTP data traffic broken when UTD IPS enabled in both service VPN CSCwb27900 WebSocket forking connection failed for Voice VRF scenario CSCwa48122 SIP OAuth http request to fetch keys from CUCM fails after bootup as interface is down\n\n## IOS-XE 17.9\n\n### \u041d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438\n\n- **Support for ConnectX-5VF vNIC**: Cisco Catalyst 8000V now supports theConnectX-5VF Virtual Network Interface (vNIC)card for deployments in ESXi, KVM, and NFVIS(CSP) environments. This enhancement providesmultiple bene\n- **Support for c5n.18xlarge instance type**: Cisco Catalyst 8000V running on Amazon WebServices (AWS) now supports the c5n.18xlargeinstance type for deployment. This instance typesupports Elastic Fibre Adapter (EFA) that enhances\n- **AWS Enhancements**: Cisco Catalyst 8000V running on AWS supportsperformance enhancements with higher number ofqueues, thereby increasing the packet processing rate.\n- **Support for Unicast-to-Multicast DestinationReflection**: This feature introduces support for configuration ofunicast-to-multicast destination reflection to facilitateunicast-to-multicast destination translation andunicast-to-multicast destinatio\n- **Support for BGP additional paths with label-unicastunique mode**: This enhancement introduces support for configuringBGP additional paths when label-unicast unique modeis configured.\n- **ACE Scale Limit Per OGACL**: This feature provides the capabilities to increase theCommon Adaptive Classification Engine (CACE)scale limit per ACL and object group (OG) ACL.Currently, the CACE supports only 64K ACEs p\n- **CUBE: End-to-end Secure Calling for Courtesy CallBack and Unified Contact Center Survivability**: With the Cisco Voice Portal (CVP) application, acaller may request an automatedcallback, rather thanwait in a queue for an extended period. When an agentbecomes available, CVP sends a requ\n- **CUBE: Load Balancing for DNS SRV Host**: This enhancement to the DNS session target feature,provides effective call distribution and load balancingof calls based on the preference, priority andavailability of hosts provided in DN\n- **CUBE: Options Ping for DNS SRV Hosts**: Previously, CUBE (Local Gateway) had to beconfigured with separate dial-peers to monitor theavailability of individual proxies used in services suchas Webex Calling. To simplify this confi\n- **Transfer of Call Detail Records Using SFTP**: Cisco IOS gateways can use FTP and now SFTPservers to transfer call accounting files.\n- **Managed Service License Agreement (MSLA)Support with Smart Licensing Using Policy.**: For Cisco Catalyst 8000V running in the autonomousmode, you can now implement a post-paid model forlicenses, where you pay for the actual usage of alicense instead of pre-paying for the li\n- **New mechanism to send data privacy relatedinformation**: A new mechanism to send data privacy relatedinformation was introduced. This information is nolonger included in a RUM report.If data privacy is disabled (**no license smart privacy***\n- **Hostname support**: Support for sending hostname information wasintroduced.If you configure a hostname on the product instanceand disable the corresponding privacy setting (**no****license smart privacy h\n- **RUM Report Throttling**: For all topologies where the product instance initiatescommunication, the minimum reporting frequency isthrottled to one day. This means the product instancedoes not send more than one RUM\n- **Virtual Routing and Forwarding (VRF) Support**: On a product instance where VRF is supported, youcan configure the**license smart vrf**_vrf_string_command and use a VRF to send licensing data toCSSM, or CSLU, or SSM On-Prem.**Note**\n\n### \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 (290)\n\n- CSCwq31287: Cisco IOS and IOS XE software SNMP denial of service and remote code executionvulnerability.\n- CSCwk69597: C8000V running config write memory did not persist after reload\n- CSCwn07540: C8000V crashes due to IOSXE_INFRA-2-FATAL_NO_PUNT_KEEPALIVE\n- CSCwm72099: Cisco DPDK: ICE PF driver reports MDD with DPDK v21.11 and higher versions\n- CSCwk31560: NAT command is not readable after reload\n- CSCwm78086: BFD session is down after change tloc preference with pairwise-keying enabled\n- CSCwk65071: Unexpected reboot occurs due to IOSXE-WATCHDOG DBAL EVENTS after cellularinterface flap\n- CSCwm07651: An IOS XE router running as a cEdge may experience an unexpected reset due to dbgdprocess\n- CSCwn56474: In a pairwise-keying setup, every single BFD session up/down trigger tunnel deleteand create events\n- CSCwm05395: Add event cause in IPsec vesen log\n- CSCwf77488: IOSd crash after device boot up and online\n- CSCwn07671: Tracker group with IP and DNS name tracker elements goes down when DNS queryis failing\n- CSCwj92560: STCAPP command is removed from device after reload\n- CSCwm81900: CPP crashes during UTD security policy config on device\n- CSCwk03686: Crash occurs due to a segmentation fault from a negative value\n- CSCwd01261: MACsec with Non XPN cipher suite can't rekey as expected when PN reaches 75%\n- CSCwn20614: After you change integrity-type twice, all BFD sessions are down\n- CSCwh45169: Unexpected reboot occurs while dispalying information from cleared SSS sessions\n- CSCwk97930: Crash occurs when IPv6 packets with link-local source are forwarded to SDWANtunnels\n- CSCwk45165: fman_fp memory leak is seen on the device\n- CSCwk37351: Unexpected reboot occurs during PVDM OIR\n- CSCwi87546: Firewall releases its session lock twice resulting in a system crash. CPP unexpectedlyreboots due to QFP CPP stuck at waiting\n- CSCwn31739: Device crashes when EPC is configured on 100Gb link\n- CSCwn24226: GETVPN mismatch is seen in GMs reported across COOP due to KEK sync issuebetween prim & Sec KSs\n- CSCwk95044: Packet drops are observed with packet duplication enabled when the primary TLOCis shut\n- CSCwk75459: MGCP GW fails to respond with 250 OK when there's a delay from dataplane ingathering stats\n- CSCwm48755: XE NAT: Static IP NAT outside entry translates traffic only in one direction withMPLS VPN\n- CSCwm79570: Cisco IOS and IOS XE SNMP Denial of Service Vulnerabilities\n- CSCwm89600: Cisco IOS, IOS XE, and IOS XR SNMP Denial of Service Vulnerabilities\n- CSCwn19888: Cisco IOS-XE device may experience a \"qfp-ucode\" crash due to stuck thread condition\n- ... \u0438 \u0435\u0449\u0451 260\n\n### \u041e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0431\u0430\u0433\u0438 (173)\n\n- CSCwh12416: C8000V is not loading the config from vManage generated config-group based bootstrap\n- CSCwm33545: FlexVPN - IP address assigned to spoke changes to unassigned\n- CSCwh18120: IKEv2 - diagnose feature is taking up 11% CPU when a session is coming up\n- CSCwn51758: Incoming packets are dropped with bad checksum when l2tp through IPsec encryptstunnel\n- CSCwj79987: Device does not establish BFD sessions after upgrade\n- CSCwk89256: Speed mismatch in IOS-XE configuration after device template push\n- CSCwk31560: NAT command is not readable after reload\n- CSCwj44868: GETVPN COOP KS | Wrong Severity for Rekey acknowledgement configurationmismatch log message\n- CSCwm07651: Device crashes due to DBGD debug process\n- CSCwh74249: IPv6 PMTUD packet is fragmented at 1494 bytes\n- CSCwi34858: NETVSC VLAN sub interfaces do not pass traffic after upgrade\n- CSCwk49806: Device reboots unexpectedly due to process NHRP crash\n- CSCwi31110: Traceback seen @_nhrp_cache_delete due to negative global cache count\n- CSCwb55514: Unexpected reboot of the ESP seen after enabling**platform qos****port-channel-aggregate**\n- CSCwk63722: Startup configuration fails after PKI server enablement\n- CSCwj77594: IOS XE Controller Mode - WAN IP is allowed to be configured as SYSTEM IP\n- CSCwh44418: ARP incomplete in VRF Mgmt-intf - G0/0/0 - Switch -G0\n- CSCwk75459: MGCP GW fails to respond with 250 OK when there's a delay from dataplane ingathering stats\n- CSCwf73123: BFD timers reverts to default value after negotiating correctly\n- CSCwk61133: Process IOMd memory leak due to POE TDL message\n- ... \u0438 \u0435\u0449\u0451 153\n\n## IOS-XE 26.1\n\n### \u041d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438\n\n- **Ease of set up**: Support for MicrosoftHyperV on Azure Localcertified servers\n- **Ease of set up**: Support for NutanixAHV Hypervisor\n- **Ease of use**: Support for Interfacespeed setting of 100Gbps\n- **Upgrade**: Support for SLES 15SP7\n- **Ease of use**: Support for NvidiaMellanox ConnectX-7network interface cards\n- **Software reliability**: DNS Security andincrease the supportfor Local domainbypass scale to 256\n- **Software reliability**: Enhancements forNGFW in Policy Groups\n- **Ease of use**: One minute granularityinterface statisticsusing Cisco CatalystSD-WAN Manager\n- **Ease of use**: BGP AdvertisementStartup Delay\n- **Software reliability**: Resilient Infrastructure\n- **Upgrade**: Advanced TLS securitycompliance and control\n- **Upgrade**: Dual certificate supportfor SIP trunk client andserver functionality\n\n### \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 (12)\n\n- CSCws40263: uCode crash occurs due to Stuck Thread during NAT session DB walk\n- CSCwr30573: TLOC extension unable to program due to module boot up timing\n- CSCws89172: When start NWPI trace on muliti-VRFs and send traffic, the device crashes\n- CSCwr11064: Speed test session Timeout is not clear enough to get details\n- CSCwq77458: FMAN crash is seen after FNF configuration changes\n- CSCwr00088: Add CLI to change per MPLS label CEF statistics query interval on FMAN FP\n- CSCwr06399: Certificate verify fails and ID cert not installed after reload of device, of certs withEC Key 521\n- CSCwr08462: NAT router does not respond to ARP requests\n- CSCws62501: IOSd crash seen when \"match authen-status unauthenticated\" is configured\n- CSCwr44921: Device may reload unexpectedly with reload reason: CPU Usage due to MemoryPressure exceeds threshold\n- CSCwq98154: Multicast traffic not forwarded over P2P DMVPN phase 1 tunnel\n- CSCwq43883: Converting L2 routed port channel to L3 is broken\n\n## \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c\u044b\u0439 \u043f\u0443\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\n\nCisco \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0447\u0435\u0440\u0435\u0437 Extended Release:\n\n```\n17.6.x \u2192 17.9.x \u2192 17.12.x \u2192 17.15.x \u2192 17.18.x \u2192 26.1.x\n```\n\n### \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438\n\n- **26.1.1**: Resilient Infrastructure \u2014 \u0432\u0441\u0435 insecure CLI \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e\n  (Telnet, HTTP, FTP/TFTP, SNMPv1/v2, SSHv1, TLS 1.0/1.1, Type 0/5/7 \u043f\u0430\u0440\u043e\u043b\u0438)\n  \u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 insecure \u043a\u043e\u043c\u0430\u043d\u0434 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f `system mode insecure`\n- **17.16.1a**: ssh-rsa \u043e\u0442\u043a\u043b\u044e\u0447\u0451\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 22\n- **17.13.1a**: SELinux \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 Enforcing \u0440\u0435\u0436\u0438\u043c\u0435\n- **17.15.1a**: \u0422\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u0434\u043b\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b `copy`\n", "creation_timestamp": "2026-06-30T20:00:53.596037Z"}, {"uuid": "7a23b4cf-e595-4439-b27c-da405be30b61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtlvkbh6is2i", "content": "\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001DD-WRT\u3001Langflow\u3001WordPress\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09 \u306f\u3001DD-WRT\u3001Langflow\u3001WordPress\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u4ee5\u4e0b\u306f\u3001KeV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3055\u308c\u305f\u4e0d\u5177\u5408\u3067\u3059\u3002\n\nCVE-2021-27137  \uff08CVSS\u30b9\u30b3\u30a28.1\uff09DD-WRT\u30b9\u30bf\u30c3\u30af\u30d9\u30fc\u30b9\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\nCVE-2026-0770  \uff08CVSS\u30b9\u30b3\u30a29.8\uff09...", "creation_timestamp": "2026-08-21T13:47:29.118662Z"}, {"uuid": "5fc84c8c-eefd-4b8a-ae59-a81348339892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31536", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T14:00:04.168487Z"}, {"uuid": "c1c13203-3262-44ef-af39-7c281880f99a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31537", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T14:00:04.480830Z"}, {"uuid": "627693d4-2bc2-4400-859d-bd5932d6d70f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mq5v5znyg627", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-0770: Langflow affected by Remote Code Execution via validate_code() exec()\nEPSS 10.4% \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-0770\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-08T19:47:45.153973Z"}, {"uuid": "9c92bedc-3936-4152-8cc6-6af85712bb02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31536", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:24.566472Z"}, {"uuid": "f586dd02-5f62-4c29-864d-cd20b13d8923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31537", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:24.864735Z"}, {"uuid": "3399c286-09f5-4db0-989a-1d9828c231c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-11T10:15:03.035484Z"}, {"uuid": "565b28a9-c3aa-466f-bcfb-fc0c3b82cd68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mti6hy6gdc2k", "content": "CISA Adds Four Known Exploited Vulnerabilities to Catalog\nRelease Date July 21, 2026\n\nCVE-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability\nCVE-2026-0770 Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability  \nCVE-2026-63030 WordPress Core Interpretation Confli...", "creation_timestamp": "2026-08-20T02:16:35.879143Z"}, {"uuid": "63c87abe-6ab6-47a1-90a3-01a3b88c090b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-12T10:15:03.101561Z"}, {"uuid": "7a84fd9f-fff5-4095-8f18-c360780301bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-13T10:15:02.838324Z"}, {"uuid": "ab3d7390-4463-4824-9517-2b2801c31513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-14T10:15:02.242274Z"}, {"uuid": "4bc067a7-4c43-4b7c-95e8-9fa486576b3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-15T10:15:02.069033Z"}, {"uuid": "ec7a5609-a2ee-43f8-a300-9046f0339346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-16T10:15:02.672688Z"}, {"uuid": "c7a0a822-e78e-4b0e-92a2-a670d0a03665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17215", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:29.267027Z"}, {"uuid": "1da918e1-ff85-432f-a850-59129ac89cbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/340", "content": "CVE-2026-0770\n\nLangflow execglobals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of the execglobals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.\n\nGitHub Link:\nhttps://github.com/0xBlackash/CVE-2026-0770", "creation_timestamp": "2026-08-28T00:00:30.252727Z"}, {"uuid": "a43a0c5e-5ec3-412b-83bc-59ee1b992337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0776", "type": "seen", "source": "Telegram/Z_LovNj_LGg89Xdb85Ncg0gPVvljsBTAp4HPBtfrCi2Mibg", "content": "", "creation_timestamp": "2026-07-16T19:00:20.491315Z"}, {"uuid": "264a48f9-4a84-4a38-b9d8-73aa885b7a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0776", "type": "seen", "source": "Telegram/Z_LovNj_LGg89Xdb85Ncg0gPVvljsBTAp4HPBtfrCi2Mibg", "content": "", "creation_timestamp": "2026-07-17T00:00:36.886752Z"}, {"uuid": "f8369b62-42b9-45ae-b632-c76fcc30aa5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/EchelonEyes/58", "content": "\u041d\u041a\u0426\u041a\u0418 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSL, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0443\u0433\u0440\u043e\u0437\u044b \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-0778/BDU:2022-01315, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443 \u0442\u0438\u043f\u0430 \u00ab\u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 OpenSSL: 3.0.0 - 3.0.1, 1.1.1 - 1.1.1m, 1.0 - 3.0.1.\n\n\u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u041f\u041e \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u041d\u041a\u0426\u041a\u0418 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2022-0778/BDU:2022-01315 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0437\u0434\u0435\u0441\u044c: https://safe-surf.ru/upload/ALRT/ALRT-20220317.1.pdf\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438:\n\nhttps://bdu.fstec.ru/vul/2022-01315\n\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-0778 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #OpenSSL", "creation_timestamp": "2026-07-17T05:00:09.085284Z"}, {"uuid": "36b5c535-614b-4a31-801d-14f5fcbe8415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0776", "type": "published-proof-of-concept", "source": "Telegram/Z_LovNj_LGg89Xdb85Ncg0gPVvljsBTAp4HPBtfrCi2Mibg", "content": "", "creation_timestamp": "2026-07-18T00:00:23.721316Z"}, {"uuid": "fccb6b01-5909-49c6-bc3e-9fdd537f4907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/58", "content": "\u041d\u041a\u0426\u041a\u0418 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSL, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0443\u0433\u0440\u043e\u0437\u044b \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-0778/BDU:2022-01315, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443 \u0442\u0438\u043f\u0430 \u00ab\u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 OpenSSL: 3.0.0 - 3.0.1, 1.1.1 - 1.1.1m, 1.0 - 3.0.1.\n\n\u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u041f\u041e \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u041d\u041a\u0426\u041a\u0418 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2022-0778/BDU:2022-01315 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0437\u0434\u0435\u0441\u044c: https://safe-surf.ru/upload/ALRT/ALRT-20220317.1.pdf\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438:\n\nhttps://bdu.fstec.ru/vul/2022-01315\n\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-0778 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #OpenSSL", "creation_timestamp": "2026-07-18T00:00:35.131216Z"}, {"uuid": "ea799300-1cee-4f84-b5b5-371fa7b6e47e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0776", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94385", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-0776\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a whenx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 8  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 2\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 22:47:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSecurity research and proof-of-concept for CVE-2026-0776 affecting Discord Desktop Client.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T00:00:09.165750Z"}, {"uuid": "beda7939-603c-441c-845f-fdd977224f11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2244", "content": "\ud83d\udd34 CISA orders urgent action on actively exploited Langflow RCE flaw\n\nThe Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for building AI agents.\n\nTracked as CVE-2026-0770, this critical security flaw allows unauthenticated threat actors to gain remote code execution as root in low-complexity attacks.\n\n\"The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint,\" Trend Micro researchers who found and reported the flaw explain. \"The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root.\"", "creation_timestamp": "2026-08-23T00:00:45.041969Z"}, {"uuid": "5594f0cb-bbda-409a-9026-3f0c019c1d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/cve0day/340", "content": "CVE-2026-0770\n\nLangflow execglobals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of the execglobals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.\n\nGitHub Link:\nhttps://github.com/0xBlackash/CVE-2026-0770", "creation_timestamp": "2026-08-27T15:00:10.833836Z"}, {"uuid": "1fa7ffb9-736a-4f4a-b7e7-fb7f50df1a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mr62lublc32n", "content": "\ud83d\uded1 CVE-2026-0770\nLangflow Langflow\nCVSS 9.8 / EPSS 10% / KEV: No\nTL;DR: Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code\u2026\nhttps://cvesentinel.com/report/CVE-2026-0770?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-21T14:50:10.137933Z"}, {"uuid": "5b8be159-3bf5-4e8d-bee3-7f0bc09202a3", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9e5179f7-4d70-4117-8b26-4c5a3c8279d6", "content": "", "creation_timestamp": "2026-07-21T15:00:01.821853Z"}, {"uuid": "8e62f250-0be6-4972-b570-85ccb93b8a91", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bef6a0e7-c26d-47ce-8300-4036ec3b51a2", "content": "", "creation_timestamp": "2026-07-21T15:00:39.030797Z"}, {"uuid": "57883425-5e1e-4c6f-9d63-ac2889c3a80e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog", "content": "", "creation_timestamp": "2026-07-21T16:15:05.038046Z"}, {"uuid": "3abe9e75-b3a6-427a-9821-6b7a47f9c547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr6ac7fvu42w", "content": "CISA added four flaws to its KEV catalog, including WordPress RCE (CVE-2026-63030) and Langflow RCE (CVE-2026-0770). All are exploited in the wild.\n\n#CISA #KEV #WordPress #Langflow #DDWRT #RCE #SQLInjection", "creation_timestamp": "2026-07-21T16:32:08.395527Z"}, {"uuid": "28b3cbfc-80bd-46a0-ae53-eb01bcaf6e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mr7p4tlja52j", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-0770: \u26a0\ufe0f CVE-2026-0770: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 10.4%\nActively exploited\n\nRead the full alert: https://dashboard-webapp-c10t.onrender.com/alerts/2026-0770-langflow-exec_globals-inclusion-of-functionality-from", "creation_timestamp": "2026-07-22T06:30:13.865019Z"}, {"uuid": "df9bee0d-835f-472c-8832-992ad4131927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mra4oigbiu2f", "content": "\u26a0\ufe0f CRITICAL THREAT: CVE-2026-0770 in Langflow enables remote code execution via untrusted control sphere inclusion. Active exploitation is confirmed. Get the forensic detection and input hardening strategies required to secure your AI pipelines today. https://thecybermind.co/aigl\n\n#CyberSecurity\u2026", "creation_timestamp": "2026-07-22T10:32:45.112974Z"}, {"uuid": "38da7e3a-e180-4c20-90f9-4c700e35f9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0777", "type": "seen", "source": "Telegram/luYyQ3CineO0ObOYfhydeJYK-8S0_Wm40xDG86qEELpP", "content": "", "creation_timestamp": "2026-07-22T12:00:04.109717Z"}, {"uuid": "800e4943-3188-41fe-95e7-d1510f6a54f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrafl34qzu2r", "content": "Langflow's 'validate' endpoint just produced its SECOND unauthenticated root RCE in 14 months. CVE-2026-0770, CVSS 9.8, now in CISA's KEV list with a 3-day federal deadline. 220+ exploit attempts already logged. Patch, then pull it off the internet.", "creation_timestamp": "2026-07-22T13:11:54.371129Z"}, {"uuid": "7a1c970b-e267-4dfe-ac5a-271f1450c207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrafrem5ec2o", "content": "CISA ordered urgent patching of CVE-2026-0770 in Langflow, a critical flaw enabling unauthenticated root RCE via validate and exec_globals. KEVIntel saw 220+ attacks from 64 IPs. #Langflow #CISA #AWS", "creation_timestamp": "2026-07-22T13:15:25.728087Z"}, {"uuid": "41d2c7dd-51a2-4075-a117-e9bc9d1a1008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116964653150323533", "content": "\ud83d\udcf0 CISA Adds Four Actively Exploited Flaws in DD-WRT, Langflow, WordPress\nCISA adds 4 actively exploited vulnerabilities to its KEV catalog: CVE-2021-27137 (DD-WRT), CVE-2026-0770 (Langflow), and CVE-2026-63030 & CVE-2026-60137 (WordPress). Patching is urgent. #CISA #KEV #Vulnerability #PatchNow #WordPress\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-four-actively-exploited-vulnerabilities-in-dd-wrt-langflow-wordpress-to-kev-catalog/?utm_s\u2026", "creation_timestamp": "2026-07-22T16:49:32.063587Z"}, {"uuid": "7dfe2ac0-1213-4400-9828-a26fe112988a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mrarr25fd22q", "content": "CISA adds 4 actively exploited vulnerabilities to its KEV catalog: CVE-2021-27137 (DD-WRT), CVE-2026-0770 (Langflow), and CVE-2026-63030 & CVE-2026-60137 (WordPress). Patching is urgent. #CISA #KEV #Vulnerability #PatchNow #WordPress\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-22T16:49:59.712005Z"}, {"uuid": "646d2505-5635-4079-b0a7-89b8966eb885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mrbasknvyw2p", "content": "CISA just issued a binding directive: patch the critical Langflow RCE flaw (CVE-2026-0770) by Friday. This isn't a one-off; it's another sign of a deeper design problem in AI platforms handling user code. Are you vulnerable?\n\nhttps://www.tpp.blog/wr6pfey\n\n#cybersecurity #cisa #langflow", "creation_timestamp": "2026-07-22T21:19:17.411497Z"}, {"uuid": "1ac0fbf6-637a-430a-8f14-c6f3b0680901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0777", "type": "seen", "source": "Telegram/luYyQ3CineO0ObOYfhydeJYK-8S0_Wm40xDG86qEELpP", "content": "", "creation_timestamp": "2026-07-23T00:00:23.311275Z"}, {"uuid": "a167540f-2003-447a-94b1-fd41f6f8c160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/GithubRedTeam/94744", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-0770-langflow_rce_reproduction\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a razureink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 03:46:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE Reproduction: cve-2026-0770-langflow_rce_reproduction\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T06:00:03.954772Z"}, {"uuid": "28a52641-db0a-4cd4-9341-88bf8d8ac7b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0770", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mrcerxjdwq2z", "content": "\ud83d\udcf0 CISA Perintahkan Patch Mendesak untuk Celah RCE Langflow yang Aktif Dieksploitasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/23/cisa-patch-cve-2026-0770-langflow-rce/\n\n#cisa #cve-2026-0770 #cybersecurity #keamananSiber #langflow #rce", "creation_timestamp": "2026-07-23T08:03:10.676617Z"}, {"uuid": "42b7cf1a-096e-4c01-8a9a-3431133b36e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/cyberupdates365.bsky.social/post/3mrchnwoczk2l", "content": "CISA has added the critical Langflow AI framework RCE (CVE-2026-0770) to its Known Exploited Vulnerabilities catalog. Threat actors are weaponizing this flaw to harvest cloud credentials and deploy ENCFORGE ransomware against AI models :\ncyberupdates365.com/cisa-orders-...\n#InfoSec #DevSecOps #AI", "creation_timestamp": "2026-07-23T08:54:41.072640Z"}, {"uuid": "0b03cfed-daa1-4ecc-bde6-eb989170b080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "Telegram/lyQjgrzss-14q92fKQzooVmz9KnQq83SmXqNbV8WBn3n-CQ", "content": "", "creation_timestamp": "2026-07-23T11:00:03.637119Z"}, {"uuid": "1547ab02-4681-4132-b031-9f0b0ad8c13b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "Telegram/lyQjgrzss-14q92fKQzooVmz9KnQq83SmXqNbV8WBn3n-CQ", "content": "", "creation_timestamp": "2026-07-24T00:00:08.860254Z"}, {"uuid": "b6ebdb5a-7dfc-4045-a06a-4a4e40e75d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94744", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-0770-langflow_rce_reproduction\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a razureink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 03:46:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE Reproduction: cve-2026-0770-langflow_rce_reproduction\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:09.903704Z"}, {"uuid": "3e1538b6-6b4b-4d5f-ba25-eef90545dd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mrf7jryknu2t", "content": "(CISA TS-SOC) CVE-2026-0770 \u2013 Langflow Inclusion of Functionality from Untrusted Control Sphere\u00a0Vulnerability\n\nSeverity: UNKNOWN Impact Summary: Remote attackers can execute arbitrary code on affected installations. Timestamp: 2026-07-24T01:31:37.336Z ATT&CK Mapping\u2026...", "creation_timestamp": "2026-07-24T11:07:07.474199Z"}, {"uuid": "a0ea4ab1-da12-4318-811f-732acb5f8b86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17215", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:04.318045Z"}, {"uuid": "3cc256c5-ae43-4650-92e3-5f508fdb533e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/CVEhub/14139", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *PoC-CVE-2022-0778-*\nGithub: https://github.com/Mrlucas5550100/PoC-CVE-2022-0778-", "creation_timestamp": "2026-07-29T12:00:26.890429Z"}, {"uuid": "38d0e347-92aa-4e6e-b16f-dfae47e93649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "Telegram/SPkAtc-f-3zjDr2IkUob25JrS1fRsbZ9hJqaKBbJSbHihZQ", "content": "", "creation_timestamp": "2026-07-29T12:01:08.159832Z"}, {"uuid": "d760f0a5-0525-4535-bbef-c6d4e71abdc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "Telegram/ANS38Tnb5PEkm47pB7X_8bHd2EsMjoenOWDM-Y_1dwBijno", "content": "", "creation_timestamp": "2026-07-29T12:01:08.220464Z"}, {"uuid": "2c8c1fbf-960b-4bad-a7c9-3286e5d84a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/reverseame/2300", "content": "Exploiting CVE-2022-0778, a bug in OpenSSL vis-\u00e0-vis WebRTC platforms https://www.rtcsec.com/article/exploiting-cve-2022-0778-in-openssl-vs-webrtc-platforms/", "creation_timestamp": "2026-07-29T12:02:42.606233Z"}, {"uuid": "9d75a2b9-4821-43b6-a5ec-7bdacb7422b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/sysadm_in_up/1141", "content": "CVE-2022-0778\n\nThe discovered vulnerability triggers an infinite loop in the function BN_mod_sqrt() of OpenSSL while parsing an elliptic curve key. This means that a maliciously crafted X.509 certificate can DoS any unpatched server.\n\nPoC\n\nhttps://github.com/drago-96/CVE-2022-0778", "creation_timestamp": "2026-07-29T12:03:21.655565Z"}, {"uuid": "66082807-82e5-41c5-9617-4bcee449803b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/CVEhub/14139", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *PoC-CVE-2022-0778-*\nGithub: https://github.com/Mrlucas5550100/PoC-CVE-2022-0778-", "creation_timestamp": "2026-07-30T00:00:49.552439Z"}, {"uuid": "35f0cc19-6549-4d4d-b343-4bbd3178a277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/reverseame/2300", "content": "Exploiting CVE-2022-0778, a bug in OpenSSL vis-\u00e0-vis WebRTC platforms https://www.rtcsec.com/article/exploiting-cve-2022-0778-in-openssl-vs-webrtc-platforms/", "creation_timestamp": "2026-07-30T00:02:37.012916Z"}, {"uuid": "30e6ce17-a16e-4c82-b334-5a19e0b18f2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "Telegram/SPkAtc-f-3zjDr2IkUob25JrS1fRsbZ9hJqaKBbJSbHihZQ", "content": "", "creation_timestamp": "2026-07-30T00:01:47.659300Z"}, {"uuid": "59c5c280-df7e-4731-a04c-51f244917b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "Telegram/ANS38Tnb5PEkm47pB7X_8bHd2EsMjoenOWDM-Y_1dwBijno", "content": "", "creation_timestamp": "2026-07-30T00:01:47.682543Z"}, {"uuid": "359542a1-03a6-4e8a-8427-4a12aaec5885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/C10_CVE/3", "content": "CVE-2026-0770 C10-Team", "creation_timestamp": "2026-09-01T14:00:05.147148Z"}, {"uuid": "62f932de-1df4-492f-8d9c-8c76963c1815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/cissp/5722", "content": "Analytics\nTop 10 Most Used Vulns of the Month\n\nCVE-2022-1096 - Type Confusion in V8\nhttps://github.com/Maverick-cmd/Chrome-and-Edge-Version-Dumper\n\nCVE-2022-0847 - Dirty Pipe Vuln\n\nCVE-2022-0778 - OpenSSL Illegal x.509 certificate construction\n\nCVE-2022-0492 - Privilege escalation vuln causing container escape\nhttps://sysdig.com/blog/detecting-mitigating-cve-2022-0492-sysdig\n\nCVE-2022-22947 - Spring Cloud Gateway RCE\n\nCVE-2022-22963 - Spring Core RCE\n\nCVE-2022-25636 - net/netfilter/nf_dup_netdev.c in the Linux kernel <5.6.10 allows local users to gain privileges because of a heap out-of-bounds write\n\nCVE-2022-27254 - Vuln in Honda's Remote Keyless System\nhttps://github.com/nonamecoder/CVE-2022-27254\n\nCVE-2022-0609 - https://blog.google/threat-analysis-group/countering-threats-north-korea", "creation_timestamp": "2026-09-01T17:00:30.507227Z"}, {"uuid": "40307492-3ce2-4e72-a27a-2efb7bed6e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/cissp/5512", "content": "http://fumalwareanalysis.blogspot.com/p/malware-analysis-tutorials-reverse.html?m=1\n\nA new \"B1txor20\" Linux botnet malware has been discovered that spreads via the Log4J vulnerability and uses DNS tunnels for covert C2 communications.\nRead details: https://thehackernews.com/2022/03/new-b1txor20-linux-botnet-uses-dns.html\n\nA new infinite loop vulnerability (CVE-2022-0778) in OpenSSL could allow attackers to crash remote servers by passing a malformed certificate.\nRead details: https://thehackernews.com/2022/03/new-infinite-loop-bug-in-openssl-could.html\n\nFBI and CISA warn that Russian state-sponsored hackers are exploiting misconfigured multi-factor authentication (MFA) protocols and vulnerabilities in the Windows Print Spooler for cyberattacks.\nRead details: https://thehackernews.com/2022/03/fbi-cisa-warn-of-russian-hackers.html\n\nhttps://kb.cybermentordojo.com/knowledge-base/entry-to-cyber-blueprint/", "creation_timestamp": "2026-09-01T17:00:31.057248Z"}, {"uuid": "921b084f-f5b4-4844-8eaa-9112ad02daa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0779", "type": "seen", "source": "https://t.me/hacking_Attack/55468", "content": "Exploit Collector\nWordPress User Meta Lite / Pro 2.4.3 Path Traversal\n\nhttps://1.bp.blogspot.com/-ju6c7E-5MWk/WWlvdc1QT-I/AAAAAAAAIPk/ByEXv5vo16UsrlpTJMmF2Op4hfJEgrRpQCLcBGAs/s1600/h79.png \nWordPress User Meta Lite and Pro plugin versions 2.4.3 and below suffer from a path traversal vulnerability.\n\nSHA-256 | 9f5dfc7d061a12ed0156906753e063fd8b488898a8f4b2709039a9ee6f78125f\n\nDownload\nRCE Security Advisory\nhttps://www.rcesecurity.com\n1. ADVISORY INFORMATION\n=======================\nProduct:        User Meta\nVendor URL:     https://wordpress.org/plugins/user-meta\nType:           Relative Path Traversal [CWE-23]\nDate found:     2022-02-28\nDate published: 2022-05-24\nCVSSv3 Score:   4.3 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\nCVE:            CVE-2022-0779\n2. CREDITS\n==========\nThis vulnerability was discovered and researched by Julien Ahrens from\nRCE Security.\n3. VERSIONS AFFECTED\n====================\nUser Meta Lite 2.4.3 and below\nUser Meta Pro 2.4.3 and below\n4. INTRODUCTION\n===============\nAn easy-to-use user profile and management plugin for WordPress that allows\nuser login, reset-password, profile update and user registration with extra\nfields, all on front-end and many more. User Meta Pro is a versatile user\nprofile builder and user management plugin for WordPress that has the most\nfeatures on the market. User Meta aims to be your only go to plugin for\nuser management.\n\n(from the vendor's homepage)\n5. VULNERABILITY DETAILS\n========================\nThe WordPress ajax action \"um_show_uploaded_file\" is vulnerable to an\nauthenticated path traversal when user-supplied input to the HTTP POST\nparameter \"filepath\" is processed by the web application. Since the application\ndoes not properly validate and sanitize this parameter, it is possible to\nenumerate local server files using a blind approach. This is because the\napplication doesn't return the contents of the referenced file but instead\nreturns different form elements based on whether a file exists or not.\n\nThe following Proof-of-Concept triggers this vulnerability:\n\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: localhost\nContent-Length: 147\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nCookie: [your-wordpress-auth-cookies]\nConnection: close\n\nfield_name=[your-field-name]&filepath=/../../../../../etc/passwd&field_id=[your-field-id]&form_key=[your-form-key]&action=um_show_uploaded_file&pf_nonce=[your-auth-nonce]&is_ajax=true\n6. RISK\n=======\nThe vulnerability can be used by an authenticated attacker to enumerate\nlocal server files based on a blind approach.\n7. SOLUTION\n===========\nUpdate to User Meta/User Meta Pro 2.4.4\n8. REPORT TIMELINE\n==================\n2022-02-28: Discovery of the vulnerability\n2022-02-28: WPScan (CNA) assigns CVE-2022-0779\n2022-03-03: Contacted the vendor via their contact form\n2022-03-06: Vendor response, acknowledgement of the issue\n2022-03-18: Version 2.4.2 is released\n2022-03-22: Vulnerability is still exploitable since fix was applied only client-side. Contacted vendor again.\n2022-04-13: No response, contacted vendor again\n2022-04-18: Vendor added a new fix to version 2.4.3. Asked to retest.\n2022-04-19: Vulnerability is still exploitable due to a logic bug in the fix. Contacted vendor again.\n2022-04-29: Vendor asks whether another fix in version 2.4.4 is fine\n2022-05-16: Fix seems to work\n2022-05-24: Public disclosure\n9. REFERENCES\n=============\nhttps://github.com/MrTuxracer/advisories\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:37.720610Z"}, {"uuid": "f3710b83-487f-4568-b375-428a7f1b0b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0779", "type": "seen", "source": "https://t.me/hacking_Attack/55468", "content": "Exploit Collector\nWordPress User Meta Lite / Pro 2.4.3 Path Traversal\n\nhttps://1.bp.blogspot.com/-ju6c7E-5MWk/WWlvdc1QT-I/AAAAAAAAIPk/ByEXv5vo16UsrlpTJMmF2Op4hfJEgrRpQCLcBGAs/s1600/h79.png \nWordPress User Meta Lite and Pro plugin versions 2.4.3 and below suffer from a path traversal vulnerability.\n\nSHA-256 | 9f5dfc7d061a12ed0156906753e063fd8b488898a8f4b2709039a9ee6f78125f\n\nDownload\nRCE Security Advisory\nhttps://www.rcesecurity.com\n1. ADVISORY INFORMATION\n=======================\nProduct:        User Meta\nVendor URL:     https://wordpress.org/plugins/user-meta\nType:           Relative Path Traversal [CWE-23]\nDate found:     2022-02-28\nDate published: 2022-05-24\nCVSSv3 Score:   4.3 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\nCVE:            CVE-2022-0779\n2. CREDITS\n==========\nThis vulnerability was discovered and researched by Julien Ahrens from\nRCE Security.\n3. VERSIONS AFFECTED\n====================\nUser Meta Lite 2.4.3 and below\nUser Meta Pro 2.4.3 and below\n4. INTRODUCTION\n===============\nAn easy-to-use user profile and management plugin for WordPress that allows\nuser login, reset-password, profile update and user registration with extra\nfields, all on front-end and many more. User Meta Pro is a versatile user\nprofile builder and user management plugin for WordPress that has the most\nfeatures on the market. User Meta aims to be your only go to plugin for\nuser management.\n\n(from the vendor's homepage)\n5. VULNERABILITY DETAILS\n========================\nThe WordPress ajax action \"um_show_uploaded_file\" is vulnerable to an\nauthenticated path traversal when user-supplied input to the HTTP POST\nparameter \"filepath\" is processed by the web application. Since the application\ndoes not properly validate and sanitize this parameter, it is possible to\nenumerate local server files using a blind approach. This is because the\napplication doesn't return the contents of the referenced file but instead\nreturns different form elements based on whether a file exists or not.\n\nThe following Proof-of-Concept triggers this vulnerability:\n\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: localhost\nContent-Length: 147\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nCookie: [your-wordpress-auth-cookies]\nConnection: close\n\nfield_name=[your-field-name]&filepath=/../../../../../etc/passwd&field_id=[your-field-id]&form_key=[your-form-key]&action=um_show_uploaded_file&pf_nonce=[your-auth-nonce]&is_ajax=true\n6. RISK\n=======\nThe vulnerability can be used by an authenticated attacker to enumerate\nlocal server files based on a blind approach.\n7. SOLUTION\n===========\nUpdate to User Meta/User Meta Pro 2.4.4\n8. REPORT TIMELINE\n==================\n2022-02-28: Discovery of the vulnerability\n2022-02-28: WPScan (CNA) assigns CVE-2022-0779\n2022-03-03: Contacted the vendor via their contact form\n2022-03-06: Vendor response, acknowledgement of the issue\n2022-03-18: Version 2.4.2 is released\n2022-03-22: Vulnerability is still exploitable since fix was applied only client-side. Contacted vendor again.\n2022-04-13: No response, contacted vendor again\n2022-04-18: Vendor added a new fix to version 2.4.3. Asked to retest.\n2022-04-19: Vulnerability is still exploitable due to a logic bug in the fix. Contacted vendor again.\n2022-04-29: Vendor asks whether another fix in version 2.4.4 is fine\n2022-05-16: Fix seems to work\n2022-05-24: Public disclosure\n9. REFERENCES\n=============\nhttps://github.com/MrTuxracer/advisories\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:48.231547Z"}, {"uuid": "d081a6af-4fc8-4091-9400-e8cdca5ca409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/cissp/5512", "content": "http://fumalwareanalysis.blogspot.com/p/malware-analysis-tutorials-reverse.html?m=1\n\nA new \"B1txor20\" Linux botnet malware has been discovered that spreads via the Log4J vulnerability and uses DNS tunnels for covert C2 communications.\nRead details: https://thehackernews.com/2022/03/new-b1txor20-linux-botnet-uses-dns.html\n\nA new infinite loop vulnerability (CVE-2022-0778) in OpenSSL could allow attackers to crash remote servers by passing a malformed certificate.\nRead details: https://thehackernews.com/2022/03/new-infinite-loop-bug-in-openssl-could.html\n\nFBI and CISA warn that Russian state-sponsored hackers are exploiting misconfigured multi-factor authentication (MFA) protocols and vulnerabilities in the Windows Print Spooler for cyberattacks.\nRead details: https://thehackernews.com/2022/03/fbi-cisa-warn-of-russian-hackers.html\n\nhttps://kb.cybermentordojo.com/knowledge-base/entry-to-cyber-blueprint/", "creation_timestamp": "2026-09-02T01:04:14.225763Z"}, {"uuid": "92ac052c-3416-495c-b550-0fb91b39c280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/cissp/5722", "content": "Analytics\nTop 10 Most Used Vulns of the Month\n\nCVE-2022-1096 - Type Confusion in V8\nhttps://github.com/Maverick-cmd/Chrome-and-Edge-Version-Dumper\n\nCVE-2022-0847 - Dirty Pipe Vuln\n\nCVE-2022-0778 - OpenSSL Illegal x.509 certificate construction\n\nCVE-2022-0492 - Privilege escalation vuln causing container escape\nhttps://sysdig.com/blog/detecting-mitigating-cve-2022-0492-sysdig\n\nCVE-2022-22947 - Spring Cloud Gateway RCE\n\nCVE-2022-22963 - Spring Core RCE\n\nCVE-2022-25636 - net/netfilter/nf_dup_netdev.c in the Linux kernel <5.6.10 allows local users to gain privileges because of a heap out-of-bounds write\n\nCVE-2022-27254 - Vuln in Honda's Remote Keyless System\nhttps://github.com/nonamecoder/CVE-2022-27254\n\nCVE-2022-0609 - https://blog.google/threat-analysis-group/countering-threats-north-korea", "creation_timestamp": "2026-09-02T01:04:13.547685Z"}, {"uuid": "e2c2825b-8ee4-440a-9b3e-c1919fac4386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/C10_CVE/3", "content": "CVE-2026-0770 C10-Team", "creation_timestamp": "2026-09-02T01:05:06.169810Z"}, {"uuid": "6158109d-a6ea-4490-9b0a-7d2f176b3e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "exploited", "source": "https://t.me/true_secator/8572", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2026-0768) \u0432 Langflow, \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0418\u0418, \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0438 \u043a\u043b\u044e\u0447\u0435\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 \u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0432\u0430\u043b\u0438\u0434\u0430\u0442\u043e\u0440\u0435 \u043a\u043e\u0434\u0430 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Langflow.\n\nVulnCheck \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043b\u043e\u0432\u0443\u0448\u043a\u0430\u0445 \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u0430\u043b\u0438 \u0446\u0435\u043b\u044c\u044e \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 50 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0432\u0437\u043b\u043e\u043c\u0430 \u0437\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u0449\u0435\u0435 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u0434\u043e 360.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0438 \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u0442 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043b\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Langflow, \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 AWS \u0438 \u043a\u043b\u044e\u0447\u0435\u0439 API OpenAI.\n\nLangflow - \u044d\u0442\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u00a0\u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Python, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0418\u0418, \u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u0447\u0430\u0442-\u0431\u043e\u0442\u043e\u0432 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e (RAG).\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0432 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435, \u0441\u043e\u0435\u0434\u0438\u043d\u044f\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u043e\u0432\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043e\u043a, \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445, API \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\nCVE-2026-0768 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Langflow 1.4.2 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u043a\u043e\u0434\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0438 \u043f\u0435\u0440\u0435\u0434 \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Python.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 Zero Day Initiative \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro\u00a0\u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0438 \u043f\u0435\u0440\u0435\u0434 \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Python.\n\nCVE-2026-0768 - \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0443\u0442\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2026-33017, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 Python \u0438 \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u043e\u0432 .ENV \u0438 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0417\u0430 \u044d\u0442\u0438\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c\u00a0CVE-2026-5027\u00a0\u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 CVE-2026-55255\u00a0\u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u0430\u0431\u043e\u0447\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c \u0418\u0418 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u043e\u0432 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u00a0CVE-2026-0770\u00a0\u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0438 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0438 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438\u00a0CVE-2026-9198\u00a0\u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u044b PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Langflow \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, 1.11.6, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0432\u0441\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430.", "creation_timestamp": "2026-09-02T23:00:05.159655Z"}, {"uuid": "ecd98deb-26c2-4bf6-9de0-dcf155da339f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "exploited", "source": "https://t.me/true_secator/8572", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2026-0768) \u0432 Langflow, \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0418\u0418, \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0438 \u043a\u043b\u044e\u0447\u0435\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 \u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0432\u0430\u043b\u0438\u0434\u0430\u0442\u043e\u0440\u0435 \u043a\u043e\u0434\u0430 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Langflow.\n\nVulnCheck \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043b\u043e\u0432\u0443\u0448\u043a\u0430\u0445 \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u0430\u043b\u0438 \u0446\u0435\u043b\u044c\u044e \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 50 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0432\u0437\u043b\u043e\u043c\u0430 \u0437\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u0449\u0435\u0435 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u0434\u043e 360.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0438 \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u0442 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043b\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Langflow, \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 AWS \u0438 \u043a\u043b\u044e\u0447\u0435\u0439 API OpenAI.\n\nLangflow - \u044d\u0442\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u00a0\u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Python, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0418\u0418, \u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u0447\u0430\u0442-\u0431\u043e\u0442\u043e\u0432 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e (RAG).\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0432 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435, \u0441\u043e\u0435\u0434\u0438\u043d\u044f\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u043e\u0432\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043e\u043a, \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445, API \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\nCVE-2026-0768 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Langflow 1.4.2 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u043a\u043e\u0434\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0438 \u043f\u0435\u0440\u0435\u0434 \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Python.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 Zero Day Initiative \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro\u00a0\u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0438 \u043f\u0435\u0440\u0435\u0434 \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Python.\n\nCVE-2026-0768 - \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0443\u0442\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2026-33017, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 Python \u0438 \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u043e\u0432 .ENV \u0438 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0417\u0430 \u044d\u0442\u0438\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c\u00a0CVE-2026-5027\u00a0\u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 CVE-2026-55255\u00a0\u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u0430\u0431\u043e\u0447\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c \u0418\u0418 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u043e\u0432 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u00a0CVE-2026-0770\u00a0\u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0438 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0438 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438\u00a0CVE-2026-9198\u00a0\u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u044b PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Langflow \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, 1.11.6, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0432\u0441\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430.", "creation_timestamp": "2026-09-03T00:00:35.676271Z"}, {"uuid": "09fa0c02-a1ce-4ea7-b2bd-a9527862d310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/exoduscn/12549", "content": "LangFlow RCE Vulnerability", "creation_timestamp": "2026-09-03T05:00:06.560495Z"}, {"uuid": "461919f1-9710-4cc1-acda-12a2c9bbc44a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/exoduscn/12549", "content": "LangFlow RCE Vulnerability", "creation_timestamp": "2026-09-04T00:01:01.339607Z"}, {"uuid": "d0e6cd00-4aec-4816-a2d0-cd3eae47afa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/xssf_forum/122", "content": "\ud83d\udcdd \u041d\u0435\u043c\u043d\u043e\u0433\u043e \u043e \u0436\u0438\u0437\u043d\u0438, pivoting \u0438 Langflow CVE-2026-0770.\n\u0421\u0442\u0430\u0442\u044c\u0438\n\n\u041d\u0435 \u0435\u0434\u0438\u043d\u043e\u0436\u0434\u044b \u0434\u043e\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u043c\u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441 \u0440\u0435\u0431\u044f\u0442\u0430\u043c\u0438 \u0438\u0437 \u043e\u0434\u043d\u043e\u0439 \u043e\u0441\u0443\u0436\u0434\u0430\u0435\u043c\u043e\u0439 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0441\u0444\u0435\u0440\u044b. \u0417\u0430\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u043e\u043d\u0438 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u0434\u0435\u043d\u044c\u0433\u0438. \u0420\u0430\u0431\u043e\u0442\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0441\u0435\u0442\u044f\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u043d\u0435\u0434\u0440\u0443\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d \u0417\u0430\u043f\u0430\u0434\u0430. \u0427\u0435\u0441\u0442\u043d\u043e \u0433\u043e\u0432\u043e\u0440\u044f, \u044f \u0431\u044b\u043b \u0432 \u0430\u0445\u0443\u0435 \u043e\u0442 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a\u0438\u0435 \u0441\u0443\u043c\u043c\u044b \u0437\u0430\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u044d\u0442\u0438 \u0442\u043e\u0432\u0430\u0440\u0438\u0449\u0438, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0438 \u043a\u0430\u043a \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u043b\u0438\u0441\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0410 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u043b\u0438\u0441\u044c \u043e\u043d\u0438 \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u2026\n\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435", "creation_timestamp": "2026-09-04T05:00:07.018955Z"}, {"uuid": "c03366cd-ae5e-4673-97d2-cc462eb5bc31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/xssf_forum/122", "content": "\ud83d\udcdd \u041d\u0435\u043c\u043d\u043e\u0433\u043e \u043e \u0436\u0438\u0437\u043d\u0438, pivoting \u0438 Langflow CVE-2026-0770.\n\u0421\u0442\u0430\u0442\u044c\u0438\n\n\u041d\u0435 \u0435\u0434\u0438\u043d\u043e\u0436\u0434\u044b \u0434\u043e\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u043c\u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441 \u0440\u0435\u0431\u044f\u0442\u0430\u043c\u0438 \u0438\u0437 \u043e\u0434\u043d\u043e\u0439 \u043e\u0441\u0443\u0436\u0434\u0430\u0435\u043c\u043e\u0439 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0441\u0444\u0435\u0440\u044b. \u0417\u0430\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u043e\u043d\u0438 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u0434\u0435\u043d\u044c\u0433\u0438. \u0420\u0430\u0431\u043e\u0442\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0441\u0435\u0442\u044f\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u043d\u0435\u0434\u0440\u0443\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d \u0417\u0430\u043f\u0430\u0434\u0430. \u0427\u0435\u0441\u0442\u043d\u043e \u0433\u043e\u0432\u043e\u0440\u044f, \u044f \u0431\u044b\u043b \u0432 \u0430\u0445\u0443\u0435 \u043e\u0442 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a\u0438\u0435 \u0441\u0443\u043c\u043c\u044b \u0437\u0430\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u044d\u0442\u0438 \u0442\u043e\u0432\u0430\u0440\u0438\u0449\u0438, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0438 \u043a\u0430\u043a \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u043b\u0438\u0441\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0410 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u043b\u0438\u0441\u044c \u043e\u043d\u0438 \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u2026\n\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435", "creation_timestamp": "2026-09-05T01:00:40.575714Z"}, {"uuid": "e7b7a68e-a1ad-447b-8a63-c45945a21a75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0779", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/55468", "content": "Exploit Collector\nWordPress User Meta Lite / Pro 2.4.3 Path Traversal\n\nhttps://1.bp.blogspot.com/-ju6c7E-5MWk/WWlvdc1QT-I/AAAAAAAAIPk/ByEXv5vo16UsrlpTJMmF2Op4hfJEgrRpQCLcBGAs/s1600/h79.png \nWordPress User Meta Lite and Pro plugin versions 2.4.3 and below suffer from a path traversal vulnerability.\n\nSHA-256 | 9f5dfc7d061a12ed0156906753e063fd8b488898a8f4b2709039a9ee6f78125f\n\nDownload\nRCE Security Advisory\nhttps://www.rcesecurity.com\n1. ADVISORY INFORMATION\n=======================\nProduct:        User Meta\nVendor URL:     https://wordpress.org/plugins/user-meta\nType:           Relative Path Traversal [CWE-23]\nDate found:     2022-02-28\nDate published: 2022-05-24\nCVSSv3 Score:   4.3 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\nCVE:            CVE-2022-0779\n2. CREDITS\n==========\nThis vulnerability was discovered and researched by Julien Ahrens from\nRCE Security.\n3. VERSIONS AFFECTED\n====================\nUser Meta Lite 2.4.3 and below\nUser Meta Pro 2.4.3 and below\n4. INTRODUCTION\n===============\nAn easy-to-use user profile and management plugin for WordPress that allows\nuser login, reset-password, profile update and user registration with extra\nfields, all on front-end and many more. User Meta Pro is a versatile user\nprofile builder and user management plugin for WordPress that has the most\nfeatures on the market. User Meta aims to be your only go to plugin for\nuser management.\n\n(from the vendor's homepage)\n5. VULNERABILITY DETAILS\n========================\nThe WordPress ajax action \"um_show_uploaded_file\" is vulnerable to an\nauthenticated path traversal when user-supplied input to the HTTP POST\nparameter \"filepath\" is processed by the web application. Since the application\ndoes not properly validate and sanitize this parameter, it is possible to\nenumerate local server files using a blind approach. This is because the\napplication doesn't return the contents of the referenced file but instead\nreturns different form elements based on whether a file exists or not.\n\nThe following Proof-of-Concept triggers this vulnerability:\n\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: localhost\nContent-Length: 147\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nCookie: [your-wordpress-auth-cookies]\nConnection: close\n\nfield_name=[your-field-name]&filepath=/../../../../../etc/passwd&field_id=[your-field-id]&form_key=[your-form-key]&action=um_show_uploaded_file&pf_nonce=[your-auth-nonce]&is_ajax=true\n6. RISK\n=======\nThe vulnerability can be used by an authenticated attacker to enumerate\nlocal server files based on a blind approach.\n7. SOLUTION\n===========\nUpdate to User Meta/User Meta Pro 2.4.4\n8. REPORT TIMELINE\n==================\n2022-02-28: Discovery of the vulnerability\n2022-02-28: WPScan (CNA) assigns CVE-2022-0779\n2022-03-03: Contacted the vendor via their contact form\n2022-03-06: Vendor response, acknowledgement of the issue\n2022-03-18: Version 2.4.2 is released\n2022-03-22: Vulnerability is still exploitable since fix was applied only client-side. Contacted vendor again.\n2022-04-13: No response, contacted vendor again\n2022-04-18: Vendor added a new fix to version 2.4.3. Asked to retest.\n2022-04-19: Vulnerability is still exploitable due to a logic bug in the fix. Contacted vendor again.\n2022-04-29: Vendor asks whether another fix in version 2.4.4 is fine\n2022-05-16: Fix seems to work\n2022-05-24: Public disclosure\n9. REFERENCES\n=============\nhttps://github.com/MrTuxracer/advisories\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T19:00:03.380321Z"}, {"uuid": "026dae7d-4d5e-469e-9510-75dfc39775c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0779", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/55468", "content": "Exploit Collector\nWordPress User Meta Lite / Pro 2.4.3 Path Traversal\n\nhttps://1.bp.blogspot.com/-ju6c7E-5MWk/WWlvdc1QT-I/AAAAAAAAIPk/ByEXv5vo16UsrlpTJMmF2Op4hfJEgrRpQCLcBGAs/s1600/h79.png \nWordPress User Meta Lite and Pro plugin versions 2.4.3 and below suffer from a path traversal vulnerability.\n\nSHA-256 | 9f5dfc7d061a12ed0156906753e063fd8b488898a8f4b2709039a9ee6f78125f\n\nDownload\nRCE Security Advisory\nhttps://www.rcesecurity.com\n1. ADVISORY INFORMATION\n=======================\nProduct:        User Meta\nVendor URL:     https://wordpress.org/plugins/user-meta\nType:           Relative Path Traversal [CWE-23]\nDate found:     2022-02-28\nDate published: 2022-05-24\nCVSSv3 Score:   4.3 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\nCVE:            CVE-2022-0779\n2. CREDITS\n==========\nThis vulnerability was discovered and researched by Julien Ahrens from\nRCE Security.\n3. VERSIONS AFFECTED\n====================\nUser Meta Lite 2.4.3 and below\nUser Meta Pro 2.4.3 and below\n4. INTRODUCTION\n===============\nAn easy-to-use user profile and management plugin for WordPress that allows\nuser login, reset-password, profile update and user registration with extra\nfields, all on front-end and many more. User Meta Pro is a versatile user\nprofile builder and user management plugin for WordPress that has the most\nfeatures on the market. User Meta aims to be your only go to plugin for\nuser management.\n\n(from the vendor's homepage)\n5. VULNERABILITY DETAILS\n========================\nThe WordPress ajax action \"um_show_uploaded_file\" is vulnerable to an\nauthenticated path traversal when user-supplied input to the HTTP POST\nparameter \"filepath\" is processed by the web application. Since the application\ndoes not properly validate and sanitize this parameter, it is possible to\nenumerate local server files using a blind approach. This is because the\napplication doesn't return the contents of the referenced file but instead\nreturns different form elements based on whether a file exists or not.\n\nThe following Proof-of-Concept triggers this vulnerability:\n\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: localhost\nContent-Length: 147\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nCookie: [your-wordpress-auth-cookies]\nConnection: close\n\nfield_name=[your-field-name]&filepath=/../../../../../etc/passwd&field_id=[your-field-id]&form_key=[your-form-key]&action=um_show_uploaded_file&pf_nonce=[your-auth-nonce]&is_ajax=true\n6. RISK\n=======\nThe vulnerability can be used by an authenticated attacker to enumerate\nlocal server files based on a blind approach.\n7. SOLUTION\n===========\nUpdate to User Meta/User Meta Pro 2.4.4\n8. REPORT TIMELINE\n==================\n2022-02-28: Discovery of the vulnerability\n2022-02-28: WPScan (CNA) assigns CVE-2022-0779\n2022-03-03: Contacted the vendor via their contact form\n2022-03-06: Vendor response, acknowledgement of the issue\n2022-03-18: Version 2.4.2 is released\n2022-03-22: Vulnerability is still exploitable since fix was applied only client-side. Contacted vendor again.\n2022-04-13: No response, contacted vendor again\n2022-04-18: Vendor added a new fix to version 2.4.3. Asked to retest.\n2022-04-19: Vulnerability is still exploitable due to a logic bug in the fix. Contacted vendor again.\n2022-04-29: Vendor asks whether another fix in version 2.4.4 is fine\n2022-05-16: Fix seems to work\n2022-05-24: Public disclosure\n9. REFERENCES\n=============\nhttps://github.com/MrTuxracer/advisories\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:38.173930Z"}, {"uuid": "f49c20b1-5c96-4b6c-9b9a-e9ad911c6485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-0771", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/backupexec/registry.rb", "content": "{\"actions\": [{\"description\": \"Add a logon notice\", \"name\": \"Create Logon Notice\"}, {\"description\": \"Dump system info (user, owner, OS, CPU...)\", \"name\": \"System Information\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This modules exploits a remote registry access flaw in the BackupExec Windows\\n          Server RPC service. This vulnerability was discovered by Pedram Amini and is based\\n          on the NDR stub information posted to openrce.org.\\n          Please see the action list for the different attack modes.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/admin/backupexec/registry\", \"is_install_path\": true, \"mod_time\": \"2025-05-21 08:32:40 +0000\", \"name\": \"Veritas Backup Exec Server Registry Access\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/backupexec/registry.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/backupexec/registry\", \"references\": [\"OSVDB-17627\", \"CVE-2005-0771\", \"URL-https://web.archive.org/web/20110801042138/http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=269\"], \"rport\": 6106, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:42.207990Z"}, {"uuid": "408d83c8-6222-46ba-9d47-88c69b7519dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0779", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/zenworks_configuration_management_upload.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"Pedro Ribeiro \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a file upload vulnerability in Novell ZENworks Configuration\\n          Management (ZCM, which is part of the ZENworks Suite). The vulnerability exists in\\n          the UploadServlet which accepts unauthenticated file uploads and does not check the\\n          \\\"uid\\\" parameter for directory traversal characters. This allows an attacker to write\\n          anywhere in the file system, and can be abused to deploy a WAR file in the Tomcat\\n          webapps directory. ZCM up to (and including) 11.3.1 is vulnerable to this attack.\\n          This module has been tested successfully with ZCM 11.3.1 on Windows and Linux. Note\\n          that this is a similar vulnerability to ZDI-10-078 / OSVDB-63412 which also has a\\n          Metasploit exploit, but it abuses a different parameter of the same servlet.\", \"disclosure_date\": \"2015-04-07\", \"fullname\": \"exploit/multi/http/zenworks_configuration_management_upload\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"Novell ZENworks Configuration Management Arbitrary File Upload\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/zenworks_configuration_management_upload.rb\", \"platform\": \"Java\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/zenworks_configuration_management_upload\", \"references\": [\"CVE-2015-0779\", \"OSVDB-120382\", \"URL-https://seclists.org/fulldisclosure/2015/Apr/21\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Novell ZCM < v11.3.2 - Universal Java\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:24.229206Z"}, {"uuid": "c9dfa576-7064-4119-af50-4068ae596ffa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-0773", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/backupexec/remote_agent.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in the Veritas\\n          BackupExec Windows Agent software. This vulnerability occurs\\n          when a client authentication request is received with type\\n          '3' and a long password argument. Reliable execution is\\n          obtained by abusing the stack buffer overflow to smash a SEH\\n          pointer.\", \"disclosure_date\": \"2005-06-22\", \"fullname\": \"exploit/windows/backupexec/remote_agent\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:58 +0000\", \"name\": \"Veritas Backup Exec Windows Remote Agent Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/backupexec/remote_agent.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"windows/backupexec/remote_agent\", \"references\": [\"CVE-2005-0773\", \"OSVDB-17624\", \"BID-14022\", \"URL-http://www.idefense.com/application/poi/display?id=272&type=vulnerabilities\"], \"rport\": 10000, \"session_types\": false, \"targets\": [\"Veritas BE 9.0/9.1/10.0 (All Windows)\", \"Veritas BE 9.0/9.1/10.0 (Windows 2000)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:54.416754Z"}, {"uuid": "df5af78b-7faf-4462-98e0-a1d0d133735e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0779", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_rtmp.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"sinn3r \", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Adobe Flash\\n          Player.  By supplying a corrupt AMF0 \\\"_error\\\" response, it\\n          is possible to gain arbitrary remote code execution under\\n          the context of the user.\\n\\n          This vulnerability has been exploited in the wild as part of\\n          the \\\"World Uyghur Congress Invitation.doc\\\" e-mail attack.\\n          According to the advisory, 10.3.183.19 and 11.x before\\n          11.2.202.235 are affected.\", \"disclosure_date\": \"2012-05-04\", \"fullname\": \"exploit/windows/browser/adobe_flash_rtmp\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Adobe Flash Player Object Type Confusion\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/adobe_flash_rtmp.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/adobe_flash_rtmp\", \"references\": [\"CVE-2012-0779\", \"OSVDB-81656\", \"BID-53395\", \"URL-http://www.adobe.com/support/security/bulletins/apsb12-09.html\", \"URL-http://contagiodump.blogspot.com.es/2012/05/may-3-cve-2012-0779-world-uyghur.html\", \"URL-https://www.rapid7.com/blog/post/2012/06/22/the-secret-sauce-to-cve-2012-0779-adobe-flash-object-confusion-vulnerability\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\", \"IE 6 on Windows XP SP3\", \"IE 7 on Windows XP SP3\", \"IE 8 on Windows XP SP3 with msvcrt ROP\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:57.753081Z"}, {"uuid": "50b1b1fd-4b14-4570-8863-63b7c26882c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-0774", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/apache_modjk_overflow.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Nicob \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This is a stack buffer overflow exploit for mod_jk 1.2.20.\\n          Should work on any Win32 OS.\", \"disclosure_date\": \"2007-03-02\", \"fullname\": \"exploit/windows/http/apache_modjk_overflow\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:31 +0000\", \"name\": \"Apache mod_jk 1.2.20 Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/http/apache_modjk_overflow.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"windows/http/apache_modjk_overflow\", \"references\": [\"CVE-2007-0774\", \"OSVDB-33855\", \"BID-22791\", \"ZDI-07-008\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"mod_jk 1.2.20 (Apache 1.3.x/2.0.x/2.2.x) (any win32 OS/language)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:42.302057Z"}, {"uuid": "747a1196-ecca-4fcd-8fc3-7ca4004144e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/cissp/5722", "content": "Analytics\nTop 10 Most Used Vulns of the Month\n\nCVE-2022-1096 - Type Confusion in V8\nhttps://github.com/Maverick-cmd/Chrome-and-Edge-Version-Dumper\n\nCVE-2022-0847 - Dirty Pipe Vuln\n\nCVE-2022-0778 - OpenSSL Illegal x.509 certificate construction\n\nCVE-2022-0492 - Privilege escalation vuln causing container escape\nhttps://sysdig.com/blog/detecting-mitigating-cve-2022-0492-sysdig\n\nCVE-2022-22947 - Spring Cloud Gateway RCE\n\nCVE-2022-22963 - Spring Core RCE\n\nCVE-2022-25636 - net/netfilter/nf_dup_netdev.c in the Linux kernel <5.6.10 allows local users to gain privileges because of a heap out-of-bounds write\n\nCVE-2022-27254 - Vuln in Honda's Remote Keyless System\nhttps://github.com/nonamecoder/CVE-2022-27254\n\nCVE-2022-0609 - https://blog.google/threat-analysis-group/countering-threats-north-korea", "creation_timestamp": "2026-09-10T10:00:05.171841Z"}, {"uuid": "076859ce-26ff-4425-b86f-c680d151852c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/cissp/5512", "content": "http://fumalwareanalysis.blogspot.com/p/malware-analysis-tutorials-reverse.html?m=1\n\nA new \"B1txor20\" Linux botnet malware has been discovered that spreads via the Log4J vulnerability and uses DNS tunnels for covert C2 communications.\nRead details: https://thehackernews.com/2022/03/new-b1txor20-linux-botnet-uses-dns.html\n\nA new infinite loop vulnerability (CVE-2022-0778) in OpenSSL could allow attackers to crash remote servers by passing a malformed certificate.\nRead details: https://thehackernews.com/2022/03/new-infinite-loop-bug-in-openssl-could.html\n\nFBI and CISA warn that Russian state-sponsored hackers are exploiting misconfigured multi-factor authentication (MFA) protocols and vulnerabilities in the Windows Print Spooler for cyberattacks.\nRead details: https://thehackernews.com/2022/03/fbi-cisa-warn-of-russian-hackers.html\n\nhttps://kb.cybermentordojo.com/knowledge-base/entry-to-cyber-blueprint/", "creation_timestamp": "2026-09-10T11:00:04.413847Z"}, {"uuid": "2588c9b6-42ea-47ce-b259-3ff6edee3c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/cissp/5722", "content": "Analytics\nTop 10 Most Used Vulns of the Month\n\nCVE-2022-1096 - Type Confusion in V8\nhttps://github.com/Maverick-cmd/Chrome-and-Edge-Version-Dumper\n\nCVE-2022-0847 - Dirty Pipe Vuln\n\nCVE-2022-0778 - OpenSSL Illegal x.509 certificate construction\n\nCVE-2022-0492 - Privilege escalation vuln causing container escape\nhttps://sysdig.com/blog/detecting-mitigating-cve-2022-0492-sysdig\n\nCVE-2022-22947 - Spring Cloud Gateway RCE\n\nCVE-2022-22963 - Spring Core RCE\n\nCVE-2022-25636 - net/netfilter/nf_dup_netdev.c in the Linux kernel <5.6.10 allows local users to gain privileges because of a heap out-of-bounds write\n\nCVE-2022-27254 - Vuln in Honda's Remote Keyless System\nhttps://github.com/nonamecoder/CVE-2022-27254\n\nCVE-2022-0609 - https://blog.google/threat-analysis-group/countering-threats-north-korea", "creation_timestamp": "2026-09-11T00:00:43.286813Z"}, {"uuid": "b83bcecc-1823-4a2b-824a-8e433eee338a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0778", "type": "seen", "source": "https://t.me/cissp/5512", "content": "http://fumalwareanalysis.blogspot.com/p/malware-analysis-tutorials-reverse.html?m=1\n\nA new \"B1txor20\" Linux botnet malware has been discovered that spreads via the Log4J vulnerability and uses DNS tunnels for covert C2 communications.\nRead details: https://thehackernews.com/2022/03/new-b1txor20-linux-botnet-uses-dns.html\n\nA new infinite loop vulnerability (CVE-2022-0778) in OpenSSL could allow attackers to crash remote servers by passing a malformed certificate.\nRead details: https://thehackernews.com/2022/03/new-infinite-loop-bug-in-openssl-could.html\n\nFBI and CISA warn that Russian state-sponsored hackers are exploiting misconfigured multi-factor authentication (MFA) protocols and vulnerabilities in the Windows Print Spooler for cyberattacks.\nRead details: https://thehackernews.com/2022/03/fbi-cisa-warn-of-russian-hackers.html\n\nhttps://kb.cybermentordojo.com/knowledge-base/entry-to-cyber-blueprint/", "creation_timestamp": "2026-09-11T00:00:42.434034Z"}, {"uuid": "f4ef3acf-3a25-445e-bbb2-4946812355d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/133", "content": "\ud83d\udea8 CVE-2026-0770 | \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a \u0645\u0646\u0635\u0629 Langflow\n\n\u26a0\ufe0f \u0627\u0644\u062e\u0637\u0648\u0631\u0629: 9.8/10 (\u062d\u0631\u062c\u0629 \u062c\u062f\u0627\u064b)\n\ud83d\udcc5 \u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641: \u064a\u0648\u0646\u064a\u0648 2026 | CISA \u0623\u0636\u0627\u0641\u062a\u0647\u0627: 21 \u064a\u0648\u0644\u064a\u0648 2026\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u2753 \u0645\u0627 \u0647\u064a Langflow\u061f\n\u0645\u0646\u0635\u0629 \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0644\u0628\u0646\u0627\u0621 AI Agents \u0648\u062e\u0637\u0648\u0637 \u0633\u064a\u0631 \u0627\u0644\u0639\u0645\u0644 (Workflows) \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 LLMs.\n\n\u2753 \u0645\u0627 \u0647\u064a \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n\u0646\u0642\u0637\u0629 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0643\u0648\u062f /api/v1/validate/code \u0643\u0627\u0646\u062a \u062a\u0633\u062a\u062e\u062f\u0645 exec() \u0628\u062f\u0644 compile() \u0641\u0642\u0637.\n\n\u0627\u0644\u0647\u0627\u0643\u0631 \u064a\u0631\u0633\u0644 \u0643\u0648\u062f Python \u0628\u0633\u064a\u0637 \u2014 \u0627\u0644\u0645\u0646\u0635\u0629 \"\u062a\u0641\u062d\u0635\u0647\" \u2014 \u0648\u0627\u0644\u0643\u0648\u062f \u064a\u0646\u0641\u0630 \u062a\u0644\u0642\u0627\u0626\u064a\u0627\u064b!\n\n\ud83d\udca1 \u0645\u062b\u0627\u0644 \u0628\u0633\u064a\u0637:\ndef pwn(x=import('os').system('id')):\n    pass\n\n\u0647\u0630\u0627 \u0627\u0644\u0643\u0648\u062f \"\u0645\u0627 \u064a\u062a\u0645 \u0627\u0633\u062a\u062f\u0639\u0627\u0624\u0647\" \u2014 \u0628\u0633 \u062a\u0639\u0631\u064a\u0641\u0647 \u064a\u0646\u0641\u0630 \u0627\u0644\u0623\u0645\u0631 id \u0639\u0644\u0649 \u0627\u0644\u0633\u064a\u0631\u0641\u0631!\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd34 \u0644\u0645\u0627\u0630\u0627 \u062e\u0637\u064a\u0631\u0629\u061f\n\u2022 \u0644\u0627 \u062a\u062d\u062a\u0627\u062c \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644 (Unauthenticated)\n\u2022 \u0637\u0644\u0628 POST \u0648\u0627\u062d\u062f \u0643\u0627\u0641\u064a\n\u2022 \u062a\u0646\u0641\u0630 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0641\u064a \u0627\u0644\u063a\u0627\u0644\u0628\n\u2022 \u062a\u0633\u0631\u0642: \u0645\u0641\u0627\u062a\u064a\u062d AWS\u060c \u0628\u064a\u0627\u0646\u0627\u062a Kubernetes\u060c \u0645\u062a\u063a\u064a\u0631\u0627\u062a \u0627\u0644\u0628\u064a\u0626\u0629\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udee1 \u0627\u0644\u062d\u0645\u0627\u064a\u0629:\n1\ufe0f\u20e3 \u062d\u062f\u0651\u062b Langflow \u0644\u0640 1.10.1 \u0641\u0648\u0631\u0627\u064b\n2\ufe0f\u20e3 \u0627\u0641\u062d\u0635 \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0644\u0640 /api/v1/validate/code \u0645\u0646\u0630 27 \u064a\u0648\u0646\u064a\u0648\n3\ufe0f\u20e3 \u063a\u064a\u0651\u0631 \u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d \u0648\u0627\u0644\u0643\u0644\u0645\u0627\u062a \u0627\u0644\u0633\u0631\u064a\u0629\n4\ufe0f\u20e3 \u0644\u0627 \u062a\u0639\u0631\u0636 Langflow \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0627\u0644\u0645\u0641\u062a\u0648\u062d\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udcca \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u0647\u062c\u0648\u0645 (Attack Chain):\n1. \u0627\u0644\u0628\u062d\u062b \u0639\u0646 \u0633\u064a\u0631\u0641\u0631\u0627\u062a Langflow \u0627\u0644\u0645\u0643\u0634\u0648\u0641\u0629\n2. \u0625\u0631\u0633\u0627\u0644 \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0644\u0644\u062a\u062d\u0642\u0642\n3. \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u0646\u0638\u0627\u0645\n4. \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0640 Cloud\n5. \u0646\u0634\u0631 Malware \u0623\u0648 Cryptominer", "creation_timestamp": "2026-09-13T20:00:05.112473Z"}, {"uuid": "31ef10a9-6783-4344-b9e2-704c51029397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/132", "content": "\ud83d\udea8 CVE-2026-0770 | \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a \u0645\u0646\u0635\u0629 Langflow\n\n\u26a0\ufe0f \u0627\u0644\u062e\u0637\u0648\u0631\u0629: 9.8/10 (\u062d\u0631\u062c\u0629 \u062c\u062f\u0627\u064b)\n\ud83d\udcc5 \u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641: \u064a\u0648\u0646\u064a\u0648 2026 | CISA \u0623\u0636\u0627\u0641\u062a\u0647\u0627: 21 \u064a\u0648\u0644\u064a\u0648 2026\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u2753 \u0645\u0627 \u0647\u064a Langflow\u061f\n\u0645\u0646\u0635\u0629 \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0644\u0628\u0646\u0627\u0621 AI Agents \u0648\u062e\u0637\u0648\u0637 \u0633\u064a\u0631 \u0627\u0644\u0639\u0645\u0644 (Workflows) \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 LLMs.\n\n\u2753 \u0645\u0627 \u0647\u064a \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n\u0646\u0642\u0637\u0629 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0643\u0648\u062f /api/v1/validate/code \u0643\u0627\u0646\u062a \u062a\u0633\u062a\u062e\u062f\u0645 exec() \u0628\u062f\u0644 compile() \u0641\u0642\u0637.\n\n\u0627\u0644\u0647\u0627\u0643\u0631 \u064a\u0631\u0633\u0644 \u0643\u0648\u062f Python \u0628\u0633\u064a\u0637 \u2014 \u0627\u0644\u0645\u0646\u0635\u0629 \"\u062a\u0641\u062d\u0635\u0647\" \u2014 \u0648\u0627\u0644\u0643\u0648\u062f \u064a\u0646\u0641\u0630 \u062a\u0644\u0642\u0627\u0626\u064a\u0627\u064b!\n\n\ud83d\udca1 \u0645\u062b\u0627\u0644 \u0628\u0633\u064a\u0637:\ndef pwn(x=import('os').system('id')):\n    pass\n\n\u0647\u0630\u0627 \u0627\u0644\u0643\u0648\u062f \"\u0645\u0627 \u064a\u062a\u0645 \u0627\u0633\u062a\u062f\u0639\u0627\u0624\u0647\" \u2014 \u0628\u0633 \u062a\u0639\u0631\u064a\u0641\u0647 \u064a\u0646\u0641\u0630 \u0627\u0644\u0623\u0645\u0631 id \u0639\u0644\u0649 \u0627\u0644\u0633\u064a\u0631\u0641\u0631!\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd34 \u0644\u0645\u0627\u0630\u0627 \u062e\u0637\u064a\u0631\u0629\u061f\n\u2022 \u0644\u0627 \u062a\u062d\u062a\u0627\u062c \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644 (Unauthenticated)\n\u2022 \u0637\u0644\u0628 POST \u0648\u0627\u062d\u062f \u0643\u0627\u0641\u064a\n\u2022 \u062a\u0646\u0641\u0630 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0641\u064a \u0627\u0644\u063a\u0627\u0644\u0628\n\u2022 \u062a\u0633\u0631\u0642: \u0645\u0641\u0627\u062a\u064a\u062d AWS\u060c \u0628\u064a\u0627\u0646\u0627\u062a Kubernetes\u060c \u0645\u062a\u063a\u064a\u0631\u0627\u062a \u0627\u0644\u0628\u064a\u0626\u0629\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udee1 \u0627\u0644\u062d\u0645\u0627\u064a\u0629:\n1\ufe0f\u20e3 \u062d\u062f\u0651\u062b Langflow \u0644\u0640 1.10.1 \u0641\u0648\u0631\u0627\u064b\n2\ufe0f\u20e3 \u0627\u0641\u062d\u0635 \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0644\u0640 /api/v1/validate/code \u0645\u0646\u0630 27 \u064a\u0648\u0646\u064a\u0648\n3\ufe0f\u20e3 \u063a\u064a\u0651\u0631 \u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d \u0648\u0627\u0644\u0643\u0644\u0645\u0627\u062a \u0627\u0644\u0633\u0631\u064a\u0629\n4\ufe0f\u20e3 \u0644\u0627 \u062a\u0639\u0631\u0636 Langflow \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0627\u0644\u0645\u0641\u062a\u0648\u062d\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udcca \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u0647\u062c\u0648\u0645 (Attack Chain):\n1. \u0627\u0644\u0628\u062d\u062b \u0639\u0646 \u0633\u064a\u0631\u0641\u0631\u0627\u062a Langflow \u0627\u0644\u0645\u0643\u0634\u0648\u0641\u0629\n2. \u0625\u0631\u0633\u0627\u0644 \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0644\u0644\u062a\u062d\u0642\u0642\n3. \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u0646\u0638\u0627\u0645\n4. \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0640 Cloud\n5. \u0646\u0634\u0631 Malware \u0623\u0648 Cryptominer\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd17 \u0627\u0644\u0645\u0635\u062f\u0631: resecurity.com\n\ud83d\udce4 \u0634\u0627\u0631\u0643 \u0645\u0639 \u0641\u0631\u064a\u0642 DevOps/Security \u0639\u0646\u062f\u0643\n\ud83d\udcac \u0647\u0644 \u062a\u0633\u062a\u062e\u062f\u0645 Langflow\u061f \u0627\u0643\u062a\u0628 \u0644\u0646\u0627 \ud83d\udc47\n\n#CVE2026_0770 #Langflow #RCE #Cybersecurity t.me/CYPERMRED", "creation_timestamp": "2026-09-13T20:00:05.151414Z"}, {"uuid": "e7f1da9c-4722-4911-afd4-9634f1fdde2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/133", "content": "\ud83d\udea8 CVE-2026-0770 | \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a \u0645\u0646\u0635\u0629 Langflow\n\n\u26a0\ufe0f \u0627\u0644\u062e\u0637\u0648\u0631\u0629: 9.8/10 (\u062d\u0631\u062c\u0629 \u062c\u062f\u0627\u064b)\n\ud83d\udcc5 \u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641: \u064a\u0648\u0646\u064a\u0648 2026 | CISA \u0623\u0636\u0627\u0641\u062a\u0647\u0627: 21 \u064a\u0648\u0644\u064a\u0648 2026\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u2753 \u0645\u0627 \u0647\u064a Langflow\u061f\n\u0645\u0646\u0635\u0629 \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0644\u0628\u0646\u0627\u0621 AI Agents \u0648\u062e\u0637\u0648\u0637 \u0633\u064a\u0631 \u0627\u0644\u0639\u0645\u0644 (Workflows) \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 LLMs.\n\n\u2753 \u0645\u0627 \u0647\u064a \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n\u0646\u0642\u0637\u0629 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0643\u0648\u062f /api/v1/validate/code \u0643\u0627\u0646\u062a \u062a\u0633\u062a\u062e\u062f\u0645 exec() \u0628\u062f\u0644 compile() \u0641\u0642\u0637.\n\n\u0627\u0644\u0647\u0627\u0643\u0631 \u064a\u0631\u0633\u0644 \u0643\u0648\u062f Python \u0628\u0633\u064a\u0637 \u2014 \u0627\u0644\u0645\u0646\u0635\u0629 \"\u062a\u0641\u062d\u0635\u0647\" \u2014 \u0648\u0627\u0644\u0643\u0648\u062f \u064a\u0646\u0641\u0630 \u062a\u0644\u0642\u0627\u0626\u064a\u0627\u064b!\n\n\ud83d\udca1 \u0645\u062b\u0627\u0644 \u0628\u0633\u064a\u0637:\ndef pwn(x=import('os').system('id')):\n    pass\n\n\u0647\u0630\u0627 \u0627\u0644\u0643\u0648\u062f \"\u0645\u0627 \u064a\u062a\u0645 \u0627\u0633\u062a\u062f\u0639\u0627\u0624\u0647\" \u2014 \u0628\u0633 \u062a\u0639\u0631\u064a\u0641\u0647 \u064a\u0646\u0641\u0630 \u0627\u0644\u0623\u0645\u0631 id \u0639\u0644\u0649 \u0627\u0644\u0633\u064a\u0631\u0641\u0631!\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd34 \u0644\u0645\u0627\u0630\u0627 \u062e\u0637\u064a\u0631\u0629\u061f\n\u2022 \u0644\u0627 \u062a\u062d\u062a\u0627\u062c \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644 (Unauthenticated)\n\u2022 \u0637\u0644\u0628 POST \u0648\u0627\u062d\u062f \u0643\u0627\u0641\u064a\n\u2022 \u062a\u0646\u0641\u0630 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0641\u064a \u0627\u0644\u063a\u0627\u0644\u0628\n\u2022 \u062a\u0633\u0631\u0642: \u0645\u0641\u0627\u062a\u064a\u062d AWS\u060c \u0628\u064a\u0627\u0646\u0627\u062a Kubernetes\u060c \u0645\u062a\u063a\u064a\u0631\u0627\u062a \u0627\u0644\u0628\u064a\u0626\u0629\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udee1 \u0627\u0644\u062d\u0645\u0627\u064a\u0629:\n1\ufe0f\u20e3 \u062d\u062f\u0651\u062b Langflow \u0644\u0640 1.10.1 \u0641\u0648\u0631\u0627\u064b\n2\ufe0f\u20e3 \u0627\u0641\u062d\u0635 \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0644\u0640 /api/v1/validate/code \u0645\u0646\u0630 27 \u064a\u0648\u0646\u064a\u0648\n3\ufe0f\u20e3 \u063a\u064a\u0651\u0631 \u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d \u0648\u0627\u0644\u0643\u0644\u0645\u0627\u062a \u0627\u0644\u0633\u0631\u064a\u0629\n4\ufe0f\u20e3 \u0644\u0627 \u062a\u0639\u0631\u0636 Langflow \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0627\u0644\u0645\u0641\u062a\u0648\u062d\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udcca \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u0647\u062c\u0648\u0645 (Attack Chain):\n1. \u0627\u0644\u0628\u062d\u062b \u0639\u0646 \u0633\u064a\u0631\u0641\u0631\u0627\u062a Langflow \u0627\u0644\u0645\u0643\u0634\u0648\u0641\u0629\n2. \u0625\u0631\u0633\u0627\u0644 \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0644\u0644\u062a\u062d\u0642\u0642\n3. \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u0646\u0638\u0627\u0645\n4. \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0640 Cloud\n5. \u0646\u0634\u0631 Malware \u0623\u0648 Cryptominer", "creation_timestamp": "2026-09-14T00:00:11.166321Z"}, {"uuid": "6e3a158b-e662-45b2-aff3-6ba47266d041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/132", "content": "\ud83d\udea8 CVE-2026-0770 | \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a \u0645\u0646\u0635\u0629 Langflow\n\n\u26a0\ufe0f \u0627\u0644\u062e\u0637\u0648\u0631\u0629: 9.8/10 (\u062d\u0631\u062c\u0629 \u062c\u062f\u0627\u064b)\n\ud83d\udcc5 \u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641: \u064a\u0648\u0646\u064a\u0648 2026 | CISA \u0623\u0636\u0627\u0641\u062a\u0647\u0627: 21 \u064a\u0648\u0644\u064a\u0648 2026\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u2753 \u0645\u0627 \u0647\u064a Langflow\u061f\n\u0645\u0646\u0635\u0629 \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0644\u0628\u0646\u0627\u0621 AI Agents \u0648\u062e\u0637\u0648\u0637 \u0633\u064a\u0631 \u0627\u0644\u0639\u0645\u0644 (Workflows) \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 LLMs.\n\n\u2753 \u0645\u0627 \u0647\u064a \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n\u0646\u0642\u0637\u0629 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0643\u0648\u062f /api/v1/validate/code \u0643\u0627\u0646\u062a \u062a\u0633\u062a\u062e\u062f\u0645 exec() \u0628\u062f\u0644 compile() \u0641\u0642\u0637.\n\n\u0627\u0644\u0647\u0627\u0643\u0631 \u064a\u0631\u0633\u0644 \u0643\u0648\u062f Python \u0628\u0633\u064a\u0637 \u2014 \u0627\u0644\u0645\u0646\u0635\u0629 \"\u062a\u0641\u062d\u0635\u0647\" \u2014 \u0648\u0627\u0644\u0643\u0648\u062f \u064a\u0646\u0641\u0630 \u062a\u0644\u0642\u0627\u0626\u064a\u0627\u064b!\n\n\ud83d\udca1 \u0645\u062b\u0627\u0644 \u0628\u0633\u064a\u0637:\ndef pwn(x=import('os').system('id')):\n    pass\n\n\u0647\u0630\u0627 \u0627\u0644\u0643\u0648\u062f \"\u0645\u0627 \u064a\u062a\u0645 \u0627\u0633\u062a\u062f\u0639\u0627\u0624\u0647\" \u2014 \u0628\u0633 \u062a\u0639\u0631\u064a\u0641\u0647 \u064a\u0646\u0641\u0630 \u0627\u0644\u0623\u0645\u0631 id \u0639\u0644\u0649 \u0627\u0644\u0633\u064a\u0631\u0641\u0631!\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd34 \u0644\u0645\u0627\u0630\u0627 \u062e\u0637\u064a\u0631\u0629\u061f\n\u2022 \u0644\u0627 \u062a\u062d\u062a\u0627\u062c \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644 (Unauthenticated)\n\u2022 \u0637\u0644\u0628 POST \u0648\u0627\u062d\u062f \u0643\u0627\u0641\u064a\n\u2022 \u062a\u0646\u0641\u0630 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0641\u064a \u0627\u0644\u063a\u0627\u0644\u0628\n\u2022 \u062a\u0633\u0631\u0642: \u0645\u0641\u0627\u062a\u064a\u062d AWS\u060c \u0628\u064a\u0627\u0646\u0627\u062a Kubernetes\u060c \u0645\u062a\u063a\u064a\u0631\u0627\u062a \u0627\u0644\u0628\u064a\u0626\u0629\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udee1 \u0627\u0644\u062d\u0645\u0627\u064a\u0629:\n1\ufe0f\u20e3 \u062d\u062f\u0651\u062b Langflow \u0644\u0640 1.10.1 \u0641\u0648\u0631\u0627\u064b\n2\ufe0f\u20e3 \u0627\u0641\u062d\u0635 \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0644\u0640 /api/v1/validate/code \u0645\u0646\u0630 27 \u064a\u0648\u0646\u064a\u0648\n3\ufe0f\u20e3 \u063a\u064a\u0651\u0631 \u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d \u0648\u0627\u0644\u0643\u0644\u0645\u0627\u062a \u0627\u0644\u0633\u0631\u064a\u0629\n4\ufe0f\u20e3 \u0644\u0627 \u062a\u0639\u0631\u0636 Langflow \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0627\u0644\u0645\u0641\u062a\u0648\u062d\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udcca \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u0647\u062c\u0648\u0645 (Attack Chain):\n1. \u0627\u0644\u0628\u062d\u062b \u0639\u0646 \u0633\u064a\u0631\u0641\u0631\u0627\u062a Langflow \u0627\u0644\u0645\u0643\u0634\u0648\u0641\u0629\n2. \u0625\u0631\u0633\u0627\u0644 \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0644\u0644\u062a\u062d\u0642\u0642\n3. \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u0646\u0638\u0627\u0645\n4. \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0640 Cloud\n5. \u0646\u0634\u0631 Malware \u0623\u0648 Cryptominer\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd17 \u0627\u0644\u0645\u0635\u062f\u0631: resecurity.com\n\ud83d\udce4 \u0634\u0627\u0631\u0643 \u0645\u0639 \u0641\u0631\u064a\u0642 DevOps/Security \u0639\u0646\u062f\u0643\n\ud83d\udcac \u0647\u0644 \u062a\u0633\u062a\u062e\u062f\u0645 Langflow\u061f \u0627\u0643\u062a\u0628 \u0644\u0646\u0627 \ud83d\udc47\n\n#CVE2026_0770 #Langflow #RCE #Cybersecurity t.me/CYPERMRED", "creation_timestamp": "2026-09-14T00:00:11.216318Z"}, {"uuid": "1d177ba6-5d21-4ebf-84df-e9b1a1beb9f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0777", "type": "seen", "source": "https://bsky.app/profile/grosservo.bsky.social/post/3mvkbfzwehs2u", "content": "SFTP, the secure file transfer protocol is based on SSH.\nMost software vendors don't re-implement the SSH stack in their products and use SSH stacks of the market, many of which have known vulnerabilities.\nA famous one was CVE-2016-0777 whereby the key could be extracted through MITM attack.", "creation_timestamp": "2026-09-15T09:04:54.150072Z"}, {"uuid": "276f51cc-f9d6-4576-b827-b0f26d25aefb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3mvniypzuabu2", "content": "Two remote code execution flaws that CISA lists as known exploited turned up this week inside ordinary commodity crawling.\n\nAdversaries attempted CVE-2025-3248 and CVE-2026-0770 in Langflow, the AI application platform, at 3,968 and 4,770 connection attempts [\u2026] \n\n[Original post on infosec.exchange]", "creation_timestamp": "2026-09-16T15:58:51.469307Z"}, {"uuid": "e1d2bb68-40a0-4af6-a4ce-23854dcb113d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://infosec.exchange/users/greynoise/statuses/117281541720935473", "content": "Two remote code execution flaws that CISA lists as known exploited turned up this week inside ordinary commodity crawling.\nAdversaries attempted CVE-2025-3248 and CVE-2026-0770 in Langflow, the AI application platform, at 3,968 and 4,770 connection attempts, both new to this brief series. The addresses behind them are the interesting part. Every one of them also carries a generic web crawling tag, roughly nine in ten collected environment files and enumerated WordPress installations, and about four in five requested repository configuration in the same window. Two hosting providers supply roughly 95% of those addresses, which means the source count measures how that traffic leaves those networks. A sweep of that shape reaches any exposed Langflow instance a general crawler touches.\nThe rest of the week concentrated the same way. Five of the ten highest-volume sources ran SSH enumeration and credential attacks from consumer broadband and mobile carrier networks, and four of them carried 36% of all alternative-port SSH crawling we observed. Two shared client fingerprints group those four across four separate networks, marking a common tool class. One address supplied more than half of all Remote Desktop crawling observed and three fifths of the credential attempts inside it.\nGreyNoise customers get the full weekly brief. Our public At The Edge one-page: https://www.greynoise.io/resources/at-the-edge-clear-091426", "creation_timestamp": "2026-09-16T15:58:27.086571Z"}]}