{"vulnerability": "-081", "sightings": [{"uuid": "7386dc45-2834-4ab4-a764-bc9b21f9a341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0812", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:18.000000Z"}, {"uuid": "220c77f9-5476-4f92-bd34-0cfcd38a1c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-0815", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:39.000000Z"}, {"uuid": "df730169-a770-483f-afb7-de1fe30aa38b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0810", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "e18c2e36-57a0-47d4-903c-d2fd44585f12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0816", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "f5ca3339-f593-4730-b99c-a242c1e05e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0812", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:37.000000Z"}, {"uuid": "7368dc21-efce-400c-980a-6a7037541369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0818", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:37.000000Z"}, {"uuid": "dcc6cc1d-9ff2-4514-abef-900a3074f506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0818", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyofqunhf2x", "content": "", "creation_timestamp": "2025-02-12T17:15:44.298264Z"}, {"uuid": "c08df246-d4c6-4fc9-bba0-1341633148c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0818", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyoft4tyv2x", "content": "", "creation_timestamp": "2025-02-12T17:15:46.720976Z"}, {"uuid": "33d7e67e-280b-46a4-bded-86864a2ec3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0818", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhyry42kol2o", "content": "", "creation_timestamp": "2025-02-12T18:19:50.846056Z"}, {"uuid": "8d332e1b-45d0-4a11-9528-1bafc176ee40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0818", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhyry4lds32o", "content": "", "creation_timestamp": "2025-02-12T18:19:53.097942Z"}, {"uuid": "73d1e029-00fb-4c81-8465-907302c6446b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0814", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li25dij7sa2a", "content": "", "creation_timestamp": "2025-02-13T07:15:34.213857Z"}, {"uuid": "4ecac114-adcf-48c8-a5ac-6c7207f7f152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0815", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li25dkosa32c", "content": "", "creation_timestamp": "2025-02-13T07:15:36.679570Z"}, {"uuid": "4ab23981-e228-44e0-8660-01f856802b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0816", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li25dmuoki2s", "content": "", "creation_timestamp": "2025-02-13T07:15:38.751761Z"}, {"uuid": "345ffd21-f8c9-4ec3-9e27-0e81a0ed5c1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0815", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li2i7xkvvk2p", "content": "", "creation_timestamp": "2025-02-13T10:30:27.988400Z"}, {"uuid": "ecd437e7-29a4-4c55-aa2c-92a30a15e875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0814", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li2i7xoalz2v", "content": "", "creation_timestamp": "2025-02-13T10:30:28.677069Z"}, {"uuid": "ad7cf00a-c007-4ced-8459-fe79667eb0f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0816", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li2i7xy2vv2e", "content": "", "creation_timestamp": "2025-02-13T10:30:30.260599Z"}, {"uuid": "3e0c3680-78f1-4cd4-94a6-ce8bb744e585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0813", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-077-01", "content": "", "creation_timestamp": "2025-03-18T11:00:00.000000Z"}, {"uuid": "15ae9253-5500-4be3-813b-10541000de70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0817", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lih542wvfg27", "content": "", "creation_timestamp": "2025-02-18T11:16:01.870151Z"}, {"uuid": "f2427834-a0de-4404-8a6c-0a752fef6d0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0817", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lihg3gzekh2v", "content": "", "creation_timestamp": "2025-02-18T13:56:44.760239Z"}, {"uuid": "1f711f55-2b38-42ac-8f4f-afb7d03318bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0816", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-079-02", "content": "", "creation_timestamp": "2025-03-20T11:00:00.000000Z"}, {"uuid": "d1c2feb0-7bc6-4db3-9377-cf9bdf5bcab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0815", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-079-02", "content": "", "creation_timestamp": "2025-03-20T11:00:00.000000Z"}, {"uuid": "44a84ae5-2fb2-48f3-97fd-68fa3b09746c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0814", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-079-02", "content": "", "creation_timestamp": "2025-03-20T11:00:00.000000Z"}, {"uuid": "0206ec24-50a1-449c-91b4-de379b05b51a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0818", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:06.000000Z"}, {"uuid": "ccf1304a-17c6-4bc7-b577-5b6595760179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0812", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:06.000000Z"}, {"uuid": "e831ef51-9782-4177-bc89-e6dca4a49687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-0815", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:36.000000Z"}, {"uuid": "7590467b-e446-4824-b674-6ba2ad3ffb52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0810", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:13.000000Z"}, {"uuid": "91f27d72-ed63-4598-bae1-3747ad56b019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0816", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:35.000000Z"}, {"uuid": "730352f7-64b8-4695-89d3-3dcdab94e36a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0811", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llxgocedek23", "content": "", "creation_timestamp": "2025-04-04T03:05:29.651065Z"}, {"uuid": "7f1420ea-d57e-4b03-8cd8-471051947cea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0812", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms03_049_netapi.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "3545023a-e458-4017-9a20-98ccf69dd7e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0818", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms04_007_killbill.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "006aeb72-6a90-4481-9438-5841fb3723ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0818", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwb5qqesrd2q", "content": "", "creation_timestamp": "2025-08-13T06:04:19.537804Z"}, {"uuid": "9d8f8f90-e56f-4ba8-9187-6906b7ef0a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0818", "type": "seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3lwbc2vpfxs2a", "content": "", "creation_timestamp": "2025-08-13T07:21:35.785820Z"}, {"uuid": "3deb6884-94f6-4be1-9bbe-3ac6f63d9c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0818", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3lwgh5navxi2n", "content": "", "creation_timestamp": "2025-08-15T08:35:55.448768Z"}, {"uuid": "78291eb3-b8db-44fb-a454-d808369fb788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-0815", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/typo3_sa_2009_002.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "e31dfe75-9d85-4420-a000-b9741e3f79c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0816", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "0f0c0cf0-5fe6-4c63-93ed-2ce35b7b925f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0815", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "67678c14-5d3a-4d5d-9424-fa3a3d4f8f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0814", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "87ca17b3-f074-4897-ad40-894cef4d8f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0816", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_pdfjs_privilege_escalation.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "b8e36c25-179a-4328-bd80-c32d44189b15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0810", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:51.000000Z"}, {"uuid": "766e7e94-0192-47e3-a71c-e289a36e06fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0816", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:17.000000Z"}, {"uuid": "a8f3bf31-6dc2-4fdd-bffe-972ad76541c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0810", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:14.000000Z"}, {"uuid": "b2847004-1619-4385-a568-6576b4b461a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0810", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms13_071_theme.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "3f038368-5698-4ead-8bf8-c4c392647573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0818", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mdyn52xlwov2", "content": "", "creation_timestamp": "2026-02-04T00:38:27.656345Z"}, {"uuid": "277ec367-dddc-48a3-964f-29efec8e5178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0817", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbz5drugpy2y", "content": "", "creation_timestamp": "2026-01-09T18:38:08.364194Z"}, {"uuid": "e1862838-5d60-4f51-9fff-429aca031be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0812", "type": "seen", "source": "https://gist.github.com/Darkcrai86/1087c4a0b75705e972c23337611598b6", "content": "", "creation_timestamp": "2026-01-14T09:15:53.000000Z"}, {"uuid": "bbbe7da4-c1c9-4ce7-94bb-e8122396feeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0813", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcerdbhybi2u", "content": "", "creation_timestamp": "2026-01-14T09:35:01.639873Z"}, {"uuid": "cc7977d4-f41c-43ee-bf71-d51d0a968f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0812", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mceri5vasn2g", "content": "", "creation_timestamp": "2026-01-14T09:37:45.556493Z"}, {"uuid": "ce4595d0-f8c8-4fd7-bbd3-fc545f7e3e7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0812", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mcmt32c4es2f", "content": "", "creation_timestamp": "2026-01-17T14:27:32.163777Z"}, {"uuid": "cee8e21c-e043-439d-8722-47c3defca07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0819", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhgnawpb2n2n", "content": "", "creation_timestamp": "2026-03-19T18:33:25.861611Z"}, {"uuid": "721e2234-08b7-4cce-8010-d41447701e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0810", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mde7755jzt2i", "content": "", "creation_timestamp": "2026-01-26T21:35:47.335292Z"}, {"uuid": "f6f33090-abf7-4ee5-84dd-3304561946b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0818", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdhy4h375d2j", "content": "", "creation_timestamp": "2026-01-28T09:39:39.408946Z"}, {"uuid": "afff0f8e-cc5a-4b55-bc3c-ee746a156369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0818", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mdilylrr5r2h", "content": "", "creation_timestamp": "2026-01-28T15:35:24.872630Z"}, {"uuid": "e567a8fb-fa93-41f7-8c6e-78cb9bfca5c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0812", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/8121", "content": "", "creation_timestamp": "2009-02-27T00:00:00.000000Z"}, {"uuid": "5b618688-f2b1-4c1d-aae2-14cf0cd9d9b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0816", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/12564", "content": "", "creation_timestamp": "2010-05-11T00:00:00.000000Z"}, {"uuid": "ab4cce73-c6d5-4f19-8f82-ac7206d2dbc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0811", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/8143", "content": "", "creation_timestamp": "2009-03-03T00:00:00.000000Z"}, {"uuid": "14159ba9-6ef9-4a30-baed-3af554aaed0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2003-0812", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16378", "content": "", "creation_timestamp": "2010-05-09T00:00:00.000000Z"}, {"uuid": "9904709f-f12d-4622-8209-e6f884c1c5b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0812", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/9550", "content": "", "creation_timestamp": "2009-08-31T00:00:00.000000Z"}, {"uuid": "e2350f43-46a6-47fe-82fd-3dd8a53dc03a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0813", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/8144", "content": "", "creation_timestamp": "2009-03-03T00:00:00.000000Z"}, {"uuid": "402dc062-de65-430f-b470-6b462bd47741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0810", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/8101", "content": "", "creation_timestamp": "2009-02-24T00:00:00.000000Z"}, {"uuid": "ed7a8e31-b923-4adb-83fd-14f8a9165552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2015-0816", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/37958", "content": "", "creation_timestamp": "2015-08-24T00:00:00.000000Z"}, {"uuid": "c555d986-7f49-4cf3-803f-be4c2bd32913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2003-0818", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16377", "content": "", "creation_timestamp": "2010-07-25T00:00:00.000000Z"}, {"uuid": "594ebb8b-be45-449a-aebe-54420f23635f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0819", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/32838", "content": "", "creation_timestamp": "2009-02-14T00:00:00.000000Z"}, {"uuid": "3e35f778-dd16-4d53-baa7-8c63c46a56a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0815", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/8038", "content": "", "creation_timestamp": "2009-02-10T00:00:00.000000Z"}, {"uuid": "c7855b39-9a49-4103-bda4-224fe4e91b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0814", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/32833", "content": "", "creation_timestamp": "2009-03-02T00:00:00.000000Z"}, {"uuid": "83928985-15c6-446a-a30a-69128a82f26b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2013-0810", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/28482", "content": "", "creation_timestamp": "2013-09-23T00:00:00.000000Z"}, {"uuid": "8de27544-2a3b-4572-a358-97abcd05fab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0817", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/12450", "content": "", "creation_timestamp": "2010-04-29T00:00:00.000000Z"}, {"uuid": "d147191a-58e6-49fd-9686-82d1451768dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/cKure/9049", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Zero-Day: CrowdStrike\u2019s Cloud Threat Research team discovered a new vulnerability (CVE-2022-0811) in CRI-O (a container runtime engine underpinning Kubernetes). Dubbed \u201ccr8escape,\u201d when invoked, an attacker could escape from a Kubernetes container and gain root access to the host and be able to move anywhere in the cluster. Invocation of CVE-2022-0811 can allow an attacker to perform a variety of actions on objectives, including execution of malware, exfiltration of data and lateral movement across pods.\n\nInvocation of CVE-2022-0811 can allow an attacker to perform a variety of actions on objectives, including execution of malware, exfiltration of data, and lateral movement across pods.\n\nhttps://www.crowdstrike.com/blog/cr8escape-new-vulnerability-discovered-in-cri-o-container-engine-cve-2022-0811/\n\nhttps://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "creation_timestamp": "2022-03-17T08:46:54.000000Z"}, {"uuid": "b2cdb276-726a-4c8f-af98-0fd40faf7d46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1693", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aSimple webhook to block exploitation of CVE-2022-0811\nURL\uff1ahttps://github.com/spiarh/webhook-cve-2022-0811\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-03-21T09:29:43.000000Z"}, {"uuid": "65fbcbc4-76ed-4f42-8245-d436e0d376b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0814", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjwevx2hzz24", "content": "", "creation_timestamp": "2026-04-20T11:37:06.506506Z"}, {"uuid": "6ff38cbb-8a79-4d28-b1fc-758dd899abcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0815", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1944", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-0815 exploit\nURL\uff1ahttps://github.com/featherL/CVE-2022-0815-exploit\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-04-14T10:50:47.000000Z"}, {"uuid": "fc7d6d7c-8d77-40bd-ba8a-135b1d9920f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0817", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12073", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-0817\n\ud83d\udd25 CVSS Score: 9.3 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0\n\ud83d\udccf Published: 2024-03-07T01:15:20.283Z\n\ud83d\udccf Modified: 2025-04-16T15:52:53.157Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3", "creation_timestamp": "2025-04-16T15:55:54.000000Z"}, {"uuid": "d50fcde9-a4f4-4c25-a6ff-84be53353006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0817", "type": "seen", "source": "https://t.me/cvedetector/18313", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0817 - WordPress FormCraft Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0817 \nPublished : Feb. 18, 2025, 11:15 a.m. | 18\u00a0minutes ago \nDescription : The FormCraft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.9.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T12:38:01.000000Z"}, {"uuid": "592bf6e0-05b3-49a9-adb9-2327c39f2b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "published-proof-of-concept", "source": "Telegram/7Ml4_lMheQFWoLP8HS6G4y2kPw4O-CbsZ96PEHQtUpuC3WA", "content": "", "creation_timestamp": "2025-05-04T05:10:20.000000Z"}, {"uuid": "6c4bc961-fa63-49ae-8a7c-b2b923ffd4af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "published-proof-of-concept", "source": "Telegram/P054ImMwjqD_rl7lBAm-hCz5MlTq06QbnDeiIVFMTFFsHy4", "content": "", "creation_timestamp": "2025-05-04T05:11:16.000000Z"}, {"uuid": "a2453b8f-659d-4682-b850-cc40046b0205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0810", "type": "seen", "source": "Telegram/n1w7Ta-G54MRSrb1VMlA0xlYbSVuf31ZXu_QuieRtS0BjM0", "content": "", "creation_timestamp": "2026-04-08T23:30:06.000000Z"}, {"uuid": "af185b34-2461-4d82-947e-7dfc347c79c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0811", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2054", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0811\n\ud83d\udd39 Description: \nOmron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program. \n\n\n\ud83d\udccf Published: 2023-03-16T17:41:25.525Z\n\ud83d\udccf Modified: 2025-01-16T21:42:32.824Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-01\n2. https://www.ia.omron.com/product/vulnerability/OMSR-2023-001_en.pdf", "creation_timestamp": "2025-01-16T21:56:23.000000Z"}, {"uuid": "857d6308-8b35-4f1e-af66-ab29acef7195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0812", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3018", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0812\n\ud83d\udd39 Description: The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure.\n\ud83d\udccf Published: 2023-05-15T12:15:39.193Z\n\ud83d\udccf Modified: 2025-01-24T20:59:04.022Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/0ed5e1b3-f2a3-4eb1-b8ae-d3a62f600107", "creation_timestamp": "2025-01-24T21:05:08.000000Z"}, {"uuid": "1dbe5d83-315f-451e-ab9c-86d038478749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0815", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4222", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0815\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the\nproduct when malicious ICMPV6 packets are sent to the device.\n\ud83d\udccf Published: 2025-02-13T09:31:26Z\n\ud83d\udccf Modified: 2025-02-13T09:31:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0815\n2. https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-042-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-042-04.pdf", "creation_timestamp": "2025-02-13T10:09:00.000000Z"}, {"uuid": "bab8bdab-32d7-47e1-952f-ea083c689f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0816", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4226", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0816\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the\nproduct when malicious IPV6 packets are sent to the device.\n\ud83d\udccf Published: 2025-02-13T09:31:26Z\n\ud83d\udccf Modified: 2025-02-13T09:31:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0816\n2. https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-042-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-042-04.pdf", "creation_timestamp": "2025-02-13T10:09:09.000000Z"}, {"uuid": "0f174b9b-1733-4fd1-a651-a74c49a1afec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0814", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4224", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0814\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the network\nservices running on the product when malicious IEC61850-MMS packets are sent to the device. The core\nfunctionality of the breaker remains intact during the attack.\n\ud83d\udccf Published: 2025-02-13T09:31:26Z\n\ud83d\udccf Modified: 2025-02-13T09:31:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0814\n2. https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-042-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-042-04.pdf", "creation_timestamp": "2025-02-13T10:09:04.000000Z"}, {"uuid": "4bfb1f43-621c-4471-8c5e-b4e872bde071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0813", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7322", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0813\n\ud83d\udd25 CVSS Score: 7 (cvssV4_0, Vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass when an\nunauthorized user without permission rights has physical access to the EPAS-UI computer and is able to\nreboot the workstation and interrupt the normal boot process.\n\ud83d\udccf Published: 2025-03-12T15:30:03.262Z\n\ud83d\udccf Modified: 2025-03-12T15:30:03.262Z\n\ud83d\udd17 References:\n1. https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-070-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-070-02.pdf", "creation_timestamp": "2025-03-12T15:40:50.000000Z"}, {"uuid": "1593e8e3-fc21-4139-ac60-0262958a2a86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0810", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10594", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0810\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Read More & Accordion plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.5. This is due to missing or incorrect nonce validation on the addNewButtons() function. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-04-05T01:44:44.158Z\n\ud83d\udccf Modified: 2025-04-05T01:44:44.158Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a963cd9b-9f8f-4bd2-92cd-74c5e85e1d96?source=cve\n2. https://plugins.trac.wordpress.org/browser/expand-maker/trunk/classes/ReadMorePages.php#L82\n3. https://plugins.trac.wordpress.org/browser/expand-maker/trunk/classes/ReadMorePages.php#L59\n4. https://plugins.trac.wordpress.org/browser/expand-maker/trunk/classes/ReadMoreInit.php#L122", "creation_timestamp": "2025-04-05T02:36:37.000000Z"}, {"uuid": "e3737900-a191-4d61-a3f0-18d554e6565b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0810", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17339", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-0810\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Insufficient policy enforcement in DevTools in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Medium)\n\ud83d\udccf Published: 2024-01-23T23:53:00.072Z\n\ud83d\udccf Modified: 2025-05-22T17:31:09.326Z\n\ud83d\udd17 References:\n1. https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html\n2. https://crbug.com/1496250\n3. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/\n4. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/", "creation_timestamp": "2025-05-22T17:43:39.000000Z"}, {"uuid": "3e398b58-c7fc-4c68-8625-f5afed0c11cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0815", "type": "seen", "source": "https://t.me/cvedetector/17979", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0815 - Aruba Networks Denial-of-Service ICMPV6 Input Validation\", \n  \"Content\": \"CVE ID : CVE-2025-0815 \nPublished : Feb. 13, 2025, 7:15 a.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the  \nproduct when malicious ICMPV6 packets are sent to the device. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T11:18:28.000000Z"}, {"uuid": "6b7ee597-586e-48b9-8bea-e1fd1e54d52a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0814", "type": "seen", "source": "https://t.me/cvedetector/17984", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0814 - Schneider Electric Power Systems IEC61850-MMS Denial-of-Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0814 \nPublished : Feb. 13, 2025, 7:15 a.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the network  \nservices running on the product when malicious IEC61850-MMS packets are sent to the device. The core  \nfunctionality of the breaker remains intact during the attack. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T11:18:35.000000Z"}, {"uuid": "d010667c-a831-4bfe-b129-ef62267ea9fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0816", "type": "seen", "source": "https://t.me/cvedetector/17978", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0816 - Aruba Denial-of-Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0816 \nPublished : Feb. 13, 2025, 7:15 a.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the  \nproduct when malicious IPV6 packets are sent to the device. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T11:18:28.000000Z"}, {"uuid": "925c1bf6-d831-4977-8abd-fb7a5933d873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0813", "type": "seen", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/3889", "content": "fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources. The list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.    CVE program credit     CVE-2007-3641 libarchive OUSPG   CVE-2007-3644 libarchive OUSPG   CVE-2007-3645 libarchive OUSPG   CVE-2008-1372 bzip2 OUSPG   CVE-2008-1387 ClamAV OUSPG   CVE-2008-1412 F-Secure OUSPG   CVE-2008-1837 ClamAV OUSPG   CVE-2008-6536 7-zip OUSPG   CVE-2008-6903 Sophos Anti-Virus OUSPG   CVE-2010-0001 Gzip integer underflow in unlzw   CVE-2010-0192 Acroread OUSPG   CVE-2010-1205 libpng OUSPG   CVE-2010-1410 Webkit OUSPG   CVE-2010-1415 Webkit OUSPG   CVE-2010-1793 Webkit OUSPG   CVE-2010-2065 libtiff found by CERT-FI   CVE-2010-2443 libtiff found by CERT-FI   CVE-2010-2597 libtiff found by CERT-FI   CVE-2010-2482 libtiff found by CERT-FI   CVE-2011-0522 VLC found by Harry Sintonen   CVE-2011-0181 Apple ImageIO found by Harry Sintonen   CVE-2011-0198 Apple Type Services found by Harry Sintonen   CVE-2011-0205 Apple ImageIO found by Harry Sintonen   CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen   CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri   CVE-2011-1186 Chrome OUSPG   CVE-2011-1434 Chrome OUSPG   CVE-2011-2348 Chrome OUSPG   CVE-2011-2804 Chrome/pdf OUSPG   CVE-2011-2830 Chrome/pdf OUSPG   CVE-2011-2839 Chrome/pdf OUSPG   CVE-2011-2861 Chrome/pdf OUSPG   CVE-2011-3146 librsvg found by Sauli Pahlman   CVE-2011-3654 Mozilla Firefox OUSPG   CVE-2011-3892 Theora OUSPG   CVE-2011-3893 Chrome OUSPG   CVE-2011-3895 FFmpeg OUSPG   CVE-2011-3957 Chrome OUSPG   CVE-2011-3959 Chrome OUSPG   CVE-2011-3960 Chrome OUSPG   CVE-2011-3962 Chrome OUSPG   CVE-2011-3966 Chrome OUSPG   CVE-2011-3970 libxslt OUSPG   CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-0469 Mozilla Firefox OUSPG   CVE-2012-0470 Mozilla Firefox OUSPG   CVE-2012-0457 Mozilla Firefox OUSPG   CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2849 Chrome/GIF OUSPG   CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-4922 tor found by the Tor project   CVE-2012-5108 Chrome OUSPG via NodeFuzz   CVE-2012-2887 Chrome OUSPG via NodeFuzz   CVE-2012-5120 Chrome OUSPG via NodeFuzz   CVE-2012-5121 Chrome OUSPG via NodeFuzz   CVE-2012-5145 Chrome OUSPG via NodeFuzz   CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-1691 Mozilla Firefox OUSPG   CVE-2013-1708 Mozilla Firefox OUSPG   CVE-2013-4082 Wireshark found by cons0ul   CVE-2013-1732 Mozilla Firefox OUSPG   CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3669 PHP    CVE-2014-3668 PHP    CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3707 cURL Symeon Paraschoudis   CVE-2014-7933 Chrome OUSPG   CVE-2015-0797 Mozilla Firefox OUSPG   CVE-2015-0813 Mozilla Firefox OUSPG   CVE-2015-1220 Chrome OUSPG   CVE-2015-1224 Chrome OUSPG", "creation_timestamp": "2024-03-25T11:49:23.000000Z"}, {"uuid": "d4c3bf1d-b00c-40e2-ad4c-ac8f3824cde7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0819", "type": "seen", "source": "Telegram/7xIhyJO7Z_WQeZYOmdLINMZ_9FIiDPF6RfLVlvHuHgi-enE", "content": "", "creation_timestamp": "2025-06-02T15:01:46.000000Z"}, {"uuid": "e1426be2-1a6e-49e5-96d1-518fbe4b774e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/ggfcvj/3268", "content": "\u0623\u0628\u0644\u063a \u0641\u0631\u064a\u0642 CrowdStrike Cloud Threat Research \u0639\u0646 \u0648\u062c\u0648\u062f \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a CRI-O Container Engine for Kubernetes \u0648\u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0645\u0636\u064a\u0641.\n\nCRI-O \u0647\u0648 \u062a\u0637\u0628\u064a\u0642 \u064a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 OCI (\u0645\u0628\u0627\u062f\u0631\u0629 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u0627\u0644\u0645\u0641\u062a\u0648\u062d\u0629) \u0644\u0648\u0627\u062c\u0647\u0629 Kubernetes Container Runtime (CRI) \u0627\u0644\u062a\u064a \u062a\u0645\u062b\u0644 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 \u062d\u0627\u0648\u064a\u0629 \u062e\u0641\u064a\u0641 \u0627\u0644\u0648\u0632\u0646 \u0644\u0640 Kubernetes \u0627\u0644\u0645\u0635\u0645\u0645\u0629 \u0644\u0644\u062a\u0643\u0627\u0645\u0644 \u0628\u064a\u0646 \u0623\u0648\u0642\u0627\u062a \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0645\u062a\u0648\u0627\u0641\u0642\u0629 \u0645\u0639 OCI \u0648 kubelets.\n\n\u064a\u064f\u0637\u0644\u0642 \u0639\u0644\u0649 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0633\u0645 cr8escape \u0648\u062a\u0639\u0642\u0628\u0647\u0627 \u0643\u0640 CVE-2022-0811 \u060c \u0648\u0647\u064a \u0646\u0627\u062a\u062c\u0629 \u0639\u0646 \u0639\u062f\u0645 \u0648\u062c\u0648\u062f \u0627\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u0645\u0646\u0627\u0633\u0628 \u0645\u0646 \u0645\u0639\u0644\u0645\u0627\u062a kernel \u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u0645\u0631\u064a\u0631\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u0623\u062f\u0627\u0629 \u0627\u0644\u0645\u0633\u0627\u0639\u062f\u0629 pinns. \u0646\u0634\u0623\u062a \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631 1.19 \u0645\u0646 CRI-O \u060c \u0639\u0646\u062f\u0645\u0627 \u062a\u0645\u062a \u0625\u0636\u0627\u0641\u0629 \u062f\u0639\u0645 sysctl \u0625\u0644\u0649 \u0645\u062d\u0631\u0643 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u060c \u0648\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062e\u064a\u0627\u0631 kernel.core_pattern \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u0627\u0644\u062d\u0627\u0648\u064a\u0629.\n\n\u062f\u0631\u062c\u0629 CVE \u0647\u064a 8.8 (\u0639\u0627\u0644\u064a\u0629) \u0648\u0627\u0644\u062a\u0623\u062b\u064a\u0631 \u0627\u0644\u0645\u062d\u062a\u0645\u0644 \u0648\u0627\u0633\u0639 \u0627\u0644\u0627\u0646\u062a\u0634\u0627\u0631 \u0644\u0623\u0646 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0648\u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u062a\u0633\u062a\u062e\u062f\u0645 CRI-O \u0627\u0641\u062a\u0631\u0627\u0636\u064a\u064b\u0627.\n\n\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u060c \u0628\u0641\u0636\u0644 cr8escape \u060c \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0648\u062a\u0633\u0644\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u060c \u0627\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 Kubernetes \u060c \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0627\u0644\u0645\u0636\u064a\u0641 \u060c \u0648\u0627\u0644\u0642\u062f\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u062a\u062d\u0631\u0643 \u0623\u0641\u0642\u064a\u064b\u0627 \u0641\u064a \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629. \u064a\u062a\u0637\u0644\u0628 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0625\u0630\u0646\u064b\u0627 \u0644\u0646\u0634\u0631 \u0627\u0644\u0648\u062d\u062f\u0629 \u0641\u064a \u0645\u062c\u0645\u0648\u0639\u0629 Kubernetes \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u062e\u062f\u0645 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 CRI-O.\n\n\u0642\u062f\u0645 CrowdStrke \u0623\u064a\u0636\u064b\u0627 POC \u064a\u0633\u062a\u062e\u062f\u0645 PodSpec \u0636\u0627\u0631\u064b\u0627 \u0644\u062a\u0639\u064a\u064a\u0646 \u0645\u0639\u0644\u0645\u0629 kernel kernel.core_pattern \u0639\u0646 \u0637\u0631\u064a\u0642 \u062a\u0634\u063a\u064a\u0644 \u062b\u0646\u0627\u0626\u064a \u0645\u0633\u062a\u0636\u0627\u0641 \u0641\u064a \u0648\u062d\u062f\u0629 \u0646\u0645\u0637\u064a\u0629 \u0623\u062e\u0631\u0649 \u0643\u062c\u0630\u0631.\n\n\u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0648\u064a\u0646\u0635\u062d \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0648\u0646 \u0628\u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0625\u0644\u0649 \u0623\u062d\u062f\u062b \u0625\u0635\u062f\u0627\u0631 \u0645\u0646 CRI-O v1.23.2 \u0644\u0645\u0646\u0639 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629. \u0623\u0648 \u064a\u0645\u0643\u0646\u0643 \u0627\u0644\u0631\u062c\u0648\u0639 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u0631 CRI-O 1.18 \u0623\u0648 \u0625\u0635\u062f\u0627\u0631 \u0623\u0642\u062f\u0645.\n\n@A_X_YG\n#\u0627\u0644\u0642\u0627\u0626\u062f_A_X_Y \n#The_Yemeni_ghost", "creation_timestamp": "2022-03-17T17:37:10.000000Z"}, {"uuid": "da43f92d-013c-4138-9451-551d58464306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0811", "type": "seen", "source": "https://t.me/cvedetector/21275", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0811 - GitLab CE/EE Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0811 \nPublished : March 27, 2025, 1:15 p.m. | 14\u00a0minutes ago \nDescription : An issue has been discovered in GitLab CE/EE affecting all versions from 17.7 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. Improper rendering of certain file types leads to cross-site scripting. \nSeverity: 8.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T14:58:22.000000Z"}, {"uuid": "91621e13-d78d-4bab-9128-9aa02a22c3da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0810", "type": "seen", "source": "https://t.me/cvedetector/22176", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0810 - WordPress Read More & Accordion CSRF\", \n  \"Content\": \"CVE ID : CVE-2025-0810 \nPublished : April 5, 2025, 2:15 a.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : The Read More & Accordion plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.5. This is due to missing or incorrect nonce validation on the addNewButtons() function. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-05T06:33:40.000000Z"}, {"uuid": "5d86aee2-1df7-488d-aee4-8c2ea37a070d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0813", "type": "seen", "source": "Telegram/HKj6TR4_hMohrGsEUcNFD_ijNGdim3MCZhggfzha3EYtXw", "content": "", "creation_timestamp": "2024-03-25T14:38:09.000000Z"}, {"uuid": "af8efbe5-b042-4661-b703-00b5b81c68b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/anwar1213xx/1819", "content": "\u0623\u0628\u0644\u063a \u0641\u0631\u064a\u0642 CrowdStrike Cloud Threat Research \u0639\u0646 \u0648\u062c\u0648\u062f \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a CRI-O Container Engine for Kubernetes \u0648\u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0645\u0636\u064a\u0641.\n\nCRI-O \u0647\u0648 \u062a\u0637\u0628\u064a\u0642 \u064a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 OCI (\u0645\u0628\u0627\u062f\u0631\u0629 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u0627\u0644\u0645\u0641\u062a\u0648\u062d\u0629) \u0644\u0648\u0627\u062c\u0647\u0629 Kubernetes Container Runtime (CRI) \u0627\u0644\u062a\u064a \u062a\u0645\u062b\u0644 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 \u062d\u0627\u0648\u064a\u0629 \u062e\u0641\u064a\u0641 \u0627\u0644\u0648\u0632\u0646 \u0644\u0640 Kubernetes \u0627\u0644\u0645\u0635\u0645\u0645\u0629 \u0644\u0644\u062a\u0643\u0627\u0645\u0644 \u0628\u064a\u0646 \u0623\u0648\u0642\u0627\u062a \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0645\u062a\u0648\u0627\u0641\u0642\u0629 \u0645\u0639 OCI \u0648 kubelets.\n\n\u064a\u064f\u0637\u0644\u0642 \u0639\u0644\u0649 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0633\u0645 cr8escape \u0648\u062a\u0639\u0642\u0628\u0647\u0627 \u0643\u0640 CVE-2022-0811 \u060c \u0648\u0647\u064a \u0646\u0627\u062a\u062c\u0629 \u0639\u0646 \u0639\u062f\u0645 \u0648\u062c\u0648\u062f \u0627\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u0645\u0646\u0627\u0633\u0628 \u0645\u0646 \u0645\u0639\u0644\u0645\u0627\u062a kernel \u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u0645\u0631\u064a\u0631\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u0623\u062f\u0627\u0629 \u0627\u0644\u0645\u0633\u0627\u0639\u062f\u0629 pinns. \u0646\u0634\u0623\u062a \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631 1.19 \u0645\u0646 CRI-O \u060c \u0639\u0646\u062f\u0645\u0627 \u062a\u0645\u062a \u0625\u0636\u0627\u0641\u0629 \u062f\u0639\u0645 sysctl \u0625\u0644\u0649 \u0645\u062d\u0631\u0643 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u060c \u0648\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062e\u064a\u0627\u0631 kernel.core_pattern \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u0627\u0644\u062d\u0627\u0648\u064a\u0629.\n\n\u062f\u0631\u062c\u0629 CVE \u0647\u064a 8.8 (\u0639\u0627\u0644\u064a\u0629) \u0648\u0627\u0644\u062a\u0623\u062b\u064a\u0631 \u0627\u0644\u0645\u062d\u062a\u0645\u0644 \u0648\u0627\u0633\u0639 \u0627\u0644\u0627\u0646\u062a\u0634\u0627\u0631 \u0644\u0623\u0646 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0648\u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u062a\u0633\u062a\u062e\u062f\u0645 CRI-O \u0627\u0641\u062a\u0631\u0627\u0636\u064a\u064b\u0627.\n\n\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u060c \u0628\u0641\u0636\u0644 cr8escape \u060c \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0648\u062a\u0633\u0644\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u060c \u0627\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 Kubernetes \u060c \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0627\u0644\u0645\u0636\u064a\u0641 \u060c \u0648\u0627\u0644\u0642\u062f\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u062a\u062d\u0631\u0643 \u0623\u0641\u0642\u064a\u064b\u0627 \u0641\u064a \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629. \u064a\u062a\u0637\u0644\u0628 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0625\u0630\u0646\u064b\u0627 \u0644\u0646\u0634\u0631 \u0627\u0644\u0648\u062d\u062f\u0629 \u0641\u064a \u0645\u062c\u0645\u0648\u0639\u0629 Kubernetes \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u062e\u062f\u0645 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 CRI-O.\n\n\u0642\u062f\u0645 CrowdStrke \u0623\u064a\u0636\u064b\u0627 POC \u064a\u0633\u062a\u062e\u062f\u0645 PodSpec \u0636\u0627\u0631\u064b\u0627 \u0644\u062a\u0639\u064a\u064a\u0646 \u0645\u0639\u0644\u0645\u0629 kernel kernel.core_pattern \u0639\u0646 \u0637\u0631\u064a\u0642 \u062a\u0634\u063a\u064a\u0644 \u062b\u0646\u0627\u0626\u064a \u0645\u0633\u062a\u0636\u0627\u0641 \u0641\u064a \u0648\u062d\u062f\u0629 \u0646\u0645\u0637\u064a\u0629 \u0623\u062e\u0631\u0649 \u0643\u062c\u0630\u0631.\n\n\u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0648\u064a\u0646\u0635\u062d \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0648\u0646 \u0628\u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0625\u0644\u0649 \u0623\u062d\u062f\u062b \u0625\u0635\u062f\u0627\u0631 \u0645\u0646 CRI-O v1.23.2 \u0644\u0645\u0646\u0639 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629. \u0623\u0648 \u064a\u0645\u0643\u0646\u0643 \u0627\u0644\u0631\u062c\u0648\u0639 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u0631 CRI-O 1.18 \u0623\u0648 \u0625\u0635\u062f\u0627\u0631 \u0623\u0642\u062f\u0645.\n\n@A_X_YG\n#\u0627\u0644\u0642\u0627\u0626\u062f_A_X_Y \n#The_Yemeni_ghost", "creation_timestamp": "2022-03-17T18:37:12.000000Z"}, {"uuid": "db606b53-ac48-423d-b7b0-baab2eb6cd2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "published-proof-of-concept", "source": "https://t.me/LockBitChannels/56148", "content": "#exploit\nCVE-2024-20328:\nClamAV Command Injection Bug\nhttps://amitschendel.github.io/vulnerabilites/CVE-2024-20328\n\nCVE-2024-24816:\nCKEditor XSS vulnerability\nhttps://github.com/afine-com/CVE-2024-24816\n\nCVE-2023-35080:\nIvanti/Pulse VPN Client Exploit\nhttps://github.com/HopHouse/Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation\n\nCVE-2024-0811:\nChrome pageCapture.saveAsMHTML() Extension API Blocked Origin Bypass\nhttps://packetstormsecurity.com/files/177172/Chrome-chrome.pageCapture.saveAsMHTML-Extension-API-Blocked-Origin-Bypass.html\n\nCVE-2023-50387:\nKeyTrap in DNS/DNSSEC\nhttps://github.com/knqyf263/CVE-2023-50387\n\nCVE-2024-22369:\nApache Camel Unsafe Deserialization\nhttps://github.com/oscerd/CVE-2024-22369\n\nCVE-2024-1708/CVE-2024-1709:\nScreenConnect Authentication Bypass\nhttps://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass\n\nCCE-2024-21413:\nMicrosoft Outlook RCE\nhttps://github.com/Mdusmandasthaheer/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability\n\nCVE-2024-24401:\nNagios Authenticated SQL Injection\nhttps://github.com/MAWK0235/CVE-2024-24401\n\nCVE-2024-1071:\nWordPress Ultimate Member Unauthorized Database Access/SQLi\nhttps://github.com/gbrsh/CVE-2024-1071\n\nCVE-2024-1651:\nTorrentpier RCE Exploit\nhttps://github.com/sharpicx/CVE-2024-1651-PoC\n\nCVE-2023-50386:\nApache Solr Backup/Restore APIs RCE\nhttps://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC\n\nCVE-2024-21762:\nFortiOS 6.0 - 7.4 - OoB/RCE\nhttps://github.com/c0d3b3af/CVE-2024-21762-POC\n\nCVE-2024-26521:\nCE Phoenix v1.0.x Html Injection\nhttps://github.com/hackervegas001/CVE-2024-26521\n\nCVE-2024-21672:\nConfluence Data Center/ Server RCE\nhttps://github.com/swagcrafted/CVE-2024-21672-POC\n\nCVE-2023-49109:\nRCE in Apache Dolphinscheduler\nhttps://xz.aliyun.com/t/13913?time__1311=mqmxnQ0%3D3eqQqGNDQiFbFD9Q7fCKAKx\n\nCVE-2024-21410:\nMS Exchange Privilege Escalation\nhttps://github.com/FreakyM0ndy/CVE-2024-21410-poc", "creation_timestamp": "2024-10-04T00:51:54.000000Z"}, {"uuid": "b36bba2d-ffa5-441b-a41a-7486699ebc72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "published-proof-of-concept", "source": "https://t.me/LockBitChannels/119126", "content": "#exploit\nCVE-2024-20328:\nClamAV Command Injection Bug\nhttps://amitschendel.github.io/vulnerabilites/CVE-2024-20328\n\nCVE-2024-24816:\nCKEditor XSS vulnerability\nhttps://github.com/afine-com/CVE-2024-24816\n\nCVE-2023-35080:\nIvanti/Pulse VPN Client Exploit\nhttps://github.com/HopHouse/Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation\n\nCVE-2024-0811:\nChrome pageCapture.saveAsMHTML() Extension API Blocked Origin Bypass\nhttps://packetstormsecurity.com/files/177172/Chrome-chrome.pageCapture.saveAsMHTML-Extension-API-Blocked-Origin-Bypass.html\n\nCVE-2023-50387:\nKeyTrap in DNS/DNSSEC\nhttps://github.com/knqyf263/CVE-2023-50387\n\nCVE-2024-22369:\nApache Camel Unsafe Deserialization\nhttps://github.com/oscerd/CVE-2024-22369\n\nCVE-2024-1708/CVE-2024-1709:\nScreenConnect Authentication Bypass\nhttps://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass\n\nCCE-2024-21413:\nMicrosoft Outlook RCE\nhttps://github.com/Mdusmandasthaheer/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability\n\nCVE-2024-24401:\nNagios Authenticated SQL Injection\nhttps://github.com/MAWK0235/CVE-2024-24401\n\nCVE-2024-1071:\nWordPress Ultimate Member Unauthorized Database Access/SQLi\nhttps://github.com/gbrsh/CVE-2024-1071\n\nCVE-2024-1651:\nTorrentpier RCE Exploit\nhttps://github.com/sharpicx/CVE-2024-1651-PoC\n\nCVE-2023-50386:\nApache Solr Backup/Restore APIs RCE\nhttps://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC\n\nCVE-2024-21762:\nFortiOS 6.0 - 7.4 - OoB/RCE\nhttps://github.com/c0d3b3af/CVE-2024-21762-POC\n\nCVE-2024-26521:\nCE Phoenix v1.0.x Html Injection\nhttps://github.com/hackervegas001/CVE-2024-26521\n\nCVE-2024-21672:\nConfluence Data Center/ Server RCE\nhttps://github.com/swagcrafted/CVE-2024-21672-POC\n\nCVE-2023-49109:\nRCE in Apache Dolphinscheduler\nhttps://xz.aliyun.com/t/13913?time__1311=mqmxnQ0%3D3eqQqGNDQiFbFD9Q7fCKAKx\n\nCVE-2024-21410:\nMS Exchange Privilege Escalation\nhttps://github.com/FreakyM0ndy/CVE-2024-21410-poc", "creation_timestamp": "2024-10-04T00:51:53.000000Z"}, {"uuid": "cad5f385-ea7c-4bb2-a38e-c122e0b046cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0816", "type": "seen", "source": "Telegram/es4zvWCHM2GcKqdOUrP1pNRv6nOcfNH7yNdA9PGgL2Q8kupg", "content": "", "creation_timestamp": "2025-02-14T10:08:08.000000Z"}, {"uuid": "05cdf325-270c-4a3e-91fa-254203d34b5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0815", "type": "seen", "source": "Telegram/w4rXNgXa8yBVFy1AFBCrYje_Zd2Hch8V7e6S3CyG5YOeGD3R", "content": "", "creation_timestamp": "2025-02-14T10:08:08.000000Z"}, {"uuid": "219ac555-bfb7-4e58-a026-e87d3797910e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0814", "type": "seen", "source": "Telegram/yCUlci9F4klPBJkDvwtuzInUOxQF0HYxhL7Zoa-zxIEQM91H", "content": "", "creation_timestamp": "2025-02-14T10:08:08.000000Z"}, {"uuid": "4c2603fd-5ad1-406b-b196-af892d2a2fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0816", "type": "seen", "source": "Telegram/R97rn0W91PvxHS_GpXyydl6up8ZPjuPofIxnMgptdkrvUcbi", "content": "", "creation_timestamp": "2025-02-19T19:13:55.000000Z"}, {"uuid": "60dd2f2b-15b1-4c7d-9a51-fb5d524a9393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0816", "type": "seen", "source": "Telegram/0wG2QBfCnyyWj3G0XeQszoyAW3tcrtTOEYBZ26w46ZZeTm-q", "content": "", "creation_timestamp": "2025-02-14T10:06:09.000000Z"}, {"uuid": "ead00fb5-5597-4012-8df7-190d896f51d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0815", "type": "seen", "source": "Telegram/CiXT13xDjqI7PeJ7vH8FQ7OIm0oGXs6cgA-oz6olwfo1kZE0", "content": "", "creation_timestamp": "2025-02-14T10:06:09.000000Z"}, {"uuid": "8fcae142-890a-429d-9dea-b956acacfd63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0814", "type": "seen", "source": "Telegram/hEV9EvX0VuF_HLD0C4KfbUIlW7I8-YGAPN1mLpLD9aapcL_i", "content": "", "creation_timestamp": "2025-02-14T10:06:09.000000Z"}, {"uuid": "67060ab4-6e35-4e24-8118-f5db9eaadc10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "published-proof-of-concept", "source": "Telegram/sSOYy9sa0Jc9yTev23pVTCXx5ZwCCV54W3-F49CmFMjcWAGd", "content": "", "creation_timestamp": "2025-01-19T10:45:19.000000Z"}, {"uuid": "952f3396-284c-4d66-93f1-850f5c5412af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "published-proof-of-concept", "source": "Telegram/CRo72oop6ZwQnESqwzNS9o-UvXAtRRZBbTaMpkpQIbIEQGCv", "content": "", "creation_timestamp": "2025-01-19T09:05:11.000000Z"}, {"uuid": "e0be3cff-9e4b-47f3-a808-a9f2d6674a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "published-proof-of-concept", "source": "Telegram/1o3RyjbxkBAdqVV1IakPcUVDj3AIfLmG662gmZzR_AzpiWSm", "content": "", "creation_timestamp": "2025-01-20T11:03:21.000000Z"}, {"uuid": "a357256d-1dee-4990-959a-c296dc9c8868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "published-proof-of-concept", "source": "Telegram/m_uXFR_n3tw3cdqXp4eNTFp75GNkXoZP5JCdghj_BLdvWjAh", "content": "", "creation_timestamp": "2025-01-19T10:54:11.000000Z"}, {"uuid": "c61de5e9-2c94-46c6-b41b-10430b691b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "published-proof-of-concept", "source": "Telegram/UrNq84zyBC1oMAufBesPTpXAbedIsqXaSNJFq3mfmDUScAM", "content": "", "creation_timestamp": "2024-10-04T00:51:11.000000Z"}, {"uuid": "ce0fb15b-f6d9-473d-bbae-550a686c4aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "published-proof-of-concept", "source": "Telegram/V1VUnV7rs7gBAtSdtSG9YU8DOLHIzu1kUZjtLh94w5_yW5C9", "content": "", "creation_timestamp": "2024-12-22T22:15:30.000000Z"}, {"uuid": "475f271d-0012-4eb9-b98f-42806432a578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0813", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/4400", "content": "roaches to define what a 'good fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources.\n\nThe list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.\nCVE program credit CVE-2007-3641 libarchive OUSPG CVE-2007-3644 libarchive OUSPG CVE-2007-3645 libarchive OUSPG CVE-2008-1372 bzip2 OUSPG CVE-2008-1387 ClamAV OUSPG CVE-2008-1412 F-Secure OUSPG CVE-2008-1837 ClamAV OUSPG CVE-2008-6536 7-zip OUSPG CVE-2008-6903 Sophos Anti-Virus OUSPG CVE-2010-0001 Gzip integer underflow in unlzw CVE-2010-0192 Acroread OUSPG CVE-2010-1205 libpng OUSPG CVE-2010-1410 Webkit OUSPG CVE-2010-1415 Webkit OUSPG CVE-2010-1793 Webkit OUSPG CVE-2010-2065 libtiff found by CERT-FI CVE-2010-2443 libtiff found by CERT-FI CVE-2010-2597 libtiff found by CERT-FI CVE-2010-2482 libtiff found by CERT-FI CVE-2011-0522 VLC found by Harry Sintonen CVE-2011-0181 Apple ImageIO found by Harry Sintonen CVE-2011-0198 Apple Type Services found by Harry Sintonen CVE-2011-0205 Apple ImageIO found by Harry Sintonen CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri CVE-2011-1186 Chrome OUSPG CVE-2011-1434 Chrome OUSPG CVE-2011-2348 Chrome OUSPG CVE-2011-2804 Chrome/pdf OUSPG CVE-2011-2830 Chrome/pdf OUSPG CVE-2011-2839 Chrome/pdf OUSPG CVE-2011-2861 Chrome/pdf OUSPG CVE-2011-3146 librsvg found by Sauli Pahlman CVE-2011-3654 Mozilla Firefox OUSPG CVE-2011-3892 Theora OUSPG CVE-2011-3893 Chrome OUSPG CVE-2011-3895 FFmpeg OUSPG CVE-2011-3957 Chrome OUSPG CVE-2011-3959 Chrome OUSPG CVE-2011-3960 Chrome OUSPG CVE-2011-3962 Chrome OUSPG CVE-2011-3966 Chrome OUSPG CVE-2011-3970 libxslt OUSPG CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri CVE-2012-0469 Mozilla Firefox OUSPG CVE-2012-0470 Mozilla Firefox OUSPG CVE-2012-0457 Mozilla Firefox OUSPG CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri CVE-2012-2849 Chrome/GIF OUSPG CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri CVE-2012-4922 tor found by the Tor project CVE-2012-5108 Chrome OUSPG via NodeFuzz CVE-2012-2887 Chrome OUSPG via NodeFuzz CVE-2012-5120 Chrome OUSPG via NodeFuzz CVE-2012-5121 Chrome OUSPG via NodeFuzz CVE-2012-5145 Chrome OUSPG via NodeFuzz CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz CVE-2013-1691 Mozilla Firefox OUSPG CVE-2013-1708 Mozilla Firefox OUSPG CVE-2013-4082 Wireshark found by cons0ul CVE-2013-1732 Mozilla Firefox OUSPG CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com) CVE-2014-3669 PHP CVE-2014-3668 PHP CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com) CVE-2014-3707 cURL Symeon Paraschoudis CVE-2014-7933 Chrome OUSPG CVE-2015-0797 Mozilla Firefox OUSPG CVE-2015-0813 Mozilla Firefox OUSPG CVE-2015-1220 Chrome OUSPG CVE-2015-1224 Chrome OUSPG CVE-2015-2819 Sybase SQL vah_13 (ERPScan) CVE-2015-2820 SAP Afaria vah_13 (ERPScan) CVE-2015-7091 Apple QuickTime Pedro Ribeiro (pedrib@gmail.com) CVE-2015-8330 SAP PCo agent Mathieu G[...]", "creation_timestamp": "2024-03-25T14:38:09.000000Z"}, {"uuid": "3e5b5e9b-d77d-4eba-a6e9-168c5055f66d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "published-proof-of-concept", "source": "Telegram/PfifvZz7tMW-Pq-u9dIIWpX49EGHHaNBJSKvwqdUIESB65tP", "content": "", "creation_timestamp": "2025-01-19T10:54:13.000000Z"}, {"uuid": "4586d688-e0af-43e2-a504-4f0e3aba1c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0814", "type": "seen", "source": "https://t.me/arpsyndicate/1981", "content": "#ExploitObserverAlert\n\nCVE-2012-0814\n\nDESCRIPTION: Exploit Observer has 24 entries related to CVE-2012-0814. The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorized_keys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user account required by Gitolite.  NOTE: this can cross privilege boundaries because a user account may intentionally have no shell or filesystem access, and therefore may have no supported way to read an authorized_keys file in its own home directory.\n\nFIRST-EPSS: 0.002850000\nNVD-IS: 2.9\nNVD-ES: 6.8", "creation_timestamp": "2023-12-18T12:21:49.000000Z"}, {"uuid": "769a6352-8704-4e5a-be31-7a793a884320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0812", "type": "seen", "source": "https://t.me/arpsyndicate/1438", "content": "#ExploitObserverAlert\n\nCVE-2018-0802\n\nDESCRIPTION: Exploit Observer has 81 entries related to CVE-2018-0802. Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.\n\nFIRST-EPSS: 0.972110000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2023-12-05T09:01:31.000000Z"}, {"uuid": "db7d3a4c-04ee-43aa-a2c3-ad553ecd67b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0812", "type": "seen", "source": "https://t.me/arpsyndicate/100", "content": "#ExploitObserverAlert\n\nCVE-2018-0802\n\nDESCRIPTION: Exploit Observer has 78 entries related to CVE-2018-0802. Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.\n\nFIRST-EPSS: 0.973170000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2023-11-12T01:31:24.000000Z"}, {"uuid": "73b35e5f-9333-4e6c-8782-a94eab5ce196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "published-proof-of-concept", "source": "Telegram/1yNdYtjM167PWJ8z4QCuhWfayRW6CDLYSnp7378ajV5EDt8", "content": "", "creation_timestamp": "2024-10-04T00:51:08.000000Z"}, {"uuid": "19c2c515-2c03-4818-8f94-f81ec1aba7df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "published-proof-of-concept", "source": "Telegram/OIy-vi5ELr4cctl8ownkSK8SkQmdcofc4nGKbyP-zK6wBJzg", "content": "", "creation_timestamp": "2025-01-19T10:45:24.000000Z"}, {"uuid": "59c3c8d9-f50c-4c85-bd16-1085a6be37ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "published-proof-of-concept", "source": "Telegram/MI65lLGsaGTIv40PK1J154YyMiL63QZNJWuw9XlT_YRsFb40", "content": "", "creation_timestamp": "2025-01-19T09:05:12.000000Z"}, {"uuid": "2b2ebc9b-dbb8-40be-8d09-6d4b6c1d0b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "published-proof-of-concept", "source": "Telegram/1Z5p7xYqKVRAHiS5stM6LcQjCrKKZtV6q5K3lriQD01vETjY", "content": "", "creation_timestamp": "2025-01-20T11:03:16.000000Z"}, {"uuid": "da9fe434-28b0-49be-aed7-34164384cf91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "published-proof-of-concept", "source": "Telegram/7b0KDMH2WfquipCst9Tv71iesbtnEU4bQJg16OEgDf9nbvsj", "content": "", "creation_timestamp": "2024-12-22T22:15:27.000000Z"}, {"uuid": "18d2c703-9dd0-49f9-941e-f741b2233e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0813", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/810", "content": "roaches to define what a 'good fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources.\n\nThe list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.\nCVE program credit CVE-2007-3641 libarchive OUSPG CVE-2007-3644 libarchive OUSPG CVE-2007-3645 libarchive OUSPG CVE-2008-1372 bzip2 OUSPG CVE-2008-1387 ClamAV OUSPG CVE-2008-1412 F-Secure OUSPG CVE-2008-1837 ClamAV OUSPG CVE-2008-6536 7-zip OUSPG CVE-2008-6903 Sophos Anti-Virus OUSPG CVE-2010-0001 Gzip integer underflow in unlzw CVE-2010-0192 Acroread OUSPG CVE-2010-1205 libpng OUSPG CVE-2010-1410 Webkit OUSPG CVE-2010-1415 Webkit OUSPG CVE-2010-1793 Webkit OUSPG CVE-2010-2065 libtiff found by CERT-FI CVE-2010-2443 libtiff found by CERT-FI CVE-2010-2597 libtiff found by CERT-FI CVE-2010-2482 libtiff found by CERT-FI CVE-2011-0522 VLC found by Harry Sintonen CVE-2011-0181 Apple ImageIO found by Harry Sintonen CVE-2011-0198 Apple Type Services found by Harry Sintonen CVE-2011-0205 Apple ImageIO found by Harry Sintonen CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri CVE-2011-1186 Chrome OUSPG CVE-2011-1434 Chrome OUSPG CVE-2011-2348 Chrome OUSPG CVE-2011-2804 Chrome/pdf OUSPG CVE-2011-2830 Chrome/pdf OUSPG CVE-2011-2839 Chrome/pdf OUSPG CVE-2011-2861 Chrome/pdf OUSPG CVE-2011-3146 librsvg found by Sauli Pahlman CVE-2011-3654 Mozilla Firefox OUSPG CVE-2011-3892 Theora OUSPG CVE-2011-3893 Chrome OUSPG CVE-2011-3895 FFmpeg OUSPG CVE-2011-3957 Chrome OUSPG CVE-2011-3959 Chrome OUSPG CVE-2011-3960 Chrome OUSPG CVE-2011-3962 Chrome OUSPG CVE-2011-3966 Chrome OUSPG CVE-2011-3970 libxslt OUSPG CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri CVE-2012-0469 Mozilla Firefox OUSPG CVE-2012-0470 Mozilla Firefox OUSPG CVE-2012-0457 Mozilla Firefox OUSPG CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri CVE-2012-2849 Chrome/GIF OUSPG CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri CVE-2012-4922 tor found by the Tor project CVE-2012-5108 Chrome OUSPG via NodeFuzz CVE-2012-2887 Chrome OUSPG via NodeFuzz CVE-2012-5120 Chrome OUSPG via NodeFuzz CVE-2012-5121 Chrome OUSPG via NodeFuzz CVE-2012-5145 Chrome OUSPG via NodeFuzz CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz CVE-2013-1691 Mozilla Firefox OUSPG CVE-2013-1708 Mozilla Firefox OUSPG CVE-2013-4082 Wireshark found by cons0ul CVE-2013-1732 Mozilla Firefox OUSPG CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com) CVE-2014-3669 PHP CVE-2014-3668 PHP CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com) CVE-2014-3707 cURL Symeon Paraschoudis CVE-2014-7933 Chrome OUSPG CVE-2015-0797 Mozilla Firefox OUSPG CVE-2015-0813 Mozilla Firefox OUSPG CVE-2015-1220 Chrome OUSPG CVE-2015-1224 Chrome OUSPG CVE-2015-2819 Sybase SQL vah_13 (ERPScan) CVE-2015-2820 SAP Afaria vah_13 (ERPScan) CVE-2015-7091 Apple QuickTime Pedro Ribeiro (pedrib@gmail.com) CVE-2015-8330 SAP PCo agent Mathieu G[...]", "creation_timestamp": "2024-03-25T14:38:09.000000Z"}, {"uuid": "ced437a4-5f4f-4693-9348-256e37fe24ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/piratesofyemen/614", "content": "\u0623\u0628\u0644\u063a \u0641\u0631\u064a\u0642 CrowdStrike Cloud Threat Research \u0639\u0646 \u0648\u062c\u0648\u062f \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a CRI-O Container Engine for Kubernetes \u0648\u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0645\u0636\u064a\u0641.\n\nCRI-O \u0647\u0648 \u062a\u0637\u0628\u064a\u0642 \u064a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 OCI (\u0645\u0628\u0627\u062f\u0631\u0629 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u0627\u0644\u0645\u0641\u062a\u0648\u062d\u0629) \u0644\u0648\u0627\u062c\u0647\u0629 Kubernetes Container Runtime (CRI) \u0627\u0644\u062a\u064a \u062a\u0645\u062b\u0644 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 \u062d\u0627\u0648\u064a\u0629 \u062e\u0641\u064a\u0641 \u0627\u0644\u0648\u0632\u0646 \u0644\u0640 Kubernetes \u0627\u0644\u0645\u0635\u0645\u0645\u0629 \u0644\u0644\u062a\u0643\u0627\u0645\u0644 \u0628\u064a\u0646 \u0623\u0648\u0642\u0627\u062a \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0645\u062a\u0648\u0627\u0641\u0642\u0629 \u0645\u0639 OCI \u0648 kubelets.\n\n\u064a\u064f\u0637\u0644\u0642 \u0639\u0644\u0649 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0633\u0645 cr8escape \u0648\u062a\u0639\u0642\u0628\u0647\u0627 \u0643\u0640 CVE-2022-0811 \u060c \u0648\u0647\u064a \u0646\u0627\u062a\u062c\u0629 \u0639\u0646 \u0639\u062f\u0645 \u0648\u062c\u0648\u062f \u0627\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u0645\u0646\u0627\u0633\u0628 \u0645\u0646 \u0645\u0639\u0644\u0645\u0627\u062a kernel \u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u0645\u0631\u064a\u0631\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u0623\u062f\u0627\u0629 \u0627\u0644\u0645\u0633\u0627\u0639\u062f\u0629 pinns. \u0646\u0634\u0623\u062a \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631 1.19 \u0645\u0646 CRI-O \u060c \u0639\u0646\u062f\u0645\u0627 \u062a\u0645\u062a \u0625\u0636\u0627\u0641\u0629 \u062f\u0639\u0645 sysctl \u0625\u0644\u0649 \u0645\u062d\u0631\u0643 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u060c \u0648\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062e\u064a\u0627\u0631 kernel.core_pattern \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u0627\u0644\u062d\u0627\u0648\u064a\u0629.\n\n\u062f\u0631\u062c\u0629 CVE \u0647\u064a 8.8 (\u0639\u0627\u0644\u064a\u0629) \u0648\u0627\u0644\u062a\u0623\u062b\u064a\u0631 \u0627\u0644\u0645\u062d\u062a\u0645\u0644 \u0648\u0627\u0633\u0639 \u0627\u0644\u0627\u0646\u062a\u0634\u0627\u0631 \u0644\u0623\u0646 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0648\u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u062a\u0633\u062a\u062e\u062f\u0645 CRI-O \u0627\u0641\u062a\u0631\u0627\u0636\u064a\u064b\u0627.\n\n\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u060c \u0628\u0641\u0636\u0644 cr8escape \u060c \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0648\u062a\u0633\u0644\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u060c \u0627\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 Kubernetes \u060c \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0627\u0644\u0645\u0636\u064a\u0641 \u060c \u0648\u0627\u0644\u0642\u062f\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u062a\u062d\u0631\u0643 \u0623\u0641\u0642\u064a\u064b\u0627 \u0641\u064a \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629. \u064a\u062a\u0637\u0644\u0628 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0625\u0630\u0646\u064b\u0627 \u0644\u0646\u0634\u0631 \u0627\u0644\u0648\u062d\u062f\u0629 \u0641\u064a \u0645\u062c\u0645\u0648\u0639\u0629 Kubernetes \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u062e\u062f\u0645 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 CRI-O.\n\n\u0642\u062f\u0645 CrowdStrke \u0623\u064a\u0636\u064b\u0627 POC \u064a\u0633\u062a\u062e\u062f\u0645 PodSpec \u0636\u0627\u0631\u064b\u0627 \u0644\u062a\u0639\u064a\u064a\u0646 \u0645\u0639\u0644\u0645\u0629 kernel kernel.core_pattern \u0639\u0646 \u0637\u0631\u064a\u0642 \u062a\u0634\u063a\u064a\u0644 \u062b\u0646\u0627\u0626\u064a \u0645\u0633\u062a\u0636\u0627\u0641 \u0641\u064a \u0648\u062d\u062f\u0629 \u0646\u0645\u0637\u064a\u0629 \u0623\u062e\u0631\u0649 \u0643\u062c\u0630\u0631.\n\n\u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0648\u064a\u0646\u0635\u062d \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0648\u0646 \u0628\u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0625\u0644\u0649 \u0623\u062d\u062f\u062b \u0625\u0635\u062f\u0627\u0631 \u0645\u0646 CRI-O v1.23.2 \u0644\u0645\u0646\u0639 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629. \u0623\u0648 \u064a\u0645\u0643\u0646\u0643 \u0627\u0644\u0631\u062c\u0648\u0639 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u0631 CRI-O 1.18 \u0623\u0648 \u0625\u0635\u062f\u0627\u0631 \u0623\u0642\u062f\u0645.\n\n@A_X_YG\n#\u0627\u0644\u0642\u0627\u0626\u062f_A_X_Y \n#The_Yemeni_ghost", "creation_timestamp": "2022-03-17T18:36:58.000000Z"}, {"uuid": "21d970ff-b2b5-4c57-b3d4-b516f4993a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/piratesofyemen1213/447", "content": "\u0623\u0628\u0644\u063a \u0641\u0631\u064a\u0642 CrowdStrike Cloud Threat Research \u0639\u0646 \u0648\u062c\u0648\u062f \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a CRI-O Container Engine for Kubernetes \u0648\u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0645\u0636\u064a\u0641.\n\nCRI-O \u0647\u0648 \u062a\u0637\u0628\u064a\u0642 \u064a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 OCI (\u0645\u0628\u0627\u062f\u0631\u0629 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u0627\u0644\u0645\u0641\u062a\u0648\u062d\u0629) \u0644\u0648\u0627\u062c\u0647\u0629 Kubernetes Container Runtime (CRI) \u0627\u0644\u062a\u064a \u062a\u0645\u062b\u0644 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 \u062d\u0627\u0648\u064a\u0629 \u062e\u0641\u064a\u0641 \u0627\u0644\u0648\u0632\u0646 \u0644\u0640 Kubernetes \u0627\u0644\u0645\u0635\u0645\u0645\u0629 \u0644\u0644\u062a\u0643\u0627\u0645\u0644 \u0628\u064a\u0646 \u0623\u0648\u0642\u0627\u062a \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0645\u062a\u0648\u0627\u0641\u0642\u0629 \u0645\u0639 OCI \u0648 kubelets.\n\n\u064a\u064f\u0637\u0644\u0642 \u0639\u0644\u0649 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0633\u0645 cr8escape \u0648\u062a\u0639\u0642\u0628\u0647\u0627 \u0643\u0640 CVE-2022-0811 \u060c \u0648\u0647\u064a \u0646\u0627\u062a\u062c\u0629 \u0639\u0646 \u0639\u062f\u0645 \u0648\u062c\u0648\u062f \u0627\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u0645\u0646\u0627\u0633\u0628 \u0645\u0646 \u0645\u0639\u0644\u0645\u0627\u062a kernel \u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u0645\u0631\u064a\u0631\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u0623\u062f\u0627\u0629 \u0627\u0644\u0645\u0633\u0627\u0639\u062f\u0629 pinns. \u0646\u0634\u0623\u062a \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631 1.19 \u0645\u0646 CRI-O \u060c \u0639\u0646\u062f\u0645\u0627 \u062a\u0645\u062a \u0625\u0636\u0627\u0641\u0629 \u062f\u0639\u0645 sysctl \u0625\u0644\u0649 \u0645\u062d\u0631\u0643 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u060c \u0648\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062e\u064a\u0627\u0631 kernel.core_pattern \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u0627\u0644\u062d\u0627\u0648\u064a\u0629.\n\n\u062f\u0631\u062c\u0629 CVE \u0647\u064a 8.8 (\u0639\u0627\u0644\u064a\u0629) \u0648\u0627\u0644\u062a\u0623\u062b\u064a\u0631 \u0627\u0644\u0645\u062d\u062a\u0645\u0644 \u0648\u0627\u0633\u0639 \u0627\u0644\u0627\u0646\u062a\u0634\u0627\u0631 \u0644\u0623\u0646 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0648\u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u062a\u0633\u062a\u062e\u062f\u0645 CRI-O \u0627\u0641\u062a\u0631\u0627\u0636\u064a\u064b\u0627.\n\n\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u060c \u0628\u0641\u0636\u0644 cr8escape \u060c \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0648\u062a\u0633\u0644\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u060c \u0627\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 Kubernetes \u060c \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0627\u0644\u0645\u0636\u064a\u0641 \u060c \u0648\u0627\u0644\u0642\u062f\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u062a\u062d\u0631\u0643 \u0623\u0641\u0642\u064a\u064b\u0627 \u0641\u064a \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629. \u064a\u062a\u0637\u0644\u0628 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0625\u0630\u0646\u064b\u0627 \u0644\u0646\u0634\u0631 \u0627\u0644\u0648\u062d\u062f\u0629 \u0641\u064a \u0645\u062c\u0645\u0648\u0639\u0629 Kubernetes \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u062e\u062f\u0645 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 CRI-O.\n\n\u0642\u062f\u0645 CrowdStrke \u0623\u064a\u0636\u064b\u0627 POC \u064a\u0633\u062a\u062e\u062f\u0645 PodSpec \u0636\u0627\u0631\u064b\u0627 \u0644\u062a\u0639\u064a\u064a\u0646 \u0645\u0639\u0644\u0645\u0629 kernel kernel.core_pattern \u0639\u0646 \u0637\u0631\u064a\u0642 \u062a\u0634\u063a\u064a\u0644 \u062b\u0646\u0627\u0626\u064a \u0645\u0633\u062a\u0636\u0627\u0641 \u0641\u064a \u0648\u062d\u062f\u0629 \u0646\u0645\u0637\u064a\u0629 \u0623\u062e\u0631\u0649 \u0643\u062c\u0630\u0631.\n\n\u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0648\u064a\u0646\u0635\u062d \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0648\u0646 \u0628\u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0625\u0644\u0649 \u0623\u062d\u062f\u062b \u0625\u0635\u062f\u0627\u0631 \u0645\u0646 CRI-O v1.23.2 \u0644\u0645\u0646\u0639 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629. \u0623\u0648 \u064a\u0645\u0643\u0646\u0643 \u0627\u0644\u0631\u062c\u0648\u0639 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u0631 CRI-O 1.18 \u0623\u0648 \u0625\u0635\u062f\u0627\u0631 \u0623\u0642\u062f\u0645.\n\n@A_X_YG\n#\u0627\u0644\u0642\u0627\u0626\u062f_A_X_Y \n#The_Yemeni_ghost", "creation_timestamp": "2022-03-17T18:37:02.000000Z"}, {"uuid": "ac84fb11-e2db-4e5d-b9b1-f588229e28f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0810", "type": "published-proof-of-concept", "source": "Telegram/oxIM31ySBtAd95-HqmDOjiMLRHxdwH46KFZ1_RsP-VhoY4w", "content": "", "creation_timestamp": "2025-04-05T04:30:38.000000Z"}, {"uuid": "d2d0107e-df06-4bd1-ba14-5502147324a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0815", "type": "seen", "source": "Telegram/rku_lDFM50Y2tsB8sOK5kFmdDaTBp5BPVD7jmWhsBckzAZY", "content": "", "creation_timestamp": "2025-02-13T08:02:30.000000Z"}, {"uuid": "f463d3c1-6157-4919-8d05-a641cb0b62ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0816", "type": "seen", "source": "Telegram/pmvKM0VYjFpmoilJ2pHpgGC0BeyWQVr0ivOx1LVrNusVbkA", "content": "", "creation_timestamp": "2025-02-13T08:02:28.000000Z"}, {"uuid": "a4394f1b-c56a-42c2-ba8e-30eafa15fc3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0817", "type": "seen", "source": "Telegram/unfJiD3PuWMSlsYDx1vxt2LysBUEaIHKzozP6uWZPa4lY-g", "content": "", "creation_timestamp": "2025-02-18T13:00:39.000000Z"}, {"uuid": "2127d0c6-966d-4c20-ba1d-b2332c9fc341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/2743", "content": "\u041a\u043e\u043c\u0430\u043d\u0434\u0430 CrowdStrike Cloud Threat Research \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u043e\u043c \u0434\u0432\u0438\u0436\u043a\u0435 CRI-O Container Engine \u0434\u043b\u044f Kubernetes, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0445\u043e\u0441\u0442\u0443.\n\nCRI-O \u2013 \u044d\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0430 OCI (Open Container Initiative) \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f Kubernetes Container Runtime Interface (CRI), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u043b\u0435\u0433\u0447\u0435\u043d\u043d\u0443\u044e \u0441\u0440\u0435\u0434\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0434\u043b\u044f Kubernetes \u0438 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u0440\u0435\u0434\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u043c\u0438 \u0441 OCI, \u0438 kubelet.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 cr8escape \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2022-0811 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u044f\u0434\u0440\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 pinns.\u00a0\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0432 CRI-O \u0432\u0435\u0440\u0441\u0438\u0438 1.19, \u043a\u043e\u0433\u0434\u0430 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0431\u044b\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 sysctl, \u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c kernel.core_pattern \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430. \n\n\u041e\u0446\u0435\u043d\u043a\u0430 CVE \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,8 (\u0432\u044b\u0441\u043e\u043a\u0430\u044f), \u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 CRI-O \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\u00a0\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f cr8escape \u043f\u043e\u043c\u0438\u043c\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0438 \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 Kubernetes, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0445\u043e\u0441\u0442\u0443 \u0438 \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043c\u043e\u0434\u0443\u043b\u044f \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 Kubernetes, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u0440\u0435\u0434\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f CRI-O. \n\nCrowdStrke \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 POC, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 PodSpec \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u044f\u0434\u0440\u0430 kernel.core_pattern, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044f \u043f\u043e\u0434 root \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0439 \u0432 \u0434\u0440\u0443\u0433\u043e\u043c \u043c\u043e\u0434\u0443\u043b\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 CRI-O v1.23.2, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438. \u0418\u043b\u0438 \u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0442\u043a\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u0434\u043e CRI-O \u0432\u0435\u0440\u0441\u0438\u0438 1.18 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0435\u0439.", "creation_timestamp": "2022-03-17T14:30:04.000000Z"}, {"uuid": "b7d8644d-9c95-4da9-a69f-6ff8c8571463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0815", "type": "seen", "source": "https://t.me/ctinow/202070", "content": "https://ift.tt/1KGpnQ2\nCVE-2024-0815", "creation_timestamp": "2024-03-07T05:27:02.000000Z"}, {"uuid": "16c88043-3939-4f24-8d58-ba341d00ce22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0818", "type": "seen", "source": "https://t.me/ctinow/202424", "content": "https://ift.tt/Fe2PBNA\nCVE-2024-0818", "creation_timestamp": "2024-03-07T14:26:34.000000Z"}, {"uuid": "c5008981-ad19-4a95-9cbe-187883d1e0bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0818", "type": "seen", "source": "https://t.me/ctinow/202421", "content": "https://ift.tt/Fe2PBNA\nCVE-2024-0818", "creation_timestamp": "2024-03-07T14:26:31.000000Z"}, {"uuid": "449b86e5-3edd-4383-bb03-6ffd02a13d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0815", "type": "seen", "source": "https://t.me/ctinow/202065", "content": "https://ift.tt/1KGpnQ2\nCVE-2024-0815", "creation_timestamp": "2024-03-07T05:26:55.000000Z"}, {"uuid": "fd9e1727-505f-4c08-bfd9-85574fe0b863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0817", "type": "seen", "source": "https://t.me/ctinow/202027", "content": "https://ift.tt/CYoHyfT\nCVE-2024-0817", "creation_timestamp": "2024-03-07T03:32:10.000000Z"}, {"uuid": "47172321-bb05-4073-88a5-23fa33ddf94e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0819", "type": "seen", "source": "https://t.me/ctinow/194504", "content": "https://ift.tt/W9P64hc\nCVE-2024-0819", "creation_timestamp": "2024-02-27T15:36:29.000000Z"}, {"uuid": "f5a3f564-3f64-4876-b47e-d01500327d51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0819", "type": "seen", "source": "https://t.me/ctinow/194493", "content": "https://ift.tt/W9P64hc\nCVE-2024-0819", "creation_timestamp": "2024-02-27T15:31:47.000000Z"}, {"uuid": "2cf8e286-7a3f-4d62-a92b-bf9e615ac535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0812", "type": "seen", "source": "https://t.me/ctinow/193285", "content": "https://ift.tt/wICjShD\nCVE-2012-0812 | PostfixAdmin 2.3.4 templates/menu.php domain cross site scripting (Nessus ID 62360 / BID-51680)", "creation_timestamp": "2024-02-26T12:41:44.000000Z"}, {"uuid": "b264b484-1c73-451a-bd7a-eab15ef22fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0813", "type": "seen", "source": "https://t.me/ctinow/186941", "content": "https://ift.tt/DClYV0r\nCVE-2024-0813 | Google Chrome prior 121.0.6167.85 use after free (FEDORA-2024-3f7345570a)", "creation_timestamp": "2024-02-17T14:46:21.000000Z"}, {"uuid": "5ba37e6c-a92a-4d94-b9c8-f0aa8174b0bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0814", "type": "seen", "source": "https://t.me/ctinow/186940", "content": "https://ift.tt/YHQIs27\nCVE-2024-0814 | Google Chrome prior 121.0.6167.85 Payments origin validation (FEDORA-2024-3f7345570a)", "creation_timestamp": "2024-02-17T14:46:19.000000Z"}, {"uuid": "dafe5a82-e8d3-4972-b94f-7ec007511ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0810", "type": "seen", "source": "https://t.me/ctinow/186939", "content": "https://ift.tt/hYEOtaN\nCVE-2024-0810 | Google Chrome prior 121.0.6167.85 Policy Enforcement Privilege Escalation (FEDORA-2024-3f7345570a)", "creation_timestamp": "2024-02-17T14:46:18.000000Z"}, {"uuid": "e6ce5899-c98f-4bf7-82b4-b57a7410bb97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0812", "type": "seen", "source": "https://t.me/ctinow/186937", "content": "https://ift.tt/hmn09cb\nCVE-2024-0812 | Google Chrome prior 121.0.6167.85 Accessibility Remote Code Execution (FEDORA-2024-3f7345570a)", "creation_timestamp": "2024-02-17T14:46:16.000000Z"}, {"uuid": "61a0d8b1-3068-4335-88f1-9ec876053f38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "seen", "source": "https://t.me/ctinow/186950", "content": "https://ift.tt/PBK9sOf\nCVE-2024-0811 | Google Chrome prior 121.0.6167.85 Extensions API Privilege Escalation (FEDORA-2024-3f7345570a)", "creation_timestamp": "2024-02-17T15:11:44.000000Z"}, {"uuid": "0bd4206f-3261-43b1-96f9-046ddb4d6115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0813", "type": "seen", "source": "https://t.me/cibsecurity/70618", "content": "\u203c CVE-2023-0813 \u203c\n\nA flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-16T00:25:54.000000Z"}, {"uuid": "fe3e01cd-8679-4b54-9ed9-3243baae3225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0810", "type": "seen", "source": "https://t.me/ctinow/173935", "content": "https://ift.tt/sAWczbl\nChromium: CVE-2024-0810 Insufficient policy enforcement in DevTools", "creation_timestamp": "2024-01-26T01:42:03.000000Z"}, {"uuid": "14042204-d95c-4756-83db-19972567eb9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "seen", "source": "https://t.me/ctinow/173934", "content": "https://ift.tt/RFLEAOx\nChromium: CVE-2024-0811 Inappropriate implementation in Extensions API", "creation_timestamp": "2024-01-26T01:42:02.000000Z"}, {"uuid": "cc4e84c5-7666-49e4-8053-634824605e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0812", "type": "seen", "source": "https://t.me/ctinow/173933", "content": "https://ift.tt/6gh2vwW\nChromium: CVE-2024-0812 Inappropriate implementation in Accessibility", "creation_timestamp": "2024-01-26T01:42:01.000000Z"}, {"uuid": "a43c7a10-d2a4-4b37-8079-1fe0802d7609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0813", "type": "seen", "source": "https://t.me/ctinow/173932", "content": "https://ift.tt/nUTKO0a\nChromium: CVE-2024-0813 Use after free in Reading Mode", "creation_timestamp": "2024-01-26T01:42:00.000000Z"}, {"uuid": "94eeed95-66c8-4807-a1db-efec26091378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0814", "type": "seen", "source": "https://t.me/ctinow/173931", "content": "https://ift.tt/1njPvyq\nChromium: CVE-2024-0814 Incorrect security UI in Payments", "creation_timestamp": "2024-01-26T01:41:59.000000Z"}, {"uuid": "61b09ab5-6292-4015-8b8f-5a6daf456236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0812", "type": "seen", "source": "https://t.me/ctinow/172460", "content": "https://ift.tt/yO37XBd\nCVE-2024-0812", "creation_timestamp": "2024-01-24T01:27:03.000000Z"}, {"uuid": "d0c15f1c-4368-4a05-bdaf-b6aa5cf1c922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0813", "type": "seen", "source": "https://t.me/ctinow/172461", "content": "https://ift.tt/zuxBMg6\nCVE-2024-0813", "creation_timestamp": "2024-01-24T01:27:04.000000Z"}, {"uuid": "ee11da01-3369-4415-b8dc-134527271351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0810", "type": "seen", "source": "https://t.me/ctinow/172458", "content": "https://ift.tt/XQBLY8V\nCVE-2024-0810", "creation_timestamp": "2024-01-24T01:27:01.000000Z"}, {"uuid": "ae812f7c-1038-4aa4-9933-32d5d59b3098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "seen", "source": "https://t.me/ctinow/172459", "content": "https://ift.tt/hy4JMDI\nCVE-2024-0811", "creation_timestamp": "2024-01-24T01:27:02.000000Z"}, {"uuid": "e7f14078-bb9d-4d21-80b1-7e506223a2ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0814", "type": "seen", "source": "https://t.me/ctinow/172462", "content": "https://ift.tt/NusLeTZ\nCVE-2024-0814", "creation_timestamp": "2024-01-24T01:27:06.000000Z"}, {"uuid": "dfad86bb-ff0e-4a56-af51-16aa8747a02a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0812", "type": "seen", "source": "https://t.me/cibsecurity/64136", "content": "\u203c CVE-2023-0812 \u203c\n\nThe Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T16:46:08.000000Z"}, {"uuid": "184038bf-48da-413b-8485-f288c8ea128d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0814", "type": "seen", "source": "https://t.me/cibsecurity/62962", "content": "\u203c CVE-2023-2297 \u203c\n\nThe Profile Builder \u00e2\u20ac\u201c User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 3.9.0. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function (wppb_front_end_password_recovery). The function uses the plaintext value of a password reset key instead of a hashed value which means it can easily be retrieved and subsequently used. An attacker can leverage CVE-2023-0814, or another vulnerability like SQL Injection in another plugin or theme installed on the site to successfully exploit this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-27T07:39:59.000000Z"}, {"uuid": "da3328fd-3c0b-4d62-b804-c507410ee4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0816", "type": "seen", "source": "https://t.me/cibsecurity/60808", "content": "\u203c CVE-2023-0816 \u203c\n\nThe Formidable Forms WordPress plugin before 6.1 uses several potentially untrusted headers to determine the IP address of the client, leading to IP Address spoofing and bypass of anti-spam protections.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-27T20:50:09.000000Z"}, {"uuid": "9ede4b97-9dfa-4b89-80db-772b68b9ebf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0811", "type": "seen", "source": "https://t.me/cibsecurity/60175", "content": "\u203c CVE-2023-0811 \u203c\n\nOmron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-16T21:30:51.000000Z"}, {"uuid": "35b4e5d9-89e9-4043-af1d-7088f64c2e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0815", "type": "seen", "source": "https://t.me/cibsecurity/58790", "content": "\u203c CVE-2023-0815 \u203c\n\nPotential Insertion of Sensitive Information into Jetty Log Files in multiple versions of OpenNMS Meridian and Horizon could allow disclosure of usernames and passwords if the logging level is set to debug.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T18:18:33.000000Z"}, {"uuid": "2863e60f-4705-45ae-965b-7f9848316130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0810", "type": "seen", "source": "https://t.me/cibsecurity/58017", "content": "\u203c CVE-2023-0810 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.11.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-13T20:30:04.000000Z"}, {"uuid": "163d8eb0-d623-44aa-8718-b8cf45dec469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0818", "type": "seen", "source": "https://t.me/cibsecurity/58031", "content": "\u203c CVE-2023-0818 \u203c\n\nOff-by-one Error in GitHub repository gpac/gpac prior to v2.3.0-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-14T00:30:00.000000Z"}, {"uuid": "c9b9c883-9fe5-48ba-ada6-c7d2ba2faae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0814", "type": "seen", "source": "https://t.me/cibsecurity/58056", "content": "\u203c CVE-2023-0814 \u203c\n\nThe Profile Builder \u00e2\u20ac\u201c User Profile & User Registration Forms plugin for WordPress is vulnerable to sensitive information disclosure via the [user_meta] shortcode in versions up to, and including 3.9.0. This is due to insufficient restriction on sensitive user meta values that can be called via that shortcode. This makes it possible for authenticated attackers, with subscriber-level permissions, and above to retrieve sensitive user meta that can be used to gain access to a high privileged user account. This does require the Usermeta shortcode be enabled to be exploited.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-14T07:30:29.000000Z"}, {"uuid": "d2798667-88b7-43c9-9202-98611c61ff7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0819", "type": "seen", "source": "https://t.me/cibsecurity/58047", "content": "\u203c CVE-2023-0819 \u203c\n\nHeap-based Buffer Overflow in GitHub repository gpac/gpac prior to v2.3.0-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-14T00:30:25.000000Z"}, {"uuid": "93d08ce3-1819-4dc8-8a59-5cc0b0b656f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0817", "type": "seen", "source": "https://t.me/cibsecurity/58033", "content": "\u203c CVE-2023-0817 \u203c\n\nBuffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-14T00:30:02.000000Z"}, {"uuid": "96dd3308-b591-4386-abd1-0e95b5b54aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0812", "type": "seen", "source": "https://t.me/cibsecurity/48967", "content": "\u203c CVE-2022-0812 \u203c\n\nAn information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c in the Linux Kernel. This flaw allows an attacker with normal user privileges to leak kernel information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-29T18:34:11.000000Z"}, {"uuid": "a8fc46ac-2e3e-4af5-8fb9-79778aaeb9ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0817", "type": "seen", "source": "https://t.me/cibsecurity/42191", "content": "\u203c CVE-2022-0817 \u203c\n\nThe BadgeOS WordPress plugin through 3.7.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-09T20:36:41.000000Z"}, {"uuid": "86503fd6-6210-452b-84d1-a612aac060a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0814", "type": "seen", "source": "https://t.me/cibsecurity/42180", "content": "\u203c CVE-2022-0814 \u203c\n\nThe Ubigeo de Per\u00c3\u0192\u00c2\u00ba para Woocommerce WordPress plugin before 3.6.4 does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injections\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-09T20:36:27.000000Z"}, {"uuid": "07a65b3c-1a6e-4db3-aabd-fa86eb7825e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0819", "type": "seen", "source": "https://t.me/cibsecurity/38302", "content": "\u203c CVE-2022-0819 \u203c\n\nCode Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-02T18:25:07.000000Z"}, {"uuid": "a420b53c-0865-4f74-a3e4-bd91210a8b99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0818", "type": "seen", "source": "https://t.me/cibsecurity/39659", "content": "\u203c CVE-2022-0818 \u203c\n\nThe WooCommerce Affiliate Plugin WordPress plugin before 4.16.4.5 does not have authorization and CSRF checks on a specific action handler, as well as does not sanitize its settings, which enables an unauthenticated attacker to inject malicious XSS payloads into the settings page of the plugin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-28T22:41:45.000000Z"}, {"uuid": "dd3b94c0-f8bb-44e4-befe-cc3645082906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/cibsecurity/39034", "content": "\u203c CVE-2022-0811 \u203c\n\nA flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-16T17:20:37.000000Z"}, {"uuid": "454e7540-9b37-4eee-b6ef-03e646b9a3b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0815", "type": "seen", "source": "https://t.me/cibsecurity/38754", "content": "\u203c CVE-2022-0815 \u203c\n\nImproper access control vulnerability in McAfee WebAdvisor Chrome and Edge browser extensions up to 8.1.0.1895 allows a remote attacker to gain access to McAfee WebAdvisor settings and other details about the user\u00e2\u20ac\u2122s system. This could lead to unexpected behaviors including; settings being changed, fingerprinting of the system leading to targeted scams, and not triggering the malicious software if McAfee software is detected.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-11T02:14:04.000000Z"}, {"uuid": "e7a0aba2-c865-4d76-a65f-e7a901842745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/2218", "content": "Mitigating CVE-2022-0811: Arbitrary code execution affecting CRI-O https://sysdig.com/blog/cve-2022-0811-cri-o/", "creation_timestamp": "2026-08-03T01:04:23.724413Z"}, {"uuid": "0d4062e5-ff63-47e8-ac7b-99a86909f179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/thehackernews/1987", "content": "A new vulnerability (CVE-2022-0811) in the CRI-O engine, dubbed \u201ccr8escape,\u201d could allow attackers to escape Kubernetes containers and gain root access.\n\nRead details: https://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "creation_timestamp": "2023-07-13T10:44:34.000000Z"}, {"uuid": "8cf5a701-c83b-486b-b999-6c3d9ce6c60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "exploited", "source": "https://t.me/xakep_ru/13806", "content": "HTB Vessel. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 Kubernetes #\u0441\u0442\u0430\u0442\u044c\u0438 #\u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0430\u043c\n\n\u0412 \u044d\u0442\u043e\u043c \u0440\u0430\u0439\u0442\u0430\u043f\u0435 \u044f \u043f\u043e\u043a\u0430\u0436\u0443, \u043a\u0430\u043a \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-0811, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 Kubernetes. \u041f\u043e \u0434\u043e\u0440\u043e\u0433\u0435 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c, \u043a\u0430\u043a \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f Git, \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0438 \u043f\u043e\u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0438\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Open Web Analytics, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0445\u043e\u0441\u0442\u0443. \u0415\u0449\u0435 \u0440\u0430\u0437\u0431\u0435\u0440\u0435\u043c\u0441\u044f \u0441 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u0443\u0435\u043c PDF-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442.\n\nhttps://xakep.ru/2023/03/27/htb-vessel/", "creation_timestamp": "2023-03-27T13:14:41.000000Z"}, {"uuid": "e6f1f37d-1d51-4679-832b-364ca01b9788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5656", "content": "#Whitepaper\n\"Webhook Security Guidelines\".\n\n]-> Simple webhook to block exploitation of CVE-2022-0811:\nhttps://github.com/spiarh/webhook-cve-2022-0811", "creation_timestamp": "2022-03-22T11:02:01.000000Z"}, {"uuid": "22b05b17-2d94-4914-83d6-113b8dea4b15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5621", "content": "#tools\n#Cloud_Security\ncr8escape - Vulnerability in CRI-O Container Engine (CVE-2022-0811)\nhttps://www.crowdstrike.com/blog/cr8escape-new-vulnerability-discovered-in-cri-o-container-engine-cve-2022-0811", "creation_timestamp": "2023-09-24T15:02:15.000000Z"}, {"uuid": "e6d15fc8-d943-4cef-8f3b-392df8e2e8f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0811", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10008", "content": "#exploit\n1. CVE-2024-0811:\nChrome pageCapture.saveAsMHTML() Extension API Blocked Origin Bypass\nhttps://packetstormsecurity.com/files/177172/Chrome-chrome.pageCapture.saveAsMHTML-Extension-API-Blocked-Origin-Bypass.html\n\n2. CVE-2023-50387:\nKeyTrap in DNS/DNSSEC\nhttps://github.com/knqyf263/CVE-2023-50387\n\n3. CVE-2024-22369:\nApache Camel Unsafe Deserialization\nhttps://github.com/oscerd/CVE-2024-22369", "creation_timestamp": "2024-02-20T14:41:20.000000Z"}, {"uuid": "5848abf3-9e6a-4d4a-878f-8d49b9315d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/Kubesploit/236", "content": "A vulnerability in CRI-O could allow for attackers who are able to create pods in a Kubernetes or OpenShift cluster to break out to the underlying cluster node, effectively escalating their privileges.\n\nMore: https://blog.aquasec.com/cve-2022-0811-cri-o-vulnerability", "creation_timestamp": "2026-08-29T18:00:04.801480Z"}, {"uuid": "49314bfb-3704-481e-aa88-83b81e4be41d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0810", "type": "seen", "source": "https://t.me/cibsecurity/9783", "content": "ATENTION\u203c New - CVE-2012-0810\n\nThe int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack, which allows local users to cause a denial of service (stack corruption and panic) via a crafted application that triggers certain lock contention.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-02-12T16:37:06.000000Z"}, {"uuid": "72c99fe5-4291-4ef9-8009-5b4af5590c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/Kubesploit/236", "content": "A vulnerability in CRI-O could allow for attackers who are able to create pods in a Kubernetes or OpenShift cluster to break out to the underlying cluster node, effectively escalating their privileges.\n\nMore: https://blog.aquasec.com/cve-2022-0811-cri-o-vulnerability", "creation_timestamp": "2026-08-30T00:00:54.526772Z"}, {"uuid": "bc0f8956-7c0e-417d-9d82-c2b961b272f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/2218", "content": "Mitigating CVE-2022-0811: Arbitrary code execution affecting CRI-O https://sysdig.com/blog/cve-2022-0811-cri-o/", "creation_timestamp": "2026-08-04T00:00:54.305884Z"}, {"uuid": "ed238632-926b-4ab7-81bb-562557ebf562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/reverseame/2218", "content": "Mitigating CVE-2022-0811: Arbitrary code execution affecting CRI-O https://sysdig.com/blog/cve-2022-0811-cri-o/", "creation_timestamp": "2026-07-29T12:02:44.133540Z"}, {"uuid": "da63804d-bc7d-44cd-a1f2-16163bb4ef48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/reverseame/2218", "content": "Mitigating CVE-2022-0811: Arbitrary code execution affecting CRI-O https://sysdig.com/blog/cve-2022-0811-cri-o/", "creation_timestamp": "2026-07-30T00:02:38.259988Z"}, {"uuid": "a9acc54f-8959-45a8-8218-b0cf63ac3b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/cissp/5521", "content": "A new vulnerability (CVE-2022-0811) in the CRI-O engine, dubbed \u201ccr8escape,\u201d could allow attackers to escape Kubernetes containers and gain root access. \n\nRead details: https://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "creation_timestamp": "2026-09-01T17:00:31.089896Z"}, {"uuid": "9e936623-bec0-46d8-bbb7-71af2ec5eb7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0813", "type": "seen", "source": "https://t.me/hacking_Attack/133664", "content": "fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources. The list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.    CVE program credit     CVE-2007-3641 libarchive OUSPG   CVE-2007-3644 libarchive OUSPG   CVE-2007-3645 libarchive OUSPG   CVE-2008-1372 bzip2 OUSPG   CVE-2008-1387 ClamAV OUSPG   CVE-2008-1412 F-Secure OUSPG   CVE-2008-1837 ClamAV OUSPG   CVE-2008-6536 7-zip OUSPG   CVE-2008-6903 Sophos Anti-Virus OUSPG   CVE-2010-0001 Gzip integer underflow in unlzw   CVE-2010-0192 Acroread OUSPG   CVE-2010-1205 libpng OUSPG   CVE-2010-1410 Webkit OUSPG   CVE-2010-1415 Webkit OUSPG   CVE-2010-1793 Webkit OUSPG   CVE-2010-2065 libtiff found by CERT-FI   CVE-2010-2443 libtiff found by CERT-FI   CVE-2010-2597 libtiff found by CERT-FI   CVE-2010-2482 libtiff found by CERT-FI   CVE-2011-0522 VLC found by Harry Sintonen   CVE-2011-0181 Apple ImageIO found by Harry Sintonen   CVE-2011-0198 Apple Type Services found by Harry Sintonen   CVE-2011-0205 Apple ImageIO found by Harry Sintonen   CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen   CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri   CVE-2011-1186 Chrome OUSPG   CVE-2011-1434 Chrome OUSPG   CVE-2011-2348 Chrome OUSPG   CVE-2011-2804 Chrome/pdf OUSPG   CVE-2011-2830 Chrome/pdf OUSPG   CVE-2011-2839 Chrome/pdf OUSPG   CVE-2011-2861 Chrome/pdf OUSPG   CVE-2011-3146 librsvg found by Sauli Pahlman   CVE-2011-3654 Mozilla Firefox OUSPG   CVE-2011-3892 Theora OUSPG   CVE-2011-3893 Chrome OUSPG   CVE-2011-3895 FFmpeg OUSPG   CVE-2011-3957 Chrome OUSPG   CVE-2011-3959 Chrome OUSPG   CVE-2011-3960 Chrome OUSPG   CVE-2011-3962 Chrome OUSPG   CVE-2011-3966 Chrome OUSPG   CVE-2011-3970 libxslt OUSPG   CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-0469 Mozilla Firefox OUSPG   CVE-2012-0470 Mozilla Firefox OUSPG   CVE-2012-0457 Mozilla Firefox OUSPG   CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2849 Chrome/GIF OUSPG   CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-4922 tor found by the Tor project   CVE-2012-5108 Chrome OUSPG via NodeFuzz   CVE-2012-2887 Chrome OUSPG via NodeFuzz   CVE-2012-5120 Chrome OUSPG via NodeFuzz   CVE-2012-5121 Chrome OUSPG via NodeFuzz   CVE-2012-5145 Chrome OUSPG via NodeFuzz   CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-1691 Mozilla Firefox OUSPG   CVE-2013-1708 Mozilla Firefox OUSPG   CVE-2013-4082 Wireshark found by cons0ul   CVE-2013-1732 Mozilla Firefox OUSPG   CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3669 PHP    CVE-2014-3668 PHP    CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3707 cURL Symeon Paraschoudis   CVE-2014-7933 Chrome OUSPG   CVE-2015-0797 Mozilla Firefox OUSPG   CVE-2015-0813 Mozilla Firefox OUSPG   CVE-2015-1220 Chrome OUSPG   CVE-2015-1224 Chrome OUSPG", "creation_timestamp": "2026-09-01T20:00:38.104121Z"}, {"uuid": "b16289f6-648e-4911-b615-f0f0668a990c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0813", "type": "seen", "source": "https://t.me/hacking_Attack/133664", "content": "fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources. The list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.    CVE program credit     CVE-2007-3641 libarchive OUSPG   CVE-2007-3644 libarchive OUSPG   CVE-2007-3645 libarchive OUSPG   CVE-2008-1372 bzip2 OUSPG   CVE-2008-1387 ClamAV OUSPG   CVE-2008-1412 F-Secure OUSPG   CVE-2008-1837 ClamAV OUSPG   CVE-2008-6536 7-zip OUSPG   CVE-2008-6903 Sophos Anti-Virus OUSPG   CVE-2010-0001 Gzip integer underflow in unlzw   CVE-2010-0192 Acroread OUSPG   CVE-2010-1205 libpng OUSPG   CVE-2010-1410 Webkit OUSPG   CVE-2010-1415 Webkit OUSPG   CVE-2010-1793 Webkit OUSPG   CVE-2010-2065 libtiff found by CERT-FI   CVE-2010-2443 libtiff found by CERT-FI   CVE-2010-2597 libtiff found by CERT-FI   CVE-2010-2482 libtiff found by CERT-FI   CVE-2011-0522 VLC found by Harry Sintonen   CVE-2011-0181 Apple ImageIO found by Harry Sintonen   CVE-2011-0198 Apple Type Services found by Harry Sintonen   CVE-2011-0205 Apple ImageIO found by Harry Sintonen   CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen   CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri   CVE-2011-1186 Chrome OUSPG   CVE-2011-1434 Chrome OUSPG   CVE-2011-2348 Chrome OUSPG   CVE-2011-2804 Chrome/pdf OUSPG   CVE-2011-2830 Chrome/pdf OUSPG   CVE-2011-2839 Chrome/pdf OUSPG   CVE-2011-2861 Chrome/pdf OUSPG   CVE-2011-3146 librsvg found by Sauli Pahlman   CVE-2011-3654 Mozilla Firefox OUSPG   CVE-2011-3892 Theora OUSPG   CVE-2011-3893 Chrome OUSPG   CVE-2011-3895 FFmpeg OUSPG   CVE-2011-3957 Chrome OUSPG   CVE-2011-3959 Chrome OUSPG   CVE-2011-3960 Chrome OUSPG   CVE-2011-3962 Chrome OUSPG   CVE-2011-3966 Chrome OUSPG   CVE-2011-3970 libxslt OUSPG   CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-0469 Mozilla Firefox OUSPG   CVE-2012-0470 Mozilla Firefox OUSPG   CVE-2012-0457 Mozilla Firefox OUSPG   CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2849 Chrome/GIF OUSPG   CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-4922 tor found by the Tor project   CVE-2012-5108 Chrome OUSPG via NodeFuzz   CVE-2012-2887 Chrome OUSPG via NodeFuzz   CVE-2012-5120 Chrome OUSPG via NodeFuzz   CVE-2012-5121 Chrome OUSPG via NodeFuzz   CVE-2012-5145 Chrome OUSPG via NodeFuzz   CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-1691 Mozilla Firefox OUSPG   CVE-2013-1708 Mozilla Firefox OUSPG   CVE-2013-4082 Wireshark found by cons0ul   CVE-2013-1732 Mozilla Firefox OUSPG   CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3669 PHP    CVE-2014-3668 PHP    CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3707 cURL Symeon Paraschoudis   CVE-2014-7933 Chrome OUSPG   CVE-2015-0797 Mozilla Firefox OUSPG   CVE-2015-0813 Mozilla Firefox OUSPG   CVE-2015-1220 Chrome OUSPG   CVE-2015-1224 Chrome OUSPG", "creation_timestamp": "2026-09-02T01:00:57.942662Z"}, {"uuid": "7f632031-6821-4776-bff4-677b79c28221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/cissp/5521", "content": "A new vulnerability (CVE-2022-0811) in the CRI-O engine, dubbed \u201ccr8escape,\u201d could allow attackers to escape Kubernetes containers and gain root access. \n\nRead details: https://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "creation_timestamp": "2026-09-02T01:04:14.276118Z"}, {"uuid": "8a5a3fc8-84e9-443c-bb53-afd8997b32c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0813", "type": "seen", "source": "https://t.me/hacking_Attack/133664", "content": "fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources. The list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.    CVE program credit     CVE-2007-3641 libarchive OUSPG   CVE-2007-3644 libarchive OUSPG   CVE-2007-3645 libarchive OUSPG   CVE-2008-1372 bzip2 OUSPG   CVE-2008-1387 ClamAV OUSPG   CVE-2008-1412 F-Secure OUSPG   CVE-2008-1837 ClamAV OUSPG   CVE-2008-6536 7-zip OUSPG   CVE-2008-6903 Sophos Anti-Virus OUSPG   CVE-2010-0001 Gzip integer underflow in unlzw   CVE-2010-0192 Acroread OUSPG   CVE-2010-1205 libpng OUSPG   CVE-2010-1410 Webkit OUSPG   CVE-2010-1415 Webkit OUSPG   CVE-2010-1793 Webkit OUSPG   CVE-2010-2065 libtiff found by CERT-FI   CVE-2010-2443 libtiff found by CERT-FI   CVE-2010-2597 libtiff found by CERT-FI   CVE-2010-2482 libtiff found by CERT-FI   CVE-2011-0522 VLC found by Harry Sintonen   CVE-2011-0181 Apple ImageIO found by Harry Sintonen   CVE-2011-0198 Apple Type Services found by Harry Sintonen   CVE-2011-0205 Apple ImageIO found by Harry Sintonen   CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen   CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri   CVE-2011-1186 Chrome OUSPG   CVE-2011-1434 Chrome OUSPG   CVE-2011-2348 Chrome OUSPG   CVE-2011-2804 Chrome/pdf OUSPG   CVE-2011-2830 Chrome/pdf OUSPG   CVE-2011-2839 Chrome/pdf OUSPG   CVE-2011-2861 Chrome/pdf OUSPG   CVE-2011-3146 librsvg found by Sauli Pahlman   CVE-2011-3654 Mozilla Firefox OUSPG   CVE-2011-3892 Theora OUSPG   CVE-2011-3893 Chrome OUSPG   CVE-2011-3895 FFmpeg OUSPG   CVE-2011-3957 Chrome OUSPG   CVE-2011-3959 Chrome OUSPG   CVE-2011-3960 Chrome OUSPG   CVE-2011-3962 Chrome OUSPG   CVE-2011-3966 Chrome OUSPG   CVE-2011-3970 libxslt OUSPG   CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-0469 Mozilla Firefox OUSPG   CVE-2012-0470 Mozilla Firefox OUSPG   CVE-2012-0457 Mozilla Firefox OUSPG   CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2849 Chrome/GIF OUSPG   CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-4922 tor found by the Tor project   CVE-2012-5108 Chrome OUSPG via NodeFuzz   CVE-2012-2887 Chrome OUSPG via NodeFuzz   CVE-2012-5120 Chrome OUSPG via NodeFuzz   CVE-2012-5121 Chrome OUSPG via NodeFuzz   CVE-2012-5145 Chrome OUSPG via NodeFuzz   CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-1691 Mozilla Firefox OUSPG   CVE-2013-1708 Mozilla Firefox OUSPG   CVE-2013-4082 Wireshark found by cons0ul   CVE-2013-1732 Mozilla Firefox OUSPG   CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3669 PHP    CVE-2014-3668 PHP    CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3707 cURL Symeon Paraschoudis   CVE-2014-7933 Chrome OUSPG   CVE-2015-0797 Mozilla Firefox OUSPG   CVE-2015-0813 Mozilla Firefox OUSPG   CVE-2015-1220 Chrome OUSPG   CVE-2015-1224 Chrome OUSPG", "creation_timestamp": "2026-09-03T21:00:18.167426Z"}, {"uuid": "9db2c381-9501-4433-97b0-117507895cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0813", "type": "seen", "source": "https://t.me/hacking_Attack/133664", "content": "fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources. The list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.    CVE program credit     CVE-2007-3641 libarchive OUSPG   CVE-2007-3644 libarchive OUSPG   CVE-2007-3645 libarchive OUSPG   CVE-2008-1372 bzip2 OUSPG   CVE-2008-1387 ClamAV OUSPG   CVE-2008-1412 F-Secure OUSPG   CVE-2008-1837 ClamAV OUSPG   CVE-2008-6536 7-zip OUSPG   CVE-2008-6903 Sophos Anti-Virus OUSPG   CVE-2010-0001 Gzip integer underflow in unlzw   CVE-2010-0192 Acroread OUSPG   CVE-2010-1205 libpng OUSPG   CVE-2010-1410 Webkit OUSPG   CVE-2010-1415 Webkit OUSPG   CVE-2010-1793 Webkit OUSPG   CVE-2010-2065 libtiff found by CERT-FI   CVE-2010-2443 libtiff found by CERT-FI   CVE-2010-2597 libtiff found by CERT-FI   CVE-2010-2482 libtiff found by CERT-FI   CVE-2011-0522 VLC found by Harry Sintonen   CVE-2011-0181 Apple ImageIO found by Harry Sintonen   CVE-2011-0198 Apple Type Services found by Harry Sintonen   CVE-2011-0205 Apple ImageIO found by Harry Sintonen   CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen   CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri   CVE-2011-1186 Chrome OUSPG   CVE-2011-1434 Chrome OUSPG   CVE-2011-2348 Chrome OUSPG   CVE-2011-2804 Chrome/pdf OUSPG   CVE-2011-2830 Chrome/pdf OUSPG   CVE-2011-2839 Chrome/pdf OUSPG   CVE-2011-2861 Chrome/pdf OUSPG   CVE-2011-3146 librsvg found by Sauli Pahlman   CVE-2011-3654 Mozilla Firefox OUSPG   CVE-2011-3892 Theora OUSPG   CVE-2011-3893 Chrome OUSPG   CVE-2011-3895 FFmpeg OUSPG   CVE-2011-3957 Chrome OUSPG   CVE-2011-3959 Chrome OUSPG   CVE-2011-3960 Chrome OUSPG   CVE-2011-3962 Chrome OUSPG   CVE-2011-3966 Chrome OUSPG   CVE-2011-3970 libxslt OUSPG   CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-0469 Mozilla Firefox OUSPG   CVE-2012-0470 Mozilla Firefox OUSPG   CVE-2012-0457 Mozilla Firefox OUSPG   CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2849 Chrome/GIF OUSPG   CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-4922 tor found by the Tor project   CVE-2012-5108 Chrome OUSPG via NodeFuzz   CVE-2012-2887 Chrome OUSPG via NodeFuzz   CVE-2012-5120 Chrome OUSPG via NodeFuzz   CVE-2012-5121 Chrome OUSPG via NodeFuzz   CVE-2012-5145 Chrome OUSPG via NodeFuzz   CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-1691 Mozilla Firefox OUSPG   CVE-2013-1708 Mozilla Firefox OUSPG   CVE-2013-4082 Wireshark found by cons0ul   CVE-2013-1732 Mozilla Firefox OUSPG   CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3669 PHP    CVE-2014-3668 PHP    CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3707 cURL Symeon Paraschoudis   CVE-2014-7933 Chrome OUSPG   CVE-2015-0797 Mozilla Firefox OUSPG   CVE-2015-0813 Mozilla Firefox OUSPG   CVE-2015-1220 Chrome OUSPG   CVE-2015-1224 Chrome OUSPG", "creation_timestamp": "2026-09-04T00:00:11.839157Z"}, {"uuid": "dae75d8f-0cde-4cc0-b852-2e370fdcccc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-0815", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/typo3_sa_2009_002.rb", "content": "{\"actions\": [{\"description\": \"Download arbitrary file\", \"name\": \"Download\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"spinbad \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a file disclosure vulnerability in the jumpUrl mechanism of\\n          Typo3. This flaw can be used to read any file that the web server user account has\\n          access to.\", \"disclosure_date\": \"2009-02-10\", \"fullname\": \"auxiliary/admin/http/typo3_sa_2009_002\", \"is_install_path\": true, \"mod_time\": \"2025-05-16 01:16:37 +0000\", \"name\": \"Typo3 sa-2009-002 File Disclosure\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/http/typo3_sa_2009_002.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/http/typo3_sa_2009_002\", \"references\": [\"OSVDB-52048\", \"CVE-2009-0815\", \"URL-http://web.archive.org/web/20090212165636/http://secunia.com:80/advisories/33829/\", \"EDB-8038\", \"URL-http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002/\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:50.767485Z"}, {"uuid": "6048b0b9-2570-47ff-966c-814b10e4fe5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0816", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_pdfjs_privilege_escalation.rb", "content": "{\"aliases\": [], \"arch\": \"firefox, x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64\", \"author\": [\"Unknown\", \"Marius Mlynski\", \"joev \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module gains remote code execution on Firefox 35-36 by abusing a\\n          privilege escalation bug in resource:// URIs. PDF.js is used to exploit\\n          the bug. This exploit requires the user to click anywhere on the page to\\n          trigger the vulnerability.\", \"disclosure_date\": \"2015-03-31\", \"fullname\": \"exploit/multi/browser/firefox_pdfjs_privilege_escalation\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Firefox PDF.js Privileged Javascript Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/firefox_pdfjs_privilege_escalation.rb\", \"platform\": \"Firefox,Java,Linux,OSX,Solaris,Windows\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"multi/browser/firefox_pdfjs_privilege_escalation\", \"references\": [\"CVE-2015-0816\", \"CVE-2015-0802\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Universal (Javascript XPCOM Shell)\", \"Native Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:35.571521Z"}, {"uuid": "9a3d441e-57b6-4258-8553-5b37316166fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0810", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms13_071_theme.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Eduardo Prado\", \"juan vazquez \", \"Matthew Hall \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability mainly affecting Microsoft Windows XP and Windows\\n          2003. The vulnerability exists in the handling of the Screen Saver path, in the [boot]\\n          section. An arbitrary path can be used as screen saver, including a remote SMB resource,\\n          which allows for remote code execution when a malicious .theme file is opened, and the\\n          \\\"Screen Saver\\\" tab is viewed. The code execution is also triggered if the victim installs\\n          the malicious theme and stays away from the computer, when Windows tries to display the\\n          screensaver.\", \"disclosure_date\": \"2013-09-10\", \"fullname\": \"exploit/windows/fileformat/ms13_071_theme\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS13-071 Microsoft Windows Theme File Handling Arbitrary Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/ms13_071_theme.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/fileformat/ms13_071_theme\", \"references\": [\"CVE-2013-0810\", \"OSVDB-97136\", \"MSB-MS13-071\", \"BID-62176\", \"URL-http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1040\", \"URL-https://www.rapid7.com/blog/post/2013/09/25/change-the-theme-get-a-shell\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows XP SP3 / Windows 2003 SP2\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:28.445880Z"}, {"uuid": "f4715508-4b8b-4fc6-8cea-af87d1db13ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0818", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms04_007_killbill.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Solar Eclipse \"], \"autofilter_ports\": [139, 445], \"autofilter_services\": [\"netbios-ssn\", \"microsoft-ds\"], \"check\": false, \"default_credential\": false, \"description\": \"This is an exploit for a previously undisclosed\\n          vulnerability in the bit string decoding code in the\\n          Microsoft ASN.1 library. This vulnerability is not related\\n          to the bit string vulnerability described in eEye advisory\\n          AD20040210-2. Both vulnerabilities were fixed in the\\n          MS04-007 patch.  Windows 2000 SP4 Rollup 1 also patches this\\n          vulnerability.\\n\\n          You are only allowed one attempt with this vulnerability. If\\n          the payload fails to execute, the LSASS system service will\\n          crash and the target system will automatically reboot itself\\n          in 60 seconds. If the payload succeeds, the system will no\\n          longer be able to process authentication requests, denying\\n          all attempts to login through SMB or at the console. A\\n          reboot is required to restore proper functioning of an\\n          exploited system.\\n\\n          This exploit has been successfully tested with the win32/*/reverse_tcp\\n          payloads, however a few problems were encountered when using the\\n          equivalent bind payloads. Your mileage may vary.\", \"disclosure_date\": \"2004-02-10\", \"fullname\": \"exploit/windows/smb/ms04_007_killbill\", \"is_install_path\": true, \"mod_time\": \"2025-06-25 09:25:53 +0000\", \"name\": \"MS04-007 Microsoft ASN.1 Library Bitstring Heap Overflow\", \"needs_cleanup\": null, \"notes\": {\"AKA\": [\"kill-bill\"], \"Reliability\": [\"unreliable-session\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"crash-os-restarts\", \"crash-service-down\"]}, \"path\": \"/modules/exploits/windows/smb/ms04_007_killbill.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 100, \"ref_name\": \"windows/smb/ms04_007_killbill\", \"references\": [\"CVE-2003-0818\", \"OSVDB-3902\", \"BID-9633\", \"MSB-MS04-007\"], \"rport\": 445, \"session_types\": false, \"targets\": [\"Windows 2000 SP2-SP4 + Windows XP SP0-SP1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:31.569605Z"}, {"uuid": "db2c1502-dd83-42af-8b01-3affd729def6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0812", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms03_049_netapi.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \"], \"autofilter_ports\": [139, 445], \"autofilter_services\": [\"netbios-ssn\", \"microsoft-ds\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in the NetApi32 NetAddAlternateComputerName\\n          function using the Workstation service in Windows XP.\", \"disclosure_date\": \"2003-11-11\", \"fullname\": \"exploit/windows/smb/ms03_049_netapi\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS03-049 Microsoft Workstation Service NetAddAlternateComputerName Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/smb/ms03_049_netapi.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/smb/ms03_049_netapi\", \"references\": [\"CVE-2003-0812\", \"OSVDB-11461\", \"BID-9011\", \"MSB-MS03-049\"], \"rport\": 445, \"session_types\": false, \"targets\": [\"Windows XP SP0/SP1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:31.470623Z"}, {"uuid": "3c06df63-9e0b-4a27-a696-2aae596ccd94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/cissp/5521", "content": "A new vulnerability (CVE-2022-0811) in the CRI-O engine, dubbed \u201ccr8escape,\u201d could allow attackers to escape Kubernetes containers and gain root access. \n\nRead details: https://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "creation_timestamp": "2026-09-10T11:00:04.371787Z"}, {"uuid": "562e690e-2580-4dd5-9e5e-3909c2798f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/cissp/5521", "content": "A new vulnerability (CVE-2022-0811) in the CRI-O engine, dubbed \u201ccr8escape,\u201d could allow attackers to escape Kubernetes containers and gain root access. \n\nRead details: https://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "creation_timestamp": "2026-09-11T00:00:42.388381Z"}]}