{"vulnerability": "-082", "sightings": [{"uuid": "97ca7595-4722-4498-801e-6e14ee5dc26d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-0824", "type": "seen", "source": "MISP/a24f5ae5-13ba-4817-bb12-68d666f181cd", "content": "", "creation_timestamp": "2020-10-09T16:28:13.000000Z"}, {"uuid": "3e29e96e-9a50-4ef9-aead-26b453f6fe08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-08-05T18:10:02.000000Z"}, {"uuid": "efc5a953-3ad9-455e-aa39-5c34f81d61d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0826", "type": "exploited", "source": "https://www.exploit-db.com/exploits/44152", "content": "", "creation_timestamp": "2018-02-20T00:00:00.000000Z"}, {"uuid": "05f0b5b8-1bb6-48bc-959c-9dd6a1bd91e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0823", "type": "exploited", "source": "https://www.exploit-db.com/exploits/44148", "content": "", "creation_timestamp": "2018-02-20T00:00:00.000000Z"}, {"uuid": "e70aa5bc-1a6c-4528-9c27-b2b64a7ef36e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0822", "type": "exploited", "source": "https://www.exploit-db.com/exploits/44147", "content": "", "creation_timestamp": "2018-02-20T00:00:00.000000Z"}, {"uuid": "4d288cea-b586-4e4e-92be-6afbee99b7cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0821", "type": "exploited", "source": "https://www.exploit-db.com/exploits/44149", "content": "", "creation_timestamp": "2018-02-20T00:00:00.000000Z"}, {"uuid": "e37f9c91-2164-4d87-90de-3aa9db15f2a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0822", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:39.000000Z"}, {"uuid": "c50846c6-dccd-450b-8f91-2b6fc13114ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "b16f6dc8-e769-40e5-8623-9b74732d5f5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "cd264d35-83e3-434a-bdd2-d3498f094251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0825", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhedyem53k2t", "content": "", "creation_timestamp": "2025-02-04T15:16:02.911387Z"}, {"uuid": "2a2053b0-875a-4ca0-916f-9696c9d4ac9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0827", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-01)", "content": "", "creation_timestamp": "2025-02-01T00:00:00.000000Z"}, {"uuid": "d9e8c74e-e160-467f-bbf8-dde092aa35e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0827", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "80c9a3f8-7659-4349-a009-f900bfec6184", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0822", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:37.000000Z"}, {"uuid": "df7337ac-4ac3-4c44-a0d6-b13d437eac19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0827", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-01)", "content": "", "creation_timestamp": "2025-02-01T00:00:00.000000Z"}, {"uuid": "702f1364-e7ce-40ae-acf9-da396ff78005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0826", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "624470fe-b2c8-441d-9da6-e098c1e641d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0826", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lklmz3j63c2s", "content": "", "creation_timestamp": "2025-03-17T17:01:43.682806Z"}, {"uuid": "31b4ad38-7ffb-4607-b5ab-e9995dcf8fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0829", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lklmz3sg2c2e", "content": "", "creation_timestamp": "2025-03-17T17:01:44.365691Z"}, {"uuid": "eb4453d5-23f2-4ec3-a82e-b5e9fc296a7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0828", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lklmz3vpcz2x", "content": "", "creation_timestamp": "2025-03-17T17:01:44.965056Z"}, {"uuid": "1107d9aa-41f5-4f83-9984-27b0396d3765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0827", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lklmz3zhn22e", "content": "", "creation_timestamp": "2025-03-17T17:01:45.548636Z"}, {"uuid": "5686e0ae-70d8-4d53-a4ec-6b185ad99399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0827", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-09)", "content": "", "creation_timestamp": "2025-02-09T00:00:00.000000Z"}, {"uuid": "f2bd6b1e-8618-48b3-8085-ae40686fcd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:42.000000Z"}, {"uuid": "6dfa37d7-5fd3-4afb-ae80-e20ece698114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:01.000000Z"}, {"uuid": "95cf929a-5eab-4428-b0fe-69894b9154cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0821", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114001942944019640", "content": "", "creation_timestamp": "2025-02-14T11:13:20.704562Z"}, {"uuid": "643dd6e1-482f-4a0e-b7b2-b2170a115408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0821", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li537mbcp62a", "content": "", "creation_timestamp": "2025-02-14T11:15:35.644530Z"}, {"uuid": "d1fc4ec4-acc8-4675-8836-6166184be8b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0821", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li5gvpcyy22c", "content": "", "creation_timestamp": "2025-02-14T14:44:48.703953Z"}, {"uuid": "a92af6ab-cc2a-4503-8f74-a2a364a63d0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0822", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114007991998567307", "content": "", "creation_timestamp": "2025-02-15T12:51:42.056117Z"}, {"uuid": "291e2f9d-8d3e-45ac-969a-fed9f6ac0076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0822", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li7sf7m6nn2o", "content": "", "creation_timestamp": "2025-02-15T13:15:39.321785Z"}, {"uuid": "5278ec79-49fd-417c-8b64-ac04adbd6bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0822", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lia7idflcw2e", "content": "", "creation_timestamp": "2025-02-15T17:10:03.012066Z"}, {"uuid": "b699ee3a-d87b-42a2-9cb9-f21f87eb3a79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:56.000000Z"}, {"uuid": "5f72eb4e-58c9-493d-8db7-9d0255679bad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0822", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:06.000000Z"}, {"uuid": "5ced35ae-5ae8-4b4b-b04d-63b44b0a8376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0823", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj7phiwprt2y", "content": "", "creation_timestamp": "2025-02-28T05:48:26.741354Z"}, {"uuid": "f9358181-f607-4bcd-9392-cb037192952d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0822", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:45.000000Z"}, {"uuid": "05010a46-9c53-46ae-85f3-1d058414ad5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0827", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114178558444517317", "content": "", "creation_timestamp": "2025-03-17T15:48:59.547884Z"}, {"uuid": "c367062e-832a-4f66-a4c9-82725ef977c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0828", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114178558479187941", "content": "", "creation_timestamp": "2025-03-17T15:48:59.975931Z"}, {"uuid": "94f3c42e-1d97-4e5a-957f-8eab44a2be2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0826", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114178558412677816", "content": "", "creation_timestamp": "2025-03-17T15:49:00.101320Z"}, {"uuid": "c9e3143f-81b2-4dc0-a98f-12a3796bded2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0829", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114178558507734826", "content": "", "creation_timestamp": "2025-03-17T15:49:00.647059Z"}, {"uuid": "c31a6e13-c009-43d2-a5ae-19d6d4b2d89f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0827", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-15)", "content": "", "creation_timestamp": "2025-03-15T00:00:00.000000Z"}, {"uuid": "5935f249-6a49-41a8-b45a-0a2af6e45793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0827", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-14)", "content": "", "creation_timestamp": "2025-04-14T00:00:00.000000Z"}, {"uuid": "87d18673-178e-47d1-9331-c1cb49aa7a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0826", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-22)", "content": "", "creation_timestamp": "2025-05-22T00:00:00.000000Z"}, {"uuid": "0f3f55f2-01da-4336-801e-8b7866f5023f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0827", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-22)", "content": "", "creation_timestamp": "2025-05-22T00:00:00.000000Z"}, {"uuid": "27165e21-8c6d-4ad0-bb71-e20c6eb2e64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0827", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-10)", "content": "", "creation_timestamp": "2025-05-10T00:00:00.000000Z"}, {"uuid": "1b42a918-cb2c-4c77-bedb-27a0ab0b170a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0826", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-11)", "content": "", "creation_timestamp": "2025-05-11T00:00:00.000000Z"}, {"uuid": "c38c056b-ce81-404e-b428-cfa2bea107e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0827", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-11)", "content": "", "creation_timestamp": "2025-05-11T00:00:00.000000Z"}, {"uuid": "f87ca58b-9322-449b-914e-761c68db29a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0822", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms10_038_excel_obj_bof.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "558e197d-0a97-49b0-8a5f-7b522df4e49b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0822", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/isapi/ms03_051_fp30reg_chunked.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "b2f77d33-adb6-4576-af89-b7a7f11eefb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/escalate/unmarshal_cmd_exec.rb", "content": "", "creation_timestamp": "2018-10-25T18:31:34.000000Z"}, {"uuid": "fd074455-66ff-4bbd-89e4-b284fbde3932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0828", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:28.000000Z"}, {"uuid": "80b1caea-c385-4ca4-a617-28d2cf04af94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0829", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:28.000000Z"}, {"uuid": "90e5599a-a8ea-43d1-a467-610209cf1377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0826", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-08)", "content": "", "creation_timestamp": "2025-11-08T00:00:00.000000Z"}, {"uuid": "9cb18b72-fd71-48ba-ba91-0b8d5b907956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0827", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-08)", "content": "", "creation_timestamp": "2025-11-08T00:00:00.000000Z"}, {"uuid": "bde7c33a-cc6a-40c0-988d-8cb5d87726b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0828", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:32.000000Z"}, {"uuid": "32bda72a-109b-41e8-bcd8-a013fec793b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0829", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:32.000000Z"}, {"uuid": "6c775463-238a-45cd-a3e3-52d8bee37bcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0823", "type": "seen", "source": "MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80", "content": "", "creation_timestamp": "2025-08-22T13:26:18.000000Z"}, {"uuid": "fe9bce45-7404-4f28-b052-bf9c99ffe7ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:37.000000Z"}, {"uuid": "7d5ca1cc-20d0-44e1-a5d7-e6a282aea0f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webmin_file_manager_rce.rb", "content": "", "creation_timestamp": "2022-11-01T16:53:29.000000Z"}, {"uuid": "7e8728c4-e295-467a-8455-384d8c0290da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0827", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-27)", "content": "", "creation_timestamp": "2026-02-27T00:00:00.000000Z"}, {"uuid": "6e110c58-6de3-45d5-b41c-429fdefdbe53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0829", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfplda5j6a2q", "content": "", "creation_timestamp": "2026-02-25T21:02:32.226642Z"}, {"uuid": "92344618-e693-4a40-84a6-e76f14a0c2a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0829", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mf22a5y24x25", "content": "", "creation_timestamp": "2026-02-17T07:30:39.419614Z"}, {"uuid": "bb924d82-e3a0-410c-a957-42acff24d8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0829", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116084797377415876", "content": "", "creation_timestamp": "2026-02-17T07:30:39.507226Z"}, {"uuid": "2873f57c-d83c-4648-90b0-32426e63ce29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0826", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-17)", "content": "", "creation_timestamp": "2026-02-17T00:00:00.000000Z"}, {"uuid": "19aff487-1754-4725-90c9-713439b2d71e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0827", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-02)", "content": "", "creation_timestamp": "2026-02-02T00:00:00.000000Z"}, {"uuid": "75b54b51-8679-475c-9950-9b6c83331e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0827", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-26)", "content": "", "creation_timestamp": "2026-02-26T00:00:00.000000Z"}, {"uuid": "5fc98681-ef5b-4408-902e-8fcc92a8b6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0822", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/18143", "content": "", "creation_timestamp": "2011-11-22T00:00:00.000000Z"}, {"uuid": "3e9ed0c9-7b6a-4737-954d-fc1facf75a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0822", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/15094", "content": "", "creation_timestamp": "2010-09-24T00:00:00.000000Z"}, {"uuid": "5f53184c-5208-460a-924c-64a2cdc7f579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0821", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mc3e47g5532r", "content": "", "creation_timestamp": "2026-01-10T15:44:28.234590Z"}, {"uuid": "456e5f0a-7c5f-4c89-8198-eab9ec4805f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0824", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mc3kjymnpi2y", "content": "", "creation_timestamp": "2026-01-10T17:39:33.387794Z"}, {"uuid": "eb069145-987a-4962-b4f2-0ef053c4b135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0822", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mc3kswznff2e", "content": "", "creation_timestamp": "2026-01-10T17:44:33.388470Z"}, {"uuid": "974c0574-5c00-4be4-8bfc-a206726a9b54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0824", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/15065", "content": "", "creation_timestamp": "2010-09-21T00:00:00.000000Z"}, {"uuid": "a69b12c9-989c-4756-8877-88eed0672122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0826", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-11)", "content": "", "creation_timestamp": "2026-03-11T00:00:00.000000Z"}, {"uuid": "a7658ef2-51c1-4bfd-a2de-e51fa6ec286e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0823", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mckg5b4rn62c", "content": "", "creation_timestamp": "2026-01-16T15:30:47.072285Z"}, {"uuid": "01811572-b83f-4c81-9184-0784e99d993f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0820", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcm3mvpgao2h", "content": "", "creation_timestamp": "2026-01-17T07:28:00.324528Z"}, {"uuid": "9f1f3a0e-8da8-4839-9594-f835f55308c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0822", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/14361", "content": "", "creation_timestamp": "2010-07-14T00:00:00.000000Z"}, {"uuid": "ae3ae6a1-646b-4b4c-b5c5-179d6ceea28a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0825", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdhxovtp4p2h", "content": "", "creation_timestamp": "2026-01-28T09:32:07.218314Z"}, {"uuid": "8cba3713-b2a0-4551-9287-4c03379d6926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2018-0824", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/54bafb2a-eac0-42b4-a8b7-66b5013a8321", "content": "", "creation_timestamp": "2026-02-02T12:26:32.429348Z"}, {"uuid": "6d33601b-39a5-4509-acb6-90b30e68791c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0826", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/7689", "content": "", "creation_timestamp": "2009-01-06T00:00:00.000000Z"}, {"uuid": "a0643a72-911c-4c7b-ac12-07f2158a0f8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0824", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/32850", "content": "", "creation_timestamp": "2009-03-12T00:00:00.000000Z"}, {"uuid": "f8d6f1c8-4524-4121-80aa-19b128d7ee30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0820", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/6646", "content": "", "creation_timestamp": "2008-10-01T00:00:00.000000Z"}, {"uuid": "3e5b117c-f5d6-42a8-9d12-269547bb53c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0827", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-31)", "content": "", "creation_timestamp": "2026-03-31T00:00:00.000000Z"}, {"uuid": "5ec91c38-e7f2-4414-b14e-73d4d9d27a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0825", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/32843", "content": "", "creation_timestamp": "2009-03-06T00:00:00.000000Z"}, {"uuid": "d7affafb-3687-4b00-b351-e414adf64c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0828", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mijhhjdi3f2u", "content": "", "creation_timestamp": "2026-04-02T14:52:55.462125Z"}, {"uuid": "b69ce679-01d3-42ad-8266-d84609742db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0821", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/32836", "content": "", "creation_timestamp": "2009-03-03T00:00:00.000000Z"}, {"uuid": "ffe5ac25-1eda-40ad-ba63-8a105b7ce894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0828", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/7699", "content": "", "creation_timestamp": "2009-01-07T00:00:00.000000Z"}, {"uuid": "3fafdece-ae08-43d0-886d-6fd3af710148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0827", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/7690", "content": "", "creation_timestamp": "2009-01-06T00:00:00.000000Z"}, {"uuid": "08fbde2f-280c-45a0-8f10-2f64793e8600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2003-0822", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16356", "content": "", "creation_timestamp": "2010-07-25T00:00:00.000000Z"}, {"uuid": "cb213004-bfa1-4c47-b5c6-0577a037f2de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2008-0821", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/9254", "content": "", "creation_timestamp": "2009-07-24T00:00:00.000000Z"}, {"uuid": "f60bb2c8-c0d2-4c30-a046-651ce46f8b9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0829", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/7699", "content": "", "creation_timestamp": "2009-01-07T00:00:00.000000Z"}, {"uuid": "9eb6ea72-0136-46ea-adea-f3d462994a85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2007-0820", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/31679", "content": "", "creation_timestamp": "2008-04-21T00:00:00.000000Z"}, {"uuid": "b6e5d707-98e9-47f3-93af-de91fc22ccec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0827", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/80486", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-0827\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ZeroMemoryEx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C#\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-16 02:59:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-0827 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-16T03:00:04.000000Z"}, {"uuid": "6829cca5-40f5-4a15-9069-d54f164dd2b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0827", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjk7xy77cz2o", "content": "", "creation_timestamp": "2026-04-15T15:36:48.864137Z"}, {"uuid": "c0467ad5-7d08-447e-8900-96f18a1c7a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0827", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mjkbosgj6b2y", "content": "", "creation_timestamp": "2026-04-15T16:07:28.824636Z"}, {"uuid": "66ebb99d-1531-4cdd-b566-d3c2f4c52aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1593", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aWebmin CVE-2022-0824 Reverse Shell\nURL\uff1ahttps://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell", "creation_timestamp": "2022-03-06T00:06:36.000000Z"}, {"uuid": "807aff0a-7795-4fb1-8b42-0ca057ea7d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3198", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-0824, CVE-2022-0829, File Manger privilege exploit\nURL\uff1ahttps://github.com/gokul-ramesh/WebminRCE-exploit\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2023-03-23T12:40:43.000000Z"}, {"uuid": "16de26a5-d822-4cbd-9586-3cf719a7b0dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0829", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3198", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-0824, CVE-2022-0829, File Manger privilege exploit\nURL\uff1ahttps://github.com/gokul-ramesh/WebminRCE-exploit\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2023-03-23T12:40:43.000000Z"}, {"uuid": "40e3785f-00a8-4db0-8150-b14333bac03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0820", "type": "seen", "source": "Telegram/6BhTuCXSE453Y5LgUPWYVG6ZJr9x2yg8Oqv7ebsm_pX-9UXi", "content": "", "creation_timestamp": "2025-02-14T21:09:17.000000Z"}, {"uuid": "21775b15-980f-427e-8902-e99a2e119e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/46635", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1a\u6f0f\u6d1e\u5229\u7528\n\u63cf\u8ff0\uff1aWebmin CVE-2022-0824 \u589e\u5f3a\u7248\u6f0f\u6d1e\u5229\u7528\u5de5\u5177 - \u652f\u6301\u547d\u4ee4\u6267\u884c\u548c\u53cd\u5411Shell\u53cc\u6a21\u5f0f\nURL\uff1ahttps://github.com/NUDTTAN91/Webmin-CVE-2022-0824-Enhanced-Exploit\n\n\u6807\u7b7e\uff1a#\u6f0f\u6d1e\u5229\u7528", "creation_timestamp": "2025-08-05T08:38:35.000000Z"}, {"uuid": "294289b1-d39c-4641-a496-7542372b5ff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0820", "type": "seen", "source": "https://t.me/cvedetector/19213", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0820 - Clicface Trombi Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-0820 \nPublished : March 1, 2025, 5:15 a.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : The Clicface Trombi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018nom\u2019 parameter in all versions up to, and including, 2.08 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T08:05:10.000000Z"}, {"uuid": "71d049ce-944f-48d6-a8a2-36dcd1f80f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0823", "type": "seen", "source": "https://t.me/cvedetector/19114", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0823 - IBM Cognos Analytics Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0823 \nPublished : Feb. 28, 2025, 3:15 a.m. | 42\u00a0minutes ago \nDescription : IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 and 12.0.0 through 12.0.4 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T05:19:11.000000Z"}, {"uuid": "c2d4c373-0909-47e1-918c-c83b28fe2a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0827", "type": "seen", "source": "Telegram/yG0q3IpDztUHkWGWcBfSkFN1RblCcRFZP5pQldEwVfp_P8g", "content": "", "creation_timestamp": "2026-04-16T09:00:04.000000Z"}, {"uuid": "1db68ce7-560c-4684-ae57-f043b405f02a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0821", "type": "seen", "source": "Telegram/cLLvJCtHMP3-Q_LQXr3AUX3oAJBvAOxXIVswX4LMlg-LCNSh", "content": "", "creation_timestamp": "2025-02-14T21:08:29.000000Z"}, {"uuid": "d4f653c2-da9c-4c67-8a35-2040c8549e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "Telegram/xPemCocsCKUXmxN-FoOBBJ3iutE4pbP0FjqrQP2HmxHDku0", "content": "", "creation_timestamp": "2026-04-02T21:00:04.000000Z"}, {"uuid": "c000dbed-87cb-4beb-8290-34e74cd45b0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/310", "content": "KillChain\n\nKernel Process Termination Tool ( CVE-2026-0828 exploit). KillChain is a user-mode tool that leverages a vulnerable kernel driver (ProcessMonitorDriver.sys, CVE-2026-0828) to terminate protected processes from user space. It communicates with the kernel via a custom IOCTL interface, bypassing standard process protection mechanisms.", "creation_timestamp": "2026-04-02T16:54:00.000000Z"}, {"uuid": "1ee092a2-6b48-406c-a2ca-52adf69a36e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "exploited", "source": "https://t.me/itsec_news/4581", "content": "\u200b\u26a1\ufe0fShadowPad \u0438 Cobalt Strike: \u0441\u043c\u0435\u0440\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0422\u0430\u0439\u0432\u0430\u043d\u044f\n\n\ud83d\udcac\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442 \u043d\u0430 \u0422\u0430\u0439\u0432\u0430\u043d\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c, \u0441\u0442\u0430\u043b \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Cisco Talos. \u0410\u0442\u0430\u043a\u0430, \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0430\u044f \u0432 \u0438\u044e\u043b\u0435 2023 \u0433\u043e\u0434\u0430, \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e ShadowPad \u0438 Cobalt Strike. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u044e\u0442 \u044d\u0442\u0443 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u0441 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 APT41, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0432\u043b\u0430\u0441\u0442\u0435\u0439, \u0438\u043c\u0435\u0435\u0442 \u0441\u0432\u044f\u0437\u0438 \u0441 \u041a\u0438\u0442\u0430\u0435\u043c.\n\nCisco Talos \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b PowerShell, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u043a IP-\u0430\u0434\u0440\u0435\u0441\u0443 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e ShadowPad \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e Microsoft Office IME \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441\u0432\u043e\u0435\u0433\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430. APT41 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2018-0824, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u0434\u043b\u044f APT41, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 ShadowPad, Bitdefender \u0438 FileZilla. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043e\u043a\u043e\u043d\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 ShadowPad \u043d\u0435 \u0431\u044b\u043b \u043d\u0430\u0439\u0434\u0435\u043d, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e ShadowPad \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u043c\u0438 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438.\n\nCobalt Strike, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438, \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 CS-Avoid-Killing, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0438\u0437\u0431\u0435\u0436\u0430\u043d\u0438\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u0430\u043c\u0438. \u0417\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go \u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0441\u0442\u0440\u043e\u043a\u0438 \u043d\u0430 \u0443\u043f\u0440\u043e\u0449\u0451\u043d\u043d\u043e\u043c \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u043c \u044f\u0437\u044b\u043a\u0435, \u0447\u0442\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u043f\u0440\u0438\u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 \u0445\u043e\u0441\u0442\u0430 \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u0432\u044b\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0446\u0435\u043d\u043d\u044b\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b. \u0425\u0430\u043a\u0435\u0440\u044b \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 RDP \u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0435 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\nAPT41 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Mimikatz \u0438 WebBrowserPassView. \u0425\u0430\u043a\u0435\u0440\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445, \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445. \u0414\u043b\u044f \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0441\u0436\u0438\u043c\u0430\u043b\u0438 \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u0438 \u0444\u0430\u0439\u043b\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e 7zip, \u0430 \u0437\u0430\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0438 \u0438\u0445 \u043d\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0430 \u0442\u0438\u043f\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u0432 ShadowPad. \u041f\u0435\u0440\u0432\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0441\u0442\u0430\u0440\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e Microsoft Office IME, \u0432\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Bitdefender. \u041e\u0431\u0430 \u0442\u0438\u043f\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0435 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f UnmarshalPwn \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2018-0824. \u0411\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u0442\u043e\u0439 \u0436\u0435 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\u0423\u0441\u043b\u043e\u0436\u043d\u0435\u043d\u0438\u0435 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 APT41, \u0441\u0438\u0433\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u043e \u0440\u0430\u0441\u0442\u0443\u0449\u0435\u0439 \u0443\u0433\u0440\u043e\u0437\u0435 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432\u043e \u0432\u0441\u0435\u043c \u043c\u0438\u0440\u0435. \u042d\u0442\u043e\u0442 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0434\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-08-02T14:37:18.000000Z"}, {"uuid": "d29f522b-32ed-4c74-9fae-4a2c167be88c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0822", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4565", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0822\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-15T13:15:28.847\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/bit-assist/tags/1.5.2/backend/app/HTTP/Controllers/DownloadController.php#L65\n2. https://plugins.trac.wordpress.org/changeset/3239816/#file3\n3. https://wordpress.org/plugins/bit-assist/#developers\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/de9b0eba-5d2b-427c-a199-88bf96c26f5e?source=cve", "creation_timestamp": "2025-02-15T15:10:48.000000Z"}, {"uuid": "39e72159-3e6e-4ae9-9034-e4ab457a2359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0822", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4567", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0822\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.2 via the fileID Parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.\n\ud83d\udccf Published: 2025-02-15T15:30:24Z\n\ud83d\udccf Modified: 2025-02-15T15:30:24Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0822\n2. https://plugins.trac.wordpress.org/browser/bit-assist/tags/1.5.2/backend/app/HTTP/Controllers/DownloadController.php#L65\n3. https://plugins.trac.wordpress.org/changeset/3239816/#file3\n4. https://wordpress.org/plugins/bit-assist/#developers\n5. https://www.wordfence.com/threat-intel/vulnerabilities/id/de9b0eba-5d2b-427c-a199-88bf96c26f5e?source=cve", "creation_timestamp": "2025-02-15T16:12:22.000000Z"}, {"uuid": "a6ec908a-3da1-46b9-a397-702fbd90c377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0823", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5828", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0823\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 and 12.0.0 through 12.0.4 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system.\n\ud83d\udccf Published: 2025-02-28T02:31:01.843Z\n\ud83d\udccf Modified: 2025-02-28T02:31:01.843Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7183676", "creation_timestamp": "2025-02-28T03:26:31.000000Z"}, {"uuid": "daca769c-8b3e-49a6-87f6-ec4f9348d9f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0820", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6050", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0820\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Clicface Trombi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018nom\u2019 parameter in all versions up to, and including, 2.08 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-01T04:21:47.812Z\n\ud83d\udccf Modified: 2025-03-01T04:21:47.812Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1d9ff834-8a11-4ec7-9371-15d56bc84106?source=cve\n2. https://plugins.trac.wordpress.org/browser/clicface-trombi/trunk/clicface-trombi.php#L80\n3. https://wordpress.org/plugins/clicface-trombi/#developers", "creation_timestamp": "2025-03-01T05:27:20.000000Z"}, {"uuid": "18ff5c68-09a8-4489-b5cb-4c676de2d9b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0821", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7918", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0821\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4.\n\ud83d\udccf Published: 2023-02-16T21:23:24.500Z\n\ud83d\udccf Modified: 2025-03-18T14:35:44.335Z\n\ud83d\udd17 References:\n1. https://discuss.hashicorp.com/t/hcsec-2023-05-nomad-client-vulnerable-to-decompression-bombs-in-artifact-block/50292", "creation_timestamp": "2025-03-18T14:50:09.000000Z"}, {"uuid": "8f240d3b-7404-4699-a9ed-29aa9080c9ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0820", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9459", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-0820\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Jobs for WordPress plugin before 2.7.4 does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks\n\ud83d\udccf Published: 2024-03-18T19:05:46.059Z\n\ud83d\udccf Modified: 2025-03-28T19:30:06.324Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/fc091bbd-7338-4bd4-add5-e46502a9a949/", "creation_timestamp": "2025-03-28T20:29:03.000000Z"}, {"uuid": "98728a1c-305e-46e3-a951-03fb9f1a2f34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0821", "type": "seen", "source": "Telegram/SHEFJAYgKEmwMBSvcPsU5aYKM1ecE1Dw2pQaGuECrfby60E", "content": "", "creation_timestamp": "2026-01-10T14:00:43.000000Z"}, {"uuid": "97ae00fc-e99e-4d4f-aa28-1aea652aeeef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0822", "type": "published-proof-of-concept", "source": "Telegram/51hy6eeB0OX5Oi4WYV6NJVEVeitRj2FXamGCe71U1ruORGw", "content": "", "creation_timestamp": "2026-01-10T15:00:50.000000Z"}, {"uuid": "78d66b37-99b5-4cca-a7e3-916c13515847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0827", "type": "published-proof-of-concept", "source": "Telegram/uZRx6HZozAc0thMR3KKbNyvZVgKIzeeLzgWMgVKyfbYH8EA", "content": "", "creation_timestamp": "2026-04-15T15:20:23.000000Z"}, {"uuid": "b07b8119-42b2-4352-b0de-17ce38d92c7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0822", "type": "seen", "source": "https://t.me/cvedetector/18175", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0822 - Bit Assist for WordPress Path Traversal\", \n  \"Content\": \"CVE ID : CVE-2025-0822 \nPublished : Feb. 15, 2025, 1:15 p.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.2 via the fileID Parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T16:52:21.000000Z"}, {"uuid": "adcb12fb-e7da-4751-a51c-61d2fb10f031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0823", "type": "seen", "source": "Telegram/aMGeKNA30J6wcffzxWU-OSmd2WITMpVOaDL6kWTckFqD7MUi", "content": "", "creation_timestamp": "2025-03-02T11:44:21.000000Z"}, {"uuid": "5acc9c94-28e5-43d3-8691-66cd1fce3381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0826", "type": "published-proof-of-concept", "source": "https://t.me/antichat/987", "content": "#Windows #exploit\n\n\u041c\u0434\u0430...\u041c\u044b \u0432\u0440\u043e\u0434\u0435 \u0436\u0438\u0432\u0435\u043c, \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u0430 \u0432 \u0432\u0438\u043d\u0434\u0435 \u043d\u0435\u043f\u043e\u0444\u0438\u043a\u0448\u0435\u043d\u043d\u0430\u044f \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c + \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0441 \u043b\u0435\u0433\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\n\n\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434 Google Project Zero \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u0434\u0432\u0430 issue 1427 \u0438 1428 \u043f\u043e \u043f\u043e\u0432\u043e\u0434\u0443 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0432 \u0432\u0438\u043d\u0434\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 SetNamedSecurityInfo. Microsoft \u043e\u0431\u043e\u0437\u0432\u0430\u043b\u0430 \u0438\u0445 CVE-2018-0826 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447\u0438 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-0826. \u041e\u0434\u043d\u0430\u043a\u043e \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 1427 \u044d\u0442\u0438 \u043f\u0430\u0442\u0447\u0438 \u043d\u0435 \u0440\u0435\u0448\u0430\u044e\u0442.\n\n\u0412 \u0438\u0442\u043e\u0433\u0435 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043b\u044e\u0431\u043e\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u044e\u0431\u043e\u043c\u0443 \u0444\u0430\u0439\u043b\u0443 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e SYSTEM. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e Windows 10 \u0438 Windows Server 2016.\n\n\u0417\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0438\u043b\u0430\u043c\u0438 \u043e\u0447\u0447\u0435\u043d\u044c \u043d\u0435\u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e. \u0421 \u043e\u0434\u043d\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043d\u044b\u0439 AppLocker \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0435\u0441\u043b\u0438 \u043e\u043d \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u044f\u0432\u043d\u043e \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b. \u0421 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, \u043d\u0430\u0441 \u043a\u0430\u043a \u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u043e\u043b\u043d\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430 \u043d\u0435 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u044e\u0437\u0432\u0435\u0440\u0438. \u0418\u043c \u0442\u043e AppLocker \u043d\u0435 \u043f\u043e\u043c\u0435\u0448\u0430\u0435\u0442. \u0422\u0430\u043a \u0447\u0442\u043e \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u0434\u0435\u044f\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 Microsoft \u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0442\u0447, \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043d\u0435 \u0443\u0434\u0430\u0441\u0442\u0441\u044f \u0434\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u0440\u0430\u0432 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0422\u0443\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 https://bugs.chromium.org/p/project-zero/issues/detail?id=1428.", "creation_timestamp": "2018-02-27T08:35:10.000000Z"}, {"uuid": "fac25b28-ee18-41fe-be9e-c555bf5c4be7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0821", "type": "seen", "source": "https://t.me/cvedetector/18082", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0821 - WordPress Bit Assist Plugin SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-0821 \nPublished : Feb. 14, 2025, 11:15 a.m. | 51\u00a0minutes ago \nDescription : Bit Assist plugin for WordPress is vulnerable to time-based SQL Injection via the \u2018id\u2019 parameter in all versions up to, and including, 1.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T13:14:58.000000Z"}, {"uuid": "b3f1f2d4-4896-4ea4-9c5d-7990b885b81e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0822", "type": "seen", "source": "Telegram/Ex9nDxogTbaObGWxqJ5kRDJVAbnv_0SmO93FBJT3Bx9D6STR", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "3317c956-dd81-486a-ae0f-7e3cb446ede0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "Telegram/pjCdkaPYm9FkTnXxup4bFVUrTLP1VgX6gwOCGLnwxjPbRGw", "content": "", "creation_timestamp": "2025-08-05T15:00:06.000000Z"}, {"uuid": "7a0b2787-64c2-496b-a52c-c17bf6102d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1897", "content": "Webmin-CVE-2022-0824-reverse shell\nWebmin 1.984 and below - File Manager privilege exploit (CVE-2022-0824 and CVE-2022-0829)\n\u041c\u0435\u043d\u0435\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Webmin, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043c\u043e\u0434\u0443\u043b\u044f File Manager, \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root, \u0435\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0442\u0435\u043c\u0443 Authentic \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0412\u0441\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Webmin \u0434\u043e\u043b\u0436\u043d\u044b \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f. \u041e\u0431\u0440\u0430\u0442\u0438\u0442\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u044b Virtualmin \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Webmin, \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0435\u0441\u044f \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430.\nhttps://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-07-03T15:00:34.000000Z"}, {"uuid": "520cc14a-2a10-4d91-b06e-05377b5bf0e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0829", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1897", "content": "Webmin-CVE-2022-0824-reverse shell\nWebmin 1.984 and below - File Manager privilege exploit (CVE-2022-0824 and CVE-2022-0829)\n\u041c\u0435\u043d\u0435\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Webmin, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043c\u043e\u0434\u0443\u043b\u044f File Manager, \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root, \u0435\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0442\u0435\u043c\u0443 Authentic \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0412\u0441\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Webmin \u0434\u043e\u043b\u0436\u043d\u044b \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f. \u041e\u0431\u0440\u0430\u0442\u0438\u0442\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u044b Virtualmin \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Webmin, \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0435\u0441\u044f \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430.\nhttps://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-07-03T15:00:34.000000Z"}, {"uuid": "ae98c7b9-0602-4dbb-bf00-926a3d500b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0829", "type": "seen", "source": "https://t.me/cvedetector/20484", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0829 - ENOVIA Collaborative Industry Innovator Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-0829 \nPublished : March 17, 2025, 2:15 p.m. | 1\u00a0hour, 34\u00a0minutes ago \nDescription : A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session. \nSeverity: 8.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-17T17:28:20.000000Z"}, {"uuid": "9f8bd29a-e7d2-4c0d-83b0-37bc8b748cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0828", "type": "seen", "source": "https://t.me/cvedetector/20483", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0828 - ENOVIA Product Engineering Specialist Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0828 \nPublished : March 17, 2025, 2:15 p.m. | 1\u00a0hour, 34\u00a0minutes ago \nDescription : A stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session. \nSeverity: 8.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-17T17:28:19.000000Z"}, {"uuid": "5a54fc49-6031-4cfd-87d1-986c48187845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0822", "type": "seen", "source": "Telegram/EkJQiKy-3GAzagPnAQC7r5Gf6GIm8KvaZDdMYT_Njp2gjM_S", "content": "", "creation_timestamp": "2025-02-15T23:50:18.000000Z"}, {"uuid": "ffd519ad-041a-42fd-90f8-113e3aa5ba50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0820", "type": "seen", "source": "Telegram/-7d7htff8xj5UP2UFB0PImIG3lkC3NHZDtsV5MLJ7Z9zAKvb", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "03b2c96a-9834-495e-b947-8d0415126c87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0820", "type": "seen", "source": "Telegram/5lhH-5rQ33PCqC-_LOIzDS3VcD4jfUph9S8u_kkMAPaG1Q", "content": "", "creation_timestamp": "2023-04-03T19:36:43.000000Z"}, {"uuid": "b6bc4faf-2aeb-4f15-b762-8d6aab438391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0820", "type": "seen", "source": "https://t.me/ctinow/210913", "content": "https://ift.tt/Gvk8wJB\nCVE-2024-0820", "creation_timestamp": "2024-03-18T20:26:48.000000Z"}, {"uuid": "18515d1b-7684-4034-bb53-4cbf0e7faf41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0821", "type": "seen", "source": "https://t.me/ctinow/203431", "content": "https://ift.tt/NQ9Wmrd\nCVE-2024-0821 | Cost of Goods Sold Plugin up to 3.2.8 on WordPress cross site scripting", "creation_timestamp": "2024-03-08T16:51:28.000000Z"}, {"uuid": "b0f14355-3e7e-4cd4-9c11-33df01539d25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0829", "type": "seen", "source": "https://t.me/cibsecurity/70799", "content": "\u203c CVE-2023-0829 \u203c\n\nPlesk 17.0 through 18.0.31 version, is vulnerable to a Cross-Site Scripting. A malicious subscription owner (either a customer or an additional user), can fully compromise the server if an administrator visits a certain page in Plesk related to the malicious subscription.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-02T11:02:45.000000Z"}, {"uuid": "17104d9f-ca8e-4237-8426-5d260048662c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0825", "type": "seen", "source": "https://t.me/ctinow/199846", "content": "https://ift.tt/ePnZDq6\nCVE-2024-0825", "creation_timestamp": "2024-03-05T03:27:44.000000Z"}, {"uuid": "9eb9849d-cf68-4571-a626-e660d2b25a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0825", "type": "seen", "source": "https://t.me/ctinow/199859", "content": "https://ift.tt/ePnZDq6\nCVE-2024-0825", "creation_timestamp": "2024-03-05T03:28:02.000000Z"}, {"uuid": "27797c3d-527e-4d7d-9776-a363d4f76075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0824", "type": "seen", "source": "https://t.me/ctinow/191937", "content": "https://ift.tt/rq5c9Wf\nCVE-2012-0824 | gnusound 0.7.5 format string (OSVDB-78882)", "creation_timestamp": "2024-02-23T17:16:33.000000Z"}, {"uuid": "b66793e1-f8af-40bb-b01e-f19563e13423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0824", "type": "seen", "source": "https://t.me/ctinow/188000", "content": "https://ift.tt/0TqR163\nCVE-2024-0824 | Exclusive Addons for Elementor Plugin up to 2.6.8 on WordPress Link Anything cross site scripting (ID 3026499)", "creation_timestamp": "2024-02-20T00:56:44.000000Z"}, {"uuid": "20a8486e-4fc3-4d79-b407-23ffedce70a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0823", "type": "seen", "source": "https://t.me/ctinow/188027", "content": "https://ift.tt/qMJWtLf\nCVE-2024-0823 | Exclusive Addons for Elementor Plugin up to 2.6.8 on WordPress cross site scripting (ID 3026499)", "creation_timestamp": "2024-02-20T01:36:51.000000Z"}, {"uuid": "cad2cbe7-b587-4837-84ff-1dcb3679c777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0822", "type": "seen", "source": "https://t.me/ctinow/177166", "content": "https://ift.tt/7zrdwLc\nCVE-2024-0822 Exploit", "creation_timestamp": "2024-01-31T23:16:53.000000Z"}, {"uuid": "b7cdbd36-fcc6-4e08-a0b5-55371920172a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0824", "type": "seen", "source": "https://t.me/ctinow/171515", "content": "https://ift.tt/DYIBhCa\nCVE-2023-0824 Exploit", "creation_timestamp": "2024-01-22T23:16:37.000000Z"}, {"uuid": "43daaa3c-8c6a-48a2-80c5-b42c22d6caa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0824", "type": "seen", "source": "https://t.me/ctinow/174645", "content": "https://ift.tt/5pUGa6b\nCVE-2024-0824", "creation_timestamp": "2024-01-27T06:21:48.000000Z"}, {"uuid": "2b9479ec-28df-4339-9d03-b8297fc3e7f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0822", "type": "seen", "source": "https://t.me/ctinow/173596", "content": "https://ift.tt/ot1lMyu\nCVE-2024-0822", "creation_timestamp": "2024-01-25T17:26:35.000000Z"}, {"uuid": "ad2b8ac9-cda9-478d-a9bf-a298bc34969e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0824", "type": "seen", "source": "https://t.me/ctinow/168903", "content": "https://ift.tt/Y1Ke8kd\nCVE-2023-0824", "creation_timestamp": "2024-01-16T17:27:00.000000Z"}, {"uuid": "10b78dee-ba0b-4731-9bb9-5cfbf8f51fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0822", "type": "seen", "source": "https://t.me/ctinow/172691", "content": "https://ift.tt/xJkt4E2\nCVE-2024-0822 | Red Hat oVirt GenericApiGWTService CreateUserSessionCommand improper authentication", "creation_timestamp": "2024-01-24T11:46:45.000000Z"}, {"uuid": "39c1d3a6-1421-4caa-b89d-fa5e5d681091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0820", "type": "seen", "source": "https://t.me/cibsecurity/61329", "content": "\u203c CVE-2023-0820 \u203c\n\nThe User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to arbitrary privilege escalation of any role.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-03T18:24:57.000000Z"}, {"uuid": "d26b7029-ca85-4e70-ad4e-8dfb0cfffbeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0823", "type": "seen", "source": "https://t.me/cibsecurity/60813", "content": "\u203c CVE-2023-0823 \u203c\n\nThe Cookie Notice & Compliance for GDPR / CCPA WordPress plugin before 2.4.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-27T20:50:14.000000Z"}, {"uuid": "91c13f58-343a-4d30-8eab-30cc82795b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0821", "type": "seen", "source": "https://t.me/cibsecurity/58410", "content": "\u203c CVE-2023-0821 \u203c\n\nHashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T00:18:40.000000Z"}, {"uuid": "1cf215f7-da10-4a11-b0a0-08f59f41c174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0822", "type": "seen", "source": "https://t.me/cibsecurity/58445", "content": "\u203c CVE-2023-0822 \u203c\n\nThe affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to bypass authorization and access privileged functionality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T20:13:16.000000Z"}, {"uuid": "0674e11a-c9cb-495d-a375-6529b7db7747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0827", "type": "seen", "source": "https://t.me/cibsecurity/58101", "content": "\u203c CVE-2023-0827 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 1.5.17.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-14T16:45:57.000000Z"}, {"uuid": "1c293e58-8e62-407b-a1f3-6f857972bf22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "seen", "source": "https://t.me/canyoupwnme/3973", "content": "Marshalling to SYSTEM - An analysis of CVE-2018-0824\nhttps://codewhitesec.blogspot.com/2018/06/cve-2018-0624.html", "creation_timestamp": "2018-06-15T22:35:54.000000Z"}, {"uuid": "ec0bc86d-5b35-4a18-aa74-bbfd11fb706d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0828", "type": "seen", "source": "https://t.me/cibsecurity/40474", "content": "\u203c CVE-2022-0828 \u203c\n\nThe Download Manager WordPress plugin before 3.2.39 uses the uniqid php function to generate the master key for a download, allowing an attacker to brute force the key with reasonable resources giving direct download access regardless of role based restrictions or password protections set for the download.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-11T18:16:14.000000Z"}, {"uuid": "077734c7-27ad-46d1-986e-66846780f85a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0826", "type": "seen", "source": "https://t.me/cibsecurity/42193", "content": "\u203c CVE-2022-0826 \u203c\n\nThe WP Video Gallery WordPress plugin through 1.7.1 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-09T20:36:43.000000Z"}, {"uuid": "0b700997-dc6d-44c4-8a8d-e0edb05b0605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "https://t.me/cibsecurity/38293", "content": "\u203c CVE-2022-0824 \u203c\n\nImproper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-02T14:32:40.000000Z"}, {"uuid": "380b3603-41d5-48c6-a9a0-9f26025aedd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0829", "type": "seen", "source": "https://t.me/cibsecurity/38292", "content": "\u203c CVE-2022-0829 \u203c\n\nImproper Authorization in GitHub repository webmin/webmin prior to 1.990.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-02T14:23:58.000000Z"}, {"uuid": "cce2c8b1-e4b4-4e42-b207-7f170c9600fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0822", "type": "seen", "source": "https://t.me/cibsecurity/38760", "content": "\u203c CVE-2022-0822 \u203c\n\nCross-site Scripting (XSS) - Reflected in GitHub repository orchardcms/orchardcore prior to 1.3.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-11T07:14:16.000000Z"}, {"uuid": "0accf8aa-05f8-4fc0-a824-4e8ecc2bb389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0820", "type": "seen", "source": "https://t.me/cibsecurity/38756", "content": "\u203c CVE-2022-0820 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository orchardcms/orchardcore prior to 1.3.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-11T02:14:08.000000Z"}, {"uuid": "b01feba5-6273-495a-bcae-ce72981a8cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0821", "type": "seen", "source": "https://t.me/cibsecurity/38753", "content": "\u203c CVE-2022-0821 \u203c\n\nImproper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-11T02:14:02.000000Z"}, {"uuid": "6fe6aec6-03ef-4a41-bd9e-d9cbcc08ffc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "exploited", "source": "https://t.me/BlueRedTeam/1781", "content": "#exploit\nCVE-2022-0824:\nPost-Auth Reverse Shell\nhttps://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell\n@BlueRedTeam", "creation_timestamp": "2022-03-07T07:00:59.000000Z"}, {"uuid": "c6b232fc-e645-49e6-a14c-167311d6e351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0829", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2448", "content": "#CVE-2022\n\nCVE-2022-0824, CVE-2022-0829, File Manger privilege exploit\n\nhttps://github.com/gokul-ramesh/WebminRCE-exploit\n\n@BlueRedTeam", "creation_timestamp": "2022-11-13T05:30:39.000000Z"}, {"uuid": "e77c72e6-018b-4922-b3c7-d3f4f9261ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2448", "content": "#CVE-2022\n\nCVE-2022-0824, CVE-2022-0829, File Manger privilege exploit\n\nhttps://github.com/gokul-ramesh/WebminRCE-exploit\n\n@BlueRedTeam", "creation_timestamp": "2022-11-13T05:30:39.000000Z"}, {"uuid": "a70c74d5-1d42-495e-a8c5-70a0e095fe21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/60", "content": "#exploit\nNew vulnerabilities in Microsoft products\n\n1. CVE-2018-0802:\nEquation Editor in MS Office 2007, 2010, 2013, 2016 - RCE\nhttps://github.com/zldww2011/CVE-2018-0802_POC\n]-> https://github.com/rxwx/CVE-2018-0802\nGenerate RTF exploit payload uses CVE-2017-11882, CVE-2017-8570, CVE-2018-0802, CVE-2018-8174\nhttps://github.com/dcsync/rtfkit\n\n2. CVE-2018-0824:\nRCE in \"Microsoft COM for Windows\"\nhttps://github.com/codewhitesec/UnmarshalPwn\n// This affects Win7, 8.1, 10, RT 8.1, Server 2012 R2, 2008/2008 R2, 2012, 2016\n\n3. CVE-2018-0886:\nCredSSP protocol in MS Windows Server 2008 SP2/R2 SP1, Win7 SP1, 8.1, RT 8.1, Server 2012/R2, Win10 Gold, 1511, 1607, 1703, 1709, Server 2016, 1709 - RCE\nhttps://github.com/preempt/credssp", "creation_timestamp": "2024-10-10T21:06:31.000000Z"}, {"uuid": "40207fdf-a6b3-4688-ac5e-4540ac3b8b49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5554", "content": "#exploit\n1. CVE-2022-0824:\nPost-Auth Reverse Shell\nhttps://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell\n\n2. CVE-2022-22947:\nSpring Cloud Gateway RCE\nhttps://github.com/shakeman8/CVE-2022-22947-RCE", "creation_timestamp": "2022-03-07T19:00:18.000000Z"}, {"uuid": "938b8c8e-2b74-4932-abc2-2f1f40f2e827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-0824", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10820", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2009-0824*\nGithub: https://github.com/Exploitables/CVE-2009-0824", "creation_timestamp": "2026-07-31T05:00:03.466335Z"}, {"uuid": "f2dd3ac1-2634-45d5-abab-c3f2d94b6764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0821", "type": "seen", "source": "https://t.me/cibsecurity/11267", "content": "ATENTION\u203c New - CVE-2020-0821\n\nAn information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1007.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-04-15T19:14:25.000000Z"}, {"uuid": "d92ceac3-b4dd-4c39-a7a5-7c62e43bf1e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0828", "type": "seen", "source": "https://t.me/cibsecurity/10020", "content": "ATENTION\u203c New - CVE-2012-0828\n\nHeap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service (xchat client crash) or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane (BMP).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-02-21T20:52:05.000000Z"}, {"uuid": "153b0781-205b-4c19-a09d-af3ff752b181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3619", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-0824\nGithub: https://github.com/pizza-power/golang-webmin-CVE-2022-0824-revshell\nDescribe: \nImproper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.", "creation_timestamp": "2026-08-02T00:01:21.395135Z"}, {"uuid": "6c3813fb-d5f4-454f-8de4-708c6d4da632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-0824", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10820", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2009-0824*\nGithub: https://github.com/Exploitables/CVE-2009-0824", "creation_timestamp": "2026-08-01T00:00:40.580658Z"}, {"uuid": "f9d082a8-da9e-40f5-9d69-2799a96264d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3619", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-0824\nGithub: https://github.com/pizza-power/golang-webmin-CVE-2022-0824-revshell\nDescribe: \nImproper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.", "creation_timestamp": "2026-08-01T01:00:05.241543Z"}, {"uuid": "94f29690-3dd9-4e4d-8f32-964150e466ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "seen", "source": "Telegram/69mEbVY8q7JTbOxcU8Y8fk5qjG-y8rxPRlbyP8YZTdzYGyY", "content": "", "creation_timestamp": "2026-05-27T21:02:13.000000Z"}, {"uuid": "24e8f36e-907b-402b-a655-18d71b137631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnagtc27vi26", "content": "CVE-2026-0826 - Poly Voice \u2013 Possible Remote Control of Certain Poly Devices\nCVE ID : CVE-2026-0826\n \n Published : June 1, 2026, 2:55 p.m. | 18\u00a0minutes ago\n \n Description : In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer o...", "creation_timestamp": "2026-06-01T15:53:36.816340Z"}, {"uuid": "c1afd445-fe81-4ee7-bcbc-ee642135bfd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0826", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mnbjd3riw42f", "content": "Overview Rapid7 Labs conducted a zero-day research project against an HP Poly VVX 450 Voice over Internet Protocol (VoIP) phone. This research resulted in t...\n\n\ud83d\udd17 https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed", "creation_timestamp": "2026-06-02T02:10:54.351495Z"}, {"uuid": "65fa0886-7e5f-4903-b13d-297dab233850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnctia4deu2a", "content": "Critical flaw CVE-2026-0826 in HP Poly Voice phones can allow root-level RCE via malicious SIP/SDP traffic. Affects VVX and Trio devices with ICE enabled. #HPPolyVoice #HPVVX #VoIPPhones", "creation_timestamp": "2026-06-02T14:45:24.331777Z"}, {"uuid": "32af1031-9600-48cc-a1c8-b742e719338e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0826", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116681580971206273", "content": "Rapid7, posted yesterday: CVE-2026-0826: How an Old Bug Can Feed AI-Powered Impersonation https://www.rapid7.com/blog/post/ve-cve-2026-0826-how-an-old-bug-can-feed-ai-powered-impersonation/ @Rapid7Official #infosec #vulnerability", "creation_timestamp": "2026-06-02T17:00:34.533341Z"}, {"uuid": "88c79444-756c-4969-966f-e4b58b102ccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://bsky.app/profile/bugxhunter.bsky.social/post/3mndlukeafl2b", "content": "\ud83d\udd34 HP Poly VoIP Vulnerability CVE-2026-0826\n\n\ud83d\udcdd A critical buffer ov...\n\nhttps://www.csoonline.com/article/4180223/hp-poly-voip-vulnerability-sets-the-stage-for-executive-voice-deepfakes.html\n\n\ud83d\udcf0 HP Poly VoIP vulnerability sets the stage for executive voice deepfakes | CSO Online\n\n#CVE #RedTeam", "creation_timestamp": "2026-06-02T22:01:46.920439Z"}, {"uuid": "10290fdc-744e-489b-b709-c68bede51782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mne4soiou42b", "content": "CVE-2026-0826: Root RCE Vulnerability Hits HP Poly Enterprise VoIP Phones", "creation_timestamp": "2026-06-03T03:04:58.197889Z"}, {"uuid": "c1a7fcf3-ba4d-45e8-bba0-03584634f58e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://t.me/true_secator/8277", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. Acer \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0434\u0432\u0443\u0445 0-day \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0435\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0441 mesh-\u0441\u0435\u0442\u044c\u044e Wave 7, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 T7c_GBL_1.01.000055 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\n\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0413\u0435\u0440\u0433\u043e \u041f\u0430\u043f. \u041f\u0435\u0440\u0432\u0430\u044f CVE-2026-49200 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u043c\u0441\u044f \u0432 \u0430\u0440\u0445\u0438\u0432\u0430\u0445 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-49201 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043a\u043b\u044e\u0447\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0443 \u0447\u0435\u0440\u0435\u0437 \u0431\u044d\u043a\u0434\u043e\u0440.\n\n2. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (CVE-2026-8206) \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Kirki - Freeform Page Builder, Website Builder & Customizer \u0434\u043b\u044f WordPress \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u0410\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Defiant, \u0447\u0435\u0439 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d Wordfence \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b \u0431\u043e\u043b\u0435\u0435 222 \u043f\u043e\u043f\u044b\u0442\u043e\u043a\u00a0\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 24 \u0447\u0430\u0441\u0430. CVE-2026-8206 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0438 REST API \u0434\u043b\u044f \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0430\u0440\u043e\u043b\u044f \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e 'handle_forgot_password()'.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 500 000 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432, \u043e\u0431\u044a\u0435\u043c\u044b \u0440\u0430\u0431\u043e\u0442\u044b \u0443 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u044f \u0438\u043c\u0435\u044e\u0442\u0441\u044f. \n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Wordfence, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u043c \u043a\u0440\u0443\u043f\u043d\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435, \u0432\u0435\u0440\u0441\u0438\u0438 6.0.0, \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0434\u043e 6.0.6 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a\u00a0\u0441 WordPress, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u043e\u0447\u0442\u0438 40% \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n3. \u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f 0-day \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0410\u043c\u043c\u0430\u0440 \u0410\u0441\u043a\u0430\u0440 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 (GitHub), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0434\u043d\u0438\u043c \u0449\u0435\u043b\u0447\u043a\u043e\u043c \u043c\u044b\u0448\u0438 \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b GitHub \u0447\u0435\u0440\u0435\u0437 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440 Visual Studio Code.\n\n\u041f\u0440\u0438\u0447\u0435\u043c, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft \u0431\u044b\u043b\u0438 \u043f\u0440\u043e\u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439 \u0438\u043b\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0438\u044f.\n\n4. BishopFox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0438\u00a0\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f CVE-2026-22557, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u043f\u0440\u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ubiquiti UniFi.\n\n5. HP \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 VoIP-\u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u0441\u0435\u0440\u0438\u0438 VVX, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-0826, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u0445 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Rapid7, \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0433\u0434\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f.\n\n6. Positive Technologies \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043c\u0430\u0439\u0441\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM, \u0443\u043a\u0430\u0437\u0430\u0432 \u0433\u0440\u043e\u043c\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux (CVE-2026-31431), ActiveMQ (CVE-2026-34197), SharePoint (CVE-2026-32201) \u0438 Acrobat Reader (CVE-2026-34621).\n\n7. CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 Linux CVE-2022-0492 (CVSS 7,8) \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432. \u041e\u043d\u0430 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 \u0438\u043c\u0435\u043d.\n\n8. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 HTTP/2 Bomb \u0432\u044b\u0432\u043e\u0434\u0438\u0442 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0437\u0430 \u0441\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u043a\u0443\u043d\u0434\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Calif \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b DoS-\u0430\u0442\u0430\u043a \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0432 \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\nHTTP/2 Bomb \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Codex \u043e\u0442 OpenAI \u0438 \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u0435 \u0431\u043e\u043c\u0431\u0443 \u0441\u0436\u0430\u0442\u0438\u044f, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u0441\u0445\u0435\u043c\u0443 \u0441\u0436\u0430\u0442\u0438\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 HTTP/2 (HPACK), \u0441 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0432 \u0441\u0442\u0438\u043b\u0435 Slowloris, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n\u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 880 000 \u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 HTTP/2 \u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439 NGINX, Apache HTTPD, Microsoft IIS, Envoy \u0438\u043b\u0438 Cloudflare Pingora.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u0441 \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u0433\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u043f\u0440\u0438 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f 100 \u041c\u0431\u0438\u0442/\u0441 \u0438 \u0432 \u0441\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u043a\u0443\u043d\u0434\u044b \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u043b\u044e\u0431\u043e\u0439 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.", "creation_timestamp": "2026-06-03T18:30:06.000000Z"}, {"uuid": "74d52dad-2beb-48c5-9add-b824b56d497e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116688008248578556", "content": "\ud83d\udcf0 Critical RCE Flaw (CVE-2026-0826) in HP Poly VoIP Phones Allows Root Takeover\n\ud83d\udce2 CRITICAL FLAW: A 9.2 CVSS RCE bug (CVE-2026-0826) affects HP Poly VoIP phones. The flaw allows unauthenticated root access. HP has released patches. Update now! #CVE #Vulnerability #RCE #VoIP #PatchNow\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-rce-flaw-hp-poly-voip-phones-actively-exploitable/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-06-03T20:15:22.812706Z"}, {"uuid": "2c416bc2-b225-49f8-a017-36959b4a9475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mnfwfgbff32f", "content": "\ud83d\udce2 CRITICAL FLAW: A 9.2 CVSS RCE bug (CVE-2026-0826) affects HP Poly VoIP phones. The flaw allows unauthenticated root access. HP has released patches. Update now! #CVE #Vulnerability #RCE #VoIP #PatchNow\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-03T20:15:30.233031Z"}, {"uuid": "3f7d5ced-1780-44f2-9a69-f3d4788e8006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mngaedulh22h", "content": "Why an HP Poly VoIP Phones Bug Could Become an Enterprise Foothold\n\nRapid7 details a critical unauthenticated overflow in HP Poly VoIP phones that can lead to root RCE, with patches available for affected models. Rapid7\u2019s latest disclosure on CVE-2026-0826 should get serious atten\u2026\n#hackernews #news", "creation_timestamp": "2026-06-03T23:13:51.807963Z"}, {"uuid": "ef5a4d8d-9612-4545-a80f-2fbf910335ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mnjkjj3dxi2g", "content": "CVE-2026-0826: Critical unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones #patchmanagement", "creation_timestamp": "2026-06-05T06:53:42.042424Z"}, {"uuid": "8de7ad51-21fd-448a-9500-71a56f24ee6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/362", "content": "CVE-2026-0826: Unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (RCE as root)\n\nVulnerable: VVX 150, VVX 250, VVX 350, and VVX 450), as well as Trio IP Conference series (Trio 8800, Trio 8500, and Trio 8300).\n\nBlog: https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/", "creation_timestamp": "2026-06-05T06:38:36.000000Z"}, {"uuid": "1f53824f-5eb6-47f7-8ae2-c85913a1c6af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mnrn2eexu22h", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-0257, CVE-2026-0826, CVE-2025-48595, CVE-2026-20245, CVE-2026-41089\nActors: Apt, Play, Ransomware\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-06-08T12:00:12.281604Z"}, {"uuid": "8cce8f9c-b371-482d-a8be-800954f5e925", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0827", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8bac8ce8-df12-469f-8d13-04dfdc78e272", "content": "", "creation_timestamp": "2026-06-19T12:45:48.698698Z"}, {"uuid": "11ad5a69-51da-4cfa-88a6-f0f79545a981", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0826", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/645034c4-8cdc-4715-8320-8c6e7e5d4694", "content": "", "creation_timestamp": "2026-06-19T12:45:48.345771Z"}, {"uuid": "a5bd0d7b-9355-4805-977d-def00ce2fed1", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cb667f55-4c16-4e80-bc76-33dda1a23f08", "content": "", "creation_timestamp": "2026-06-19T12:46:37.365268Z"}, {"uuid": "6b5a6237-43cd-4d6e-a86e-2127902a9299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/poly_unauth_rce_cve_2026_0826.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"sfewer-r7\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"CVE-2026-0826 is a critical unauthenticated stack-based buffer overflow vulnerability affecting all\\n          models in the VVX series (VVX 150, VVX 250, VVX 350, and VVX 450), as well as three models from the Trio IP\\n          Conference series (Trio 8800, Trio 8500, and Trio 8300). A remote attacker can leverage CVE-2026-0826 to achieve\\n          unauthenticated remote code execution (RCE) with root privileges on a target device. The vulnerability is present\\n          in the device's parsing of Session Description Protocol (SDP) attributes for Interactive Connectivity Establishment\\n          (ICE). The ICE feature, which is not enabled by default, must be enabled for the device to be exploitable by a\\n          remote attacker.\", \"disclosure_date\": \"2026-06-01\", \"fullname\": \"exploit/linux/misc/poly_unauth_rce_cve_2026_0826\", \"is_install_path\": true, \"mod_time\": \"2026-06-05 11:39:49 +0000\", \"name\": \"HP Poly Voice Unauthenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-os-restarts\"]}, \"path\": \"/modules/exploits/linux/misc/poly_unauth_rce_cve_2026_0826.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/misc/poly_unauth_rce_cve_2026_0826\", \"references\": [\"CVE-2026-0826\", \"URL-https://support.hp.com/us-en/document/ish_15052661-15052687-16/hpsbpy04083\", \"URL-https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/\"], \"rport\": 5060, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-06-18T17:57:26.000000Z"}, {"uuid": "c7037cb2-453e-4865-a967-fe984557d09e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0826", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3a669c7b-9eed-45bd-bae1-bcc878e2541c", "content": "", "creation_timestamp": "2026-06-23T14:03:15.831116Z"}, {"uuid": "bce3cb14-d6bf-4d17-a199-9f1465ecb1de", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0827", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc01b2aa-7272-4a05-99ab-00e6a332c8bf", "content": "", "creation_timestamp": "2026-06-23T14:03:16.160684Z"}, {"uuid": "f8ce7956-231a-481f-988d-3bb48a8eaa7b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7ef7e513-b823-4aab-8577-541339e5e086", "content": "", "creation_timestamp": "2026-06-23T14:05:56.130655Z"}, {"uuid": "ddc2b4a4-9359-4ee0-a494-71c3d1ce934d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0824", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcukkaf62d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-0824 \u0432 Hitachi Virtual Storage Platform: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/64C690FA-193A-42B4-B050-3F9F8786AF71", "creation_timestamp": "2026-06-29T10:49:05.924651Z"}, {"uuid": "48335fd0-8ab8-4608-a7b3-beeda7ad5ee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0824", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphaxz7cbo2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-0824 \u0432 Hitachi VSP: \u0440\u0438\u0441\u043a\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B30983A9-C591-441D-BDD7-FA781E8120AC", "creation_timestamp": "2026-06-29T19:47:54.180276Z"}, {"uuid": "39a38993-3180-48e7-8e9b-c691f94391d4", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-0826", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d437400e-37e1-4446-adca-0ef52e5f4538", "content": "", "creation_timestamp": "2026-06-30T09:23:28.394641Z"}, {"uuid": "5a8e144d-b877-48de-b703-df03120cc9de", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-0827", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ff07814f-9e90-47c6-9c09-b2be4b2534d6", "content": "", "creation_timestamp": "2026-06-30T09:23:38.715454Z"}, {"uuid": "79b878e4-250d-4aad-837e-8b7aea602c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31193", "content": "\ud83d\udca3 KillChain \u2014 BYOVD Protected Process Killer (CVE-2026-0828)\n\u2694\ufe0f Kernel Driver Abuse to Terminate Protected Processes\n\n\ud83d\udccc GitHub Repository\n\ud83d\udc49 https://github.com/oxfemale/KillChain\n\n\ud83d\udcd6 Description\nKillChain is a user-mode tool that abuses a vulnerable kernel driver (CVE-2026-0828) to terminate protected processes.\nIt leverages ProcessMonitorDriver.sys and communicates with the kernel via a custom IOCTL interface, allowing it to bypass standard Windows process protection mechanisms.\nThe tool embeds the vulnerable driver inside the executable, extracts it at runtime, registers it as a service, loads it via NtLoadDriver, and sends termination requests using DeviceIoControl.\n\ud83d\udc49 Used in EDR bypass, protected process termination, and BYOVD-based post-exploitation\n\n\u26a0\ufe0f Important Note (Community Awareness)\n\ud83d\udc49 This tool uses BYOVD (Bring Your Own Vulnerable Driver) technique\n\u2022 loads a signed but vulnerable driver\n\u2022 abuses kernel-level access\n\n\u26a0\ufe0f HIGH RISK \u2014 commonly used in:\n\u2022 ransomware kill chains\n\u2022 EDR/AV bypass attacks\n\ud83d\udc49 Directly bypasses Protected Process Light (PPL) mechanisms\n\n\ud83d\udccc Community Note\n\ud83d\udc49 Technique category:\n\u2022 BYOVD (Kernel Abuse)\n\u2022 EDR Killer / Process Killer\n\n\ud83d\udc49 Real-world trend:\n\u2022 attackers disable security tools before payload execution\n\u2022 kernel driver abuse is increasingly common\n\n\u2699\ufe0f Core Capabilities\n\ud83d\udca3 Protected Process Termination\n\u2022 kills PPL-protected processes\n\u2022 bypasses Windows security restrictions\n\u2022 targets AV / EDR components\n\n\ud83e\uddec BYOVD Exploitation\n\u2022 uses vulnerable driver (CVE-2026-0828)\n\u2022 escalates capabilities to kernel level\n\u2022 abuses IOCTL interface\n\n\ud83d\udda5 Driver Lifecycle Management\n\u2022 embeds driver in executable\n\u2022 extracts at runtime\n\u2022 registers and loads as kernel service\n\n\ud83d\udd10 Kernel Communication\n\u2022 interacts via DeviceIoControl\n\u2022 sends termination requests\n\u2022 operates from user-mode with kernel power\n\n\u2699\ufe0f Execution Flow\nLaunch Tool (User Mode)\n        \u2193\nExtract Embedded Driver\n        \u2193\nRegister Kernel Service\n        \u2193\nLoad Driver (NtLoadDriver)\n        \u2193\nSend IOCTL (DeviceIoControl)\n        \u2193\nTerminate Protected Process\n\n\ud83e\udde0 Technical Highlights\n\u2022 CVE-2026-0828 vulnerable driver abuse\n\u2022 uses ProcessMonitorDriver.sys\n\u2022 NtLoadDriver for kernel loading\n\u2022 DeviceIoControl for command execution\n\u2022 bypasses Protected Process Light (PPL)\n\n\ud83e\udde0 Usage Example\n# Run executable (admin required)\nKillChain.exe \n\n\ud83e\udde0 Installation\ngit clone https://github.com/oxfemale/KillChain\ncd KillChain\n# build using Visual Studio (C/C++)\n\n\ud83e\udde0 Workflow\nInitial Access\n      \u2193\nExecute Tool\n      \u2193\nLoad Vulnerable Driver\n      \u2193\nGain Kernel Interaction\n      \u2193\nKill Protected Process\n\n\ud83d\ude80 Why It Matters\n\u2022 demonstrates real-world BYOVD attack technique\n\u2022 bypasses modern Windows process protection\n\u2022 critical step in disabling EDR/AV\n\u2022 widely used in advanced malware operations\n\n\ud83d\udca1 Research Value\nUseful for:\n\u2022 BYOVD exploitation research\n\u2022 kernel driver abuse analysis\n\u2022 EDR bypass techniques\n\u2022 Windows internals study\n\u2022 detection engineering\n\n\ud83d\udd25 Key Insight\nVulnerable Driver \u2192 Kernel Access \u2192 IOCTL Abuse \u2192 Process Kill\n\ud83d\udc49 Core concept behind modern EDR bypass attacks\n\n\u2714\ufe0f Exploit \u2714\ufe0f\n\u2714\ufe0f Scanner \u274c\n\u2714\ufe0f C2 \u274c\n\u2714\ufe0f BYOVD EDR Killer \u2714\ufe0f\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:02.686353Z"}, {"uuid": "8a21cd16-5961-437e-b32d-ee0def3eacdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31192", "content": "\ud83d\udca3 KillChain \u2014 BYOVD Protected Process Killer (CVE-2026-0828)\n\u2694\ufe0f Kernel Driver Abuse to Terminate Protected Processes\n\n\ud83d\udccc GitHub Repository\n\ud83d\udc49 https://github.com/oxfemale/KillChain\n\n\ud83d\udcd6 Description\nKillChain is a user-mode tool that abuses a vulnerable kernel driver (CVE-2026-0828) to terminate protected processes.\nIt leverages ProcessMonitorDriver.sys and communicates with the kernel via a custom IOCTL interface, allowing it to bypass standard Windows process protection mechanisms.\nThe tool embeds the vulnerable driver inside the executable, extracts it at runtime, registers it as a service, loads it via NtLoadDriver, and sends termination requests using DeviceIoControl.\n\ud83d\udc49 Used in EDR bypass, protected process termination, and BYOVD-based post-exploitation\n\n\u26a0\ufe0f Important Note (Community Awareness)\n\ud83d\udc49 This tool uses BYOVD (Bring Your Own Vulnerable Driver) technique\n\u2022 loads a signed but vulnerable driver\n\u2022 abuses kernel-level access\n\n\u26a0\ufe0f HIGH RISK \u2014 commonly used in:\n\u2022 ransomware kill chains\n\u2022 EDR/AV bypass attacks\n\ud83d\udc49 Directly bypasses Protected Process Light (PPL) mechanisms\n\n\ud83d\udccc Community Note\n\ud83d\udc49 Technique category:\n\u2022 BYOVD (Kernel Abuse)\n\u2022 EDR Killer / Process Killer\n\n\ud83d\udc49 Real-world trend:\n\u2022 attackers disable security tools before payload execution\n\u2022 kernel driver abuse is increasingly common\n\n\u2699\ufe0f Core Capabilities\n\ud83d\udca3 Protected Process Termination\n\u2022 kills PPL-protected processes\n\u2022 bypasses Windows security restrictions\n\u2022 targets AV / EDR components\n\n\ud83e\uddec BYOVD Exploitation\n\u2022 uses vulnerable driver (CVE-2026-0828)\n\u2022 escalates capabilities to kernel level\n\u2022 abuses IOCTL interface\n\n\ud83d\udda5 Driver Lifecycle Management\n\u2022 embeds driver in executable\n\u2022 extracts at runtime\n\u2022 registers and loads as kernel service\n\n\ud83d\udd10 Kernel Communication\n\u2022 interacts via DeviceIoControl\n\u2022 sends termination requests\n\u2022 operates from user-mode with kernel power\n\n\u2699\ufe0f Execution Flow\nLaunch Tool (User Mode)\n        \u2193\nExtract Embedded Driver\n        \u2193\nRegister Kernel Service\n        \u2193\nLoad Driver (NtLoadDriver)\n        \u2193\nSend IOCTL (DeviceIoControl)\n        \u2193\nTerminate Protected Process\n\n\ud83e\udde0 Technical Highlights\n\u2022 CVE-2026-0828 vulnerable driver abuse\n\u2022 uses ProcessMonitorDriver.sys\n\u2022 NtLoadDriver for kernel loading\n\u2022 DeviceIoControl for command execution\n\u2022 bypasses Protected Process Light (PPL)\n\n\ud83e\udde0 Usage Example\n# Run executable (admin required)\nKillChain.exe \n\n\ud83e\udde0 Installation\ngit clone https://github.com/oxfemale/KillChain\ncd KillChain\n# build using Visual Studio (C/C++)\n\n\ud83e\udde0 Workflow\nInitial Access\n      \u2193\nExecute Tool\n      \u2193\nLoad Vulnerable Driver\n      \u2193\nGain Kernel Interaction\n      \u2193\nKill Protected Process\n\n\ud83d\ude80 Why It Matters\n\u2022 demonstrates real-world BYOVD attack technique\n\u2022 bypasses modern Windows process protection\n\u2022 critical step in disabling EDR/AV\n\u2022 widely used in advanced malware operations\n\n\ud83d\udca1 Research Value\nUseful for:\n\u2022 BYOVD exploitation research\n\u2022 kernel driver abuse analysis\n\u2022 EDR bypass techniques\n\u2022 Windows internals study\n\u2022 detection engineering\n\n\ud83d\udd25 Key Insight\nVulnerable Driver \u2192 Kernel Access \u2192 IOCTL Abuse \u2192 Process Kill\n\ud83d\udc49 Core concept behind modern EDR bypass attacks\n\n\u2714\ufe0f Exploit \u2714\ufe0f\n\u2714\ufe0f Scanner \u274c\n\u2714\ufe0f C2 \u274c\n\u2714\ufe0f BYOVD EDR Killer \u2714\ufe0f\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:03.000277Z"}, {"uuid": "dc49ec3b-7f95-4fc9-8b67-2101897bc493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31192", "content": "\ud83d\udca3 KillChain \u2014 BYOVD Protected Process Killer (CVE-2026-0828)\n\u2694\ufe0f Kernel Driver Abuse to Terminate Protected Processes\n\n\ud83d\udccc GitHub Repository\n\ud83d\udc49 https://github.com/oxfemale/KillChain\n\n\ud83d\udcd6 Description\nKillChain is a user-mode tool that abuses a vulnerable kernel driver (CVE-2026-0828) to terminate protected processes.\nIt leverages ProcessMonitorDriver.sys and communicates with the kernel via a custom IOCTL interface, allowing it to bypass standard Windows process protection mechanisms.\nThe tool embeds the vulnerable driver inside the executable, extracts it at runtime, registers it as a service, loads it via NtLoadDriver, and sends termination requests using DeviceIoControl.\n\ud83d\udc49 Used in EDR bypass, protected process termination, and BYOVD-based post-exploitation\n\n\u26a0\ufe0f Important Note (Community Awareness)\n\ud83d\udc49 This tool uses BYOVD (Bring Your Own Vulnerable Driver) technique\n\u2022 loads a signed but vulnerable driver\n\u2022 abuses kernel-level access\n\n\u26a0\ufe0f HIGH RISK \u2014 commonly used in:\n\u2022 ransomware kill chains\n\u2022 EDR/AV bypass attacks\n\ud83d\udc49 Directly bypasses Protected Process Light (PPL) mechanisms\n\n\ud83d\udccc Community Note\n\ud83d\udc49 Technique category:\n\u2022 BYOVD (Kernel Abuse)\n\u2022 EDR Killer / Process Killer\n\n\ud83d\udc49 Real-world trend:\n\u2022 attackers disable security tools before payload execution\n\u2022 kernel driver abuse is increasingly common\n\n\u2699\ufe0f Core Capabilities\n\ud83d\udca3 Protected Process Termination\n\u2022 kills PPL-protected processes\n\u2022 bypasses Windows security restrictions\n\u2022 targets AV / EDR components\n\n\ud83e\uddec BYOVD Exploitation\n\u2022 uses vulnerable driver (CVE-2026-0828)\n\u2022 escalates capabilities to kernel level\n\u2022 abuses IOCTL interface\n\n\ud83d\udda5 Driver Lifecycle Management\n\u2022 embeds driver in executable\n\u2022 extracts at runtime\n\u2022 registers and loads as kernel service\n\n\ud83d\udd10 Kernel Communication\n\u2022 interacts via DeviceIoControl\n\u2022 sends termination requests\n\u2022 operates from user-mode with kernel power\n\n\u2699\ufe0f Execution Flow\nLaunch Tool (User Mode)\n        \u2193\nExtract Embedded Driver\n        \u2193\nRegister Kernel Service\n        \u2193\nLoad Driver (NtLoadDriver)\n        \u2193\nSend IOCTL (DeviceIoControl)\n        \u2193\nTerminate Protected Process\n\n\ud83e\udde0 Technical Highlights\n\u2022 CVE-2026-0828 vulnerable driver abuse\n\u2022 uses ProcessMonitorDriver.sys\n\u2022 NtLoadDriver for kernel loading\n\u2022 DeviceIoControl for command execution\n\u2022 bypasses Protected Process Light (PPL)\n\n\ud83e\udde0 Usage Example\n# Run executable (admin required)\nKillChain.exe \n\n\ud83e\udde0 Installation\ngit clone https://github.com/oxfemale/KillChain\ncd KillChain\n# build using Visual Studio (C/C++)\n\n\ud83e\udde0 Workflow\nInitial Access\n      \u2193\nExecute Tool\n      \u2193\nLoad Vulnerable Driver\n      \u2193\nGain Kernel Interaction\n      \u2193\nKill Protected Process\n\n\ud83d\ude80 Why It Matters\n\u2022 demonstrates real-world BYOVD attack technique\n\u2022 bypasses modern Windows process protection\n\u2022 critical step in disabling EDR/AV\n\u2022 widely used in advanced malware operations\n\n\ud83d\udca1 Research Value\nUseful for:\n\u2022 BYOVD exploitation research\n\u2022 kernel driver abuse analysis\n\u2022 EDR bypass techniques\n\u2022 Windows internals study\n\u2022 detection engineering\n\n\ud83d\udd25 Key Insight\nVulnerable Driver \u2192 Kernel Access \u2192 IOCTL Abuse \u2192 Process Kill\n\ud83d\udc49 Core concept behind modern EDR bypass attacks\n\n\u2714\ufe0f Exploit \u2714\ufe0f\n\u2714\ufe0f Scanner \u274c\n\u2714\ufe0f C2 \u274c\n\u2714\ufe0f BYOVD EDR Killer \u2714\ufe0f\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:33.721368Z"}, {"uuid": "cddb426f-0a32-4108-8c0c-48318af06259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31193", "content": "\ud83d\udca3 KillChain \u2014 BYOVD Protected Process Killer (CVE-2026-0828)\n\u2694\ufe0f Kernel Driver Abuse to Terminate Protected Processes\n\n\ud83d\udccc GitHub Repository\n\ud83d\udc49 https://github.com/oxfemale/KillChain\n\n\ud83d\udcd6 Description\nKillChain is a user-mode tool that abuses a vulnerable kernel driver (CVE-2026-0828) to terminate protected processes.\nIt leverages ProcessMonitorDriver.sys and communicates with the kernel via a custom IOCTL interface, allowing it to bypass standard Windows process protection mechanisms.\nThe tool embeds the vulnerable driver inside the executable, extracts it at runtime, registers it as a service, loads it via NtLoadDriver, and sends termination requests using DeviceIoControl.\n\ud83d\udc49 Used in EDR bypass, protected process termination, and BYOVD-based post-exploitation\n\n\u26a0\ufe0f Important Note (Community Awareness)\n\ud83d\udc49 This tool uses BYOVD (Bring Your Own Vulnerable Driver) technique\n\u2022 loads a signed but vulnerable driver\n\u2022 abuses kernel-level access\n\n\u26a0\ufe0f HIGH RISK \u2014 commonly used in:\n\u2022 ransomware kill chains\n\u2022 EDR/AV bypass attacks\n\ud83d\udc49 Directly bypasses Protected Process Light (PPL) mechanisms\n\n\ud83d\udccc Community Note\n\ud83d\udc49 Technique category:\n\u2022 BYOVD (Kernel Abuse)\n\u2022 EDR Killer / Process Killer\n\n\ud83d\udc49 Real-world trend:\n\u2022 attackers disable security tools before payload execution\n\u2022 kernel driver abuse is increasingly common\n\n\u2699\ufe0f Core Capabilities\n\ud83d\udca3 Protected Process Termination\n\u2022 kills PPL-protected processes\n\u2022 bypasses Windows security restrictions\n\u2022 targets AV / EDR components\n\n\ud83e\uddec BYOVD Exploitation\n\u2022 uses vulnerable driver (CVE-2026-0828)\n\u2022 escalates capabilities to kernel level\n\u2022 abuses IOCTL interface\n\n\ud83d\udda5 Driver Lifecycle Management\n\u2022 embeds driver in executable\n\u2022 extracts at runtime\n\u2022 registers and loads as kernel service\n\n\ud83d\udd10 Kernel Communication\n\u2022 interacts via DeviceIoControl\n\u2022 sends termination requests\n\u2022 operates from user-mode with kernel power\n\n\u2699\ufe0f Execution Flow\nLaunch Tool (User Mode)\n        \u2193\nExtract Embedded Driver\n        \u2193\nRegister Kernel Service\n        \u2193\nLoad Driver (NtLoadDriver)\n        \u2193\nSend IOCTL (DeviceIoControl)\n        \u2193\nTerminate Protected Process\n\n\ud83e\udde0 Technical Highlights\n\u2022 CVE-2026-0828 vulnerable driver abuse\n\u2022 uses ProcessMonitorDriver.sys\n\u2022 NtLoadDriver for kernel loading\n\u2022 DeviceIoControl for command execution\n\u2022 bypasses Protected Process Light (PPL)\n\n\ud83e\udde0 Usage Example\n# Run executable (admin required)\nKillChain.exe \n\n\ud83e\udde0 Installation\ngit clone https://github.com/oxfemale/KillChain\ncd KillChain\n# build using Visual Studio (C/C++)\n\n\ud83e\udde0 Workflow\nInitial Access\n      \u2193\nExecute Tool\n      \u2193\nLoad Vulnerable Driver\n      \u2193\nGain Kernel Interaction\n      \u2193\nKill Protected Process\n\n\ud83d\ude80 Why It Matters\n\u2022 demonstrates real-world BYOVD attack technique\n\u2022 bypasses modern Windows process protection\n\u2022 critical step in disabling EDR/AV\n\u2022 widely used in advanced malware operations\n\n\ud83d\udca1 Research Value\nUseful for:\n\u2022 BYOVD exploitation research\n\u2022 kernel driver abuse analysis\n\u2022 EDR bypass techniques\n\u2022 Windows internals study\n\u2022 detection engineering\n\n\ud83d\udd25 Key Insight\nVulnerable Driver \u2192 Kernel Access \u2192 IOCTL Abuse \u2192 Process Kill\n\ud83d\udc49 Core concept behind modern EDR bypass attacks\n\n\u2714\ufe0f Exploit \u2714\ufe0f\n\u2714\ufe0f Scanner \u274c\n\u2714\ufe0f C2 \u274c\n\u2714\ufe0f BYOVD EDR Killer \u2714\ufe0f\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:34.163643Z"}, {"uuid": "45ac1004-15d0-43ae-962d-8756f241d386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0824", "type": "seen", "source": "https://t.me/securixy_kz/495", "content": "Microsoft Windows - 0Day\n\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00bb \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 74 \u0431\u0430\u0433\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0412 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041e\u0431\u0435 \u00ab\u0441\u0432\u0435\u0436\u0438\u0435\u00bb \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b (CVE-2019-0803 \u0438 CVE-2019-0859) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Win32k. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e Microsoft, \u0431\u0430\u0433 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u044f\u0434\u0440\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0442.\u0434. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\u0412 \u043a\u0430\u043a\u0438\u0445 \u0438\u043c\u0435\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430.\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u0440\u044f\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, CVE-2019-0824, CVE-2019-0825 \u0438 CVE-2019-0827 \u0432 \u0421\u0423\u0411\u0414 Microsoft Access \u0438 CVE-2019-0853 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows GDI+. \u0421 \u043f\u043e\u043b\u043d\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0437\u0434\u0435\u0441\u044c.\n\n\u0412\u0437\u044f\u0442\u043e \u00a9: https://www.securitylab.ru\n\u0421\u043a\u043e\u043f\u0438\u0440\u0443\u0439\u0442\u0435 \u044d\u0442\u0443 \u0441\u0441\u044b\u043b\u043a\u0443 \u0438 \u0432\u0441\u0442\u0430\u0432\u044c\u0442\u0435 \u0432 Telegram", "creation_timestamp": "2026-07-12T22:00:13.867483Z"}, {"uuid": "e7d4362c-7324-4e4b-b3a0-175eef812ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0827", "type": "seen", "source": "https://t.me/securixy_kz/495", "content": "Microsoft Windows - 0Day\n\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00bb \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 74 \u0431\u0430\u0433\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0412 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041e\u0431\u0435 \u00ab\u0441\u0432\u0435\u0436\u0438\u0435\u00bb \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b (CVE-2019-0803 \u0438 CVE-2019-0859) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Win32k. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e Microsoft, \u0431\u0430\u0433 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u044f\u0434\u0440\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0442.\u0434. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\u0412 \u043a\u0430\u043a\u0438\u0445 \u0438\u043c\u0435\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430.\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u0440\u044f\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, CVE-2019-0824, CVE-2019-0825 \u0438 CVE-2019-0827 \u0432 \u0421\u0423\u0411\u0414 Microsoft Access \u0438 CVE-2019-0853 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows GDI+. \u0421 \u043f\u043e\u043b\u043d\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0437\u0434\u0435\u0441\u044c.\n\n\u0412\u0437\u044f\u0442\u043e \u00a9: https://www.securitylab.ru\n\u0421\u043a\u043e\u043f\u0438\u0440\u0443\u0439\u0442\u0435 \u044d\u0442\u0443 \u0441\u0441\u044b\u043b\u043a\u0443 \u0438 \u0432\u0441\u0442\u0430\u0432\u044c\u0442\u0435 \u0432 Telegram", "creation_timestamp": "2026-07-12T22:00:13.961993Z"}, {"uuid": "1a69ce5e-aaae-4759-ae5d-ed729c900656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0825", "type": "seen", "source": "https://t.me/securixy_kz/495", "content": "Microsoft Windows - 0Day\n\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00bb \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 74 \u0431\u0430\u0433\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0412 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041e\u0431\u0435 \u00ab\u0441\u0432\u0435\u0436\u0438\u0435\u00bb \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b (CVE-2019-0803 \u0438 CVE-2019-0859) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Win32k. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e Microsoft, \u0431\u0430\u0433 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u044f\u0434\u0440\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0442.\u0434. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\u0412 \u043a\u0430\u043a\u0438\u0445 \u0438\u043c\u0435\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430.\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u0440\u044f\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, CVE-2019-0824, CVE-2019-0825 \u0438 CVE-2019-0827 \u0432 \u0421\u0423\u0411\u0414 Microsoft Access \u0438 CVE-2019-0853 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows GDI+. \u0421 \u043f\u043e\u043b\u043d\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0437\u0434\u0435\u0441\u044c.\n\n\u0412\u0437\u044f\u0442\u043e \u00a9: https://www.securitylab.ru\n\u0421\u043a\u043e\u043f\u0438\u0440\u0443\u0439\u0442\u0435 \u044d\u0442\u0443 \u0441\u0441\u044b\u043b\u043a\u0443 \u0438 \u0432\u0441\u0442\u0430\u0432\u044c\u0442\u0435 \u0432 Telegram", "creation_timestamp": "2026-07-12T22:00:14.087167Z"}, {"uuid": "7db76cd7-9154-4458-ae5a-87bc44738492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0824", "type": "seen", "source": "https://t.me/securixy_kz/495", "content": "Microsoft Windows - 0Day\n\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00bb \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 74 \u0431\u0430\u0433\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0412 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041e\u0431\u0435 \u00ab\u0441\u0432\u0435\u0436\u0438\u0435\u00bb \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b (CVE-2019-0803 \u0438 CVE-2019-0859) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Win32k. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e Microsoft, \u0431\u0430\u0433 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u044f\u0434\u0440\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0442.\u0434. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\u0412 \u043a\u0430\u043a\u0438\u0445 \u0438\u043c\u0435\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430.\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u0440\u044f\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, CVE-2019-0824, CVE-2019-0825 \u0438 CVE-2019-0827 \u0432 \u0421\u0423\u0411\u0414 Microsoft Access \u0438 CVE-2019-0853 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows GDI+. \u0421 \u043f\u043e\u043b\u043d\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0437\u0434\u0435\u0441\u044c.\n\n\u0412\u0437\u044f\u0442\u043e \u00a9: https://www.securitylab.ru\n\u0421\u043a\u043e\u043f\u0438\u0440\u0443\u0439\u0442\u0435 \u044d\u0442\u0443 \u0441\u0441\u044b\u043b\u043a\u0443 \u0438 \u0432\u0441\u0442\u0430\u0432\u044c\u0442\u0435 \u0432 Telegram", "creation_timestamp": "2026-07-13T00:00:37.828581Z"}, {"uuid": "a156bdcc-e752-4069-8c14-e6012d2df9c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0825", "type": "seen", "source": "https://t.me/securixy_kz/495", "content": "Microsoft Windows - 0Day\n\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00bb \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 74 \u0431\u0430\u0433\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0412 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041e\u0431\u0435 \u00ab\u0441\u0432\u0435\u0436\u0438\u0435\u00bb \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b (CVE-2019-0803 \u0438 CVE-2019-0859) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Win32k. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e Microsoft, \u0431\u0430\u0433 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u044f\u0434\u0440\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0442.\u0434. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\u0412 \u043a\u0430\u043a\u0438\u0445 \u0438\u043c\u0435\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430.\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u0440\u044f\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, CVE-2019-0824, CVE-2019-0825 \u0438 CVE-2019-0827 \u0432 \u0421\u0423\u0411\u0414 Microsoft Access \u0438 CVE-2019-0853 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows GDI+. \u0421 \u043f\u043e\u043b\u043d\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0437\u0434\u0435\u0441\u044c.\n\n\u0412\u0437\u044f\u0442\u043e \u00a9: https://www.securitylab.ru\n\u0421\u043a\u043e\u043f\u0438\u0440\u0443\u0439\u0442\u0435 \u044d\u0442\u0443 \u0441\u0441\u044b\u043b\u043a\u0443 \u0438 \u0432\u0441\u0442\u0430\u0432\u044c\u0442\u0435 \u0432 Telegram", "creation_timestamp": "2026-07-13T00:00:38.044546Z"}, {"uuid": "a931a06e-9088-403d-a9fa-39e02b1d9217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0827", "type": "seen", "source": "https://t.me/securixy_kz/495", "content": "Microsoft Windows - 0Day\n\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00bb \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 74 \u0431\u0430\u0433\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0412 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041e\u0431\u0435 \u00ab\u0441\u0432\u0435\u0436\u0438\u0435\u00bb \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b (CVE-2019-0803 \u0438 CVE-2019-0859) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Win32k. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e Microsoft, \u0431\u0430\u0433 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u044f\u0434\u0440\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0442.\u0434. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\u0412 \u043a\u0430\u043a\u0438\u0445 \u0438\u043c\u0435\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430.\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u0440\u044f\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, CVE-2019-0824, CVE-2019-0825 \u0438 CVE-2019-0827 \u0432 \u0421\u0423\u0411\u0414 Microsoft Access \u0438 CVE-2019-0853 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows GDI+. \u0421 \u043f\u043e\u043b\u043d\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0437\u0434\u0435\u0441\u044c.\n\n\u0412\u0437\u044f\u0442\u043e \u00a9: https://www.securitylab.ru\n\u0421\u043a\u043e\u043f\u0438\u0440\u0443\u0439\u0442\u0435 \u044d\u0442\u0443 \u0441\u0441\u044b\u043b\u043a\u0443 \u0438 \u0432\u0441\u0442\u0430\u0432\u044c\u0442\u0435 \u0432 Telegram", "creation_timestamp": "2026-07-13T01:00:10.847656Z"}, {"uuid": "6e11c717-7b20-4617-9de4-7a97df9418f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0825", "type": "seen", "source": "https://t.me/securixy_kz/495", "content": "Microsoft Windows - 0Day\n\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00bb \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 74 \u0431\u0430\u0433\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0412 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041e\u0431\u0435 \u00ab\u0441\u0432\u0435\u0436\u0438\u0435\u00bb \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b (CVE-2019-0803 \u0438 CVE-2019-0859) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Win32k. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e Microsoft, \u0431\u0430\u0433 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u044f\u0434\u0440\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0442.\u0434. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\u0412 \u043a\u0430\u043a\u0438\u0445 \u0438\u043c\u0435\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430.\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u0440\u044f\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, CVE-2019-0824, CVE-2019-0825 \u0438 CVE-2019-0827 \u0432 \u0421\u0423\u0411\u0414 Microsoft Access \u0438 CVE-2019-0853 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows GDI+. \u0421 \u043f\u043e\u043b\u043d\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0437\u0434\u0435\u0441\u044c.\n\n\u0412\u0437\u044f\u0442\u043e \u00a9: https://www.securitylab.ru\n\u0421\u043a\u043e\u043f\u0438\u0440\u0443\u0439\u0442\u0435 \u044d\u0442\u0443 \u0441\u0441\u044b\u043b\u043a\u0443 \u0438 \u0432\u0441\u0442\u0430\u0432\u044c\u0442\u0435 \u0432 Telegram", "creation_timestamp": "2026-07-14T00:00:54.958832Z"}, {"uuid": "89c2f4bf-7a9b-4f43-b31f-e0151a765ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0827", "type": "seen", "source": "https://t.me/securixy_kz/495", "content": "Microsoft Windows - 0Day\n\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00bb \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 74 \u0431\u0430\u0433\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0412 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041e\u0431\u0435 \u00ab\u0441\u0432\u0435\u0436\u0438\u0435\u00bb \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b (CVE-2019-0803 \u0438 CVE-2019-0859) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Win32k. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e Microsoft, \u0431\u0430\u0433 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u044f\u0434\u0440\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0442.\u0434. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\u0412 \u043a\u0430\u043a\u0438\u0445 \u0438\u043c\u0435\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430.\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u0440\u044f\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, CVE-2019-0824, CVE-2019-0825 \u0438 CVE-2019-0827 \u0432 \u0421\u0423\u0411\u0414 Microsoft Access \u0438 CVE-2019-0853 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows GDI+. \u0421 \u043f\u043e\u043b\u043d\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0437\u0434\u0435\u0441\u044c.\n\n\u0412\u0437\u044f\u0442\u043e \u00a9: https://www.securitylab.ru\n\u0421\u043a\u043e\u043f\u0438\u0440\u0443\u0439\u0442\u0435 \u044d\u0442\u0443 \u0441\u0441\u044b\u043b\u043a\u0443 \u0438 \u0432\u0441\u0442\u0430\u0432\u044c\u0442\u0435 \u0432 Telegram", "creation_timestamp": "2026-07-14T00:00:55.045821Z"}, {"uuid": "9955ecd2-cc0b-4141-a1d4-a20b8d72cae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0824", "type": "seen", "source": "https://t.me/securixy_kz/495", "content": "Microsoft Windows - 0Day\n\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00bb \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 74 \u0431\u0430\u0433\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0412 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041e\u0431\u0435 \u00ab\u0441\u0432\u0435\u0436\u0438\u0435\u00bb \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b (CVE-2019-0803 \u0438 CVE-2019-0859) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Win32k. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e Microsoft, \u0431\u0430\u0433 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u044f\u0434\u0440\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0442.\u0434. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\u0412 \u043a\u0430\u043a\u0438\u0445 \u0438\u043c\u0435\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430.\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u0440\u044f\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, CVE-2019-0824, CVE-2019-0825 \u0438 CVE-2019-0827 \u0432 \u0421\u0423\u0411\u0414 Microsoft Access \u0438 CVE-2019-0853 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows GDI+. \u0421 \u043f\u043e\u043b\u043d\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0437\u0434\u0435\u0441\u044c.\n\n\u0412\u0437\u044f\u0442\u043e \u00a9: https://www.securitylab.ru\n\u0421\u043a\u043e\u043f\u0438\u0440\u0443\u0439\u0442\u0435 \u044d\u0442\u0443 \u0441\u0441\u044b\u043b\u043a\u0443 \u0438 \u0432\u0441\u0442\u0430\u0432\u044c\u0442\u0435 \u0432 Telegram", "creation_timestamp": "2026-07-14T00:00:55.127342Z"}, {"uuid": "cab41f48-a0ea-4ee6-a320-853dc3f8e7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17202", "content": "\ud83d\udca3 KillChain \u2014 BYOVD Protected Process Killer (CVE-2026-0828)\n\u2694\ufe0f Kernel Driver Abuse to Terminate Protected Processes\n\n\ud83d\udccc GitHub Repository\n\ud83d\udc49 https://github.com/oxfemale/KillChain\n\n\ud83d\udcd6 Description\nKillChain is a user-mode tool that abuses a vulnerable kernel driver (CVE-2026-0828) to terminate protected processes.\nIt leverages ProcessMonitorDriver.sys and communicates with the kernel via a custom IOCTL interface, allowing it to bypass standard Windows process protection mechanisms.\nThe tool embeds the vulnerable driver inside the executable, extracts it at runtime, registers it as a service, loads it via NtLoadDriver, and sends termination requests using DeviceIoControl.\n\ud83d\udc49 Used in EDR bypass, protected process termination, and BYOVD-based post-exploitation\n\n\u26a0\ufe0f Important Note (Community Awareness)\n\ud83d\udc49 This tool uses BYOVD (Bring Your Own Vulnerable Driver) technique\n\u2022 loads a signed but vulnerable driver\n\u2022 abuses kernel-level access\n\n\u26a0\ufe0f HIGH RISK \u2014 commonly used in:\n\u2022 ransomware kill chains\n\u2022 EDR/AV bypass attacks\n\ud83d\udc49 Directly bypasses Protected Process Light (PPL) mechanisms\n\n\ud83d\udccc Community Note\n\ud83d\udc49 Technique category:\n\u2022 BYOVD (Kernel Abuse)\n\u2022 EDR Killer / Process Killer\n\n\ud83d\udc49 Real-world trend:\n\u2022 attackers disable security tools before payload execution\n\u2022 kernel driver abuse is increasingly common\n\n\u2699\ufe0f Core Capabilities\n\ud83d\udca3 Protected Process Termination\n\u2022 kills PPL-protected processes\n\u2022 bypasses Windows security restrictions\n\u2022 targets AV / EDR components\n\n\ud83e\uddec BYOVD Exploitation\n\u2022 uses vulnerable driver (CVE-2026-0828)\n\u2022 escalates capabilities to kernel level\n\u2022 abuses IOCTL interface\n\n\ud83d\udda5 Driver Lifecycle Management\n\u2022 embeds driver in executable\n\u2022 extracts at runtime\n\u2022 registers and loads as kernel service\n\n\ud83d\udd10 Kernel Communication\n\u2022 interacts via DeviceIoControl\n\u2022 sends termination requests\n\u2022 operates from user-mode with kernel power\n\n\u2699\ufe0f Execution Flow\nLaunch Tool (User Mode)\n        \u2193\nExtract Embedded Driver\n        \u2193\nRegister Kernel Service\n        \u2193\nLoad Driver (NtLoadDriver)\n        \u2193\nSend IOCTL (DeviceIoControl)\n        \u2193\nTerminate Protected Process\n\n\ud83e\udde0 Technical Highlights\n\u2022 CVE-2026-0828 vulnerable driver abuse\n\u2022 uses ProcessMonitorDriver.sys\n\u2022 NtLoadDriver for kernel loading\n\u2022 DeviceIoControl for command execution\n\u2022 bypasses Protected Process Light (PPL)\n\n\ud83e\udde0 Usage Example\n# Run executable (admin required)\nKillChain.exe \n\n\ud83e\udde0 Installation\ngit clone https://github.com/oxfemale/KillChain\ncd KillChain\n# build using Visual Studio (C/C++)\n\n\ud83e\udde0 Workflow\nInitial Access\n      \u2193\nExecute Tool\n      \u2193\nLoad Vulnerable Driver\n      \u2193\nGain Kernel Interaction\n      \u2193\nKill Protected Process\n\n\ud83d\ude80 Why It Matters\n\u2022 demonstrates real-world BYOVD attack technique\n\u2022 bypasses modern Windows process protection\n\u2022 critical step in disabling EDR/AV\n\u2022 widely used in advanced malware operations\n\n\ud83d\udca1 Research Value\nUseful for:\n\u2022 BYOVD exploitation research\n\u2022 kernel driver abuse analysis\n\u2022 EDR bypass techniques\n\u2022 Windows internals study\n\u2022 detection engineering\n\n\ud83d\udd25 Key Insight\nVulnerable Driver \u2192 Kernel Access \u2192 IOCTL Abuse \u2192 Process Kill\n\ud83d\udc49 Core concept behind modern EDR bypass attacks\n\n\u2714\ufe0f Exploit \u2714\ufe0f\n\u2714\ufe0f Scanner \u274c\n\u2714\ufe0f C2 \u274c\n\u2714\ufe0f BYOVD EDR Killer \u2714\ufe0f\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:11.864041Z"}, {"uuid": "681b5d8a-4cbc-4389-8ecb-9054b8ebdcf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "published-proof-of-concept", "source": "https://t.me/bimbosec/157", "content": "\u0417\u0430\u044e\u043d\u044c, \u0432\u043e\u0442 \u0431\u044b \u0442\u044b \u043c\u043d\u043e\u0439 \u0442\u0430\u043a \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043b\u0441\u044f, \u043a\u0430\u043a \u041a\u0438\u0442\u0430\u0439 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u0435\u0442\u0441\u044f \u0422\u0430\u0439\u0432\u0430\u043d\u0435\u043c! \ud83d\udc8b\n\n\u041a\u043e\u0442\u0438\u043a\u0438 \u0438\u0437 Talos \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0444\u0430\u043a\u0442 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0422\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u043e\u0433\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u043c APT41. \u041f\u0440\u0438\u0447\u0435\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u043d\u0438 \u0435\u0433\u043e \u0435\u0449\u0435 \u0432 \u0438\u044e\u043d\u0435 2023. \u0420\u0435\u0431\u044f\u0442\u0430 \u043d\u0435 \u0438\u0437\u043c\u0435\u043d\u044f\u044e\u0442 \u0441\u0432\u043e\u0438\u043c \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0430\u043c \u2014 \u043f\u0440\u044f\u043c\u043e \u043a\u0430\u043a \u044f \u043d\u0435 \u0438\u0437\u043c\u0435\u043d\u044f\u044e Gucci \u0438 Prada, \u043e\u043d\u0438 \u0441\u043d\u043e\u0432\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 ShadowPad \u0438 Cobalt Strike. \n\n\u0417\u0430\u0441\u043a\u0443\u0447\u0430\u0442\u044c \u0437\u0430\u0438 \u0442\u043e\u0447\u043d\u043e \u043d\u0435 \u0434\u0430\u0434\u0443\u0442! \n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u043d\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a, \u0447\u0442\u043e\u0431\u044b \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432 \u043f\u0430\u043c\u044f\u0442\u044c PoC \u0434\u043b\u044f CVE-2018-0824 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0422\u0430\u043a \u0447\u0442\u043e, \u043c\u0430\u0441\u044c, \u043c\u043e\u0442\u0430\u0439 \u043d\u0430 \u0443\u0441 \ud83d\udc85\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc84", "creation_timestamp": "2026-07-21T14:00:05.357581Z"}, {"uuid": "a180379c-a452-414d-96eb-c5a845882bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "published-proof-of-concept", "source": "https://t.me/bimbosec/157", "content": "\u0417\u0430\u044e\u043d\u044c, \u0432\u043e\u0442 \u0431\u044b \u0442\u044b \u043c\u043d\u043e\u0439 \u0442\u0430\u043a \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043b\u0441\u044f, \u043a\u0430\u043a \u041a\u0438\u0442\u0430\u0439 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u0435\u0442\u0441\u044f \u0422\u0430\u0439\u0432\u0430\u043d\u0435\u043c! \ud83d\udc8b\n\n\u041a\u043e\u0442\u0438\u043a\u0438 \u0438\u0437 Talos \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0444\u0430\u043a\u0442 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0422\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u043e\u0433\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u043c APT41. \u041f\u0440\u0438\u0447\u0435\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u043d\u0438 \u0435\u0433\u043e \u0435\u0449\u0435 \u0432 \u0438\u044e\u043d\u0435 2023. \u0420\u0435\u0431\u044f\u0442\u0430 \u043d\u0435 \u0438\u0437\u043c\u0435\u043d\u044f\u044e\u0442 \u0441\u0432\u043e\u0438\u043c \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0430\u043c \u2014 \u043f\u0440\u044f\u043c\u043e \u043a\u0430\u043a \u044f \u043d\u0435 \u0438\u0437\u043c\u0435\u043d\u044f\u044e Gucci \u0438 Prada, \u043e\u043d\u0438 \u0441\u043d\u043e\u0432\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 ShadowPad \u0438 Cobalt Strike. \n\n\u0417\u0430\u0441\u043a\u0443\u0447\u0430\u0442\u044c \u0437\u0430\u0438 \u0442\u043e\u0447\u043d\u043e \u043d\u0435 \u0434\u0430\u0434\u0443\u0442! \n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u043d\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a, \u0447\u0442\u043e\u0431\u044b \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432 \u043f\u0430\u043c\u044f\u0442\u044c PoC \u0434\u043b\u044f CVE-2018-0824 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0422\u0430\u043a \u0447\u0442\u043e, \u043c\u0430\u0441\u044c, \u043c\u043e\u0442\u0430\u0439 \u043d\u0430 \u0443\u0441 \ud83d\udc85\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc84", "creation_timestamp": "2026-07-22T00:00:23.114306Z"}, {"uuid": "e75531fa-0801-4375-9d11-4837010a845b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17202", "content": "\ud83d\udca3 KillChain \u2014 BYOVD Protected Process Killer (CVE-2026-0828)\n\u2694\ufe0f Kernel Driver Abuse to Terminate Protected Processes\n\n\ud83d\udccc GitHub Repository\n\ud83d\udc49 https://github.com/oxfemale/KillChain\n\n\ud83d\udcd6 Description\nKillChain is a user-mode tool that abuses a vulnerable kernel driver (CVE-2026-0828) to terminate protected processes.\nIt leverages ProcessMonitorDriver.sys and communicates with the kernel via a custom IOCTL interface, allowing it to bypass standard Windows process protection mechanisms.\nThe tool embeds the vulnerable driver inside the executable, extracts it at runtime, registers it as a service, loads it via NtLoadDriver, and sends termination requests using DeviceIoControl.\n\ud83d\udc49 Used in EDR bypass, protected process termination, and BYOVD-based post-exploitation\n\n\u26a0\ufe0f Important Note (Community Awareness)\n\ud83d\udc49 This tool uses BYOVD (Bring Your Own Vulnerable Driver) technique\n\u2022 loads a signed but vulnerable driver\n\u2022 abuses kernel-level access\n\n\u26a0\ufe0f HIGH RISK \u2014 commonly used in:\n\u2022 ransomware kill chains\n\u2022 EDR/AV bypass attacks\n\ud83d\udc49 Directly bypasses Protected Process Light (PPL) mechanisms\n\n\ud83d\udccc Community Note\n\ud83d\udc49 Technique category:\n\u2022 BYOVD (Kernel Abuse)\n\u2022 EDR Killer / Process Killer\n\n\ud83d\udc49 Real-world trend:\n\u2022 attackers disable security tools before payload execution\n\u2022 kernel driver abuse is increasingly common\n\n\u2699\ufe0f Core Capabilities\n\ud83d\udca3 Protected Process Termination\n\u2022 kills PPL-protected processes\n\u2022 bypasses Windows security restrictions\n\u2022 targets AV / EDR components\n\n\ud83e\uddec BYOVD Exploitation\n\u2022 uses vulnerable driver (CVE-2026-0828)\n\u2022 escalates capabilities to kernel level\n\u2022 abuses IOCTL interface\n\n\ud83d\udda5 Driver Lifecycle Management\n\u2022 embeds driver in executable\n\u2022 extracts at runtime\n\u2022 registers and loads as kernel service\n\n\ud83d\udd10 Kernel Communication\n\u2022 interacts via DeviceIoControl\n\u2022 sends termination requests\n\u2022 operates from user-mode with kernel power\n\n\u2699\ufe0f Execution Flow\nLaunch Tool (User Mode)\n        \u2193\nExtract Embedded Driver\n        \u2193\nRegister Kernel Service\n        \u2193\nLoad Driver (NtLoadDriver)\n        \u2193\nSend IOCTL (DeviceIoControl)\n        \u2193\nTerminate Protected Process\n\n\ud83e\udde0 Technical Highlights\n\u2022 CVE-2026-0828 vulnerable driver abuse\n\u2022 uses ProcessMonitorDriver.sys\n\u2022 NtLoadDriver for kernel loading\n\u2022 DeviceIoControl for command execution\n\u2022 bypasses Protected Process Light (PPL)\n\n\ud83e\udde0 Usage Example\n# Run executable (admin required)\nKillChain.exe \n\n\ud83e\udde0 Installation\ngit clone https://github.com/oxfemale/KillChain\ncd KillChain\n# build using Visual Studio (C/C++)\n\n\ud83e\udde0 Workflow\nInitial Access\n      \u2193\nExecute Tool\n      \u2193\nLoad Vulnerable Driver\n      \u2193\nGain Kernel Interaction\n      \u2193\nKill Protected Process\n\n\ud83d\ude80 Why It Matters\n\u2022 demonstrates real-world BYOVD attack technique\n\u2022 bypasses modern Windows process protection\n\u2022 critical step in disabling EDR/AV\n\u2022 widely used in advanced malware operations\n\n\ud83d\udca1 Research Value\nUseful for:\n\u2022 BYOVD exploitation research\n\u2022 kernel driver abuse analysis\n\u2022 EDR bypass techniques\n\u2022 Windows internals study\n\u2022 detection engineering\n\n\ud83d\udd25 Key Insight\nVulnerable Driver \u2192 Kernel Access \u2192 IOCTL Abuse \u2192 Process Kill\n\ud83d\udc49 Core concept behind modern EDR bypass attacks\n\n\u2714\ufe0f Exploit \u2714\ufe0f\n\u2714\ufe0f Scanner \u274c\n\u2714\ufe0f C2 \u274c\n\u2714\ufe0f BYOVD EDR Killer \u2714\ufe0f\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:04.476163Z"}, {"uuid": "7414fcc7-4f17-474a-80ac-640411442b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-0824", "type": "seen", "source": "https://t.me/CVEhub/10820", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2009-0824*\nGithub: https://github.com/Exploitables/CVE-2009-0824", "creation_timestamp": "2026-07-29T12:00:38.481330Z"}, {"uuid": "9c993ea4-9e1d-4dc2-843a-9d059ca2fc21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "https://t.me/CVEhub/3619", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-0824\nGithub: https://github.com/pizza-power/golang-webmin-CVE-2022-0824-revshell\nDescribe: \nImproper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.", "creation_timestamp": "2026-07-29T12:00:58.232903Z"}, {"uuid": "2fa8b92c-0050-4afb-acc8-37d7bbb25fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-0824", "type": "seen", "source": "https://t.me/CVEhub/10820", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2009-0824*\nGithub: https://github.com/Exploitables/CVE-2009-0824", "creation_timestamp": "2026-07-30T00:01:06.066044Z"}, {"uuid": "1ecc35f2-3fad-4be3-9ceb-f5e0994f217d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "https://t.me/CVEhub/3619", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-0824\nGithub: https://github.com/pizza-power/golang-webmin-CVE-2022-0824-revshell\nDescribe: \nImproper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.", "creation_timestamp": "2026-07-30T00:01:36.997401Z"}, {"uuid": "a900f105-308b-494c-82ca-118e6af2f81f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/46473", "content": "CVE-2026-0826: Unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (RCE as root)\n\nVulnerable: VVX 150, VVX 250, VVX 350, and VVX 450), as well as Trio IP Conference series (Trio 8800, Trio 8500, and Trio 8300).\n\nBlog: https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/", "creation_timestamp": "2026-09-02T06:00:07.908830Z"}, {"uuid": "0a86e20e-9fba-4cb8-bf78-f878f64ca43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/44388", "content": "Una vulnerabilidad recientemente revelada, CVE-2026-0828, en el controlador del n\u00facleo de Windows ProcessMonitorDriver.sys pone de manifiesto una capacidad peligrosa: cualquier aplicaci\u00f3n en modo usuario que obtenga un identificador del dispositivo puede finalizar procesos arbitrarios, incluidos los procesos protegidos del sistema, sin que se realicen las comprobaciones de control de acceso adecuadas. Esta falla elude de hecho el modelo de seguridad habitual de Windows que protege los servicios cr\u00edticos del sistema y los componentes de seguridad.\n\nhttps://github.com/oxfemale/KillChain\n\n#maldev #github #killprocess", "creation_timestamp": "2026-09-02T06:00:15.233794Z"}, {"uuid": "9948aa83-0c31-4985-8716-ce0bd49b800b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "seen", "source": "https://t.me/GithubRedTeam/100799", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a dast\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ximerag\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-02 13:50:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-0828\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-02T15:00:05.952423Z"}, {"uuid": "2d91ced9-838b-4c3b-8627-6c5a3cd52006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/46473", "content": "CVE-2026-0826: Unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (RCE as root)\n\nVulnerable: VVX 150, VVX 250, VVX 350, and VVX 450), as well as Trio IP Conference series (Trio 8800, Trio 8500, and Trio 8300).\n\nBlog: https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/", "creation_timestamp": "2026-09-03T00:00:50.751689Z"}, {"uuid": "89b9925f-f0c4-4196-bd60-81eba0878e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100799", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a dast\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ximerag\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-02 13:50:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-0828\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-03T00:00:43.505229Z"}, {"uuid": "c2f35e2d-f399-4bef-9333-9d085068de2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/44388", "content": "Una vulnerabilidad recientemente revelada, CVE-2026-0828, en el controlador del n\u00facleo de Windows ProcessMonitorDriver.sys pone de manifiesto una capacidad peligrosa: cualquier aplicaci\u00f3n en modo usuario que obtenga un identificador del dispositivo puede finalizar procesos arbitrarios, incluidos los procesos protegidos del sistema, sin que se realicen las comprobaciones de control de acceso adecuadas. Esta falla elude de hecho el modelo de seguridad habitual de Windows que protege los servicios cr\u00edticos del sistema y los componentes de seguridad.\n\nhttps://github.com/oxfemale/KillChain\n\n#maldev #github #killprocess", "creation_timestamp": "2026-09-03T00:00:47.422670Z"}, {"uuid": "15652bbc-4c7d-4de0-b83d-24f834ee1796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "seen", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-03T03:00:05.595157Z"}, {"uuid": "347134c9-fdb5-471a-97e1-5de78b8a869d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-04T00:01:01.692297Z"}, {"uuid": "cc1df2f6-24c0-4bb6-81de-265827e1067e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webmin_file_manager_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"faisalfs10x\", \"jheysel-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"In Webmin version 1.984, any authenticated low privilege user without access rights to\\n          the File Manager module could interact with file manager functionalities such as downloading files from remote URLs and\\n          changing file permissions. It is possible to achieve Remote Code Execution via a crafted .cgi file by chaining those\\n          functionalities in the file manager.\", \"disclosure_date\": \"2022-02-26\", \"fullname\": \"exploit/linux/http/webmin_file_manager_rce\", \"is_install_path\": true, \"mod_time\": \"2022-10-27 11:26:31 +0000\", \"name\": \"Webmin File Manager RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/webmin_file_manager_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/webmin_file_manager_rce\", \"references\": [\"URL-https://huntr.dev/bounties/d0049a96-de90-4b1a-9111-94de1044f295/\", \"URL-https://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell\", \"CVE-2022-0824\"], \"rport\": 10000, \"session_types\": false, \"targets\": [\"Automatic (Unix In-Memory)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:02.980944Z"}, {"uuid": "22dd9987-5761-4f6f-a05c-dbcbe6ef6a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/poly_unauth_rce_cve_2026_0826.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"sfewer-r7\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"CVE-2026-0826 is a critical unauthenticated stack-based buffer overflow vulnerability affecting all\\n          models in the VVX series (VVX 150, VVX 250, VVX 350, and VVX 450), as well as three models from the Trio IP\\n          Conference series (Trio 8800, Trio 8500, and Trio 8300). A remote attacker can leverage CVE-2026-0826 to achieve\\n          unauthenticated remote code execution (RCE) with root privileges on a target device. The vulnerability is present\\n          in the device's parsing of Session Description Protocol (SDP) attributes for Interactive Connectivity Establishment\\n          (ICE). The ICE feature, which is not enabled by default, must be enabled for the device to be exploitable by a\\n          remote attacker.\", \"disclosure_date\": \"2026-06-01\", \"fullname\": \"exploit/linux/misc/poly_unauth_rce_cve_2026_0826\", \"is_install_path\": true, \"mod_time\": \"2026-06-05 11:39:49 +0000\", \"name\": \"HP Poly Voice Unauthenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-os-restarts\"]}, \"path\": \"/modules/exploits/linux/misc/poly_unauth_rce_cve_2026_0826.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/misc/poly_unauth_rce_cve_2026_0826\", \"references\": [\"CVE-2026-0826\", \"URL-https://support.hp.com/us-en/document/ish_15052661-15052687-16/hpsbpy04083\", \"URL-https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/\"], \"rport\": 5060, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:18.714885Z"}, {"uuid": "178eef96-63e4-463b-bc47-2e4c7cb7a37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0822", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms10_038_excel_obj_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Nicolas Joly\", \"Shahin Ramezany \", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Excel 2002 of Microsoft Office XP.\\n          By supplying a .xls file with a malformed OBJ (recType 0x5D) record an attacker\\n          can get the control of the execution flow. This results in arbitrary code execution under\\n          the context of the user.\", \"disclosure_date\": \"2010-06-08\", \"fullname\": \"exploit/windows/fileformat/ms10_038_excel_obj_bof\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/ms10_038_excel_obj_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/fileformat/ms10_038_excel_obj_bof\", \"references\": [\"CVE-2010-0822\", \"OSVDB-65236\", \"BID-40520\", \"MSB-MS10-038\", \"URL-https://www.exploit-db.com/moaub-24-microsoft-excel-obj-record-stack-overflow/\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Microsoft Office Excel 2002 10.2614.2625 Service Pack 0(Office XP) on Windows XP SP3\", \"Microsoft Office Excel 2002 10.6501.6626 Service Pack 3 (Office XP SP3) on Windows XP SP3\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:27.934617Z"}, {"uuid": "15435b17-8346-4ece-bdc8-9361e8c6d416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0822", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/isapi/ms03_051_fp30reg_chunked.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This is an exploit for the chunked encoding buffer overflow\\n          described in MS03-051 and originally reported by Brett\\n          Moore. This particular modules works against versions of\\n          Windows 2000 between SP0 and SP3. Service Pack 4 fixes the\\n          issue.\", \"disclosure_date\": \"2003-11-11\", \"fullname\": \"exploit/windows/isapi/ms03_051_fp30reg_chunked\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:58 +0000\", \"name\": \"MS03-051 Microsoft IIS ISAPI FrontPage fp30reg.dll Chunked Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/isapi/ms03_051_fp30reg_chunked.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/isapi/ms03_051_fp30reg_chunked\", \"references\": [\"CVE-2003-0822\", \"OSVDB-2952\", \"BID-9007\", \"MSB-MS03-051\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Windows 2000 SP0-SP3\", \"Windows 2000 07/22/02\", \"Windows 2000 10/06/99\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:05.939045Z"}, {"uuid": "4feae80b-7323-44cb-ac71-a053007371a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/escalate/unmarshal_cmd_exec.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x64\", \"author\": [\"Nicolas Joly\", \"Matthias Kaiser\", \"Sanjay Gondaliya\", \"Pratik Shah \"], \"autofilter_ports\": null, \"autofilter_services\": null, \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a local privilege escalation bug which exists\\n          in Microsoft COM for Windows when it fails to properly handle serialized objects.\", \"disclosure_date\": \"2018-08-05\", \"fullname\": \"post/windows/escalate/unmarshal_cmd_exec\", \"is_install_path\": true, \"mod_time\": \"2025-05-09 10:51:17 +0000\", \"name\": \"Windows unmarshal post exploitation\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/post/windows/escalate/unmarshal_cmd_exec.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/escalate/unmarshal_cmd_exec\", \"references\": [\"CVE-2018-0824\", \"URL-https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0824\", \"URL-https://github.com/x73x61x6ex6ax61x79/UnmarshalPwn\", \"EDB-44906\"], \"rport\": null, \"session_types\": [], \"targets\": null, \"type\": \"post\"}", "creation_timestamp": "2026-09-08T06:52:41.779628Z"}, {"uuid": "46d3fcb5-1bf4-4532-a910-676cac7e4060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "Telegram/3MMbFueKHg37BFgH_ywUM_4BJMQza_SIx_NKgZuYC9XTFpk", "content": "", "creation_timestamp": "2026-09-14T03:00:13.239779Z"}, {"uuid": "58b171a5-8cba-4448-a1f0-417af678d168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "Telegram/3MMbFueKHg37BFgH_ywUM_4BJMQza_SIx_NKgZuYC9XTFpk", "content": "", "creation_timestamp": "2026-09-15T00:00:23.107622Z"}]}