{"vulnerability": "2023-50", "sightings": [{"uuid": "02de1000-586e-4b35-ad6f-dedeb3a08d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50176", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113471621703891497", "content": "", "creation_timestamp": "2024-11-12T19:25:40.967090Z"}, {"uuid": "e5c61f85-00ca-4ebe-8174-e892894180d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "3e5b0e38-654a-45f8-bebc-108be042690c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50868", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "25c4ec09-f641-46df-a214-0959ebad220f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50913", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113601933958929717", "content": "", "creation_timestamp": "2024-12-05T19:45:47.993044Z"}, {"uuid": "c74493f5-9f69-4c72-99d2-0e9e000fe503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50094", "type": "seen", "source": "MISP/4cb3c87c-dbe1-429c-9770-1f63945f435c", "content": "", "creation_timestamp": "2024-11-26T10:06:57.000000Z"}, {"uuid": "405c4172-f41a-4834-8407-c894c62ae19a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50373", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113623288225669071", "content": "", "creation_timestamp": "2024-12-09T14:16:28.056133Z"}, {"uuid": "421ce217-66c2-4c88-936a-e2d54ab1e53e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50375", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113623288259219597", "content": "", "creation_timestamp": "2024-12-09T14:16:28.598402Z"}, {"uuid": "c02d619f-0fad-4a16-aaeb-ab9587126ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50876", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113623288272823606", "content": "", "creation_timestamp": "2024-12-09T14:16:28.838179Z"}, {"uuid": "1bbe93f8-c86d-4c31-a6ad-8c116aebc0ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50877", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113623288286519975", "content": "", "creation_timestamp": "2024-12-09T14:16:29.065407Z"}, {"uuid": "9215051b-a41d-432c-b521-3ab2490f3c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50882", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113623347284949068", "content": "", "creation_timestamp": "2024-12-09T14:31:29.320534Z"}, {"uuid": "eca7c920-03ea-4d9e-9712-bae7210d4451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50884", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113623347299417569", "content": "", "creation_timestamp": "2024-12-09T14:31:29.451760Z"}, {"uuid": "4911fae7-7648-43e6-a884-111148a3f413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50887", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113623347312984117", "content": "", "creation_timestamp": "2024-12-09T14:31:29.775864Z"}, {"uuid": "e74fc42d-aadf-4259-832f-a9ac0476cda8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50899", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113623347327078076", "content": "", "creation_timestamp": "2024-12-09T14:31:30.138231Z"}, {"uuid": "cbdbb9b4-a52b-4f5f-a87a-fbe73b29e1c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50903", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113623406326857936", "content": "", "creation_timestamp": "2024-12-09T14:46:30.198195Z"}, {"uuid": "be9b92c3-a802-4ec2-9452-146dfcbc2cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50904", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113623406340867935", "content": "", "creation_timestamp": "2024-12-09T14:46:30.743586Z"}, {"uuid": "0e748e2a-6300-4a8b-a44e-7450f6d316f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2023-50164", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113675772827431567", "content": "", "creation_timestamp": "2024-12-18T20:43:59.712175Z"}, {"uuid": "c238e48a-4457-411e-8d8f-05196f5e618a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113664804865739496", "content": "", "creation_timestamp": "2024-12-16T22:14:42.083899Z"}, {"uuid": "aecd65ea-d535-4f30-8f45-16a46d20fed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/113679625679957484", "content": "", "creation_timestamp": "2024-12-19T13:03:49.360302Z"}, {"uuid": "2c82dfce-1e20-48a2-97ae-2ca359a509ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50956", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113674546650077621", "content": "", "creation_timestamp": "2024-12-18T15:32:09.581878Z"}, {"uuid": "3e19998f-a615-4c6d-bdfe-daff59c959e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://thehackernews.com/2024/12/patch-alert-critical-apache-struts-flaw.html", "content": "", "creation_timestamp": "2024-12-18T03:53:00.000000Z"}, {"uuid": "9bf1b456-a6ea-472c-9c53-f948811833ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3lf5y7o6kk22i", "content": "", "creation_timestamp": "2025-01-07T15:39:02.022214Z"}, {"uuid": "fa4def84-c501-473e-b83d-eb695d12d464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50850", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113747548787616474", "content": "", "creation_timestamp": "2024-12-31T12:57:33.810540Z"}, {"uuid": "11104cc9-dacc-45cb-a7e0-e2014bc6fe23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50738", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113845754174717773", "content": "", "creation_timestamp": "2025-01-17T21:12:29.362508Z"}, {"uuid": "e05da1d2-fb48-4f2c-bb9c-e1253d53a67c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50738", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxpoegrhp2n", "content": "", "creation_timestamp": "2025-01-17T21:15:24.041661Z"}, {"uuid": "76c0f1b7-8a33-4075-b7e2-08e8cb50a7b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50738", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113845966298946028", "content": "", "creation_timestamp": "2025-01-17T22:06:25.942977Z"}, {"uuid": "eabb1c11-eaf5-4d7b-a8f6-d14ec689e29e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50738", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxudgjnl72q", "content": "", "creation_timestamp": "2025-01-17T22:38:45.878480Z"}, {"uuid": "6d65ef45-d6ac-41ba-879c-8119b0a9b707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50739", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113846368754223374", "content": "", "creation_timestamp": "2025-01-17T23:48:47.085528Z"}, {"uuid": "ea797b2b-58ae-47ae-a4ec-e349124abc20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50739", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxzruhp232j", "content": "", "creation_timestamp": "2025-01-18T00:16:20.015790Z"}, {"uuid": "724edbe1-0f0c-4fde-a673-c0dabbace3d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50739", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfy3d63ned2u", "content": "", "creation_timestamp": "2025-01-18T00:43:56.173919Z"}, {"uuid": "34a15c17-b1eb-4035-be09-a5f19784ee24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50739", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113846603482513460", "content": "", "creation_timestamp": "2025-01-18T00:48:35.617228Z"}, {"uuid": "6fd43855-91b1-4e03-8b27-561032c335cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://gist.github.com/ton77v/f9165544cfbf98c8bd1988cbfa7aea95", "content": "", "creation_timestamp": "2025-02-01T05:06:08.000000Z"}, {"uuid": "43a52339-e304-43dd-947d-c1b6b4dd8c9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50733", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbuvoxdu62s", "content": "", "creation_timestamp": "2025-01-21T22:15:35.859975Z"}, {"uuid": "95f8c561-cfd2-48cb-b5b5-1ec8a691106a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50733", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113868779170118309", "content": "", "creation_timestamp": "2025-01-21T22:48:03.083172Z"}, {"uuid": "8d7af392-8b48-4e3f-ba55-29439b25ae12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50445", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "2d577d78-af66-437c-9fa2-1a76538ea36d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50309", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgew5jf6jl2j", "content": "", "creation_timestamp": "2025-01-23T03:15:51.836557Z"}, {"uuid": "493e8eae-efbf-4fae-9d34-aec06b1659f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-31)", "content": "", "creation_timestamp": "2025-01-31T00:00:00.000000Z"}, {"uuid": "5f0ee83c-3f42-413f-be42-16c0ebf8d6be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50309", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgexahx5x22r", "content": "", "creation_timestamp": "2025-01-23T03:35:25.718065Z"}, {"uuid": "809a36f8-b1bd-473d-a791-34445c329ec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50919", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "c0869a31-faee-4a6f-881f-5bb032add8f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "9fafd515-8942-452a-a5dd-93a482dae3fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50917", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "9ba5c2cc-c3f9-46f2-9999-105f99a2229d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-06)", "content": "", "creation_timestamp": "2025-02-06T00:00:00.000000Z"}, {"uuid": "6ee35c03-63a5-47e7-830a-075f90af2723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50316", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113903163828857412", "content": "", "creation_timestamp": "2025-01-28T00:32:31.054540Z"}, {"uuid": "c18bfe72-50bd-4b43-b368-9895ede21817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50945", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113895422540026858", "content": "", "creation_timestamp": "2025-01-26T15:43:50.120136Z"}, {"uuid": "4bde3609-35f7-4243-93a5-82bda37a6a51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50946", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113895449218389405", "content": "", "creation_timestamp": "2025-01-26T15:50:35.463824Z"}, {"uuid": "25d5107c-ed54-442c-9e1d-0d1250cc9fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50316", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrbrhkmje2b", "content": "", "creation_timestamp": "2025-01-28T01:15:48.640009Z"}, {"uuid": "fc932356-6097-4569-a580-e32d7a42e3a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50945", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgnt4trsxz2r", "content": "", "creation_timestamp": "2025-01-26T16:15:45.795132Z"}, {"uuid": "0cc5dc7c-6ea0-4e35-a0ba-c5f4f9bff6de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50946", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgnt4wff5k2b", "content": "", "creation_timestamp": "2025-01-26T16:15:48.311352Z"}, {"uuid": "7d93e054-d9e9-4f58-a413-52e26f03e901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50945", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgo36svgd52r", "content": "", "creation_timestamp": "2025-01-26T18:40:02.195452Z"}, {"uuid": "3ca789ba-556e-4d6a-a67c-8187aeac7d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50946", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgo36syuof2r", "content": "", "creation_timestamp": "2025-01-26T18:40:02.818918Z"}, {"uuid": "7f4c9400-4eec-4739-8bbe-fc28ee233732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3llbigus4d22z", "content": "", "creation_timestamp": "2025-03-26T09:38:34.194734Z"}, {"uuid": "99a143d4-7fe7-49ac-829d-3338a02b2794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:58.000000Z"}, {"uuid": "9bcae472-402b-4c97-bdb5-e3b844872847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lladqtnvw52j", "content": "", "creation_timestamp": "2025-03-25T22:41:57.987387Z"}, {"uuid": "fc5579c4-f69f-4dce-8fc4-82460ae34463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50919", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:58.000000Z"}, {"uuid": "d5638b6c-4a1e-4a18-b23c-e69ae2c9a738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://gist.github.com/juank704/8c144f4ae0004f19892c23b19deca658", "content": "", "creation_timestamp": "2025-03-03T15:40:30.000000Z"}, {"uuid": "25696b81-bb1a-4126-a513-6d0af3808270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50445", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:58.000000Z"}, {"uuid": "9cf54d44-526a-4ef4-b687-383a2f1087a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50917", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:58.000000Z"}, {"uuid": "bb5226ad-9356-4670-bac0-f1920bf5c546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-13)", "content": "", "creation_timestamp": "2025-03-13T00:00:00.000000Z"}, {"uuid": "c52b0c04-b587-4fd5-b879-80969323c735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-09)", "content": "", "creation_timestamp": "2025-03-09T00:00:00.000000Z"}, {"uuid": "c03ed28d-d72e-4a90-a444-78463bcdb4d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-09)", "content": "", "creation_timestamp": "2025-03-09T00:00:00.000000Z"}, {"uuid": "611c1f42-86c2-42c0-9cd4-7ca13eb55a9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50358", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-14)", "content": "", "creation_timestamp": "2025-03-14T00:00:00.000000Z"}, {"uuid": "284ed7fe-43ba-4c0c-9858-fdbf42afdf3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://gist.github.com/jpmartins-ca/4200d476e327a22a046f19199e252871", "content": "", "creation_timestamp": "2025-02-18T15:34:33.000000Z"}, {"uuid": "def10629-e695-4a47-9145-06e0a6313fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-21)", "content": "", "creation_timestamp": "2025-02-21T00:00:00.000000Z"}, {"uuid": "dadc741e-c524-41d3-ad70-3e3983a640c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-06)", "content": "", "creation_timestamp": "2025-03-06T00:00:00.000000Z"}, {"uuid": "4332fe22-f2a2-46f3-8b7b-fe1cb2f593a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5074", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-27)", "content": "", "creation_timestamp": "2025-03-27T00:00:00.000000Z"}, {"uuid": "32e1fc81-95d7-4474-a0e6-26a110f6b392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-27)", "content": "", "creation_timestamp": "2025-03-27T00:00:00.000000Z"}, {"uuid": "d6c3b760-74ff-430f-b6a0-8a960c634fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://bsky.app/profile/badtux.linuxtips.io/post/3llgootjr322b", "content": "", "creation_timestamp": "2025-03-28T11:13:42.903519Z"}, {"uuid": "31093b20-8a9d-4e58-b451-3ac6d2b94e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://bsky.app/profile/badtux.linuxtips.io/post/3llgos2mho22b", "content": "", "creation_timestamp": "2025-03-28T11:15:30.541236Z"}, {"uuid": "e899f37e-dfa5-430b-a4bd-baf8dd8fb3ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://bsky.app/profile/fidelissauro.bsky.social/post/3llgre5bluc2q", "content": "", "creation_timestamp": "2025-03-28T12:01:22.645349Z"}, {"uuid": "b9beb876-30e1-460b-b1eb-1a656446f3a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://bsky.app/profile/linuxtips.io/post/3llgyhc435s2f", "content": "", "creation_timestamp": "2025-03-28T14:08:31.201699Z"}, {"uuid": "531213d7-0be9-4e7c-bd84-7ea323be335e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-11)", "content": "", "creation_timestamp": "2025-04-11T00:00:00.000000Z"}, {"uuid": "40a6800b-6054-4e17-955e-6be27b0c08ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50338", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqbmolizym2w", "content": "", "creation_timestamp": "2025-05-29T02:00:23.819801Z"}, {"uuid": "681be591-9d98-4e70-bdd5-991486f4591c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-22)", "content": "", "creation_timestamp": "2025-04-22T00:00:00.000000Z"}, {"uuid": "fd6c4e71-b106-414b-941c-fd8271b41d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-31)", "content": "", "creation_timestamp": "2025-05-31T00:00:00.000000Z"}, {"uuid": "7e07c3c0-5948-4530-ac80-8d63aa37567f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50786", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lt6zoa53zj2a", "content": "", "creation_timestamp": "2025-07-05T05:30:26.281171Z"}, {"uuid": "4910ca3d-b53f-4721-b377-35d595b7bdc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-10)", "content": "", "creation_timestamp": "2025-05-10T00:00:00.000000Z"}, {"uuid": "76366c43-4a26-4f3c-b4bf-698c3c90198a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-11)", "content": "", "creation_timestamp": "2025-05-11T00:00:00.000000Z"}, {"uuid": "0b3206ba-55a1-4a76-87cd-506dbcf21d2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50447", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-203-04", "content": "", "creation_timestamp": "2025-07-22T10:00:00.000000Z"}, {"uuid": "f82ba734-0cb3-410d-abb2-0607ebf7582f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-27)", "content": "", "creation_timestamp": "2025-09-27T00:00:00.000000Z"}, {"uuid": "3b227297-b44b-4c31-a788-ce17024f327e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "7f8d1bd3-feec-49dd-90b1-06e7f376e4c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50445", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "18cda409-3528-43ce-9404-6b29394406ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50917", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "369abac3-823f-4bd0-a160-94bf2e2c8e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50919", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "acaa4743-5a9c-4812-a134-e3451c18f1b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3luzavfcr2c2c", "content": "", "creation_timestamp": "2025-07-28T09:14:10.630809Z"}, {"uuid": "ed8c0f3e-e06a-4f12-981a-9c7c9a244adf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-06)", "content": "", "creation_timestamp": "2025-10-06T00:00:00.000000Z"}, {"uuid": "53e7c503-47bb-4f93-b613-ee7c670d0fa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-20)", "content": "", "creation_timestamp": "2025-09-20T00:00:00.000000Z"}, {"uuid": "ee92842d-6117-408c-b247-ad0deb330927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:47:59.000000Z"}, {"uuid": "6f2a94e0-0224-4ffe-979f-3ac3b4e11263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-01)", "content": "", "creation_timestamp": "2025-08-01T00:00:00.000000Z"}, {"uuid": "e21f4929-3a64-4602-a9a4-eb43249ffb23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-02)", "content": "", "creation_timestamp": "2025-10-02T00:00:00.000000Z"}, {"uuid": "43c2b54c-2e95-4c57-84c5-2ff907cdc9a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-05)", "content": "", "creation_timestamp": "2025-08-05T00:00:00.000000Z"}, {"uuid": "c5210d8c-1cc2-4d6c-a632-b010ddc7c63e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "2e7126ef-01c1-465c-8165-b3cda694256a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50445", "type": "seen", "source": "https://infosec.place/objects/3df11b65-0b0e-437a-809e-d71455fdcce2", "content": "", "creation_timestamp": "2025-11-24T15:30:04.895124Z"}, {"uuid": "2a0fb733-cb04-42a3-b1ee-0bfc4a772263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-28)", "content": "", "creation_timestamp": "2025-11-28T00:00:00.000000Z"}, {"uuid": "6f05a631-ace2-4e4d-8eb9-728c714c366f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:14.000000Z"}, {"uuid": "708db22b-bb7a-4fee-9411-8c032b73e3e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:45.000000Z"}, {"uuid": "417078b5-cc83-4962-99d6-d63598531c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50268", "type": "seen", "source": "https://bsky.app/profile/novafacing.bsky.social/post/3m4ggypx7522d", "content": "", "creation_timestamp": "2025-10-30T17:04:18.388313Z"}, {"uuid": "b320d4b4-a86b-4263-b669-eff4c31d58a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-05)", "content": "", "creation_timestamp": "2025-10-05T00:00:00.000000Z"}, {"uuid": "a78fec10-4ddc-4f07-9708-012ce822cddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-03)", "content": "", "creation_timestamp": "2025-10-03T00:00:00.000000Z"}, {"uuid": "2b590c69-2779-4b4c-8e07-af15eaa6c1cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-27)", "content": "", "creation_timestamp": "2025-11-27T00:00:00.000000Z"}, {"uuid": "9a9cf95a-3d30-4e45-b0cd-fe47dc3f1a18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-25)", "content": "", "creation_timestamp": "2025-11-25T00:00:00.000000Z"}, {"uuid": "c3714e23-9ebd-4381-aa49-097cd7636ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50381", "type": "seen", "source": "https://gist.github.com/heavyscientist/de6a7c14e68b5862734b94a3c10e574c", "content": "", "creation_timestamp": "2025-10-09T20:15:59.000000Z"}, {"uuid": "a775017e-8835-4b14-91ab-695e2baef600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50358", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-26)", "content": "", "creation_timestamp": "2025-10-26T00:00:00.000000Z"}, {"uuid": "e7b07df7-faa9-4bfb-a658-3388e67419b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50956", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "dd45c7cb-8502-4e82-b887-6d69b0d577fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-30)", "content": "", "creation_timestamp": "2025-10-30T00:00:00.000000Z"}, {"uuid": "f3d649b1-2a3e-446d-9893-b6cbea622a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-25)", "content": "", "creation_timestamp": "2025-11-25T00:00:00.000000Z"}, {"uuid": "7761f743-85a6-4f3f-990e-70b18c53424a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwze4wb3ti25", "content": "", "creation_timestamp": "2025-08-22T21:02:36.672757Z"}, {"uuid": "61a80abe-d00d-46e6-9e3a-2731bb0f607e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50956", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:06.000000Z"}, {"uuid": "68d9daca-daa0-43ca-af2f-7888bbb2c4af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-17)", "content": "", "creation_timestamp": "2025-10-17T00:00:00.000000Z"}, {"uuid": "7031fde4-7ffd-4749-b3ee-e2822a2c67f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50919", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/glinet_unauth_rce_cve_2023_50445.rb", "content": "", "creation_timestamp": "2024-01-23T20:16:11.000000Z"}, {"uuid": "c9923b8f-93e3-4005-a3b5-9811ba2c905d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50445", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/glinet_unauth_rce_cve_2023_50445.rb", "content": "", "creation_timestamp": "2024-01-23T20:16:11.000000Z"}, {"uuid": "e0ae4700-da68-4dd0-a9c7-d2a8e9446068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:13:04.000000Z"}, {"uuid": "36177f85-2162-4126-b86a-6549fe39a19b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50917", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/majordomo_cmd_inject_cve_2023_50917.rb", "content": "", "creation_timestamp": "2024-01-19T22:26:22.000000Z"}, {"uuid": "d9ee46b5-6940-4a82-b4ac-1013d1c44ccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50917", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3iopgxmwh2q", "content": "", "creation_timestamp": "2025-10-18T21:02:27.572024Z"}, {"uuid": "925fce29-fbc2-4925-9912-bd4c52beb7fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_solr_backup_restore.rb", "content": "", "creation_timestamp": "2024-04-23T18:44:39.000000Z"}, {"uuid": "5b4536d7-ae20-4e23-8e51-2e13a90500ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50316", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:02.000000Z"}, {"uuid": "5eb3028d-9084-46f1-afc0-3b5f7df000e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-01)", "content": "", "creation_timestamp": "2025-12-01T00:00:00.000000Z"}, {"uuid": "9db5d989-32c2-473b-b195-c16bc7433877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lxxggzlaub23", "content": "", "creation_timestamp": "2025-09-03T20:03:43.664700Z"}, {"uuid": "758cd7d6-de70-4b22-8898-d2db6bddfc0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lxxl3pwqeh2x", "content": "", "creation_timestamp": "2025-09-03T21:26:52.767554Z"}, {"uuid": "2e2f4715-7c2d-4cf4-9877-6cd3fb961f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lxymrvrck22j", "content": "", "creation_timestamp": "2025-09-04T07:29:52.275813Z"}, {"uuid": "bbd6a0ec-978b-486b-a846-87faadd9b55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50381", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lyy7ru6g7h2r", "content": "", "creation_timestamp": "2025-09-16T21:02:30.025894Z"}, {"uuid": "2000d420-75f9-4762-8158-ea49b3c2242b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lxyzhgo2di2m", "content": "", "creation_timestamp": "2025-09-04T11:16:38.497943Z"}, {"uuid": "54a7fe91-6eb0-443a-ab4a-49492711719f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/techit.bsky.social/post/3lxz27i676c2b", "content": "", "creation_timestamp": "2025-09-04T11:30:05.965318Z"}, {"uuid": "d2bc05d8-38e3-4024-9ff5-629df805d230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lxz2hco5ts2a", "content": "", "creation_timestamp": "2025-09-04T11:34:28.005395Z"}, {"uuid": "a33d2f8f-aafa-4706-8106-14699e9d57fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lxz2l2jwz424", "content": "", "creation_timestamp": "2025-09-04T11:36:33.734930Z"}, {"uuid": "760bad0f-97b6-415e-87d7-227dc750c3c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://thehackernews.com/2025/09/cisa-flags-tp-link-router-flaws-cve.html", "content": "", "creation_timestamp": "2025-09-04T08:03:00.000000Z"}, {"uuid": "4034e85e-d29b-48b2-9d7c-3dd441c5136e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3lxzjok3jmm2f", "content": "", "creation_timestamp": "2025-09-04T16:06:56.757628Z"}, {"uuid": "2053d6b0-2a02-45cc-bc92-c5647fe4915d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/ehcgroup.bsky.social/post/3lxzvf3oabk25", "content": "", "creation_timestamp": "2025-09-04T19:36:27.207457Z"}, {"uuid": "8a67300b-3f18-4d35-9f37-31a7e35470c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lxzvx46woc2b", "content": "", "creation_timestamp": "2025-09-04T19:46:29.261063Z"}, {"uuid": "ad4ae656-1174-43b8-b858-1069b5822775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lxzw63ai222b", "content": "", "creation_timestamp": "2025-09-04T19:50:22.980030Z"}, {"uuid": "c255f583-0060-4087-a474-7f91ec3c7992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lxzwjsodfk2b", "content": "", "creation_timestamp": "2025-09-04T19:56:58.881445Z"}, {"uuid": "8eac0a6a-1eca-439f-91a6-41176c9def6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lxzzmcezyc2p", "content": "", "creation_timestamp": "2025-09-04T20:52:09.175667Z"}, {"uuid": "f1b18fb7-615a-45dd-8a3f-7c7e4604a5a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ly226r3gzn27", "content": "", "creation_timestamp": "2025-09-04T21:02:25.632815Z"}, {"uuid": "c1123a3a-28c5-4e98-a161-35f4538f00ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50445", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ly226r5x6x24", "content": "", "creation_timestamp": "2025-09-04T21:02:26.196302Z"}, {"uuid": "aa95c6ea-9524-4343-b969-a1bf9b92dfa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50919", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ly226rag7m23", "content": "", "creation_timestamp": "2025-09-04T21:02:26.828309Z"}, {"uuid": "5941248b-d6ae-4202-a284-5ecc92aeb6c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3ly2lgkrt5j2u", "content": "", "creation_timestamp": "2025-09-05T02:10:56.128876Z"}, {"uuid": "73668a87-e5d8-420d-96ec-b8b4457596ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3ly2xlae7ic2b", "content": "", "creation_timestamp": "2025-09-05T05:48:17.590327Z"}, {"uuid": "853db26f-f737-4c0a-ba37-ea154003549e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-05)", "content": "", "creation_timestamp": "2025-12-05T00:00:00.000000Z"}, {"uuid": "bfb499cf-485a-47ae-a84a-7daa842325eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-12)", "content": "", "creation_timestamp": "2025-12-12T00:00:00.000000Z"}, {"uuid": "fed7eae6-8423-463f-a374-fd93525cfebb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5074", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-17)", "content": "", "creation_timestamp": "2025-12-17T00:00:00.000000Z"}, {"uuid": "3f6dd0d3-e013-483d-929d-e1724d89fbf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-20)", "content": "", "creation_timestamp": "2025-12-20T00:00:00.000000Z"}, {"uuid": "970a094c-17bc-4c55-940a-f6ecc17d40d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-23)", "content": "", "creation_timestamp": "2025-12-23T00:00:00.000000Z"}, {"uuid": "3083c59f-732a-4640-9af9-b2bc95153e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50897", "type": "seen", "source": "https://gist.github.com/Darkcrai86/aa3fdd2bf9abfdd9a565f0139f415c45", "content": "", "creation_timestamp": "2026-01-05T14:27:40.000000Z"}, {"uuid": "cf0433f1-0862-4137-a643-b4f14cd68608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50897", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mboul6h5pm2c", "content": "", "creation_timestamp": "2026-01-05T16:34:33.695064Z"}, {"uuid": "078941f1-48e4-477e-8f56-22576e83fd1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-11)", "content": "", "creation_timestamp": "2026-01-11T00:00:00.000000Z"}, {"uuid": "55cb4662-3a8d-47fe-8158-8782bff29c10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1177", "content": "", "creation_timestamp": "2023-12-07T04:00:00.000000Z"}, {"uuid": "40ce9345-d4a9-4800-b680-e5789555f74e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_31/2023", "content": "", "creation_timestamp": "2023-12-13T12:35:09.000000Z"}, {"uuid": "76cb6c62-948b-4823-ae0e-2679a95c9aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50731", "type": "seen", "source": "https://bsky.app/profile/nerq-ai.bsky.social/post/3mhkj4kdeyr2t", "content": "", "creation_timestamp": "2026-03-21T07:30:02.777395Z"}, {"uuid": "db9a4d3d-2985-4415-ad61-71793882d260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-29)", "content": "", "creation_timestamp": "2026-03-29T00:00:00.000000Z"}, {"uuid": "c5b87dc4-fe42-4194-bf38-126defa9beb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://vulnerability.circl.lu/comment/a459b3c2-e2f0-467e-8fe5-e7c2b47a9fe3", "content": "", "creation_timestamp": "2024-12-19T05:35:41.724032Z"}, {"uuid": "a6ce6f95-c59e-4260-9faa-2b34bd5dfe48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2023-50386", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d29dbde5-754c-4ca2-8a8b-47f3b9e077f7", "content": "", "creation_timestamp": "2024-09-24T12:13:05.859516Z"}, {"uuid": "fe3e953b-55ff-4563-b9a0-d09d6ce56da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "249c758b-d43d-4c82-8974-9e801ae1fe18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-50495", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "d74716fd-4011-455d-820b-79736c2c9ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-50782", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "a271c843-4ec5-4dc6-8488-9d17014961bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-50868", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "c4e27662-8e02-4274-b3c9-5f6e262d11a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-50868", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1308", "content": "", "creation_timestamp": "2024-06-12T04:00:00.000000Z"}, {"uuid": "06e7ce4e-6f28-409d-b38a-f46b78a033b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2023-5044", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/92582bf5-d92c-47fe-b891-656d271bbfef", "content": "", "creation_timestamp": "2024-10-14T15:50:35.983245Z"}, {"uuid": "43066fb7-3e19-4e6d-8df4-27ae0c5f1606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2023-50176", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/095373a5-9369-47a8-addc-a3cc46dc2b41", "content": "", "creation_timestamp": "2024-11-13T15:13:17.127651Z"}, {"uuid": "94360718-50c3-4800-afa9-479431a22d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/43ff9e04-da8f-45fe-a06a-e8f9b84a2d14", "content": "", "creation_timestamp": "2025-09-11T13:37:23.512990Z"}, {"uuid": "e4bba7fb-0c6b-4ff4-9f99-4498cc8d725a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-50917", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/42521e67-5c8d-4b16-a114-e0db686c91a7", "content": "", "creation_timestamp": "2026-02-19T10:22:00.000000Z"}, {"uuid": "8dbead68-0bdc-4d7c-bc69-5de0d1f3cc80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-50224", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/356b258f-8fdb-469b-a0e2-b4675e1cb139", "content": "", "creation_timestamp": "2026-02-02T12:25:53.644400Z"}, {"uuid": "7f829c52-6493-417f-b19f-7999646b686b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-30)", "content": "", "creation_timestamp": "2026-03-30T00:00:00.000000Z"}, {"uuid": "51e0cf62-b04c-492f-ba75-1dec99355c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-31)", "content": "", "creation_timestamp": "2026-03-31T00:00:00.000000Z"}, {"uuid": "1285dc48-7a45-451a-b19b-80745301747d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50822", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13254", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50822\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Currency.Wiki Currency Converter Widget \u2013 Exchange Rates allows Stored XSS.This issue affects Currency Converter Widget \u2013 Exchange Rates: from n/a through 3.0.2.\n\n\n\ud83d\udccf Published: 2023-12-21T14:33:06.623Z\n\ud83d\udccf Modified: 2025-04-24T14:50:45.451Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/currency-converter-widget/wordpress-currency-converter-widget-plugin-3-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T15:06:45.000000Z"}, {"uuid": "f2c59017-730d-4828-8a3f-c8fb4a10780e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3miw64zblmk2k", "content": "", "creation_timestamp": "2026-04-07T16:10:36.102539Z"}, {"uuid": "63ac9d03-11f8-4b48-96f3-40856b240c98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/bnd.social.bund.de.ap.brid.gy/post/3miwrpchslrl2", "content": "", "creation_timestamp": "2026-04-07T22:01:53.840835Z"}, {"uuid": "08a28e8c-408b-4f50-aec4-03a40d952684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://www.ic3.gov/PSA/2026/PSA260407", "content": "", "creation_timestamp": "2026-04-07T14:35:00.000000Z"}, {"uuid": "7b55a118-6e3e-400b-a56f-13d1034df95f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://www.ncsc.gov.uk/news/apt28-exploit-routers-to-enable-dns-hijacking-operations", "content": "", "creation_timestamp": "2026-04-07T05:00:00.000000Z"}, {"uuid": "f386eb16-31fb-44e7-9817-8481bfd8e5b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://nukib.gov.cz/cs/infoservis/aktuality/2394-routery-tp-link-kompromitovany-ruskym-statnim-akterem-apt28", "content": "", "creation_timestamp": "2026-04-08T01:50:41.000000Z"}, {"uuid": "140ff734-6aec-4c3f-b71f-008ba00f8d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "MISP/de133f4d-a411-4015-a9f4-718b54920209", "content": "", "creation_timestamp": "2026-04-08T11:59:19.000000Z"}, {"uuid": "18ae7014-5ae0-45ce-a0bb-5e2cfcd651ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/lemagit.bsky.social/post/3mj2kz3dvoy27", "content": "", "creation_timestamp": "2026-04-09T10:11:41.902465Z"}, {"uuid": "2761aa0c-5d9d-43c1-a00e-791060c25d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/army777666.bsky.social/post/3mj2nxmilnx2a", "content": "", "creation_timestamp": "2026-04-09T11:04:33.583874Z"}, {"uuid": "2299a68e-a8ab-4df1-8a01-1133d5d4cecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mj4bn3n3ux2s", "content": "", "creation_timestamp": "2026-04-10T02:29:14.966339Z"}, {"uuid": "5728642c-9174-4457-b538-22336f1590f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50381", "type": "seen", "source": "MISP/390462c4-7cd4-4967-94d8-6f5a07d8cfd9", "content": "", "creation_timestamp": "2026-04-10T09:38:51.000000Z"}, {"uuid": "32335ada-4f1d-4e58-bfc2-9ac5a7dde624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50428", "type": "seen", "source": "https://gist.github.com/motolese/14f6c5a8151e9fb449829e58444e63c4", "content": "", "creation_timestamp": "2026-04-10T18:26:02.000000Z"}, {"uuid": "93f8570a-dde2-4475-bc70-342c0790be30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/leaflaker.bsky.social/post/3mj63j6ncw22d", "content": "", "creation_timestamp": "2026-04-10T19:45:07.970913Z"}, {"uuid": "36f606f0-70b1-427e-b122-d73943613b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/leaflaker.bsky.social/post/3mj63jbkr5k2d", "content": "", "creation_timestamp": "2026-04-10T19:45:09.774855Z"}, {"uuid": "3e79ed22-fcae-46b3-baa3-ccdd983b3ac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mj6s2zxoat2b", "content": "", "creation_timestamp": "2026-04-11T02:28:42.174265Z"}, {"uuid": "78652f75-2511-48ac-9a62-f05aeb2d8a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "exploited", "source": "Telegram/6mwqGzaAXLF6ZZTTS_2GQMhorAa12PKaEb2L-8D-2SmnMw", "content": "", "creation_timestamp": "2025-09-04T12:27:41.000000Z"}, {"uuid": "a8acc00e-a168-416d-88c0-eab84e82fc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/nordicosintmonitor.bsky.social/post/3mjfbnugcf22s", "content": "", "creation_timestamp": "2026-04-13T16:23:43.904300Z"}, {"uuid": "1ef911d7-8557-4775-b95e-6765105d89cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/nordicosintmonitor.bsky.social/post/3mjfboy3fz22s", "content": "", "creation_timestamp": "2026-04-13T16:24:15.904982Z"}, {"uuid": "d15c4867-cb2f-4eb2-931f-f4153761f782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/5054", "content": "CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited \u2013 thehackernews.com\n\nThu, 04 Sep 2025 18:03:00", "creation_timestamp": "2025-09-04T12:03:33.000000Z"}, {"uuid": "eee84a72-13d9-472b-b224-ecaa26577c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-14)", "content": "", "creation_timestamp": "2026-04-14T00:00:00.000000Z"}, {"uuid": "1a6f74f1-4e5a-4658-8c23-78b31cec1f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "exploited", "source": "https://t.me/DarkWebInformer_News/8103", "content": "\ud83d\udea8 News Alert!\n\nSource: The Hacker News\nTitle: CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited\nLink: https://thehackernews.com/2025/09/cisa-flags-tp-link-router-flaws-cve.html", "creation_timestamp": "2025-09-04T11:10:37.000000Z"}, {"uuid": "108f9b3a-f229-42fd-8f43-d4548f61999a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-15)", "content": "", "creation_timestamp": "2026-04-15T00:00:00.000000Z"}, {"uuid": "e47f6654-329a-4a2c-b480-3fe834791d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "published-proof-of-concept", "source": "https://t.me/cKure/11905", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 Exploiting CVE-2023-5044.\n\nhttps://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044/", "creation_timestamp": "2023-11-01T13:27:15.000000Z"}, {"uuid": "a021dbd6-405b-4c49-a7dc-7a92ea3fc36e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-18)", "content": "", "creation_timestamp": "2026-04-18T00:00:00.000000Z"}, {"uuid": "108baa6e-af34-432d-a753-a439a62ee67d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "exploited", "source": "https://t.me/cibsecurity/86769", "content": "\ud83d\udd8b\ufe0f CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited \ud83d\udd8b\ufe0f\n\nThe U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added two security flaws impacting TPLink wireless routers to its Known Exploited Vulnerabilities KEV catalog, noting that there is evidence of them being exploited in the wild. The vulnerabilities in question are listed below   CVE202350224 CVSS score 6.5  An authentication bypass by spoofing vulnerability.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2025-09-05T04:13:10.000000Z"}, {"uuid": "dc6ef614-f1f7-40ac-a2ec-a6a027a7a9b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "exploited", "source": "https://t.me/cKure/12116", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 Observed Exploitation Attempts of Struts 2 S2-066 Vulnerability (CVE-2023-50164).\n\nhttps://www.akamai.com/blog/security-research/apache-struts-cve-exploitation-attempts", "creation_timestamp": "2023-12-17T16:50:51.000000Z"}, {"uuid": "d9e82099-f716-426e-aac6-0d9ccefe4541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "https://t.me/cKure/12433", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Apache Solr Backup/Restore APIs RCE Poc (CVE-2023-50386).\n\nhttps://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC", "creation_timestamp": "2024-03-01T19:05:37.000000Z"}, {"uuid": "b3199b85-26d4-491b-b3d9-6c33f7446cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/cKure/12518", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 Proof of Concept for Path Traversal in Apache Struts \"CVE-2023-50164\".\n\nhttps://github.com/dwisiswant0/cve-2023-50164-poc", "creation_timestamp": "2024-03-13T21:58:26.000000Z"}, {"uuid": "38c38c2f-b2b1-4e04-a775-0a7a43d04edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "Telegram/NZw_dyKg3sBl_OoVab8mtW04AyfXZ90mr3x5yRa5cUHgMy8", "content": "", "creation_timestamp": "2025-09-05T03:00:06.000000Z"}, {"uuid": "962417cc-9836-4664-b179-246aaf089f85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/34400", "content": "CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited \u2013 thehackernews.com\n\nThu, 04 Sep 2025 18:03:00", "creation_timestamp": "2025-09-04T12:03:33.000000Z"}, {"uuid": "e65ab54a-6158-4f78-80a4-6328f4f1304f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50658", "type": "seen", "source": "Telegram/YOkOjoEcZIeSaGMS8TTk3uxNafYj9Wyi8UVWumRQGNTWvI5p", "content": "", "creation_timestamp": "2025-02-14T21:09:17.000000Z"}, {"uuid": "548a6037-f1ae-4555-9a3f-8f86c92e7261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "exploited", "source": "https://t.me/cKure/13279", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Hackers use PoC exploits in attacks 22 minutes after release.\n\nDuring the examined period, the most targeted flaws were CVE-2023-50164 and CVE-2022-33891 in Apache products, CVE-2023-29298, CVE-2023-38203 and CVE-2023-26360 in Coldfusion, and CVE-2023-35082 in MobileIron.\n\nA characteristic example of the rise in the speed of weaponization is CVE-2024-27198, an authentication bypass flaw in JetBrains TeamCity.\n\nhttps://www.bleepingcomputer.com/news/security/hackers-use-poc-exploits-in-attacks-22-minutes-after-release/\n\nhttps://blog.cloudflare.com/application-security-report-2024-update\n\nhttps://www.cloudflare.com/en-gb/2024-application-security-trends/", "creation_timestamp": "2024-07-13T20:21:42.000000Z"}, {"uuid": "f1740912-0b3f-4220-a9aa-25ef6bf69659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6411", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2023-50164 (Apache Struts path traversal to RCE vulnerability) Proof of Concept\nURL\uff1ahttps://github.com/sunnyvale-it/CVE-2023-50164-PoC\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-01-12T09:35:49.000000Z"}, {"uuid": "6afb7e1f-2519-4c8f-8bd5-2cc61d4d97b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5607", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPoC CVE-2023-5044\nURL\uff1ahttps://github.com/r0binak/CVE-2023-5044\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-10-30T08:03:26.000000Z"}, {"uuid": "19453799-fa84-4d8e-bcbf-e3a67c115878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "exploited", "source": "https://t.me/cyberguerre/4053", "content": "\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432\n\n\u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435 APT28 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044e \u043f\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 DNS \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432 TP-Link \u0438 \u0432 \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 MikroTik. \u0412 \u043e\u0442\u0447\u0451\u0442\u0435 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043e \u0434\u0432\u0435 \u0434\u044e\u0436\u0438\u043d\u044b \u043c\u043e\u0434\u0435\u043b\u0435\u0439 TP-Link, \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u043c\u043e\u0434\u0435\u043b\u0438 TP-Link WR841N. \u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-50224 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f \u043e\u0442 \u0440\u043e\u0443\u0442\u0435\u0440\u0430, \u0430 \u0441\u043b\u0435\u0434\u043e\u043c \u043c\u0435\u043d\u044f\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 DHCP DNS, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0439 \u0438\u043c \u0430\u0434\u0440\u0435\u0441. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043e\u043d\u0438 \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a\u043e\u043c (adversary-in-the-middle) \u0438 \u043c\u043e\u0433\u043b\u0438 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\nAPT28 \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u0433\u0430\u0442\u044b\u0439 \u043e\u043f\u044b\u0442 \u043f\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u0447\u0443\u0436\u0438\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432. \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 2024 \u041c\u0438\u043d\u044e\u0441\u0442 \u0421\u0428\u0410 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u043c \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 \u0431\u043e\u0442\u043d\u0435\u0442\u0435 \u0438\u0437 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432 Ubiquiti, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430. \u041f\u0440\u0438\u0447\u0451\u043c \u0432 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u0431\u0440\u0438\u0442\u0430\u043d\u0441\u043a\u0438\u0445 \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u0435\u0439 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0446\u044b \u0441\u043c\u043e\u0433\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043e\u0440\u0434\u0435\u0440\u0430 \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u0430, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u043c \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u043c, \u0441\u0431\u043e\u0440\u0430 \u0441 \u043d\u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a.", "creation_timestamp": "2026-04-07T14:46:07.000000Z"}, {"uuid": "a0d4200a-3761-4ab1-9fac-d177cb0a3615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50226", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6346", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aParallels Desktop privilege escalation - CVE-2023-50226 / ZDI-CAN-21227\nURL\uff1ahttps://github.com/kn32/parallels-file-move-privesc\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-12-31T08:51:04.000000Z"}, {"uuid": "5409fbd4-b405-4682-9999-27ada56df074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50070", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6206", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aSimulates CVE-2023-4966 Citrix Bleed overread bug\nURL\uff1ahttps://github.com/geraldoalcantara/CVE-2023-50070\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-12-16T22:08:26.000000Z"}, {"uuid": "1b7603ba-b775-4667-b59d-8cf58c7d3204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50917", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6219", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aMajorDoMo Unauthenticated RCE: Deep Dive & Exploitation Techniques\nURL\uff1ahttps://github.com/Chocapikk/CVE-2023-50917\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-12-18T01:20:19.000000Z"}, {"uuid": "8183094f-7839-4f62-af55-c61063202e79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6248", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aVulnerable docker container for Apache Struts 2 RCE CVE-2023-50164\nURL\uff1ahttps://github.com/Trackflaw/CVE-2023-50164-ApacheStruts2-Docker\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-12-20T08:49:21.000000Z"}, {"uuid": "98bc06a4-9802-4e79-b556-618165b6da12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50290", "type": "published-proof-of-concept", "source": "Telegram/IlaX8mZB6cJ8__vHpunFOvyEKYVcMhg2lgsWDvKN0GKqw0I", "content": "", "creation_timestamp": "2025-11-06T21:00:06.000000Z"}, {"uuid": "642effc2-137f-4ff0-9445-296bf4738a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6169", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aParamFirstCheck identifies in a list of urls those containing a parameter of the top 25 of the most vulnerable parameters for SQLi, LFI, RCE and Open redirect\nURL\uff1ahttps://github.com/jakabakos/CVE-2023-50164-Apache-Struts-RCE\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2023-12-13T13:28:16.000000Z"}, {"uuid": "ba0d33b3-50e0-4d10-a63f-8dfc4f52f016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6199", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aA scanning utility and PoC for CVE-2023-50164\nURL\uff1ahttps://github.com/bcdannyboy/CVE-2023-50164\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-12-15T21:30:40.000000Z"}, {"uuid": "2c6af70e-f9df-4c82-95c6-90e86a9fa7fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50643", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6198", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-50643\nURL\uff1ahttps://github.com/V3x0r/CVE-2023-50643\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-12-15T20:59:55.000000Z"}, {"uuid": "608fb1d6-a4de-439f-8b27-2c2e18169fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6216", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aProof of Concept for Path Traversal in Apache Struts (\\\"CVE-2023-50164\\\")\nURL\uff1ahttps://github.com/dwisiswant0/cve-2023-50164-poc\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-12-17T15:52:47.000000Z"}, {"uuid": "cb122cdd-f2f8-43a7-aa55-f15212d9c1cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50564", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9561", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aPluck-CMS v4.7.18 RCE exploit\nURL\uff1ahttps://github.com/xpltive/CVE-2023-50564\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-12-22T12:45:15.000000Z"}, {"uuid": "0a744dfc-02be-481e-925c-763be0bbd307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "Telegram/7Ml4_lMheQFWoLP8HS6G4y2kPw4O-CbsZ96PEHQtUpuC3WA", "content": "", "creation_timestamp": "2025-05-04T05:10:20.000000Z"}, {"uuid": "3fcaffa8-edd8-4a2e-9a6c-ec522a1714a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "Telegram/7Ml4_lMheQFWoLP8HS6G4y2kPw4O-CbsZ96PEHQtUpuC3WA", "content": "", "creation_timestamp": "2025-05-04T05:10:20.000000Z"}, {"uuid": "0497adcb-9248-4ff5-8d8f-0eceaa48d833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "Telegram/P054ImMwjqD_rl7lBAm-hCz5MlTq06QbnDeiIVFMTFFsHy4", "content": "", "creation_timestamp": "2025-05-04T05:11:16.000000Z"}, {"uuid": "38f4ec6f-e99c-426f-9688-d068b7ec5fc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "https://t.me/hackingbra/93", "content": "Apache Solr Backup/Restore APIs RCE Poc (CVE-2023-50386)\n\nhttps://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC", "creation_timestamp": "2024-02-29T13:25:59.000000Z"}, {"uuid": "6b8bd783-721f-4790-a2bb-ebd420593a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "Telegram/P054ImMwjqD_rl7lBAm-hCz5MlTq06QbnDeiIVFMTFFsHy4", "content": "", "creation_timestamp": "2025-05-04T05:11:16.000000Z"}, {"uuid": "c8859a27-46f7-4c9e-9c55-8818b0ce7d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/itsec_news/4112", "content": "\u200b\u26a1\ufe0f\u0412 Windows \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0444\u0443\u043d\u0434\u0430\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u0430\u044f 24-\u043b\u0435\u0442\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\ud83d\udcac \u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Patch Tuesday \u043e\u0442 Microsoft, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 2024 \u0433\u043e\u0434\u0430, \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b 73 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0438 \u043e\u0434\u043d\u0430 \u043f\u043e-\u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0434\u0440\u0435\u0432\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Windows \u0443\u0436\u0435 24 \u0433\u043e\u0434\u0430.\n\n\u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 5 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435\u00bb, 65 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043a\u0430\u043a \u00ab\u0432\u0430\u0436\u043d\u044b\u0435\u00bb, \u0430 \u0435\u0449\u0451 3 \u2014 \u043a\u0430\u043a \u00ab\u0443\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0435\u00bb. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b 24 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0432 \u0444\u0438\u0440\u043c\u0435\u043d\u043d\u043e\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Microsoft \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium \u2014 Edge.\n\n\u041e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u044e\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c:\n\nCVE-2024-21351 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 7.6), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0437\u0430\u0449\u0438\u0442\u044b Windows SmartScreen;\nCVE-2024-21412 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8.1), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 \u044f\u0440\u043b\u044b\u043a\u043e\u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\nMicrosoft \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-21351, \u0443\u043a\u0430\u0437\u0430\u0432 \u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u0441\u0431\u043e\u044f\u043c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0410 CVE-2024-21412 \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u043c\u0435\u0440\u044b, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0436\u0435\u0440\u0442\u0432\u0435.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 Known Exploited Vulnerabilities (KEV) \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e\u043c \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 (CISA), \u0441 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0435\u0439 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u043c \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430\u043c \u0421\u0428\u0410 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a 5 \u043c\u0430\u0440\u0442\u0430 2024 \u0433\u043e\u0434\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u044f\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\nCVE-2024-20684 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 6.5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows Hyper-V, \u0432\u0435\u0434\u0443\u0449\u0430\u044f \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438;\nCVE-2024-21357 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 7.5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Windows Pragmatic General Multicast (PGM);\nCVE-2024-21380 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8.0) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Dynamics Business Central / NAV, \u0432\u0435\u0434\u0443\u0449\u0430\u044f \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438;\nCVE-2024-21410 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9.8) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Microsoft Exchange Server;\nCVE-2024-21413 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9.8) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Microsoft Outlook.\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0444\u0443\u043d\u0434\u0430\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 CVE-2023-50387 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 7.5) \u0432 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 DNSSEC, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u0432\u0448\u0435\u0439 \u0432 Windows \u0446\u0435\u043b\u044b\u0445 24 \u0433\u043e\u0434\u0430 . \u041e\u043d\u0430 \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0438\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 CPU \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 DNS-\u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u043e\u0432, \u0432\u044b\u0437\u044b\u0432\u0430\u044f \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 Microsoft, \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 Adobe, AMD, ASUS, Cisco, Intel, Ivanti, Lenovo \u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435, \u0447\u0442\u043e \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u0440\u0430\u0431\u043e\u0442\u0443 \u043f\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u043c \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-02-14T16:13:10.000000Z"}, {"uuid": "0ea219a4-1aa8-4e0a-9fd4-6de70642fbaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "exploited", "source": "https://t.me/itsec_news/5012", "content": "\u200b\u26a1\ufe0f\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0432 \u0441\u0435\u0442\u0438: Apache Struts \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u044f\u043c \u0433\u043e\u0441\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\n\n\ud83d\udcac \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Struts 2 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\nApache Struts \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 Java. Struts \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0433\u043e\u0441\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b e-commerce, \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0430\u0432\u0438\u0430\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e Apache \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e CVE-2024-53677 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.5), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u043b\u043e\u0433\u0438\u043a\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Struts 2.0.0\u20132.3.37 (\u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435), 2.5.0\u20132.5.33 \u0438 6.0.0\u20136.3.0.2. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Apache, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c Path Traversal, \u0430 \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u2014 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (Remote Code Execution, RCE).\n\n\u041d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0432 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438. \u0424\u0430\u0439\u043b\u044b \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0441\u0440\u0430\u0432\u043d\u0438\u0432\u0430\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 CVE-2023-50164, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044f \u043d\u0430 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\nISC SANS \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u0442\u0430\u043a, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b. \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u0430 \u00abexploit.jsp\u00bb, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0433\u043e \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443 \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u0432\u043e\u0434\u0438\u0442 \u0442\u0435\u043a\u0441\u0442 \u00abApache Struts\u00bb. \u0417\u0430\u0442\u0435\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u043a\u0440\u0438\u043f\u0442\u0443, \u0447\u0442\u043e\u0431\u044b \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f \u0432 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0435. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043e\u0434\u043d\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430: 169.150.226.162.\n\n\u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b Apache \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Struts 6.4.0 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435 \u0438 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u0438\u0448\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e: \u043a\u043e\u0434, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430. \u0412 Apache \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0441\u0442\u0430\u0440\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c Struts, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0430\u0434\u0430\u043f\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0447\u0438\u043a\u0438, \u0447\u0442\u043e\u0431\u044b \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u043b\u0430 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u041a\u0430\u043d\u0430\u0434\u0435, \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0438 \u0438 \u0411\u0435\u043b\u044c\u0433\u0438\u0438. \u0421\u0442\u0440\u0430\u043d\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0441 \u043f\u0440\u0438\u0437\u044b\u0432\u043e\u043c \u043a \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u041f\u041e \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0440\u044b.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-12-18T12:39:40.000000Z"}, {"uuid": "b5012480-4f57-47db-bb87-a66920d024d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6691", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aApache Solr Backup/Restore APIs RCE Poc (CVE-2023-50386)\nURL\uff1ahttps://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-02-29T08:59:17.000000Z"}, {"uuid": "160e9fb8-8d3d-43b6-accd-edcf75f8aaf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50358", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6765", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aExploit CVE-2023-45318-POC  Weston Embedded uC-HTTP git commit 80d4004 ---> RCE\nURL\uff1ahttps://github.com/greandfather/CVE-2023-50358-POC-RCE\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-03-08T21:25:01.000000Z"}, {"uuid": "21ffe30e-f1bf-4cee-be68-805255f00f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50309", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2707", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50309\n\ud83d\udd39 Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0\u00a0is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.\n\ud83d\udccf Published: 2025-01-23T02:38:25.105Z\n\ud83d\udccf Modified: 2025-01-23T02:38:25.105Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7176082", "creation_timestamp": "2025-01-23T03:02:48.000000Z"}, {"uuid": "9491e59a-39e6-4742-ba85-472a5ff016c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50738", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2225", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50738\n\ud83d\udd39 Description: A\u00a0new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to \noverride this downgrade protection has been identified.\n\ud83d\udccf Published: 2025-01-17T21:10:44.220Z\n\ud83d\udccf Modified: 2025-01-17T21:27:34.693Z\n\ud83d\udd17 References:\n1. https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html", "creation_timestamp": "2025-01-17T21:56:59.000000Z"}, {"uuid": "5da1f165-91ff-4343-a8b5-0a4beff9f3c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50739", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2250", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50739\n\ud83d\udd39 Description: A\u00a0buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark\u00a0devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.\n\ud83d\udccf Published: 2025-01-17T23:47:13.923Z\n\ud83d\udccf Modified: 2025-01-17T23:47:13.923Z\n\ud83d\udd17 References:\n1. https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html", "creation_timestamp": "2025-01-17T23:57:00.000000Z"}, {"uuid": "52a3e4e5-a3c4-4670-a8e9-1aecb83ca4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50733", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2507", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50733\n\ud83d\udd39 Description: A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Web Services feature of newer\nLexmark devices.\n\ud83d\udccf Published: 2025-01-21T22:03:28.688Z\n\ud83d\udccf Modified: 2025-01-21T22:03:28.688Z\n\ud83d\udd17 References:\n1. https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html", "creation_timestamp": "2025-01-21T23:01:14.000000Z"}, {"uuid": "76723a78-0715-40bd-880b-a6cc129eabb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50946", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3147", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-69mx-wr8g-q7hc\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: IBM Common Licensing 9.0  could allow an authenticated user to modify a configuration file that they should not have access to due to a broken authorization mechanism.\n\ud83d\udccf Published: 2025-01-26T18:30:32Z\n\ud83d\udccf Modified: 2025-01-26T18:30:32Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-50946\n2. https://www.ibm.com/support/pages/node/7161947", "creation_timestamp": "2025-01-26T19:07:27.000000Z"}, {"uuid": "caac4170-5adc-439b-b007-3675221a0f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50946", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3140", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50946\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-26T16:15:30.680\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7161947", "creation_timestamp": "2025-01-26T17:15:16.000000Z"}, {"uuid": "c25a9b38-3c54-4d26-9386-4e3cb6fd83aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50316", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3222", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50316\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1\nis vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.\n\ud83d\udccf Published: 2025-01-28T03:31:13Z\n\ud83d\udccf Modified: 2025-01-28T03:31:13Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-50316\n2. https://www.ibm.com/support/pages/node/7176072", "creation_timestamp": "2025-01-28T04:09:24.000000Z"}, {"uuid": "b8f79e5a-20bc-41f8-bb1e-a227a82cccf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50945", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3141", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50945\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-26T16:15:30.523\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7161947", "creation_timestamp": "2025-01-26T17:15:17.000000Z"}, {"uuid": "b01add24-4331-4262-a3ee-5171d2db18af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50945", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3145", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-px55-4c85-rghr\n\ud83d\udd25 CVSS Score: 6.1 (CVSS_V3)\n\ud83d\udd39 Description: IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user.\n\ud83d\udccf Published: 2025-01-26T18:30:32Z\n\ud83d\udccf Modified: 2025-01-26T18:30:32Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-50945\n2. https://www.ibm.com/support/pages/node/7161947", "creation_timestamp": "2025-01-26T19:07:26.000000Z"}, {"uuid": "edfcaeca-ab07-47a2-b130-d23ac5304c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50944", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4336", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50944\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source code of a DAG to which they don't have access.\u00a0This vulnerability is considered low since it requires an authenticated user to exploit it. Users are recommended to upgrade to version 2.8.1, which fixes this issue.\n\ud83d\udccf Published: 2024-01-24T15:30:30Z\n\ud83d\udccf Modified: 2025-02-13T19:33:14Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-50944\n2. https://github.com/apache/airflow/pull/36257\n3. https://github.com/apache/airflow/commit/8d76538d6e105947272b000581c6fabec20146b1\n4. https://github.com/apache/airflow\n5. https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2024-14.yaml\n6. https://lists.apache.org/thread/92krb5mpcq8qrw4t4j5oooqw7hgd8q7h\n7. http://www.openwall.com/lists/oss-security/2024/01/24/5", "creation_timestamp": "2025-02-13T20:13:06.000000Z"}, {"uuid": "6f1d3833-39fe-4df0-8911-f10c1bf4dbad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50943", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4335", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50943\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of \"enable_xcom_pickling=False\" configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.\n\ud83d\udccf Published: 2024-01-24T15:30:30Z\n\ud83d\udccf Modified: 2025-02-13T19:33:15Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-50943\n2. https://github.com/apache/airflow/pull/36255\n3. https://github.com/apache/airflow/commit/2c4c5bc604e9ab0cc1e98f7bee7d31d566579462\n4. https://github.com/apache/airflow\n5. https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2024-13.yaml\n6. https://lists.apache.org/thread/fx278v0twqzxkcts70tc04cp3f8p56pn\n7. http://www.openwall.com/lists/oss-security/2024/01/24/4", "creation_timestamp": "2025-02-13T20:13:02.000000Z"}, {"uuid": "12781bd7-ca2d-4c00-81e5-08e02bf29015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50811", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9141", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50811\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue discovered in SELESTA Visual Access Manager 4.38.6 allows attackers to modify the \u201ccomputer\u201d POST parameter related to the ID of a specific reception by POST HTTP request interception. Iterating that parameter, it has been possible to access to the application and take control of many other receptions in addition the assigned one.\n\ud83d\udccf Published: 2024-03-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T16:03:30.496Z\n\ud83d\udd17 References:\n1. https://www.gruppotim.it/it/footer/red-team.html", "creation_timestamp": "2025-03-27T16:27:07.000000Z"}, {"uuid": "88da84af-f1d3-48b4-a9ac-caad26b736b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50915", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9462", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50915\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue exists in GalaxyClientService.exe in GOG Galaxy (Beta) 2.0.67.2 through 2.0.71.2 that could allow authenticated users to overwrite and corrupt critical system files via a combination of an NTFS Junction and an RPC Object Manager symbolic link and could result in a denial of service.\n\ud83d\udccf Published: 2024-04-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T19:28:13.541Z\n\ud83d\udd17 References:\n1. https://support.gog.com/hc/en-us/categories/201553005-Downloads-Installing?product=gog\n2. https://github.com/anvilsecure/gog-galaxy-app-research\n3. https://github.com/anvilsecure/gog-galaxy-app-research/blob/main/advisories/CVE-2023-50915%20-%20DoS.md", "creation_timestamp": "2025-03-28T20:29:08.000000Z"}, {"uuid": "9b30859a-4c0f-4b0a-b080-40fe3fea1956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50316", "type": "seen", "source": "Telegram/hl3ftQi-CqciLXp87nhQHA5nWbWSHbJXIbskFXgjrPm3z0pi", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "fb2a4b16-1a95-4aa1-9538-0676f0d32fbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50845", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12349", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50845\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AyeCode - WordPress Business Directory Plugins GeoDirectory \u2013 WordPress Business Directory Plugin, or Classified Directory.This issue affects GeoDirectory \u2013 WordPress Business Directory Plugin, or Classified Directory: from n/a through 2.3.28.\n\n\n\ud83d\udccf Published: 2023-12-28T18:23:07.600Z\n\ud83d\udccf Modified: 2025-04-17T20:28:00.591Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/geodirectory/wordpress-geodirectory-plugin-2-3-28-sql-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-17T20:58:18.000000Z"}, {"uuid": "cfa15d85-f96a-4598-9edf-e01c1ddb74e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50692", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12342", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50692\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: File Upload vulnerability in JIZHICMS v.2.5, allows remote attacker to execute arbitrary code via a crafted file uploaded and downloaded to the download_url parameter in the app/admin/exts/ directory.\n\ud83d\udccf Published: 2023-12-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T20:31:51.444Z\n\ud83d\udd17 References:\n1. https://github.com/Cherry-toto/jizhicms/issues/91", "creation_timestamp": "2025-04-17T20:58:05.000000Z"}, {"uuid": "c700076e-01c0-4b90-be90-fe77b7bf9fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50851", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12348", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50851\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in N Squared Appointment Booking Calendar \u2014 Simply Schedule Appointments Booking Plugin.This issue affects Appointment Booking Calendar \u2014 Simply Schedule Appointments Booking Plugin: from n/a before 1.6.6.1.\n\n\n\ud83d\udccf Published: 2023-12-28T11:28:30.036Z\n\ud83d\udccf Modified: 2025-04-17T20:28:24.612Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/simply-schedule-appointments/wordpress-simply-schedule-appointments-booking-plugin-1-6-6-1-sql-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-17T20:58:17.000000Z"}, {"uuid": "5850aa42-3e1a-403a-822a-afd39f425061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50290", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15834", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50290\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr.\nThe Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designed to work for known secret Java system properties. Environment variables cannot be strictly defined in Solr, like Java system properties can be, and may be set for the entire host,\u00a0unlike Java system properties which are set per-Java-proccess.\n\nThe Solr Metrics API is protected by the \"metrics-read\" permission.\nTherefore, Solr Clouds with Authorization setup will only be vulnerable via users with the \"metrics-read\" permission.\nThis issue affects Apache Solr: from 9.0.0 before 9.3.0.\n\nUsers are recommended to upgrade to version 9.3.0 or later, in which environment variables are not published via the Metrics API.\n\n\n\ud83d\udccf Published: 2024-01-15T09:32:44.532Z\n\ud83d\udccf Modified: 2025-05-09T20:18:08.133Z\n\ud83d\udd17 References:\n1. https://solr.apache.org/security.html#cve-2023-50290-apache-solr-allows-read-access-to-host-environment-variables", "creation_timestamp": "2025-05-09T20:26:06.000000Z"}, {"uuid": "101e1144-f257-480f-b35c-d78eb89ccaa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50450", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19616", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50450\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Sensopart VISOR Vision Sensors before 2.10.0.2 allows local users to perform unspecified actions with elevated privileges.\n\ud83d\udccf Published: 2025-06-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-26T15:14:19.969Z\n\ud83d\udd17 References:\n1. https://code-white.com/public-vulnerability-list/", "creation_timestamp": "2025-06-26T15:52:43.000000Z"}, {"uuid": "6dd1ee85-86c9-42aa-8ef4-e297d4ed819d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50358", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15812", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50358\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.1.5.2645 build 20240116 and later\nQTS 4.5.4.2627 build 20231225 and later\nQTS 4.3.6.2665 build 20240131 and later\nQTS 4.3.4.2675 build 20240131 and later\nQTS 4.3.3.2644 build 20240131 and later\nQTS 4.2.6 build 20240131 and later\nQuTS hero h5.1.5.2647 build 20240118 and later\nQuTS hero h4.5.4.2626 build 20231225 and later\nQuTScloud c5.1.5.2651 and later\n\ud83d\udccf Published: 2024-02-13T02:45:22.351Z\n\ud83d\udccf Modified: 2025-05-09T18:16:31.828Z\n\ud83d\udd17 References:\n1. https://www.qnap.com/en/security-advisory/qsa-23-57\n2. https://unit42.paloaltonetworks.com/qnap-qts-firmware-cve-2023-50358/\n3. https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2024/2024-213941-1032", "creation_timestamp": "2025-05-09T18:26:26.000000Z"}, {"uuid": "91a02bb7-0c6c-4d2e-8e47-abdbcaa9ac1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50930", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16375", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50930\n\ud83d\udd25 CVSS Score: 8.3 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:N/A:L/C:H/I:H/PR:N/S:U/UI:R)\n\ud83d\udd39 Description: An issue was discovered in savignano S/Notify before 4.0.2 for Jira. While an administrative user is logged on, the configuration settings of S/Notify can be modified via a CSRF attack. The injection could be initiated by the administrator clicking a malicious link in an email or by visiting a malicious website. If executed while an administrator is logged on to Jira, an attacker could exploit this to modify the configuration of the S/Notify app on that host. This can, in particular, lead to email notifications being no longer encrypted when they should be.\n\ud83d\udccf Published: 2024-01-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T19:23:28.910Z\n\ud83d\udd17 References:\n1. https://help.savignano.net/snotify-email-encryption/sa-2023-11-28", "creation_timestamp": "2025-05-14T19:32:55.000000Z"}, {"uuid": "fce086de-c65c-4f41-a840-fa5dfc112e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50839", "type": "published-proof-of-concept", "source": "Telegram/OlSx-i4MOnRiLD9w2NsovYSChfTHJAiqMYmGpteGinUk6Zg", "content": "", "creation_timestamp": "2026-04-24T21:00:04.000000Z"}, {"uuid": "c7387412-e0ea-47ef-be9c-726b8da813d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5061", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17254", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-5061\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: An issue has been discovered in GitLab affecting all versions starting from 9.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. In certain situations, it may have been possible for developers to override predefined CI variables via the REST API.\n\ud83d\udccf Published: 2023-12-15T16:03:05.257Z\n\ud83d\udccf Modified: 2025-05-22T04:09:06.348Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/425521\n2. https://hackerone.com/reports/2125189", "creation_timestamp": "2025-05-22T04:44:32.000000Z"}, {"uuid": "69ad0f82-0d25-4bef-9888-a6499ee5f901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5009", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17255", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-5009\n\ud83d\udd25 CVSS Score: 9.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies. This was a bypass of [CVE-2023-3932](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3932) showing additional impact.\n\ud83d\udccf Published: 2023-09-19T07:01:14.930Z\n\ud83d\udccf Modified: 2025-05-22T04:09:01.346Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/425304\n2. https://hackerone.com/reports/2147126", "creation_timestamp": "2025-05-22T04:44:33.000000Z"}, {"uuid": "1cfa3b02-509f-45f1-9bf7-34af4289f987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50269", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17119", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50269\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)\n\ud83d\udd39 Description: Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives.\n\ud83d\udccf Published: 2023-12-14T17:09:25.168Z\n\ud83d\udccf Modified: 2025-05-21T14:31:00.896Z\n\ud83d\udd17 References:\n1. https://github.com/squid-cache/squid/security/advisories/GHSA-wgq4-4cfg-c4x3\n2. http://www.squid-cache.org/Versions/v5/SQUID-2023_10.patch\n3. http://www.squid-cache.org/Versions/v6/SQUID-2023_10.patch\n4. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEV66D3PAAY6K7TWDT3WZBLCPLASFJDC/\n5. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A5QASTMCUSUEW3UOMKHZJB3FTONWSRXS/\n6. https://lists.debian.org/debian-lts-announce/2024/01/msg00003.html\n7. https://security.netapp.com/advisory/ntap-20240119-0005/", "creation_timestamp": "2025-05-21T14:42:44.000000Z"}, {"uuid": "1b53024f-f452-4253-9916-1a82545a68cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50120", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18629", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50120\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1_uvlc at media_tools/av_parsers.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.\n\ud83d\udccf Published: 2024-01-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-17T15:58:50.895Z\n\ud83d\udd17 References:\n1. https://github.com/gpac/gpac/issues/2698", "creation_timestamp": "2025-06-17T16:41:29.000000Z"}, {"uuid": "015a350c-76db-457f-8667-c5ae64a3a2e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50694", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18628", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50694\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in dom96 HTTPbeast v.0.4.1 and before allows a remote attacker to send a malicious crafted request due to insufficient parsing in the parser.nim component.\n\ud83d\udccf Published: 2024-01-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-17T16:00:17.483Z\n\ud83d\udd17 References:\n1. https://github.com/dom96/httpbeast/pull/96\n2. https://github.com/dom96/httpbeast/issues/95\n3. https://gist.github.com/anas-cherni/c95e2fc1fd84d93167eb60193318d0b8", "creation_timestamp": "2025-06-17T16:41:28.000000Z"}, {"uuid": "c0e9d479-9b8f-4bea-bf92-476682138558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50082", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17729", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50082\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive information via session leakage allows a user to avoid logging into the backend management platform.\n\ud83d\udccf Published: 2024-01-04T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-09T17:23:13.248Z\n\ud83d\udd17 References:\n1. https://github.com/juraorab/cve/blob/master/CVE/README.md\n2. https://github.com/juraorab/cve/issues/2", "creation_timestamp": "2025-06-09T18:11:16.000000Z"}, {"uuid": "0eb3913d-898d-483e-8d80-d3f93115b626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50253", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17744", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50253\n\ud83d\udd25 CVSS Score: 9.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Laf is a cloud development platform. In the Laf version design, the log uses communication with k8s to quickly retrieve logs from the container without the need for additional storage. However, in version 1.0.0-beta.13 and prior, this interface does not verify the permissions of the pod, which allows authenticated users to obtain any pod logs under the same namespace through this method, thereby obtaining sensitive information printed in the logs. As of time of publication, no known patched versions exist.\n\ud83d\udccf Published: 2024-01-03T16:45:11.778Z\n\ud83d\udccf Modified: 2025-06-09T18:48:18.796Z\n\ud83d\udd17 References:\n1. https://github.com/labring/laf/security/advisories/GHSA-g9c8-wh35-g75f\n2. https://github.com/labring/laf/pull/1468", "creation_timestamp": "2025-06-09T19:48:04.000000Z"}, {"uuid": "6e4eaeb0-c352-485c-8965-80bc6247d9b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50008", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17873", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50008\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: FFmpeg v.n6.1-3-g466799d4f5 allows memory consumption when using the colorcorrect filter, in the av_malloc function in libavutil/mem.c:105:9 component.\n\ud83d\udccf Published: 2024-04-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-10T13:26:02.428Z\n\ud83d\udd17 References:\n1. https://github.com/FFmpeg/FFmpeg/commit/5f87a68cf70dafeab2fb89b42e41a4c29053b89b\n2. https://trac.ffmpeg.org/ticket/10701\n3. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/\n4. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/\n5. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/", "creation_timestamp": "2025-06-10T13:30:00.000000Z"}, {"uuid": "c17bac64-9bd3-4d9a-bf74-79d5f4ae62c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50932", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18333", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50932\n\ud83d\udd25 CVSS Score: 8.3 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:N/A:L/C:H/I:H/PR:N/S:U/UI:R)\n\ud83d\udd39 Description: An issue was discovered in savignano S/Notify before 4.0.2 for Confluence. While an administrative user is logged on, the configuration settings of S/Notify can be modified via a CSRF attack. The injection could be initiated by the administrator clicking a malicious link in an email or by visiting a malicious website. If executed while an administrator is logged on to Confluence, an attacker could exploit this to modify the configuration of the S/Notify app on that host. This can, in particular, lead to email notifications being no longer encrypted when they should be.\n\ud83d\udccf Published: 2024-01-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-13T19:02:33.945Z\n\ud83d\udd17 References:\n1. https://help.savignano.net/snotify-email-encryption/sa-2023-11-28", "creation_timestamp": "2025-06-13T19:35:04.000000Z"}, {"uuid": "b431a167-3dd3-4b39-9d49-a342132906aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50944", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18106", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50944\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source code of a DAG to which they don't have access.\u00a0This vulnerability is considered low since it requires an authenticated user to exploit it. Users are recommended to upgrade to version 2.8.1, which fixes this issue.\n\ud83d\udccf Published: 2024-01-24T12:58:18.873Z\n\ud83d\udccf Modified: 2025-06-11T17:02:59.150Z\n\ud83d\udd17 References:\n1. https://github.com/apache/airflow/pull/36257\n2. https://lists.apache.org/thread/92krb5mpcq8qrw4t4j5oooqw7hgd8q7h\n3. http://www.openwall.com/lists/oss-security/2024/01/24/5", "creation_timestamp": "2025-06-11T17:34:34.000000Z"}, {"uuid": "dcb69d7b-f0e3-45e7-b09f-e30fb526c341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5006", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18104", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-5006\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP Discord Invite WordPress plugin before 2.5.1 does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to perform actions on their behalf by tricking a logged in administrator to submit a crafted request.\n\ud83d\udccf Published: 2024-01-17T14:31:48.144Z\n\ud83d\udccf Modified: 2025-06-11T17:04:46.980Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/d29bcc1c-241b-4867-a0c8-4ae5f9d1c8e8", "creation_timestamp": "2025-06-11T17:34:33.000000Z"}, {"uuid": "25bfeaf9-0a6a-4f6c-b770-77ffd926de95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50166", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18120", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50166\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Pega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.\n\ud83d\udccf Published: 2024-01-31T17:26:42.731Z\n\ud83d\udccf Modified: 2025-06-11T17:50:06.873Z\n\ud83d\udd17 References:\n1. https://support.pega.com/support-doc/pega-security-advisory-h23-vulnerability-remediation-note", "creation_timestamp": "2025-06-11T18:35:11.000000Z"}, {"uuid": "46488bba-5af4-43a3-88fb-9d7af8903d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50395", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18301", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50395\n\ud83d\udd25 CVSS Score: 8 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: \nSQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited\n\ud83d\udccf Published: 2024-02-06T15:59:48.664Z\n\ud83d\udccf Modified: 2025-06-13T15:09:53.712Z\n\ud83d\udd17 References:\n1. https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-50395\n2. https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-1_release_notes.htm", "creation_timestamp": "2025-06-13T15:36:37.000000Z"}, {"uuid": "35780051-8f70-459b-b757-487b91a95ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50127", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18995", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50127\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Hozard alarm system (Alarmsysteem) v1.0 is vulnerable to Improper Authentication. Commands sent via the SMS functionality are accepted from random phone numbers, which allows an attacker to bring the alarm system to a disarmed state from any given phone number.\n\ud83d\udccf Published: 2024-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T16:15:07.271Z\n\ud83d\udd17 References:\n1. https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices", "creation_timestamp": "2025-06-20T16:44:53.000000Z"}, {"uuid": "3086b8c8-fb2c-4ca0-81bd-43f1549be80c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50128", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18994", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50128\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The remote keyless system of the Hozard alarm system (alarmsystemen) v1.0 sends an identical radio frequency signal for each request, which results in an attacker being able to conduct replay attacks to bring the alarm system to a disarmed state.\n\ud83d\udccf Published: 2024-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T16:16:01.119Z\n\ud83d\udd17 References:\n1. https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices\n2. http://hozard.com", "creation_timestamp": "2025-06-20T16:44:52.000000Z"}, {"uuid": "4b13d731-245b-47ca-8138-91e47572b01e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50129", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18993", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50129\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Missing encryption in the NFC tags of the Flient Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original tags, which results in an attacker gaining access to the perimeter.\n\ud83d\udccf Published: 2024-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T16:16:49.870Z\n\ud83d\udd17 References:\n1. https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices", "creation_timestamp": "2025-06-20T16:44:51.000000Z"}, {"uuid": "73e91fc2-d4a6-45bf-bd35-9a93d6529580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50159", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18625", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50159\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In ScaleFusion (Windows Desktop App) agent 10.5.2, Kiosk mode application restrictions can be bypassed allowing arbitrary code to be executed. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode.\n\ud83d\udccf Published: 2024-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-17T16:03:06.166Z\n\ud83d\udd17 References:\n1. https://medium.com/nestedif/vulnerability-disclosure-kiosk-mode-bypass-scalefusion-4752dfa2dc59\n2. https://medium.com/nestedif/vulnerability-disclosure-browser-mode-kiosk-bypass-scalefusion-832f5a18ebb6\n3. https://help.scalefusion.com/docs/security-advisory-for-windows-mdm-agent", "creation_timestamp": "2025-06-17T16:41:22.000000Z"}, {"uuid": "3733f8fa-326e-4991-aa85-17ff0e386364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50030", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18624", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50030\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the module \"Jms Setting\" (jmssetting) from Joommasters for PrestaShop, a guest can perform SQL injection in versions <= 1.1.0. The method `JmsSetting::getSecondImgs()` has a sensitive SQL call that can be executed with a trivial http call and exploited to forge a blind SQL injection.\n\ud83d\udccf Published: 2024-01-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-17T16:03:52.058Z\n\ud83d\udd17 References:\n1. https://www.joommasters.com/\n2. https://security.friendsofpresta.org/modules/2024/01/16/jmssetting.html", "creation_timestamp": "2025-06-17T16:41:21.000000Z"}, {"uuid": "eb3c6464-88f3-4855-aa19-7e25c58ddee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50920", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18623", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50920\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered on GL.iNet devices before version 4.5.0. They assign the same session ID after each user reboot, allowing attackers to share session identifiers between different sessions and bypass authentication or access control measures. Attackers can impersonate legitimate users or perform unauthorized actions. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7.\n\ud83d\udccf Published: 2024-01-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-17T16:05:04.445Z\n\ud83d\udd17 References:\n1. https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Authentication-bypass-seesion-ID.md", "creation_timestamp": "2025-06-17T16:41:20.000000Z"}, {"uuid": "581a684c-4026-4c29-8a22-f0071ac2b043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50488", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18627", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50488\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Blurams Lumi Security Camera (A31C) v23.0406.435.4120 allows attackers to execute arbitrary code.\n\ud83d\udccf Published: 2024-02-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-17T16:01:03.284Z\n\ud83d\udd17 References:\n1. https://github.com/roman-mueller/PoC/tree/master/CVE-2023-50488\n2. https://infosec.rm-it.de/2024/02/01/blurams-lumi-security-camera-analysis/", "creation_timestamp": "2025-06-17T16:41:27.000000Z"}, {"uuid": "947f8e5d-7823-4dff-a9d0-f96737860a4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50974", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18626", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50974\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials.\n\ud83d\udccf Published: 2024-01-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-17T16:02:00.408Z\n\ud83d\udd17 References:\n1. https://gist.github.com/SkypLabs/72ee00ecfa7d1a3494e2d69a24279c1d\n2. https://appwrite.io/docs/tooling/command-line/installation", "creation_timestamp": "2025-06-17T16:41:26.000000Z"}, {"uuid": "417fe9d8-7e5f-4911-9dba-f12ccb08b02b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5030", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18741", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-5030\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability has been found in Tongda OA up to 11.10 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/plan/delete.php. The manipulation of the argument PLAN_ID leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239872.\n\ud83d\udccf Published: 2023-09-17T22:00:07.471Z\n\ud83d\udccf Modified: 2025-06-18T14:31:24.755Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.239872\n2. https://vuldb.com/?ctiid.239872\n3. https://github.com/husterdjx/cve/blob/main/sql1.md", "creation_timestamp": "2025-06-18T14:41:41.000000Z"}, {"uuid": "fa6d6023-0a7d-4729-83ee-74abb410cff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5028", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18740", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-5028\n\ud83d\udd25 CVSS Score: 2 (cvssV3_1, Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in China Unicom TEWA-800G 4.16L.04_CT2015_Yueme. Affected by this issue is some unknown functionality. The manipulation leads to information exposure through debug log file. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. VDB-239870 is the identifier assigned to this vulnerability.\n\ud83d\udccf Published: 2023-09-17T11:00:06.404Z\n\ud83d\udccf Modified: 2025-06-18T14:33:22.062Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.239870\n2. https://vuldb.com/?ctiid.239870\n3. https://github.com/pinglan123/-/wiki/%E4%B8%AD%E5%9B%BD%E8%81%94%E9%80%9A%E5%AE%B6%E7%94%A8%E7%BD%91%E5%85%B3", "creation_timestamp": "2025-06-18T14:41:41.000000Z"}, {"uuid": "3b6e800c-d556-4417-9f1b-1a74a2b863b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50020", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18769", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50020\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in open5gs v2.6.6. SIGPIPE can be used to crash AMF.\n\ud83d\udccf Published: 2024-01-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-18T15:07:02.651Z\n\ud83d\udd17 References:\n1. https://github.com/open5gs/open5gs/issues/2734\n2. https://github.com/open5gs/open5gs/commit/1aba814938e3a1b2eec7014bf6ce132d34622e08", "creation_timestamp": "2025-06-18T15:43:00.000000Z"}, {"uuid": "ca83da20-5f6b-4014-81f7-1fa15a09085b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50125", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18997", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50125\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A default engineer password set on the Hozard alarm system (Alarmsysteem) v1.0 allows an attacker to bring the alarm system to a disarmed state.\n\ud83d\udccf Published: 2024-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T16:14:10.202Z\n\ud83d\udd17 References:\n1. https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices", "creation_timestamp": "2025-06-20T16:44:55.000000Z"}, {"uuid": "8d41eb06-fba6-46a7-950c-3a8c5ad98b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50123", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18998", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50123\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The number of attempts to bring the Hozard Alarm system (alarmsystemen) v1.0 to a disarmed state is not limited. This could allow an attacker to perform a brute force on the SMS authentication, to bring the alarm system to a disarmed state.\n\ud83d\udccf Published: 2024-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T16:13:24.396Z\n\ud83d\udd17 References:\n1. https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices", "creation_timestamp": "2025-06-20T16:44:59.000000Z"}, {"uuid": "e1aa1cd5-7780-41ff-a867-5f5a6082a174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50564", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/38053", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aPluck v4.7.18 - Remote Code Execution (RCE)\nURL\uff1ahttps://github.com/glynzr/CVE-2023-50564\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-05-25T08:27:17.000000Z"}, {"uuid": "34040239-592c-4671-9165-dd37c52b9e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "exploited", "source": "https://t.me/ctinow/237474", "content": "CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited\nhttps://ift.tt/13AGrM8", "creation_timestamp": "2025-09-04T11:19:26.000000Z"}, {"uuid": "78f1650d-9e08-48f5-9e43-cd1768432063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/15931", "content": "CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited \u2013 thehackernews.com\n\nThu, 04 Sep 2025 18:03:00", "creation_timestamp": "2025-09-04T12:03:33.000000Z"}, {"uuid": "90277f19-413b-43e5-b221-0cd43df25228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50916", "type": "seen", "source": "https://t.me/HelangMerahGroup/208", "content": "\u26a0\ufe0f Attention Kyocera & QNAP users: \n\nKyocera addresses dangerous CVE-2023-50916 flaw, preventing unauthorized access. QNAP tackles CVE-2023-39296, safeguarding against crashes. \n\nRead details here: https://thehackernews.com/2024/01/alert-new-vulnerabilities-discovered-in.html", "creation_timestamp": "2024-01-09T15:22:53.000000Z"}, {"uuid": "d2d6f114-a62e-406c-9682-97646a94ec58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "exploited", "source": "https://t.me/BleepingComputer/19053", "content": "\u200aHackers are exploiting critical Apache Struts flaw using public PoC\n\nHackers are attempting to leverage a recently fixed critical vulnerability (CVE-2023-50164) in Apache Struts that leads to remote code execution, in attacks that rely on publicly available proof-of-concept exploit code. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-are-exploiting-critical-apache-struts-flaw-using-public-poc/", "creation_timestamp": "2023-12-13T20:03:54.000000Z"}, {"uuid": "c72c127d-f52b-4c2e-965f-504c8008021e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50946", "type": "seen", "source": "https://t.me/cvedetector/16421", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50946 - IBM Common Licensing Authenticated RCE615\", \n  \"Content\": \"CVE ID : CVE-2023-50946 \nPublished : Jan. 26, 2025, 4:15 p.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : IBM Common Licensing 9.0  could allow an authenticated user to modify a configuration file that they should not have access to due to a broken authorization mechanism. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-26T19:55:31.000000Z"}, {"uuid": "126ddf9e-0273-42d6-b353-b2a90fa86e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50945", "type": "seen", "source": "https://t.me/cvedetector/16420", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50945 - IBM Common Licensing Credential Storage Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-50945 \nPublished : Jan. 26, 2025, 4:15 p.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user. \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-26T19:55:30.000000Z"}, {"uuid": "6f13f1b2-c27a-47b5-866b-79b21d55e819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50428", "type": "seen", "source": "https://t.me/cyber_hsecurity/1615", "content": "\u0627\u0644\u0645\u0635\u062f\u0631 \u0648\u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644:\n- \u0644\u0645\u0632\u064a\u062f \u0645\u0646 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u062d\u0648\u0644 \u0627\u0644\u0625\u0635\u0644\u0627\u062d\u060c \u064a\u0645\u0643\u0646 \u0627\u0644\u0627\u0637\u0644\u0627\u0639 \u0639\u0644\u0649 [\u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0641\u064a GitHub](https://github.com/discourse/discourse/commit/188cb58daa833839c54c266ce22db150a3f3a210).\n\nALSED404:\nGG CISCO\n\u0627\u0633\u062a\u063a\u0644\u062a \u0645\u062c\u0645\u0648\u0639\u0629 \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0627\u0644\u0645\u0631\u062a\u0628\u0637\u0629 \u0628\u0627\u0644\u0635\u064a\u0646\u060c Velvet Ant\u060c \u200b\u200b\u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 (CVE-2024-20399) \u0641\u064a \u0645\u0641\u0627\u062a\u064a\u062d Cisco \u0628\u0627\u0639\u062a\u0628\u0627\u0631\u0647\u0627 \u064a\u0648\u0645\u064b\u0627 \u0635\u0641\u0631\u064a\u064b\u0627 \u0644\u0644\u0633\u064a\u0637\u0631\u0629 \u0648\u0627\u0644\u062a\u0647\u0631\u0628 \u0645\u0646 \u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641.\n\u0627\u0642\u0631\u0623: https://thehackernews.com/2024/08/chinese-hackers-exploit-zero-day-cisco.html\n\nPayload:\nsite.tld/xyz/xyz/xyz/?path=../../../../../../../../../etc/passwd\n============================\n#ALSED404\n\n\u0643\u0634\u0641\u062a \u0634\u0631\u0643\u0629 \u062c\u0648\u062c\u0644 \u0639\u0646 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0646\u0634\u0637 \u0644\u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a \u0645\u062a\u0635\u0641\u062d \u0643\u0631\u0648\u0645\u060c CVE-2024-7965\u060c \u0648\u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u0635\u062d\u064a\u062d\u0647\u0627 \u0627\u0644\u0623\u0633\u0628\u0648\u0639 \u0627\u0644\u0645\u0627\u0636\u064a.\n\n\u0642\u062f \u064a\u0624\u062f\u064a \u0647\u0630\u0627 \u0627\u0644\u062e\u0644\u0644 \u0641\u064a \u0645\u062d\u0631\u0643 V8 \u0627\u0644\u062e\u0627\u0635 \u0628\u0645\u062a\u0635\u0641\u062d Chrome \u0625\u0644\u0649 \u062a\u0645\u0643\u064a\u0646 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0639\u0646 \u0628\u0639\u062f.\n\u0644\u0645\u0639\u0631\u0641\u0629 \u0627\u0644\u0645\u0632\u064a\u062f: https://thehackernews.com/2024/08/google-warns-of-cve-2024-7965-chrome.html\n\u062a\u0623\u0643\u062f \u0645\u0646 \u062a\u062d\u062f\u064a\u062b \u0645\u062a\u0635\u0641\u062d\u0643 \u0625\u0644\u0649 \u0627\u0644\u0625\u0635\u062f\u0627\u0631 \u0627\u0644\u0623\u062d\u062f\u062b.\n\nThe Smart Shadow:\n\ud83c\udd98CVE -2024-41109\n\u062a\u0648\u0641\u0631 \u062d\u0632\u0645\u0629 Admin Classic Bundle \u0645\u0646 Pimcore \u0648\u0627\u062c\u0647\u0629 \u0645\u0633\u062a\u062e\u062f\u0645 \u062e\u0644\u0641\u064a\u0629 \u0644\u0628\u0631\u0646\u0627\u0645\u062c Pimcore. \u064a\u0624\u062f\u064a \u0627\u0644\u0627\u0646\u062a\u0642\u0627\u0644 \u0625\u0644\u0649 /admin/index/statistics \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0645\u0633\u062a\u062e\u062f\u0645 Pimcore \u0645\u0633\u062c\u0644 \u0627\u0644\u062f\u062e\u0648\u0644 \u0625\u0644\u0649 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646 \u0645\u0639\u0644\u0648\u0645\u0627\u062a \u062d\u0648\u0644 \u062a\u062b\u0628\u064a\u062a Pimcore \u0648\u0625\u0635\u062f\u0627\u0631 PHP \u0648\u0625\u0635\u062f\u0627\u0631 MYSQL \u0648\u0627\u0644\u062d\u0632\u0645 \u0627\u0644\u0645\u062b\u0628\u062a\u0629 \u0648\u062c\u0645\u064a\u0639 \u062c\u062f\u0627\u0648\u0644 \u0642\u0627\u0639\u062f\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0648\u0639\u062f\u062f \u0635\u0641\u0648\u0641\u0647\u0627 \u0641\u064a \u0627\u0644\u0646\u0638\u0627\u0645. \u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a 1.5.2 \u06481.4.6 \u06481.3.10.\n\n\ud83c\udd98CVE -2024-4188\n\u0642\u062f \u062a\u0633\u0645\u062d \u062b\u063a\u0631\u0629 \u0627\u0644\u0646\u0642\u0644 \u063a\u064a\u0631 \u0627\u0644\u0645\u062d\u0645\u064a \u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0627\u0639\u062a\u0645\u0627\u062f \u0641\u064a OpenText\u2122 Documentum\u2122 Server \u0628\u062d\u0634\u0648 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0627\u0639\u062a\u0645\u0627\u062f. \u062a\u0624\u062b\u0631 \u0647\u0630\u0647 \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0639\u0644\u0649 Documentum\u2122 Server: \u0645\u0646 16.7 \u0625\u0644\u0649 23.4.\n\n\ud83d\udea8CVE -2024-34149\n\u0641\u064a Bitcoin Core \u062d\u062a\u0649 27.0 \u0648Bitcoin Knots \u0642\u0628\u0644 25.1.knots20231115\u060c \u064a\u0641\u062a\u0642\u0631 tapscript \u0625\u0644\u0649 \u0641\u062d\u0635 \u062d\u062f \u062d\u062c\u0645 \u0627\u0644\u0633\u064a\u0627\u0633\u0629\u060c \u0648\u0647\u064a \u0645\u0634\u0643\u0644\u0629 \u0645\u062e\u062a\u0644\u0641\u0629 \u0639\u0646 CVE-2023-50428. \u0645\u0644\u0627\u062d\u0638\u0629: \u062a\u0639\u0627\u0631\u0636 \u0628\u0639\u0636 \u0627\u0644\u0623\u0637\u0631\u0627\u0641 \u0641\u062d\u0635 \u0627\u0644\u062d\u062f \u0627\u0644\u062c\u062f\u064a\u062f \u0647\u0630\u0627 (\u0639\u0644\u0649 \u0633\u0628\u064a\u0644 \u0627\u0644\u0645\u062b\u0627\u0644\u060c \u0644\u0623\u0646\u0647\u0645 \u064a\u062a\u0641\u0642\u0648\u0646 \u0645\u0639 \u0627\u0644\u0647\u062f\u0641 \u0644\u0643\u0646\u0647\u0645 \u064a\u062e\u062a\u0644\u0641\u0648\u0646 \u0645\u0639 \u0627\u0644\u0622\u0644\u064a\u0629 \u0627\u0644\u0641\u0646\u064a\u0629\u060c \u0623\u0648 \u0644\u0623\u0646 \u0644\u062f\u064a\u0647\u0645 \u0647\u062f\u0641\u064b\u0627 \u0645\u062e\u062a\u0644\u0641\u064b\u0627).\n\n\ud83d\udea8CVE -2024-6904\n\u062a\u0645 \u0627\u0644\u0639\u062b\u0648\u0631 \u0639\u0644\u0649 \u062b\u063a\u0631\u0629 \u062a\u0645 \u062a\u0635\u0646\u064a\u0641\u0647\u0627 \u0639\u0644\u0649 \u0623\u0646\u0647\u0627 \u062d\u0631\u062c\u0629 \u0641\u064a SourceCodester Record Management System 1.0. \u062a\u0624\u062b\u0631 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0639\u0644\u0649 \u062c\u0632\u0621 \u063a\u064a\u0631 \u0645\u0639\u0631\u0648\u0641 \u0645\u0646 \u0627\u0644\u0645\u0644\u0641 sort2_user.php. \u064a\u0624\u062f\u064a \u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0628\u062a\u0623\u0647\u064a\u0644 \u0627\u0644\u0648\u0633\u064a\u0637\u0629 \u0625\u0644\u0649 \u062d\u0642\u0646 SQL. \u0645\u0646 \u0627\u0644\u0645\u0645\u0643\u0646 \u0628\u062f\u0621 \u0627\u0644\u0647\u062c\u0648\u0645 \u0639\u0646 \u0628\u0639\u062f. \u062a\u0645 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u0644\u0644\u0639\u0627\u0645\u0629 \u0648\u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627. \u062a\u0645 \u062a\u0639\u064a\u064a\u0646 \u0627\u0644\u0645\u0639\u0631\u0641 VDB-271929 \u0644\u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629.\n\nALSED404:\n\u062a\u0633\u062a\u063a\u0644 \u0645\u062c\u0645\u0648\u0639\u0629 Mustang Panda APT \u0628\u0631\u0646\u0627\u0645\u062c VS Code \u0644\u0627\u0633\u062a\u0647\u062f\u0627\u0641 \u062d\u0643\u0648\u0645\u0627\u062a \u062c\u0646\u0648\u0628 \u0634\u0631\u0642 \u0622\u0633\u064a\u0627. \u0648\u064a\u0633\u0645\u062d \u0647\u0630\u0627 \u0644\u0644\u0645\u062a\u0633\u0644\u0644\u064a\u0646 \u0628\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0623\u0648\u0627\u0645\u0631 \u0648\u0633\u0631\u0642\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0648\u0646\u0634\u0631 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0639\u0628\u0631 \u0648\u0627\u062c\u0647\u0629 VS Code \u0627\u0644\u0639\u0643\u0633\u064a\u0629.\n\u0627\u0642\u0631\u0623 \u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644: https://thehackernews.com/2024/09/chinese-hackers-exploit-visual-studio.html\n\u0642\u0645 \u0628\u062a\u0639\u0632\u064a\u0632 \u0627\u0644\u062f\u0641\u0627\u0639\u0627\u062a \u0627\u0644\u0622\u0646 - \u0631\u0627\u0642\u0628 \u0647\u0630\u0647 \u0627\u0644\u062a\u0643\u062a\u064a\u0643\u0627\u062a!\n\nThe Smart Shadow:\n\ud83d\udea8CVE -2024-6904\n\u062a\u0645 \u0627\u0644\u0639\u062b\u0648\u0631 \u0639\u0644\u0649 \u062b\u063a\u0631\u0629 \u062a\u0645 \u062a\u0635\u0646\u064a\u0641\u0647\u0627 \u0639\u0644\u0649 \u0623\u0646\u0647\u0627 \u062d\u0631\u062c\u0629 \u0641\u064a SourceCodester Record Management System 1.0. \u062a\u0624\u062b\u0631 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0639\u0644\u0649 \u062c\u0632\u0621 \u063a\u064a\u0631 \u0645\u0639\u0631\u0648\u0641 \u0645\u0646 \u0627\u0644\u0645\u0644\u0641 sort2_user.php. \u064a\u0624\u062f\u064a \u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0628\u062a\u0623\u0647\u064a\u0644 \u0627\u0644\u0648\u0633\u064a\u0637\u0629 \u0625\u0644\u0649 \u062d\u0642\u0646 SQL. \u0645\u0646 \u0627\u0644\u0645\u0645\u0643\u0646 \u0628\u062f\u0621 \u0627\u0644\u0647\u062c\u0648\u0645 \u0639\u0646 \u0628\u0639\u062f. \u062a\u0645 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u0644\u0644\u0639\u0627\u0645\u0629 \u0648\u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627. \u062a\u0645 \u062a\u0639\u064a\u064a\u0646 \u0627\u0644\u0645\u0639\u0631\u0641 VDB-271929 \u0644\u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629.\n\n\u062a\u0640\u0640\u0634\u0640\u0640\u0627\u0631\u0648\u0646\u1d9c\u02b0\u1d43\u02b3\u1d52\u207f\ud81a\udd54\u0f04:\n- CVE-2024-46049 - Tenda O6 V3.0 firmware V1.0.0.7(2054) contains a stack overflow vulnerability in the formexeCommand function.\n\n- CVE-2024-46049 - \u064a\u062d\u062a\u0648\u064a \u0627\u0644\u0628\u0631\u0646\u0627\u0645\u062c \u0627\u0644\u062b\u0627\u0628\u062a Tenda O6 V3.0 V1.0.0.7(2054) \u0639\u0644\u0649 \u062b\u063a\u0631\u0629 \u062a\u062c\u0627\u0648\u0632 \u0633\u0639\u0629 \u0627\u0644\u0645\u0643\u062f\u0633 \u0641\u064a \u0648\u0638\u064a\u0641\u0629 formexeCommand.\n\nALSED404:\nCVE-2023-26324: \u062b\u063a\u0631\u0629 \u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0641\u064a \u062a\u0637\u0628\u064a\u0642 XiaomiGetApps\n\u0645\u0627 \u0647\u064a \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n\u0647\u064a \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641\u0647\u0627 \u0641\u064a \u062a\u0637\u0628\u064a\u0642 XiaomiGetApps\u060c \u0648\u0647\u0648 \u0627\u0644\u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u0631\u0633\u0645\u064a \u0644\u062a\u062d\u0645\u064a\u0644 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0639\u0644\u0649 \u0647\u0648\u0627\u062a\u0641 \u0634\u0627\u0648\u0645\u064a. \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u062a\u0646\u0641\u064a\u0630 \u0623\u064a \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0639\u0644\u0649 \u062c\u0647\u0627\u0632 \u0627\u0644\u0636\u062d\u064a\u0629\u060c \u0645\u0645\u0627 \u064a\u0639\u0637\u064a\u0647\u0645 \u0633\u064a\u0637\u0631\u0629 \u0643\u0627\u0645\u0644\u0629 \u0639\u0644\u064a\u0647.\n\u0643\u064a\u0641 \u062a\u0639\u0645\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n\u062a\u062d\u062f\u062b \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0628\u0633\u0628\u0628 \u0648\u062c\u0648\u062f \u062e\u0644\u0644 \u0641\u064a \u0622\u0644\u064a\u0629 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u062d\u0629 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u062a\u064a \u064a\u062a\u0645 \u062a\u062d\u0645\u064a\u0644\u0647\u0627 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u062a\u0637\u0628\u064a\u0642. \u0647\u0630\u0627 \u0627\u0644\u062e\u0644\u0644 \u064a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u062a\u0636\u0645\u064a\u0646 \u0643\u0648\u062f \u0636\u0627\u0631 \u062f\u0627\u062e\u0644 \u062d\u0632\u0645\u0629 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u060c \u0648\u0639\u0646\u062f\u0645\u0627 \u064a\u0642\u0648\u0645 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0628\u062a\u062b\u0628\u064a\u062a \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u060c \u064a\u062a\u0645 \u062a\u0646\u0641\u064a\u0630 \u0647\u0630\u0627 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0636\u0627\u0631.\n\u0645\u0627 \u0647\u064a \u0627\u0644\u0645\u062e\u0627\u0637\u0631 \u0627\u0644\u0646\u0627\u062a\u062c\u0629 \u0639\u0646 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n * \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062d\u0633\u0627\u0633\u0629: \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u062c\u0645\u064a\u0639 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0645\u0648\u062c\u0648\u062f\u0629 \u0639\u0644\u0649 \u0627\u0644\u062c\u0647\u0627\u0632\u060c \u0645\u062b\u0644 \u0627\u0644\u0635\u0648\u0631 \u0648\u0627\u0644\u0631\u0633\u0627\u0626\u0644 \u0648\u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u0634\u062e\u0635\u064a\u0629.\n * \u0627\u0644\u062a\u062d\u0643\u0645 \u0627\u0644\u0643\u0627\u0645\u0644 \u0641\u064a \u0627\u0644\u062c\u0647\u0627\u0632: \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0627\u0644\u062a\u062d\u0643\u0645 \u0641\u064a \u0627\u0644\u062c\u0647\u0627\u0632 \u0639\u0646 \u0628\u0639\u062f\u060c \u0648\u062a\u062b\u0628\u064a\u062a \u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0623\u062e\u0631\u0649\u060c \u0648\u062a\u063a\u064a\u064a\u0631 \u0627\u0644\u0625\u0639\u062f\u0627\u062f\u0627\u062a\u060c \u0648\u062d\u062a\u0649 \u062d\u0630\u0641 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a.", "creation_timestamp": "2024-12-13T19:00:23.000000Z"}, {"uuid": "c3c032e8-c79b-4b96-b302-bfb8838cfca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50868", "type": "seen", "source": "https://t.me/kasperskyb2b/1300", "content": "\ud83e\ude79\ud83e\ude79\ud83e\ude79 \u0418\u044e\u043d\u044c\u0441\u043a\u0438\u0439 Patch Tuesday: \u0431\u0435\u0437 \u0447\u0443\u0434\u0435\u0441\n\n\u0421\u0432\u0435\u0436\u0438\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0437\u0430\u043f\u043b\u0430\u0442\u043e\u043a \u0438\u0437 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 58 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f 7 \u0432 Chromium/Edge), \u043d\u0438 \u043e\u0434\u0438\u043d \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0432\u0436\u0438\u0432\u0443\u044e. \u0422\u043e\u043b\u044c\u043a\u043e \u043e\u0434\u043d\u0430 CVE \u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u0435\u0449\u0451 38 \u0438\u043c\u0435\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442 \u0438 12 - \u0441\u0440\u0435\u0434\u043d\u0438\u0439.\n\n\u0412\u043f\u0435\u0440\u0432\u044b\u0435 \u0437\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0447\u0438\u0441\u043b\u043e \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 EoP \u043e\u043f\u0435\u0440\u0435\u0434\u0438\u043b\u043e \u0432\u0441\u0435 \u043f\u0440\u043e\u0447\u0438\u0435. \u041e\u0431\u0449\u0438\u0439 \u0441\u0447\u0451\u0442 \u0442\u0430\u043a\u043e\u0432: EoP - 25, RCE - 18, DoS - 5, \u0435\u0449\u0451 3 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0415\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2023-50868, \u0430\u0442\u0430\u043a\u0430 Keytrap, \u043f\u0430\u0440\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0430\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 DNSSEC. \u041d\u0435\u0432\u0437\u0438\u0440\u0430\u044f \u043d\u0430 \u043c\u0435\u0434\u0438\u0439\u043d\u044b\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0434\u044b\u0440\u044b \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043e.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-30080, CVSS 9.8) \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 MSMQ, \u043e\u043d\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e MSMQ \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0440\u0438\u0441\u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0432\u044b\u0441\u043e\u043a.\n\n\u0421\u0440\u0435\u0434\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 CVE-2024-30064 \u0438 -30068, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u043a\u0430\u043a EoP \u0432 \u044f\u0434\u0440\u0435 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043a\u043e\u0434\u0443 \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0442\u044c \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434. \u0414\u0440\u0443\u0433\u0430\u044f \u043e\u043f\u0430\u0441\u043d\u043e \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0449\u0430\u044f RCE - CVE-2024-30103 \u0432 Outlook, \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0430\u044f \u0438\u0437 \u043f\u0430\u043d\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 DLL \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n #\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "creation_timestamp": "2024-06-13T10:33:43.000000Z"}, {"uuid": "d6211993-ad22-4b69-92b2-b4c8178a19da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/kasperskyb2b/1071", "content": "\ud83d\ude33 \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2023-50164 \u0432 Apache Struts 2 \u2014 \u043f\u043e\u043a\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Apache Struts 2 (CVE-2023-50164 \u0441 CVSS 9.8 \u0438\u0437 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f \u043e\u0442 7 \u0434\u0435\u043a\u0430\u0431\u0440\u044f), \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438.\n\n\u041a\u0430\u043a \u0438 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 Log4shell, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u0435\u0439 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0432\u0441\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0441\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u0431\u0430\u0437\u0435 Struts 2. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0438\u0445 \u044d\u0444\u0444\u0435\u043a\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044e\u0442 Adobe \u0438 Cisco.\n\n\u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 11 \u0434\u0435\u043a\u0430\u0431\u0440\u044f, \u043a\u043e\u0433\u0434\u0430 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043f\u0435\u0440\u0432\u044b\u0439 PoC, \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b. \u041e\u0434\u043d\u0430\u043a\u043e \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435\u0442. \u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044e  \u0441\u043c\u044f\u0433\u0447\u0430\u0435\u0442 \u0442\u043e, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0441\u0442\u043e\u043b\u044c \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u0430, \u043a\u0430\u043a \u0441 \u0434\u044b\u0440\u043e\u0439 Struts 2017 \u0433\u043e\u0434\u0430. \u0410\u0442\u0430\u043a\u0443\u0435\u043c\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u043e\u0431\u043b\u0430\u0434\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u0430 \u0432 \u0442\u043e\u0439 \u0438\u043b\u0438 \u0438\u043d\u043e\u0439 \u0444\u043e\u0440\u043c\u0435.  \u0412\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0435\u0451 \u043d\u0435\u0442, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u043e Struts-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043c\u0430\u0441\u0441\u043e\u0432\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u043a\u0430 \u043a\u0430\u0436\u0435\u0442\u0441\u044f \u043c\u0430\u043b\u043e\u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0439. \n\n\u042d\u0442\u043e \u043d\u0435 \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u0430\u0448\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 Struts \u043d\u0435 \u043d\u0430\u0434\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c, \u043d\u043e \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0435\u0441\u0442\u044c \u0432\u0440\u0435\u043c\u044f. \n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2023-12-19T08:59:16.000000Z"}, {"uuid": "165f0582-1a0c-43e1-ae88-c7a97f322733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50198", "type": "seen", "source": "Telegram/9Ka24mJnDEJB8YMxGZjXjvF0PnKBrzpJ6m4RrlvrFpXrEICk", "content": "", "creation_timestamp": "2025-03-10T19:39:12.000000Z"}, {"uuid": "c8675230-b0ad-4a61-8410-1b9facd43ae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50168", "type": "seen", "source": "Telegram/-e23SVJLSlh03lxWpI8j3nkjPbbpf7D9JFjscWLoxdGmC5IO", "content": "", "creation_timestamp": "2025-03-10T19:39:05.000000Z"}, {"uuid": "86bde85e-6800-4a6d-9cf1-73a5bc9646af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50184", "type": "seen", "source": "https://t.me/cvedetector/20543", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50184 - Apache HTTP Server Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2023-50184 \nPublished : March 17, 2025, 11:15 p.m. | 52\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T01:50:44.000000Z"}, {"uuid": "987fde14-ceca-4b36-8e79-a00729e94437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50316", "type": "seen", "source": "https://t.me/cvedetector/16565", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50316 - IBM Sterling B2B Integrator SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-50316 \nPublished : Jan. 28, 2025, 1:15 a.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1  \nis vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T04:34:42.000000Z"}, {"uuid": "9bd1f755-b6f3-4833-b6d2-12ae380c31ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50835", "type": "seen", "source": "https://t.me/ctinow/156988", "content": "https://ift.tt/yI1h2NZ\nCVE-2023-50835", "creation_timestamp": "2023-12-20T13:53:20.000000Z"}, {"uuid": "e6b4570c-7dca-406f-a095-4ee67e1537b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50089", "type": "seen", "source": "https://t.me/ctinow/156648", "content": "https://ift.tt/NL3SsTu\nCVE-2023-50089 Exploit", "creation_timestamp": "2023-12-19T23:18:53.000000Z"}, {"uuid": "b000086b-ac43-44f7-b239-b669ccac4bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50471", "type": "seen", "source": "https://t.me/ctinow/156647", "content": "https://ift.tt/yPIXZm8\nCVE-2023-50471 Exploit", "creation_timestamp": "2023-12-19T23:18:52.000000Z"}, {"uuid": "ff0f46be-8f39-46ff-a390-76ee2af49339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50469", "type": "seen", "source": "https://t.me/ctinow/156646", "content": "https://ift.tt/5g4s0HI\nCVE-2023-50469 Exploit", "creation_timestamp": "2023-12-19T23:18:51.000000Z"}, {"uuid": "e6a93f12-81b3-405c-b338-349c174a198b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50738", "type": "seen", "source": "https://t.me/cvedetector/15747", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50738 - Lexmark Firmware Downgrade Protection Bypass\", \n  \"Content\": \"CVE ID : CVE-2023-50738 \nPublished : Jan. 17, 2025, 9:15 p.m. | 15\u00a0minutes ago \nDescription : A\u00a0new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to   \noverride this downgrade protection has been identified. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T22:39:16.000000Z"}, {"uuid": "bd9691ed-0e93-4aac-8e6b-e4164fd75f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50739", "type": "seen", "source": "https://t.me/cvedetector/15770", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50739 - Lexmark IPP Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-50739 \nPublished : Jan. 18, 2025, 12:15 a.m. | 37\u00a0minutes ago \nDescription : A\u00a0buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark\u00a0devices. The vulnerability can be leveraged by an attacker to execute arbitrary code. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T02:00:56.000000Z"}, {"uuid": "c28e0e02-faf0-4dbd-ae67-efad150cd477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5011", "type": "seen", "source": "https://t.me/ctinow/157169", "content": "https://ift.tt/dhypLT4\nCVE-2023-5011", "creation_timestamp": "2023-12-20T17:23:59.000000Z"}, {"uuid": "23db7fee-7a9d-441a-bbad-86782f5b6cd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5010", "type": "seen", "source": "https://t.me/ctinow/157168", "content": "https://ift.tt/D9jNxG4\nCVE-2023-5010", "creation_timestamp": "2023-12-20T17:23:58.000000Z"}, {"uuid": "785b6a12-c9b0-41fe-a37b-33f2cc886558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5007", "type": "seen", "source": "https://t.me/ctinow/157167", "content": "https://ift.tt/Rr0gos4\nCVE-2023-5007", "creation_timestamp": "2023-12-20T17:23:57.000000Z"}, {"uuid": "e41064a2-5cbf-4b76-b083-7a1bcdd363a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5082", "type": "seen", "source": "https://t.me/cibsecurity/73649", "content": "\u203c CVE-2023-5082 \u203c\n\nThe History Log by click5 WordPress plugin before 1.0.13 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin users when using the Smash Balloon Social Photo Feed plugin alongside it.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-07T00:26:07.000000Z"}, {"uuid": "9856b4ac-2f6e-47b3-918d-0e4f15f74907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50249", "type": "seen", "source": "https://t.me/ctinow/157083", "content": "https://ift.tt/2VeIjiL\nCVE-2023-50249", "creation_timestamp": "2023-12-20T15:23:34.000000Z"}, {"uuid": "3ae4d675-938d-47ac-885c-d1125df31d4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50309", "type": "seen", "source": "https://t.me/cvedetector/16157", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50309 - IBM Sterling B2B Integrator Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-50309 \nPublished : Jan. 23, 2025, 3:15 a.m. | 39\u00a0minutes ago \nDescription : IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0\u00a0is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T04:56:34.000000Z"}, {"uuid": "58ba4dc5-2c65-4430-980a-e15616e32ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50733", "type": "seen", "source": "https://t.me/cvedetector/16039", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50733 - Lexmark Web Services SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-50733 \nPublished : Jan. 21, 2025, 10:15 p.m. | 18\u00a0minutes ago \nDescription : A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Web Services feature of newer  \nLexmark devices. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T23:40:29.000000Z"}, {"uuid": "43dedd89-c627-42a7-accb-163feefa7aff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50466", "type": "seen", "source": "https://t.me/ctinow/156979", "content": "https://ift.tt/XqWFsRP\nCVE-2023-50466", "creation_timestamp": "2023-12-20T13:53:10.000000Z"}, {"uuid": "0e1148b3-b165-4b00-b3e9-3096299ac4c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50265", "type": "seen", "source": "https://t.me/ctinow/156644", "content": "https://ift.tt/NEmVJ2f\nCVE-2023-50265 Exploit", "creation_timestamp": "2023-12-19T23:18:49.000000Z"}, {"uuid": "6dd950b6-9019-40fc-b687-bb1877bfc94a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50262", "type": "seen", "source": "https://t.me/ctinow/156539", "content": "https://ift.tt/trbdZ3n\nCVE-2023-50262 Exploit", "creation_timestamp": "2023-12-19T19:18:22.000000Z"}, {"uuid": "6dc3f2ea-7178-4745-a3d6-43c80476580b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/ctinow/156480", "content": "https://ift.tt/8VXPYaw\nCVE-2023-50164: A Critical Vulnerability in Apache Struts", "creation_timestamp": "2023-12-19T17:18:19.000000Z"}, {"uuid": "cc94693c-bc88-47e7-be71-9e1f31f146ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50011", "type": "seen", "source": "https://t.me/ctinow/156475", "content": "https://ift.tt/MUCJiHO\nCVE-2023-50011 Exploit", "creation_timestamp": "2023-12-19T17:18:12.000000Z"}, {"uuid": "39b838db-bcc4-4ed9-b12f-05e7aeb1e701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50472", "type": "seen", "source": "https://t.me/ctinow/156649", "content": "https://ift.tt/KiwLohy\nCVE-2023-50472 Exploit", "creation_timestamp": "2023-12-19T23:18:54.000000Z"}, {"uuid": "fecf980b-f025-4d5d-84fd-a1ff32633b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50264", "type": "seen", "source": "https://t.me/ctinow/156645", "content": "https://ift.tt/OyVXHBq\nCVE-2023-50264 Exploit", "creation_timestamp": "2023-12-19T23:18:50.000000Z"}, {"uuid": "96b89304-dd67-46a7-978f-91fe6020180e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50917", "type": "seen", "source": "https://t.me/ctinow/156650", "content": "https://ift.tt/ScwfoUv\nDisclosure of CVE-2023-50917: RCE Vulnerability in MajorDoM", "creation_timestamp": "2023-12-19T23:23:25.000000Z"}, {"uuid": "536d23b7-632d-4b2e-b4fc-8d207ab2c347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50710", "type": "seen", "source": "https://t.me/ctinow/156643", "content": "https://ift.tt/k7MF0uP\nCVE-2023-50710 Exploit", "creation_timestamp": "2023-12-19T23:18:48.000000Z"}, {"uuid": "182e52f7-ac96-440a-9c32-67ba1cc4f485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50017", "type": "seen", "source": "https://t.me/ctinow/156279", "content": "https://ift.tt/ZdfpzlO\nCVE-2023-50017 Exploit", "creation_timestamp": "2023-12-19T08:17:55.000000Z"}, {"uuid": "4d101c0b-e004-44a4-8ce6-e44e07516a6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50268", "type": "seen", "source": "https://t.me/ctinow/156278", "content": "https://ift.tt/preWEcD\nCVE-2023-50268 Exploit", "creation_timestamp": "2023-12-19T08:17:54.000000Z"}, {"uuid": "4118e9ca-f0b1-4d03-bf9b-463521813631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50246", "type": "seen", "source": "https://t.me/ctinow/156277", "content": "https://ift.tt/Q7WiOyV\nCVE-2023-50246 Exploit", "creation_timestamp": "2023-12-19T08:17:52.000000Z"}, {"uuid": "c88bdb75-f001-415a-a81e-04f397d119c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50073", "type": "seen", "source": "https://t.me/ctinow/156184", "content": "https://ift.tt/f3gClNV\nCVE-2023-50073 Exploit", "creation_timestamp": "2023-12-18T23:17:52.000000Z"}, {"uuid": "8b5aa75f-966a-4c69-97a8-f47c98b1b1b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50564", "type": "seen", "source": "https://t.me/ctinow/156182", "content": "https://ift.tt/UTg7Gkh\nCVE-2023-50564 Exploit", "creation_timestamp": "2023-12-18T23:17:49.000000Z"}, {"uuid": "f9f01ac6-0144-4e54-a8d8-e4f5f0ecb040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50565", "type": "seen", "source": "https://t.me/ctinow/156181", "content": "https://ift.tt/ONxyQXp\nCVE-2023-50565 Exploit", "creation_timestamp": "2023-12-18T23:17:48.000000Z"}, {"uuid": "1af3f0f9-6756-4535-8af8-a2632cce6863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50072", "type": "published-proof-of-concept", "source": "Telegram/-n8ya8-aUXXaHR8ytYPxF3dyXlZAyDoVwP1tmQyouhw29g", "content": "", "creation_timestamp": "2023-12-22T14:30:55.000000Z"}, {"uuid": "bf80ae46-a275-4a6f-9b91-1e820acc4197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50850", "type": "seen", "source": "https://t.me/cvedetector/14017", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50850 - WooCommerce Subscriptions Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-50850 \nPublished : Dec. 31, 2024, 1:15 p.m. | 38\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Woo WooCommerce Subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Subscriptions: from n/a before 5.8.0. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T15:23:00.000000Z"}, {"uuid": "1e81ccbe-f4ed-4a40-bee7-8b63707a329e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "Telegram/P2IFnakg0S-zYPqyYCDTYiX7M7jnwP8r94vKkOsOtgybhw", "content": "", "creation_timestamp": "2023-12-20T13:26:28.000000Z"}, {"uuid": "12a5f8a5-b994-43f8-8cef-95a0645c239d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50630", "type": "seen", "source": "https://t.me/cibsecurity/74397", "content": "\u203c\ufe0fCVE-2023-50630\u203c\ufe0f\n\nCross Site Scripting XSS vulnerability in xiweicheng TMS v.2.28.0 allows a remote attacker to execute arbitrary code via a crafted script to the click here function.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:32:30.000000Z"}, {"uuid": "d86f758c-6ee8-4fc8-b617-937252acfcbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50082", "type": "seen", "source": "https://t.me/cibsecurity/74396", "content": "\u203c\ufe0fCVE-2023-50082\u203c\ufe0f\n\nAoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive information via session leakage allows a user to avoid logging into the backend management platform.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:32:25.000000Z"}, {"uuid": "2c6f2c73-ea93-46c0-8cb5-6f38cd64081d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50344", "type": "seen", "source": "https://t.me/cibsecurity/74273", "content": "\u203c\ufe0fCVE-2023-50344\u203c\ufe0f\n\nHCL DRYiCE MyXalytics is impacted by improper access control Unauthenticated File Download vulnerability. An unauthenticated user can download certain files. \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:32:00.000000Z"}, {"uuid": "5e7148f1-2ec2-4e00-96b9-bc1d7c959e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50343", "type": "seen", "source": "https://t.me/cibsecurity/74272", "content": "\u203c\ufe0fCVE-2023-50343\u203c\ufe0f\n\nHCL DRYiCE MyXalytics is impacted by an Improper Access Control Controller APIs vulnerability. Certain API endpoints are accessible to Customer Admin Users that can allow access to sensitive information about other users. \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:31:55.000000Z"}, {"uuid": "405f0cb3-e720-40e2-ba69-016601b3c4d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50342", "type": "seen", "source": "https://t.me/cibsecurity/74271", "content": "\u203c\ufe0fCVE-2023-50342\u203c\ufe0f\n\nHCL DRYiCE MyXalytics is impacted by an Insecure Direct Object Reference IDOR vulnerability. \u00a0A user can obtain certain details about another user as a result of improper access control. \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:31:50.000000Z"}, {"uuid": "dfedb6bd-32b2-4f41-a304-a5dedc44a64e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50341", "type": "seen", "source": "https://t.me/cibsecurity/74270", "content": "\u203c\ufe0fCVE-2023-50341\u203c\ufe0f\n\nHCL DRYiCE MyXalytics is impacted by Improper Access Control Obsolete web pages vulnerability. Discovery of outdated and accessible web pages, reflects a \"Missing Access Control\" vulnerability, which could lead to inadvertent exposure of sensitive information andor exposing a vulnerable endpoint. \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:31:45.000000Z"}, {"uuid": "4184143f-9712-4198-8748-7b612e567a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50090", "type": "seen", "source": "https://t.me/cibsecurity/74340", "content": "\u203c\ufe0fCVE-2023-50090\u203c\ufe0f\n\nArbitrary File Write vulnerability in the saveReportFile method of ureport2 2.2.9 and before allows attackers to write arbitrary files and run arbitrary commands via crafted POST request.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:37:33.000000Z"}, {"uuid": "557ff26f-48e3-4bc2-9674-c669c699ba1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/ctinow/155000", "content": "https://ift.tt/ufEhjXQ\nAttackers are trying to exploit Apache Struts vulnerability (CVE-2023-50164)", "creation_timestamp": "2023-12-14T11:31:37.000000Z"}, {"uuid": "053974a2-b0cd-4538-af4d-8b16a2c375ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/ctinow/155171", "content": "https://ift.tt/Uf9m7Fo\nCVE-2023-50164: Another vulnerability in the widely used Apache Struts2 component", "creation_timestamp": "2023-12-15T00:41:36.000000Z"}, {"uuid": "76f9f27a-7342-4f5c-b161-79c60c3ecdfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/ctinow/154469", "content": "https://ift.tt/lkHG0hP\nApache Fixed Critical RCE Flaw CVE-2023-50164 in Struts 2", "creation_timestamp": "2023-12-11T17:25:08.000000Z"}, {"uuid": "10b68c26-7118-4383-9873-c3a8081b67c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/ctinow/154465", "content": "https://ift.tt/lkHG0hP\nApache fixed Critical RCE flaw CVE-2023-50164 in Struts 2", "creation_timestamp": "2023-12-11T17:03:39.000000Z"}, {"uuid": "e5030966-cd90-48f9-aeff-1a483f2038e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/ctinow/155192", "content": "https://ift.tt/o6wqEI4\nDecoding CVE-2023-50164: Unveiling the Apache Struts File Upload Exploit", "creation_timestamp": "2023-12-15T07:31:48.000000Z"}, {"uuid": "7a91a4d6-757f-40f0-8e58-4662d2aacca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/ctinow/155194", "content": "https://ift.tt/o6wqEI4\nDecoding CVE-2023-50164: Unveiling the Apache Struts File Upload Exploit", "creation_timestamp": "2023-12-15T08:41:42.000000Z"}, {"uuid": "4feea2ff-7838-4514-8eba-210123244b31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5009", "type": "seen", "source": "https://t.me/ctinow/138119", "content": "https://ift.tt/nCIgQho\nGitLab addressed critical vulnerability CVE-2023-5009", "creation_timestamp": "2023-09-20T11:28:44.000000Z"}, {"uuid": "b6a01617-0c42-4bf4-939c-936fcb9a6a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5009", "type": "seen", "source": "https://t.me/ctinow/138702", "content": "https://ift.tt/mB3Cjlk\nGitLab fixes critical vulnerability, patch now! (CVE-2023-5009)", "creation_timestamp": "2023-09-22T12:37:13.000000Z"}, {"uuid": "efc93ae2-37f9-4a78-b782-09754f00deb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/ctinow/154174", "content": "https://ift.tt/Q149lok\nNew RCE vulnerability in Apache Struts 2 fixed, upgrade ASAP (CVE-2023-50164)", "creation_timestamp": "2023-12-08T14:17:07.000000Z"}, {"uuid": "c61257c9-07ad-4709-af53-9324ecc33bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50752", "type": "seen", "source": "https://t.me/cibsecurity/74415", "content": "\u203c\ufe0fCVE-2023-50752\u203c\ufe0f\n\nOnline Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'e' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database.   \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:33:59.000000Z"}, {"uuid": "b7ffeaf0-b88d-4bd7-a115-00a2e63a66a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50743", "type": "seen", "source": "https://t.me/cibsecurity/74414", "content": "\u203c\ufe0fCVE-2023-50743\u203c\ufe0f\n\nOnline Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the registration.php resource does not validate the characters received and they are sent unfiltered to the database.   \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:33:54.000000Z"}, {"uuid": "2e9bd3ed-040a-4198-89ea-64e8e7e10781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50867", "type": "seen", "source": "https://t.me/cibsecurity/74424", "content": "\u203c\ufe0fCVE-2023-50867\u203c\ufe0f\n\nTravel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the signupAction.php resource does not validate the characters received and they are sent unfiltered to the database.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:34:44.000000Z"}, {"uuid": "d10ac48b-10ec-431c-b124-8c73a07985cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50866", "type": "seen", "source": "https://t.me/cibsecurity/74423", "content": "\u203c\ufe0fCVE-2023-50866\u203c\ufe0f\n\nTravel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginAction.php resource does not validate the characters received and they are sent unfiltered to the database.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:34:39.000000Z"}, {"uuid": "59ec7593-4008-4dca-b52b-29df679afa89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50865", "type": "seen", "source": "https://t.me/cibsecurity/74422", "content": "\u203c\ufe0fCVE-2023-50865\u203c\ufe0f\n\nTravel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'city' parameter of the hotelSearch.php resource does not validate the characters received and they are sent unfiltered to the database.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:34:34.000000Z"}, {"uuid": "e97ce91c-bd47-455c-8492-f06e8339b881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50864", "type": "seen", "source": "https://t.me/cibsecurity/74421", "content": "\u203c\ufe0fCVE-2023-50864\u203c\ufe0f\n\nTravel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelId' parameter of the hotelDetails.php resource does not validate the characters received and they are sent unfiltered to the database.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:34:29.000000Z"}, {"uuid": "be341d7d-18f5-47ad-bb13-80075cc28142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50863", "type": "seen", "source": "https://t.me/cibsecurity/74420", "content": "\u203c\ufe0fCVE-2023-50863\u203c\ufe0f\n\nTravel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelIDHidden' parameter of the generateReceipt.php resource does not validate the characters received and they are sent unfiltered to the database.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:34:24.000000Z"}, {"uuid": "15b4b147-8e34-4b02-a66e-3227c1c173f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50862", "type": "seen", "source": "https://t.me/cibsecurity/74419", "content": "\u203c\ufe0fCVE-2023-50862\u203c\ufe0f\n\nTravel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelIDHidden' parameter of the booking.php resource does not validate the characters received and they are sent unfiltered to the database.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:34:19.000000Z"}, {"uuid": "2fcfc794-5ae8-4e10-a032-da485a480d7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50760", "type": "seen", "source": "https://t.me/cibsecurity/74418", "content": "\u203c\ufe0fCVE-2023-50760\u203c\ufe0f\n\nOnline Notice Board System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'f' parameter of userupdateprofilepic.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:34:14.000000Z"}, {"uuid": "43497ad3-8cb9-4110-b080-75a6fb8edb2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50719", "type": "seen", "source": "Telegram/7FLFIf95JGKfNqLMN-RJlQXHIDp1TN87HebSEVaBG6vKRw", "content": "", "creation_timestamp": "2024-06-25T11:22:27.000000Z"}, {"uuid": "dd1fd23b-d9ee-414a-b045-48532b6baada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50753", "type": "seen", "source": "https://t.me/cibsecurity/74416", "content": "\u203c\ufe0fCVE-2023-50753\u203c\ufe0f\n\nOnline Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the userupdateprofile.php resource does not validate the characters received and they are sent unfiltered to the database.   \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:34:04.000000Z"}, {"uuid": "0d8d1b5b-b065-4e21-b8fc-2869d42cd39b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50956", "type": "seen", "source": "https://t.me/cvedetector/13211", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50956 - IBM Storage Defender Unprotected Secret Stores Expos((((\", \n  \"Content\": \"CVE ID : CVE-2023-50956 \nPublished : Dec. 18, 2024, 4:15 p.m. | 36\u00a0minutes ago \nDescription : IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9   \n  \ncould allow a privileged user to obtain highly sensitive user credentials from secret keys that are stored in clear text. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T17:52:43.000000Z"}, {"uuid": "f78798e6-b499-4097-b982-81cbea5fee57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50913", "type": "seen", "source": "https://t.me/cvedetector/12139", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50913 - Oxide control plane software before 5 allows SSRF.\", \n  \"Content\": \"CVE ID : CVE-2023-50913 \nPublished : Dec. 5, 2024, 8:15 p.m. | 41\u00a0minutes ago \nDescription : Oxide control plane software before 5 allows SSRF. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T22:03:21.000000Z"}, {"uuid": "f8a475a5-3628-4784-b4e4-cdba349ca5bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5074", "type": "published-proof-of-concept", "source": "Telegram/s2D4r3HcItMG-UX6ktYGtY57fmA6Pu7uag3qTJuUxALR", "content": "", "creation_timestamp": "2023-10-22T23:43:48.000000Z"}, {"uuid": "5af85801-3c9a-4f54-867f-d585dc25ae71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50092", "type": "seen", "source": "https://t.me/cibsecurity/74318", "content": "\u203c\ufe0fCVE-2023-50092\u203c\ufe0f\n\nAPIIDA API Gateway Manager for Broadcom Layer7 v2023.2 is vulnerable to Cross Site Scripting XSS.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:35:44.000000Z"}, {"uuid": "678d81cf-0585-469c-8e64-67361eb9a486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50256", "type": "seen", "source": "https://t.me/cibsecurity/74347", "content": "\u203c\ufe0fCVE-2023-50256\u203c\ufe0f\n\nFroxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements e.g. surname, company name established by the system. Version 2.1.2 fixes this issue. \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:38:08.000000Z"}, {"uuid": "04ead716-bc79-420a-b9c6-80ebab87e646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50167", "type": "seen", "source": "Telegram/bEFYT_mScjHVeM39hDMpC5TzJnOY-KhV3g9JjDrF7OzoojuC", "content": "", "creation_timestamp": "2025-02-18T21:11:31.000000Z"}, {"uuid": "482310d8-b8e4-4dee-968e-ec1f2abb7f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50355", "type": "seen", "source": "https://t.me/cvedetector/8773", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50355 - HCL Sametime Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-50355 \nPublished : Oct. 23, 2024, 11:15 p.m. | 22\u00a0minutes ago \nDescription : HCL Sametime is impacted by the error messages containing sensitive information.  An attacker can use this information to launch another, more focused attack. \nSeverity: 3.6 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-24T01:46:01.000000Z"}, {"uuid": "392febec-60c0-41cc-a8e8-2645ec0fd115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50310", "type": "seen", "source": "https://t.me/cvedetector/8682", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50310 - IBM CICS Transaction Gateway Authentication Credential Insecure Transmission and Storage\", \n  \"Content\": \"CVE ID : CVE-2023-50310 \nPublished : Oct. 23, 2024, 11:15 a.m. | 38\u00a0minutes ago \nDescription : IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T14:02:37.000000Z"}, {"uuid": "a2bd4751-2963-48a2-a438-8891112198d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50253", "type": "seen", "source": "https://t.me/cibsecurity/74333", "content": "\u203c\ufe0fCVE-2023-50253\u203c\ufe0f\n\nLaf is a cloud development platform. In the Laf version design, the log uses communication with k8s to quickly retrieve logs from the container without the need for additional storage. However, in version 1.0.0beta.13 and prior, this interface does not verify the permissions of the pod, which allows authenticated users to obtain any pod logs under the same namespace through this method, thereby obtaining sensitive information printed in the logs. As of time of publication, no known patched versions exist.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:36:58.000000Z"}, {"uuid": "17db34c2-6c09-4f04-b0cb-4ca8d94a936f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50780", "type": "seen", "source": "https://t.me/cvedetector/7822", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50780 - Apache ActiveMQ Artemis Log4J2 MBean File Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-50780 \nPublished : Oct. 14, 2024, 4:15 p.m. | 37\u00a0minutes ago \nDescription : Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticated Jolokia endpoint. Before version 2.29.0, this also included the Log4J2 MBean. This MBean is not meant for exposure to non-administrative users. This could eventually allow an authenticated attacker to write arbitrary files to the filesystem and indirectly achieve RCE.  \n  \n  \nUsers are recommended to upgrade to version 2.29.0 or later, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-14T19:10:57.000000Z"}, {"uuid": "35a95bb9-0094-4b7e-8289-5d7c09bdfb2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/bizone_channel/1064", "content": "\ud83e\udd65 BI.ZONE WAF \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u0442 \u043e\u0442 RCE \u0432 Apache Struts\n\n\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Struts, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 9,8 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \n\n\u0423\u0433\u0440\u043e\u0437\u0430 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430, \u0447\u0442\u043e \u043d\u0430\u0448\u0430 \u0433\u043b\u0430\u0432\u043d\u0430\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f \u2014 \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435. \u041d\u043e, \u0435\u0441\u043b\u0438 \u043d\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, BI.ZONE WAF \u0437\u0430\u0449\u0438\u0442\u0438\u0442 \u043e\u0442 \u0430\u0442\u0430\u043a \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438.\n\nCVE-2023-50164 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 (parameter pollution). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0433\u0434\u0435 \u0445\u0440\u0430\u043d\u0438\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0435 \u043d\u0430 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e \u0434\u043b\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432. \n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u0432 \u0441\u0442\u0430\u0442\u044c\u0435 \u043d\u0430 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u043c \u0444\u043e\u0440\u0443\u043c\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u043d\u0435 \u0442\u0443\u0434\u0430, \u043a\u0443\u0434\u0430 \u043e\u0436\u0438\u0434\u0430\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a, \u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e \u0441 \u0441\u0435\u0440\u0432\u043b\u0435\u0442\u0430\u043c\u0438 Apache Tomcat: /opt/tomcat/webapps. \u0415\u0441\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u043e\u043a\u0430\u0436\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a \u043d\u0435\u043c\u0443 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0443.\n\n\u041e\u0442\u043c\u0435\u0442\u0438\u043c, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430, \u0435\u0441\u043b\u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Apache Struts \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432: \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u044f uploadFileName. \u041f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 (PoC) \u0443\u0436\u0435 \u0432\u044b\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 Apache Struts 2.5.33 \u0438 Apache Struts 6.3.0.2 \u0438 \u0432\u044b\u0448\u0435, \u0430 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041a\u0430\u043a BI.ZONE WAF \u043f\u043e\u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f\n\u041d\u043e\u0432\u044b\u0435 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 BI.ZONE WAF \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0442 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f uploadFileName \u0438 Content-Disposition: name=\"*\",  \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0442\u0438\u043f\u0430 path traversal \u0438 file uploading \u043d\u0435\u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432.\n\n\u042d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442, \u0447\u0442\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u0431\u0440\u0430\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041a\u0430\u043a \u0438 \u0432\u0441\u0435\u0433\u0434\u0430, \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043d\u0435 \u043c\u0435\u0448\u0430\u044e\u0442 \u0448\u0442\u0430\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0435 \u0432\u0430\u0448\u0438\u0445 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.", "creation_timestamp": "2023-12-20T14:35:49.000000Z"}, {"uuid": "62816ab8-0681-4c7e-8985-2496d1123abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50883", "type": "seen", "source": "https://t.me/cvedetector/5139", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50883 - ONLYOFFICE Docs Sandbox Escape Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-50883 \nPublished : Sept. 9, 2024, 8:15 p.m. | 41\u00a0minutes ago \nDescription : ONLYOFFICE Docs before 8.0.1 allows XSS because a macro is an immediately-invoked function expression (IIFE), and therefore a sandbox escape is possible by directly calling the constructor of the Function object. NOTE: this issue exists because of an incorrect fix for CVE-2021-43446. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-09T23:10:47.000000Z"}, {"uuid": "7917a249-be23-42d8-8f16-d860f7c45320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50883", "type": "seen", "source": "https://t.me/cvedetector/5134", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-44085 - ONLYOFFICE Docs Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-44085 \nPublished : Sept. 9, 2024, 8:15 p.m. | 41\u00a0minutes ago \nDescription : ONLYOFFICE Docs before 8.1.0 allows XSS via a GeneratorFunction Object attack against a macro. This is related to use of an immediately-invoked function expression (IIFE) for a macro. NOTE: this issue exists because of an incorrect fix for CVE-2021-43446 and CVE-2023-50883. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-09T23:10:40.000000Z"}, {"uuid": "a94c3fdc-e0f4-4f64-927e-296068280789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50093", "type": "seen", "source": "https://t.me/cibsecurity/74320", "content": "\u203c\ufe0fCVE-2023-50093\u203c\ufe0f\n\nAPIIDA API Gateway Manager for Broadcom Layer7 v2023.2.2 is vulnerable to Host Header Injection.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:35:54.000000Z"}, {"uuid": "e2984b63-6e55-46d3-b7a7-da5c0c6224ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5000", "type": "seen", "source": "https://t.me/cvedetector/2512", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-5000 - WordPress Horizontal Scrolling Announcements Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-5000 \nPublished : Aug. 6, 2024, 2:15 a.m. | 41\u00a0minutes ago \nDescription : The Horizontal scrolling announcements plugin for WordPress is vulnerable to SQL Injection via the plugin's 'hsas-shortcode' shortcode in versions up to, and including, 2.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with contributor-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T04:58:04.000000Z"}, {"uuid": "d92a383b-204e-44d3-af21-c0256380a2c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50921", "type": "seen", "source": "https://t.me/cibsecurity/74295", "content": "\u203c\ufe0fCVE-2023-50921\u203c\ufe0f\n\nAn issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the adduser interface in the system module to gain root privileges. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300NV2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:33:49.000000Z"}, {"uuid": "7be77c70-2430-464f-921e-1949cf529db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50700", "type": "seen", "source": "https://t.me/cvedetector/1707", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50700 - Deepin DDE File Manager Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-50700 \nPublished : July 26, 2024, 5:15 p.m. | 18\u00a0minutes ago \nDescription : Insecure Permissions vulnerability in Deepin dde-file-manager 6.0.54 and earlier allows privileged operations to be called by unprivileged users via the D-Bus method. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-26T19:42:40.000000Z"}, {"uuid": "623724cc-3888-4721-a8ab-9fdcf56c4c76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5090", "type": "seen", "source": "https://t.me/cibsecurity/73602", "content": "\u203c CVE-2023-5090 \u203c\n\nA flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct access to host x2apic msrs when the guest resets its apic, potentially leading to a denial of service condition.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-06T14:25:48.000000Z"}, {"uuid": "4d22d32e-893d-45d8-8a51-18d11313d2e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50314", "type": "seen", "source": "https://t.me/cvedetector/3196", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50314 - IBM WebSphere Application Server Liberty SSL/TLS Certificate Spoofing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-50314 \nPublished : Aug. 14, 2024, 6:15 p.m. | 28\u00a0minutes ago \nDescription : IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.8 could allow an attacker with access to the network to conduct spoofing attacks.  An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information.  IBM X-Force ID:  274713. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-14T20:44:32.000000Z"}, {"uuid": "29135802-31ea-4314-8937-c25dc2bc811e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50315", "type": "seen", "source": "https://t.me/cvedetector/3191", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50315 - IBM WebSphere Application Server SSL Spoofing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-50315 \nPublished : Aug. 14, 2024, 5:15 p.m. | 29\u00a0minutes ago \nDescription : IBM WebSphere Application Server 8.5 and 9.0 could allow an attacker with access to the network to conduct spoofing attacks.  An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information.  IBM X-Force ID:  274714. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-14T19:54:21.000000Z"}, {"uuid": "290982c6-c3a1-44f2-bff1-865ba1ed74d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50922", "type": "seen", "source": "https://t.me/cibsecurity/74284", "content": "\u203c\ufe0fCVE-2023-50922\u203c\ufe0f\n\nAn issue was discovered on GL.iNet devices through 4.5.0. Attackers who are able to steal the AdminToken cookie can execute arbitrary code by uploading a crontabformatted file to a specific directory and waiting for its execution. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300NV2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:32:54.000000Z"}, {"uuid": "39df28f0-e184-4ffd-8ef8-cd7b8491516b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50351", "type": "seen", "source": "https://t.me/cibsecurity/74266", "content": "\u203c\ufe0fCVE-2023-50351\u203c\ufe0f\n\nHCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data. \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:31:25.000000Z"}, {"uuid": "14058fba-4d37-44a9-b9c0-ba4eafb31f31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50350", "type": "seen", "source": "https://t.me/cibsecurity/74265", "content": "\u203c\ufe0fCVE-2023-50350\u203c\ufe0f\n\nHCL DRYiCE MyXalytics is impacted by the use of a broken cryptographic algorithm for encryption, potentially giving an attacker ability to decrypt sensitive information.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:31:20.000000Z"}, {"uuid": "aa8a7b96-12b9-4611-ba3b-8ab7dffd9c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50348", "type": "seen", "source": "https://t.me/cibsecurity/74264", "content": "\u203c\ufe0fCVE-2023-50348\u203c\ufe0f\n\nHCL DRYiCE MyXalytics is impacted by an improper error handling vulnerability. The application returns detailed error messages that can provide an attacker with insight into the application, system, etc. \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:31:15.000000Z"}, {"uuid": "4afd0806-a0bd-4611-8200-858516e5b04f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50346", "type": "seen", "source": "https://t.me/cibsecurity/74263", "content": "\u203c\ufe0fCVE-2023-50346\u203c\ufe0f\n\nHCL DRYiCE MyXalytics is impacted by an information disclosure vulnerability. Certain endpoints within the application disclose detailed file information. \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:31:10.000000Z"}, {"uuid": "98857aed-491f-40f5-a267-65365db798bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50345", "type": "seen", "source": "https://t.me/cibsecurity/74262", "content": "\u203c\ufe0fCVE-2023-50345\u203c\ufe0f\n\nHCL DRYiCE MyXalytics is impacted by an Open Redirect vulnerability which could allow an attacker to redirect users to malicious sites, potentially leading to phishing attacks or other security threats. \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:31:05.000000Z"}, {"uuid": "f510fcf1-e9ae-46f9-a16c-81318b486860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50806", "type": "seen", "source": "https://t.me/cvedetector/439", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50806 - A vulnerability was discovered in Samsung Mobile P\", \n  \"Content\": \"CVE ID : CVE-2023-50806 \nPublished : July 9, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850 Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380 Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300 that allows out-of-bounds access to a heap buffer in the SIM Proactive Command. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T21:55:41.000000Z"}, {"uuid": "da8c870e-23f3-4533-b832-2f3ec77e84f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50805", "type": "seen", "source": "https://t.me/cvedetector/438", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50805 - A vulnerability was discovered in Samsung Mobile P\", \n  \"Content\": \"CVE ID : CVE-2023-50805 \nPublished : July 9, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300 that allows an out-of-bounds write in the heap in 2G (no auth). \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T21:55:40.000000Z"}, {"uuid": "f4e28842-ef8c-4631-bf87-8584f571f2b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50807", "type": "seen", "source": "https://t.me/cvedetector/437", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50807 - A vulnerability was discovered in Samsung Wearable\", \n  \"Content\": \"CVE ID : CVE-2023-50807 \nPublished : July 9, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability was discovered in Samsung Wearable Processor and Modems with versions Exynos 9110, Exynos Modem 5123, Exynos Modem 5300 that allows an out-of-bounds write in the heap in 2G (no auth). \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T21:55:39.000000Z"}, {"uuid": "3bd366e6-e7c5-4ba0-8531-facb65481290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50179", "type": "seen", "source": "https://t.me/cvedetector/382", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50179 - An improper certificate validation vulnerability [\", \n  \"Content\": \"CVE ID : CVE-2023-50179 \nPublished : July 9, 2024, 4:15 p.m. | 37\u00a0minutes ago \nDescription : An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2 all versions, 7.1 all versions, 7.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and public SDN connectors. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T18:58:10.000000Z"}, {"uuid": "495fb483-750b-4d89-8502-8eadd52ce8df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50181", "type": "seen", "source": "https://t.me/cvedetector/381", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50181 - An improper access control vulnerability [CWE-284]\", \n  \"Content\": \"CVE ID : CVE-2023-50181 \nPublished : July 9, 2024, 4:15 p.m. | 37\u00a0minutes ago \nDescription : An improper access control vulnerability [CWE-284] in Fortinet FortiADC  version 7.4.0 through 7.4.1 and before 7.2.4 allows a read only authenticated attacker to perform some write actions via crafted HTTP or HTTPS requests. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T18:58:06.000000Z"}, {"uuid": "de5b06bb-4845-4a95-aec5-adf2546273d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50178", "type": "seen", "source": "https://t.me/cvedetector/380", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50178 - An improper certificate validation vulnerability [\", \n  \"Content\": \"CVE ID : CVE-2023-50178 \nPublished : July 9, 2024, 4:15 p.m. | 37\u00a0minutes ago \nDescription : An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2.0 through 7.2.3, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions and 6.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and various remote servers such as private SDN connectors and FortiToken Cloud. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T18:58:05.000000Z"}, {"uuid": "2a6b131e-5c87-458d-ad06-93c5800cd608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5088", "type": "seen", "source": "https://t.me/cibsecurity/73532", "content": "\u203c CVE-2023-5088 \u203c\n\nA bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for example, by L2 guests with a virtual disk (vdiskL2) stored on a virtual disk of an L1 (vdiskL1) hypervisor to read and/or write data to LBA 0 of vdiskL1, potentially gaining control of L1 at its next reboot.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T17:23:22.000000Z"}, {"uuid": "ba3c02e4-4c64-41b5-927b-67ed5a7e72d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50304", "type": "seen", "source": "https://t.me/cvedetector/1158", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50304 - IBM Engineering Requirements Management DOORS Web Access XXE Injection\", \n  \"Content\": \"CVE ID : CVE-2023-50304 \nPublished : July 18, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.  IBM X-Force ID:  273335. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T19:18:07.000000Z"}, {"uuid": "eb3a3c9c-0e4c-4083-858e-ea3b0eb36da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50240", "type": "seen", "source": "https://t.me/cvedetector/202", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50240 - Two stack-based buffer overflow vulnerabilities ex\", \n  \"Content\": \"CVE ID : CVE-2023-50240 \nPublished : July 8, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This stack-based buffer overflow is related to the `AdvDefaultPreference` request's parameter. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-08T18:40:49.000000Z"}, {"uuid": "55217a14-edc7-461d-a85e-4e0811239f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50330", "type": "seen", "source": "https://t.me/cvedetector/200", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50330 - A stack-based buffer overflow vulnerability exists\", \n  \"Content\": \"CVE ID : CVE-2023-50330 \nPublished : July 8, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : A stack-based buffer overflow vulnerability exists in the boa getInfo functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to trigger this vulnerability. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-08T18:40:47.000000Z"}, {"uuid": "77059834-afa4-40a4-8832-a23d283ffa75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50239", "type": "seen", "source": "https://t.me/cvedetector/203", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50239 - Two stack-based buffer overflow vulnerabilities ex\", \n  \"Content\": \"CVE ID : CVE-2023-50239 \nPublished : July 8, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This stack-based buffer overflow is related to the `interfacename` request's parameter. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-08T18:40:50.000000Z"}, {"uuid": "cc72eb5d-90b3-45cb-a2d2-abaf3931b54c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50244", "type": "seen", "source": "https://t.me/cvedetector/199", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50244 - Two stack-based buffer overflow vulnerabilities ex\", \n  \"Content\": \"CVE ID : CVE-2023-50244 \nPublished : July 8, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This stack-based buffer overflow is related to the `entry_name` request's parameter. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-08T18:40:45.000000Z"}, {"uuid": "79f5cb6c-7f91-4b26-b416-bf5507ef0d94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50243", "type": "seen", "source": "https://t.me/cvedetector/198", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50243 - Two stack-based buffer overflow vulnerabilities ex\", \n  \"Content\": \"CVE ID : CVE-2023-50243 \nPublished : July 8, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This stack-based buffer overflow is related to the `comment` request's parameter. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-08T18:40:44.000000Z"}, {"uuid": "5266c0a6-79cd-4946-b4e3-8ed8a80e8a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50381", "type": "seen", "source": "https://t.me/cvedetector/197", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50381 - Three os command injection vulnerabilities exist i\", \n  \"Content\": \"CVE ID : CVE-2023-50381 \nPublished : July 8, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `targetAPSsid` request's parameter. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-08T18:40:43.000000Z"}, {"uuid": "21b2e744-c3cd-4d46-93cd-3965d57f8478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50382", "type": "seen", "source": "https://t.me/cvedetector/196", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50382 - Three os command injection vulnerabilities exist i\", \n  \"Content\": \"CVE ID : CVE-2023-50382 \nPublished : July 8, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `peerPin` request's parameter. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-08T18:40:42.000000Z"}, {"uuid": "e64edaad-4281-4d24-b064-452d0090feab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50383", "type": "seen", "source": "https://t.me/cvedetector/195", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-50383 - Three os command injection vulnerabilities exist i\", \n  \"Content\": \"CVE ID : CVE-2023-50383 \nPublished : July 8, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `localPin` request's parameter. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-08T18:40:41.000000Z"}, {"uuid": "a9ac98ae-b84a-4773-ab9f-c1423450d343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "https://t.me/LockBitChannels/56148", "content": "#exploit\nCVE-2024-20328:\nClamAV Command Injection Bug\nhttps://amitschendel.github.io/vulnerabilites/CVE-2024-20328\n\nCVE-2024-24816:\nCKEditor XSS vulnerability\nhttps://github.com/afine-com/CVE-2024-24816\n\nCVE-2023-35080:\nIvanti/Pulse VPN Client Exploit\nhttps://github.com/HopHouse/Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation\n\nCVE-2024-0811:\nChrome pageCapture.saveAsMHTML() Extension API Blocked Origin Bypass\nhttps://packetstormsecurity.com/files/177172/Chrome-chrome.pageCapture.saveAsMHTML-Extension-API-Blocked-Origin-Bypass.html\n\nCVE-2023-50387:\nKeyTrap in DNS/DNSSEC\nhttps://github.com/knqyf263/CVE-2023-50387\n\nCVE-2024-22369:\nApache Camel Unsafe Deserialization\nhttps://github.com/oscerd/CVE-2024-22369\n\nCVE-2024-1708/CVE-2024-1709:\nScreenConnect Authentication Bypass\nhttps://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass\n\nCCE-2024-21413:\nMicrosoft Outlook RCE\nhttps://github.com/Mdusmandasthaheer/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability\n\nCVE-2024-24401:\nNagios Authenticated SQL Injection\nhttps://github.com/MAWK0235/CVE-2024-24401\n\nCVE-2024-1071:\nWordPress Ultimate Member Unauthorized Database Access/SQLi\nhttps://github.com/gbrsh/CVE-2024-1071\n\nCVE-2024-1651:\nTorrentpier RCE Exploit\nhttps://github.com/sharpicx/CVE-2024-1651-PoC\n\nCVE-2023-50386:\nApache Solr Backup/Restore APIs RCE\nhttps://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC\n\nCVE-2024-21762:\nFortiOS 6.0 - 7.4 - OoB/RCE\nhttps://github.com/c0d3b3af/CVE-2024-21762-POC\n\nCVE-2024-26521:\nCE Phoenix v1.0.x Html Injection\nhttps://github.com/hackervegas001/CVE-2024-26521\n\nCVE-2024-21672:\nConfluence Data Center/ Server RCE\nhttps://github.com/swagcrafted/CVE-2024-21672-POC\n\nCVE-2023-49109:\nRCE in Apache Dolphinscheduler\nhttps://xz.aliyun.com/t/13913?time__1311=mqmxnQ0%3D3eqQqGNDQiFbFD9Q7fCKAKx\n\nCVE-2024-21410:\nMS Exchange Privilege Escalation\nhttps://github.com/FreakyM0ndy/CVE-2024-21410-poc", "creation_timestamp": "2024-10-04T00:51:54.000000Z"}, {"uuid": "d07a0774-d118-4d9b-9e5b-fa110f7a207f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "https://t.me/LockBitChannels/56148", "content": "#exploit\nCVE-2024-20328:\nClamAV Command Injection Bug\nhttps://amitschendel.github.io/vulnerabilites/CVE-2024-20328\n\nCVE-2024-24816:\nCKEditor XSS vulnerability\nhttps://github.com/afine-com/CVE-2024-24816\n\nCVE-2023-35080:\nIvanti/Pulse VPN Client Exploit\nhttps://github.com/HopHouse/Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation\n\nCVE-2024-0811:\nChrome pageCapture.saveAsMHTML() Extension API Blocked Origin Bypass\nhttps://packetstormsecurity.com/files/177172/Chrome-chrome.pageCapture.saveAsMHTML-Extension-API-Blocked-Origin-Bypass.html\n\nCVE-2023-50387:\nKeyTrap in DNS/DNSSEC\nhttps://github.com/knqyf263/CVE-2023-50387\n\nCVE-2024-22369:\nApache Camel Unsafe Deserialization\nhttps://github.com/oscerd/CVE-2024-22369\n\nCVE-2024-1708/CVE-2024-1709:\nScreenConnect Authentication Bypass\nhttps://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass\n\nCCE-2024-21413:\nMicrosoft Outlook RCE\nhttps://github.com/Mdusmandasthaheer/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability\n\nCVE-2024-24401:\nNagios Authenticated SQL Injection\nhttps://github.com/MAWK0235/CVE-2024-24401\n\nCVE-2024-1071:\nWordPress Ultimate Member Unauthorized Database Access/SQLi\nhttps://github.com/gbrsh/CVE-2024-1071\n\nCVE-2024-1651:\nTorrentpier RCE Exploit\nhttps://github.com/sharpicx/CVE-2024-1651-PoC\n\nCVE-2023-50386:\nApache Solr Backup/Restore APIs RCE\nhttps://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC\n\nCVE-2024-21762:\nFortiOS 6.0 - 7.4 - OoB/RCE\nhttps://github.com/c0d3b3af/CVE-2024-21762-POC\n\nCVE-2024-26521:\nCE Phoenix v1.0.x Html Injection\nhttps://github.com/hackervegas001/CVE-2024-26521\n\nCVE-2024-21672:\nConfluence Data Center/ Server RCE\nhttps://github.com/swagcrafted/CVE-2024-21672-POC\n\nCVE-2023-49109:\nRCE in Apache Dolphinscheduler\nhttps://xz.aliyun.com/t/13913?time__1311=mqmxnQ0%3D3eqQqGNDQiFbFD9Q7fCKAKx\n\nCVE-2024-21410:\nMS Exchange Privilege Escalation\nhttps://github.com/FreakyM0ndy/CVE-2024-21410-poc", "creation_timestamp": "2024-10-04T00:51:54.000000Z"}, {"uuid": "fd4cf2c1-f5cc-4df4-b7e7-2477e5bc7bc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5035", "type": "seen", "source": "https://t.me/cibsecurity/73462", "content": "\u203c CVE-2023-5035 \u203c\n\nA vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the cookie to be transmitted in plaintext over an HTTP session. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-02T19:48:52.000000Z"}, {"uuid": "6225b005-33be-4ecd-998f-d86a575dfa75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50916", "type": "seen", "source": "https://t.me/HelangMerahGroup/1139", "content": "\u26a0\ufe0f Attention Kyocera & QNAP users: \n\nKyocera addresses dangerous CVE-2023-50916 flaw, preventing unauthorized access. QNAP tackles CVE-2023-39296, safeguarding against crashes. \n\nRead details here: https://thehackernews.com/2024/01/alert-new-vulnerabilities-discovered-in.html", "creation_timestamp": "2024-01-09T15:22:53.000000Z"}, {"uuid": "1e621d71-cd29-415a-8bac-a110bc9fbe2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50969", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/177", "content": "https://www.hoyahaxa.com/2024/03/imperva-waf-bypass-cve-2023-50969.html\n\nBypassing Imperva SecureSphere WAF (CVE-2023-50969)\n#github", "creation_timestamp": "2024-04-02T18:49:27.000000Z"}, {"uuid": "22afcdda-d9c5-464d-ab2d-38e86250335b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "Telegram/m7Q8Qgc84P90zbvy1Sti45h1Xeo_AYlSZWrs16888nRB1w", "content": "", "creation_timestamp": "2024-02-29T15:51:45.000000Z"}, {"uuid": "5f222dea-efb1-48bf-95ac-245dc5d30023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "Telegram/UjWWrL9dfBZ80wZA1xwWKO0XfqZ71I9DdT4Y3Ej6-4L7XfM", "content": "", "creation_timestamp": "2024-04-02T18:45:34.000000Z"}, {"uuid": "2b6f1e69-ef2e-40bd-81b3-ff8d1b352ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "Telegram/hV2GiMrU2Sm7asuyYlZ0kN6YpAqMxkZ0VCk_3gZoYtfD9Mg", "content": "", "creation_timestamp": "2024-04-02T08:29:30.000000Z"}, {"uuid": "5416821b-b3dc-42bd-9ac0-9d9bde93a37b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "https://t.me/LockBitChannels/119126", "content": "#exploit\nCVE-2024-20328:\nClamAV Command Injection Bug\nhttps://amitschendel.github.io/vulnerabilites/CVE-2024-20328\n\nCVE-2024-24816:\nCKEditor XSS vulnerability\nhttps://github.com/afine-com/CVE-2024-24816\n\nCVE-2023-35080:\nIvanti/Pulse VPN Client Exploit\nhttps://github.com/HopHouse/Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation\n\nCVE-2024-0811:\nChrome pageCapture.saveAsMHTML() Extension API Blocked Origin Bypass\nhttps://packetstormsecurity.com/files/177172/Chrome-chrome.pageCapture.saveAsMHTML-Extension-API-Blocked-Origin-Bypass.html\n\nCVE-2023-50387:\nKeyTrap in DNS/DNSSEC\nhttps://github.com/knqyf263/CVE-2023-50387\n\nCVE-2024-22369:\nApache Camel Unsafe Deserialization\nhttps://github.com/oscerd/CVE-2024-22369\n\nCVE-2024-1708/CVE-2024-1709:\nScreenConnect Authentication Bypass\nhttps://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass\n\nCCE-2024-21413:\nMicrosoft Outlook RCE\nhttps://github.com/Mdusmandasthaheer/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability\n\nCVE-2024-24401:\nNagios Authenticated SQL Injection\nhttps://github.com/MAWK0235/CVE-2024-24401\n\nCVE-2024-1071:\nWordPress Ultimate Member Unauthorized Database Access/SQLi\nhttps://github.com/gbrsh/CVE-2024-1071\n\nCVE-2024-1651:\nTorrentpier RCE Exploit\nhttps://github.com/sharpicx/CVE-2024-1651-PoC\n\nCVE-2023-50386:\nApache Solr Backup/Restore APIs RCE\nhttps://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC\n\nCVE-2024-21762:\nFortiOS 6.0 - 7.4 - OoB/RCE\nhttps://github.com/c0d3b3af/CVE-2024-21762-POC\n\nCVE-2024-26521:\nCE Phoenix v1.0.x Html Injection\nhttps://github.com/hackervegas001/CVE-2024-26521\n\nCVE-2024-21672:\nConfluence Data Center/ Server RCE\nhttps://github.com/swagcrafted/CVE-2024-21672-POC\n\nCVE-2023-49109:\nRCE in Apache Dolphinscheduler\nhttps://xz.aliyun.com/t/13913?time__1311=mqmxnQ0%3D3eqQqGNDQiFbFD9Q7fCKAKx\n\nCVE-2024-21410:\nMS Exchange Privilege Escalation\nhttps://github.com/FreakyM0ndy/CVE-2024-21410-poc", "creation_timestamp": "2024-10-04T00:51:53.000000Z"}, {"uuid": "cff7778d-f408-471f-921d-4e362231bf1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "https://t.me/LockBitChannels/119126", "content": "#exploit\nCVE-2024-20328:\nClamAV Command Injection Bug\nhttps://amitschendel.github.io/vulnerabilites/CVE-2024-20328\n\nCVE-2024-24816:\nCKEditor XSS vulnerability\nhttps://github.com/afine-com/CVE-2024-24816\n\nCVE-2023-35080:\nIvanti/Pulse VPN Client Exploit\nhttps://github.com/HopHouse/Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation\n\nCVE-2024-0811:\nChrome pageCapture.saveAsMHTML() Extension API Blocked Origin Bypass\nhttps://packetstormsecurity.com/files/177172/Chrome-chrome.pageCapture.saveAsMHTML-Extension-API-Blocked-Origin-Bypass.html\n\nCVE-2023-50387:\nKeyTrap in DNS/DNSSEC\nhttps://github.com/knqyf263/CVE-2023-50387\n\nCVE-2024-22369:\nApache Camel Unsafe Deserialization\nhttps://github.com/oscerd/CVE-2024-22369\n\nCVE-2024-1708/CVE-2024-1709:\nScreenConnect Authentication Bypass\nhttps://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass\n\nCCE-2024-21413:\nMicrosoft Outlook RCE\nhttps://github.com/Mdusmandasthaheer/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability\n\nCVE-2024-24401:\nNagios Authenticated SQL Injection\nhttps://github.com/MAWK0235/CVE-2024-24401\n\nCVE-2024-1071:\nWordPress Ultimate Member Unauthorized Database Access/SQLi\nhttps://github.com/gbrsh/CVE-2024-1071\n\nCVE-2024-1651:\nTorrentpier RCE Exploit\nhttps://github.com/sharpicx/CVE-2024-1651-PoC\n\nCVE-2023-50386:\nApache Solr Backup/Restore APIs RCE\nhttps://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC\n\nCVE-2024-21762:\nFortiOS 6.0 - 7.4 - OoB/RCE\nhttps://github.com/c0d3b3af/CVE-2024-21762-POC\n\nCVE-2024-26521:\nCE Phoenix v1.0.x Html Injection\nhttps://github.com/hackervegas001/CVE-2024-26521\n\nCVE-2024-21672:\nConfluence Data Center/ Server RCE\nhttps://github.com/swagcrafted/CVE-2024-21672-POC\n\nCVE-2023-49109:\nRCE in Apache Dolphinscheduler\nhttps://xz.aliyun.com/t/13913?time__1311=mqmxnQ0%3D3eqQqGNDQiFbFD9Q7fCKAKx\n\nCVE-2024-21410:\nMS Exchange Privilege Escalation\nhttps://github.com/FreakyM0ndy/CVE-2024-21410-poc", "creation_timestamp": "2024-10-04T00:51:53.000000Z"}, {"uuid": "15fd0930-4f05-401b-b099-a40bf2cba408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50719", "type": "seen", "source": "https://t.me/realLulzSec/1070", "content": "CVE-2023-50719\n\nGET  /bin/view/Main/Search?r=1&text=propertyvalue%3A%3F*%20AND%20reference%3A*.password&f_locale=en&f_locale=\n\nGET  /xwiki/bin/view/Main/Search?r=1&text=propertyvalue%3A%3F*%20AND%20reference%3A*.password&f_locale=en&f_locale=\n\n#exploit  #poc", "creation_timestamp": "2024-06-25T11:23:16.000000Z"}, {"uuid": "1a62184c-4371-4c9a-835c-9939c5824239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50719", "type": "seen", "source": "https://t.me/realLulzSec/10111", "content": "CVE-2023-50719\n\nGET  /bin/view/Main/Search?r=1&text=propertyvalue%3A%3F*%20AND%20reference%3A*.password&f_locale=en&f_locale=\n\nGET  /xwiki/bin/view/Main/Search?r=1&text=propertyvalue%3A%3F*%20AND%20reference%3A*.password&f_locale=en&f_locale=\n\n#exploit  #poc", "creation_timestamp": "2024-06-25T11:23:16.000000Z"}, {"uuid": "89000745-d594-4388-aae6-2d10efd170b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50916", "type": "seen", "source": "Telegram/XLot49RvtY4rpuiqiwISomStKGkWZTLY0D8ABalYd2R3Yw", "content": "", "creation_timestamp": "2024-03-01T07:47:43.000000Z"}, {"uuid": "50e935de-dc96-42c8-9873-68fac7217f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50903", "type": "seen", "source": "Telegram/yw_NHyCPk80ll0sACm6eM4KLJk2BztzPP7N7OTmlMNm4jBsS", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "fc687fe2-1135-428f-a4e7-53c322dcdcd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5098", "type": "seen", "source": "https://t.me/cibsecurity/73243", "content": "\u203c CVE-2023-5098 \u203c\n\nThe Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges (like subscribers) from overwriting any options on a site with the string \"true\", which could lead to a variety of outcomes, including DoS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-31T17:21:15.000000Z"}, {"uuid": "07ee83d4-e515-496a-974a-75432cbe78ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5057", "type": "seen", "source": "https://t.me/cibsecurity/72365", "content": "\u203c CVE-2023-5057 \u203c\n\nThe ActivityPub WordPress plugin before 1.0.0 does not escape user metadata before outputting them in mentions, which could allow users with a role of Contributor and above to perform Stored XSS attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:38:14.000000Z"}, {"uuid": "5ada919c-3457-4683-9310-74dfaf17c063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5073", "type": "seen", "source": "https://t.me/cibsecurity/73223", "content": "\u203c CVE-2023-5073 \u203c\n\nThe iframe forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'iframe' shortcode in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-31T15:50:55.000000Z"}, {"uuid": "6d98fe87-c9f0-4d0f-82dd-fdf7b0ea5a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5099", "type": "seen", "source": "https://t.me/cibsecurity/73220", "content": "\u203c CVE-2023-5099 \u203c\n\nThe HTML filter and csv-file search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.7 via the 'src' attribute of the 'csvsearch' shortcode. This allows authenticated attackers, with contributor-level permissions and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u00e2\u20ac\u0153safe\u00e2\u20ac\ufffd file types can be uploaded and included.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-31T15:50:52.000000Z"}, {"uuid": "77b47ad2-91b5-4bfc-aaa9-43c02fdefe0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5086", "type": "seen", "source": "https://t.me/cibsecurity/72670", "content": "\u203c CVE-2023-5086 \u203c\n\nThe Copy Anything to Clipboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'copy' shortcode in versions up to, and including, 2.6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-20T17:21:05.000000Z"}, {"uuid": "93c2e4fb-1a96-4d0b-95c4-670a8309359a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50306", "type": "seen", "source": "Telegram/vlOb51z3yvxHJ6ZY053oDobbLjW6eIzTuv3Jjj9R6we98lvc", "content": "", "creation_timestamp": "2025-02-14T10:05:08.000000Z"}, {"uuid": "c8591fde-e92e-49ac-9ea2-fab49312b96e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50316", "type": "seen", "source": "Telegram/YA1cLJ-Px7QP7txmJd_kSMLbQzqi0d7EVyakaRShz9BioKvH", "content": "", "creation_timestamp": "2025-01-28T03:22:55.000000Z"}, {"uuid": "858c9dac-81e5-4ba0-95bc-689fe29a23b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5051", "type": "seen", "source": "Telegram/yWdt-TOI5G6LtG1mcPOwPYipU-gdNlbQN_h9wOs9qmjh1Q", "content": "", "creation_timestamp": "2023-10-27T12:27:48.000000Z"}, {"uuid": "6ddcb09d-ba1e-4df2-985f-0f4970520fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50905", "type": "seen", "source": "Telegram/W9PJnvrwy8CsFFuM9mweKEHzwZSHVTfBsUbSx10chmudNBV4", "content": "", "creation_timestamp": "2024-02-29T06:57:52.000000Z"}, {"uuid": "abd7000a-6484-4347-a002-99ae1adc32bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "Telegram/CRo72oop6ZwQnESqwzNS9o-UvXAtRRZBbTaMpkpQIbIEQGCv", "content": "", "creation_timestamp": "2025-01-19T09:05:11.000000Z"}, {"uuid": "01f0dc12-bb97-4034-9a01-7b23b5b24128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "Telegram/CRo72oop6ZwQnESqwzNS9o-UvXAtRRZBbTaMpkpQIbIEQGCv", "content": "", "creation_timestamp": "2025-01-19T09:05:11.000000Z"}, {"uuid": "873ab5cc-49bc-4660-af67-569d99524edb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "Telegram/1o3RyjbxkBAdqVV1IakPcUVDj3AIfLmG662gmZzR_AzpiWSm", "content": "", "creation_timestamp": "2025-01-20T11:03:21.000000Z"}, {"uuid": "a314f0ae-080f-4c89-86f6-dddb20d4f5df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "Telegram/sSOYy9sa0Jc9yTev23pVTCXx5ZwCCV54W3-F49CmFMjcWAGd", "content": "", "creation_timestamp": "2025-01-19T10:45:19.000000Z"}, {"uuid": "adefc0bd-e625-4491-b2ce-bf64d1f06a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "Telegram/sSOYy9sa0Jc9yTev23pVTCXx5ZwCCV54W3-F49CmFMjcWAGd", "content": "", "creation_timestamp": "2025-01-19T10:45:19.000000Z"}, {"uuid": "18915d02-eae1-4510-9f05-6010dd66ed3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "Telegram/m_uXFR_n3tw3cdqXp4eNTFp75GNkXoZP5JCdghj_BLdvWjAh", "content": "", "creation_timestamp": "2025-01-19T10:54:11.000000Z"}, {"uuid": "237380c0-710e-419d-920a-69e788536395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "Telegram/m_uXFR_n3tw3cdqXp4eNTFp75GNkXoZP5JCdghj_BLdvWjAh", "content": "", "creation_timestamp": "2025-01-19T10:54:11.000000Z"}, {"uuid": "ba757a8c-d54e-4f45-9b06-166ea2da1452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "Telegram/1o3RyjbxkBAdqVV1IakPcUVDj3AIfLmG662gmZzR_AzpiWSm", "content": "", "creation_timestamp": "2025-01-20T11:03:21.000000Z"}, {"uuid": "5617cb6c-fa7d-4c5e-bd0b-510c53e8a625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "Telegram/UrNq84zyBC1oMAufBesPTpXAbedIsqXaSNJFq3mfmDUScAM", "content": "", "creation_timestamp": "2024-10-04T00:51:11.000000Z"}, {"uuid": "a33652fb-83b7-498b-bfd0-ac8f4a6417bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "Telegram/UrNq84zyBC1oMAufBesPTpXAbedIsqXaSNJFq3mfmDUScAM", "content": "", "creation_timestamp": "2024-10-04T00:51:11.000000Z"}, {"uuid": "3778af15-4589-420d-875b-f34e28fc1b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "Telegram/V1VUnV7rs7gBAtSdtSG9YU8DOLHIzu1kUZjtLh94w5_yW5C9", "content": "", "creation_timestamp": "2024-12-22T22:15:30.000000Z"}, {"uuid": "e74054e9-4d40-4147-b6bf-4cf8f72514ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "Telegram/V1VUnV7rs7gBAtSdtSG9YU8DOLHIzu1kUZjtLh94w5_yW5C9", "content": "", "creation_timestamp": "2024-12-22T22:15:30.000000Z"}, {"uuid": "626cc594-ad80-4fc9-8695-f32e7548b5f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50916", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/3089", "content": "\u26a0\ufe0f Attention Kyocera & QNAP users: \n\nKyocera addresses dangerous CVE-2023-50916 flaw, preventing unauthorized access. QNAP tackles CVE-2023-39296, safeguarding against crashes. \n\nRead details here: https://thehackernews.com/2024/01/alert-new-vulnerabilities-discovered-in.html", "creation_timestamp": "2024-01-09T15:29:06.000000Z"}, {"uuid": "91dbcb90-44d2-4edc-8b3a-58ecf48a875b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/2917", "content": "\u26a0\ufe0f Urgent Update: Apache warns of a critical RCE flaw in Struts 2 web app framework (CVE-2023-50164) that could lead to remote code execution. \n \nFind details here: https://thehackernews.com/2023/12/new-critical-rce-vulnerability.html \n \nUpgrade to patched versions now to prevent potential breaches.", "creation_timestamp": "2023-12-12T07:49:02.000000Z"}, {"uuid": "7c7195ba-7034-4c73-a243-648d3e4b27e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50072", "type": "published-proof-of-concept", "source": "Telegram/Ao0ZcAZMIyMaZ_PjlIDeclOLGtWyrbuWud4kTDgLYHNTTg", "content": "", "creation_timestamp": "2023-12-22T15:33:28.000000Z"}, {"uuid": "5dacfe49-50a2-4776-8435-2022f487d266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "seen", "source": "https://t.me/arpsyndicate/4820", "content": "#ExploitObserverAlert\n\nCVE-2023-50386\n\nDESCRIPTION: Exploit Observer has 20 entries in 6 file formats related to CVE-2023-50386. Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1.  In the affected versions, Solr ConfigSets accepted Java jar and class files to be uploaded through the ConfigSets API. When backing up Solr Collections, these configSet files would be saved to disk when using the LocalFileSystemRepository (the default for backups). If the backup was saved to a directory that Solr uses in its ClassPath/ClassLoaders, then the jar and class files would be available to use with any ConfigSet, trusted or untrusted.  When Solr is run in a secure way (Authorization enabled), as is strongly suggested, this vulnerability is limited to extending the Backup permissions with the ability to add libraries. Users are recommended to upgrade to version 8.11.3 or 9.4.1, which fix the issue. In these versions, the following protections have been added:    *  Users are no longer able to upload files to a configSet that could be executed via a Java ClassLoader.   *  The Backup API restricts saving backups to directories that are used in the ClassLoader.\n\nFIRST-EPSS: 0.872420000\nNVD-IS: 5.9\nNVD-ES: 2.8\nARPS-PRIORITY: 0.9796416", "creation_timestamp": "2024-04-24T21:13:06.000000Z"}, {"uuid": "553055a7-efd0-4582-8d0a-3503ed613284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50868", "type": "seen", "source": "https://t.me/arpsyndicate/4656", "content": "#ExploitObserverAlert\n\nCVE-2023-50868\n\nDESCRIPTION: Exploit Observer has 37 entries in 8 file formats related to CVE-2023-50868. The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.\n\nFIRST-EPSS: 0.000460000\nARPS-EXPLOITABILITY: 0.7531041", "creation_timestamp": "2024-04-13T13:04:10.000000Z"}, {"uuid": "d73cbf14-12a3-4aeb-a6fe-7e2060acb1db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50966", "type": "seen", "source": "https://t.me/arpsyndicate/4588", "content": "#ExploitObserverAlert\n\nCVE-2023-50966\n\nDESCRIPTION: Exploit Observer has 9 entries in 3 file formats related to CVE-2023-50966. erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value in a JOSE header.\n\nFIRST-EPSS: 0.000450000\nARPS-EXPLOITABILITY: 0.6065053", "creation_timestamp": "2024-04-12T10:19:55.000000Z"}, {"uuid": "95dabc18-12d2-4cdb-81fb-e62f89f39482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50071", "type": "published-proof-of-concept", "source": "https://t.me/arpsyndicate/4144", "content": "#ExploitObserverAlert\n\nEDB-51862\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to EDB-51862. CVE-2023-50071 - Multiple SQL Injection", "creation_timestamp": "2024-03-08T02:10:31.000000Z"}, {"uuid": "32563292-1daf-47a2-88f8-c7bdd50ae71c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50268", "type": "seen", "source": "https://t.me/arpsyndicate/4593", "content": "#ExploitObserverAlert\n\nCVE-2023-50268\n\nDESCRIPTION: Exploit Observer has 10 entries in 3 file formats related to CVE-2023-50268. jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue.\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 3.6\nNVD-ES: 1.8\nARPS-EXPLOITABILITY: 0.5959611", "creation_timestamp": "2024-04-12T10:42:47.000000Z"}, {"uuid": "f65d04f3-0720-4006-ad5e-1de4cda4d272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50246", "type": "seen", "source": "https://t.me/arpsyndicate/4560", "content": "#ExploitObserverAlert\n\nCVE-2023-50246\n\nDESCRIPTION: Exploit Observer has 11 entries in 3 file formats related to CVE-2023-50246. jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue.\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 3.6\nNVD-ES: 1.8\nARPS-EXPLOITABILITY: 0.5960356", "creation_timestamp": "2024-04-12T08:09:11.000000Z"}, {"uuid": "caedd204-104e-4a09-acde-fcef49451b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50677", "type": "seen", "source": "https://t.me/arpsyndicate/4429", "content": "#ExploitObserverAlert\n\nCVE-2023-50677\n\nDESCRIPTION: Exploit Observer has 11 entries in 4 file formats related to CVE-2023-50677. An issue in NETGEAR-DGND4000 v.1.1.00.15_1.00.15 allows a remote attacker to escalate privileges via the next_file parameter to the /setup.cgi component.\n\nFIRST-EPSS: 0.000000000", "creation_timestamp": "2024-04-09T21:35:40.000000Z"}, {"uuid": "9eb89f92-3495-40b6-acd1-6ebeae7c67cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5089", "type": "seen", "source": "https://t.me/arpsyndicate/4184", "content": "#ExploitObserverAlert\n\nPD/http/cves/2023/CVE-2023-5089\n\nDESCRIPTION: Exploit Observer has 9 entries in 4 file formats related to PD/http/cves/2023/CVE-2023-5089. The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled.", "creation_timestamp": "2024-03-13T01:32:06.000000Z"}, {"uuid": "e83c1133-4836-45f2-a62f-e2d7be81e337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50290", "type": "seen", "source": "https://t.me/arpsyndicate/3071", "content": "#ExploitObserverAlert\n\nCVE-2023-50290\n\nDESCRIPTION: Exploit Observer has 5 entries in 4 file formats related to CVE-2023-50290. Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designed to work for known secret Java system properties. Environment variables cannot be strictly defined in Solr, like Java system properties can be, and may be set for the entire host,\u00a0unlike Java system properties which are set per-Java-proccess.  The Solr Metrics API is protected by the \"metrics-read\" permission. Therefore, Solr Clouds with Authorization setup will only be vulnerable via users with the \"metrics-read\" permission. This issue affects Apache Solr: from 9.0.0 before 9.3.0.  Users are recommended to upgrade to version 9.3.0 or later, in which environment variables are not published via the Metrics API.\n\nFIRST-EPSS: 0.054520000\nNVD-IS: 3.6\nNVD-ES: 2.8", "creation_timestamp": "2024-01-26T21:06:23.000000Z"}, {"uuid": "957e00c6-a80a-470a-b926-a892306cb379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50944", "type": "seen", "source": "https://t.me/arpsyndicate/2984", "content": "#ExploitObserverAlert\n\nCVE-2023-50944\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2023-50944. Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source code of a DAG to which they don't have access.\u00a0This vulnerability is considered low since it requires an authenticated user to exploit it. Users are recommended to upgrade to version 2.8.1, which fixes this issue.", "creation_timestamp": "2024-01-26T15:30:41.000000Z"}, {"uuid": "3558bab9-a3c7-45c8-bcb7-bb2a09b0f465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50943", "type": "seen", "source": "https://t.me/arpsyndicate/3115", "content": "#ExploitObserverAlert\n\nCVE-2023-50943\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2023-50943. Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of \"enable_xcom_pickling=False\" configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.", "creation_timestamp": "2024-01-26T23:31:34.000000Z"}, {"uuid": "a56cc0b7-5962-4b3d-ada9-df4ee4222384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50256", "type": "seen", "source": "https://t.me/arpsyndicate/3078", "content": "#ExploitObserverAlert\n\nCVE-2023-50256\n\nDESCRIPTION: Exploit Observer has 4 entries in 4 file formats related to CVE-2023-50256. Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements (e.g. surname, company name) established by the system. Version 2.1.2 fixes this issue.\n\nFIRST-EPSS: 0.000520000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-01-26T21:24:26.000000Z"}, {"uuid": "62ae0dfa-53d3-4842-9e04-f8b527c91ea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5045", "type": "seen", "source": "https://t.me/cibsecurity/72170", "content": "\u203c CVE-2023-5045 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Kayisi allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Kayisi: before 1286.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-12T16:23:11.000000Z"}, {"uuid": "5fb078ee-d4bd-4d24-9f19-f615049a7068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50071", "type": "seen", "source": "https://t.me/arpsyndicate/2261", "content": "#ExploitObserverAlert\n\nCVE-2023-50071\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-50071. Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_department via id or name.", "creation_timestamp": "2023-12-31T00:00:04.000000Z"}, {"uuid": "af4ce96a-9050-4eda-a3f2-f29ac2c33036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50332", "type": "seen", "source": "https://t.me/arpsyndicate/2181", "content": "#ExploitObserverAlert\n\nCVE-2023-50332\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-50332. Improper authorization vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.0.6. If this vulnerability is exploited, a user may delete or suspend its own account without the user's intention.", "creation_timestamp": "2023-12-28T02:54:22.000000Z"}, {"uuid": "1afb5971-20ab-43d6-a7fa-78a88ff37a2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50090", "type": "seen", "source": "https://t.me/arpsyndicate/2497", "content": "#ExploitObserverAlert\n\nCVE-2023-50090\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-50090. Arbitrary File Write vulnerability in the saveReportFile method of ureport2 2.2.9 and before allows attackers to write arbitrary files and run arbitrary commands via crafted POST request.", "creation_timestamp": "2024-01-05T16:58:40.000000Z"}, {"uuid": "d0456328-0b91-43eb-b922-6515f52a19ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50093", "type": "seen", "source": "https://t.me/arpsyndicate/2488", "content": "#ExploitObserverAlert\n\nCVE-2023-50093\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-50093. APIIDA API Gateway Manager for Broadcom Layer7 v2023.2.2 is vulnerable to Host Header Injection.", "creation_timestamp": "2024-01-05T15:11:10.000000Z"}, {"uuid": "886da144-5f02-4fd6-a28f-832ff97538cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50765", "type": "seen", "source": "https://t.me/arpsyndicate/2429", "content": "#ExploitObserverAlert\n\nCVE-2023-50765\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-50765. A missing permission check in Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier allows attackers with Overall/Read permission to read the contents of a Groovy script by knowing its ID.\n\nFIRST-EPSS: 0.000440000\nNVD-IS: 1.4\nNVD-ES: 2.8", "creation_timestamp": "2024-01-04T04:25:47.000000Z"}, {"uuid": "e45dbc97-79c0-480f-9b08-c5365d7eba9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50863", "type": "seen", "source": "https://t.me/arpsyndicate/2568", "content": "#ExploitObserverAlert\n\nCVE-2023-50863\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-50863. Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelIDHidden' parameter of the generateReceipt.php resource does not validate the characters received and they are sent unfiltered to the database.\n\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-06T18:36:05.000000Z"}, {"uuid": "f3d40dbb-0922-4c9f-8c1a-b9d93354715b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50290", "type": "seen", "source": "https://t.me/arpsyndicate/2931", "content": "#ExploitObserverAlert\n\nPD/http/cves/2023/CVE-2023-50290\n\nDESCRIPTION: Exploit Observer has 3 entries in 3 file formats related to PD/HTTP/CVES/2023/CVE-2023-50290. Exposure of Sensitive Information to an Unauthorized Actor Vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users can specify which environment variables to hide, however, the default list is designed to work for known secret Java system properties. Environment variables cannot be strictly defined in Solr, like Java system properties can be, and may be set for the entire host,unlike Java system properties which are set per-Java-proccess.", "creation_timestamp": "2024-01-19T14:20:31.000000Z"}, {"uuid": "9f86e83e-0b5b-4fa5-b7a0-d7494afeae4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50752", "type": "seen", "source": "https://t.me/arpsyndicate/2555", "content": "#ExploitObserverAlert\n\nCVE-2023-50752\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-50752. Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'e' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database.\n\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-06T16:12:47.000000Z"}, {"uuid": "f3b2e509-0d0f-4c92-81a1-dd31ac7a612d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50743", "type": "seen", "source": "https://t.me/arpsyndicate/2548", "content": "#ExploitObserverAlert\n\nCVE-2023-50743\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-50743. Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the registration.php resource does not validate the characters received and they are sent unfiltered to the database.\n\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-06T14:55:39.000000Z"}, {"uuid": "75da0f38-69a0-4cca-ad1a-4eb2f43195aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50564", "type": "seen", "source": "https://t.me/arpsyndicate/2441", "content": "#ExploitObserverAlert\n\nCVE-2023-50564\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-50564. An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file.\n\nFIRST-EPSS: 0.000550000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2024-01-04T06:06:59.000000Z"}, {"uuid": "9bef1f46-be95-41a4-addf-52fa77e0c338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/arpsyndicate/4918", "content": "#ExploitObserverAlert\n\nCVE-2023-50387\n\nDESCRIPTION: Exploit Observer has 86 entries in 13 file formats related to CVE-2023-50387. Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.\n\nFIRST-EPSS: 0.036600000\nNVD-IS: 3.6\nNVD-ES: 3.9\nARPS-PRIORITY: 0.7316946", "creation_timestamp": "2024-05-02T23:26:15.000000Z"}, {"uuid": "dffd9884-1cce-4181-b141-0571a60f04d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50866", "type": "seen", "source": "https://t.me/arpsyndicate/2545", "content": "#ExploitObserverAlert\n\nCVE-2023-50866\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-50866. Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginAction.php resource does not validate the characters received and they are sent unfiltered to the database.\n\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-06T14:10:02.000000Z"}, {"uuid": "674304ac-5e97-48c1-af7c-f0922f044689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50867", "type": "seen", "source": "https://t.me/arpsyndicate/2589", "content": "#ExploitObserverAlert\n\nCVE-2023-50867\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-50867. Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the signupAction.php resource does not validate the characters received and they are sent unfiltered to the database.\n\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-06T23:39:38.000000Z"}, {"uuid": "dda1b45d-2ef4-4d7a-80ba-2ad1511b1a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50923", "type": "seen", "source": "https://t.me/arpsyndicate/3925", "content": "#ExploitObserverAlert\n\nCVE-2023-50923\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2023-50923. In QUIC in RFC 9000, the Latency Spin Bit specification (section 17.4) does not strictly constrain the bit value when the feature is disabled, which might allow remote attackers to construct a covert channel with data represented as changes to the bit value. NOTE: The \"Sheridan, S., Keane, A. (2015). In Proceedings of the 14th European Conference on Cyber Warfare and Security (ECCWS), University of Hertfordshire, Hatfield, UK.\" paper says \"Modern Internet communication protocols provide an almost infinite number of ways in which data can be hidden or embed whithin seemingly normal network traffic.\"\n\nFIRST-EPSS: 0.000450000", "creation_timestamp": "2024-02-22T04:19:58.000000Z"}, {"uuid": "ddfe4082-ad79-4145-846b-95733034e0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50639", "type": "seen", "source": "https://t.me/arpsyndicate/2407", "content": "#ExploitObserverAlert\n\nCVE-2023-50639\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-50639. Cross Site Scripting (XSS) vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page.\n\nFIRST-EPSS: 0.000450000\nNVD-IS: 2.7\nNVD-ES: 2.3", "creation_timestamp": "2024-01-04T02:18:53.000000Z"}, {"uuid": "b52156e4-e23f-46f7-a4cf-1aae2a2a4d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50092", "type": "seen", "source": "https://t.me/arpsyndicate/2528", "content": "#ExploitObserverAlert\n\nCVE-2023-50092\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-50092. APIIDA API Gateway Manager for Broadcom Layer7 v2023.2 is vulnerable to Cross Site Scripting (XSS).", "creation_timestamp": "2024-01-05T21:32:36.000000Z"}, {"uuid": "e1115ee1-d474-46af-b5f4-ca3b1f822ac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50921", "type": "seen", "source": "https://t.me/arpsyndicate/2478", "content": "#ExploitObserverAlert\n\nCVE-2023-50921\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-50921. An issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the add_user interface in the system module to gain root privileges. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7.", "creation_timestamp": "2024-01-05T13:52:01.000000Z"}, {"uuid": "d2127da6-0ce7-446a-8ca0-0d91df850546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50253", "type": "seen", "source": "https://t.me/arpsyndicate/2476", "content": "#ExploitObserverAlert\n\nCVE-2023-50253\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-50253. Laf is a cloud development platform. In the Laf version design, the log uses communication with k8s to quickly retrieve logs from the container without the need for additional storage. However, in version 1.0.0-beta.13 and prior, this interface does not verify the permissions of the pod, which allows authenticated users to obtain any pod logs under the same namespace through this method, thereby obtaining sensitive information printed in the logs. As of time of publication, no known patched versions exist.", "creation_timestamp": "2024-01-05T13:35:54.000000Z"}, {"uuid": "bc1c24bd-fc52-4e45-b990-3ef66a55a322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50256", "type": "seen", "source": "https://t.me/arpsyndicate/2470", "content": "#ExploitObserverAlert\n\nCVE-2023-50256\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-50256. Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements (e.g. surname, company name) established by the system. Version 2.1.2 fixes this issue.", "creation_timestamp": "2024-01-05T12:04:16.000000Z"}, {"uuid": "cd97059a-4518-458e-ad54-70cfc3f355ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50070", "type": "seen", "source": "https://t.me/arpsyndicate/2272", "content": "#ExploitObserverAlert\n\nCVE-2023-50070\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-50070. Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket via department_id, customer_id, and subject.", "creation_timestamp": "2023-12-31T02:03:35.000000Z"}, {"uuid": "3c09f394-c3ab-4b50-a713-b9ede1a68429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50175", "type": "seen", "source": "https://t.me/arpsyndicate/2182", "content": "#ExploitObserverAlert\n\nCVE-2023-50175\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-50175. Stored cross-site scripting vulnerability exists in the App Settings (/admin/app) page, the Markdown Settings (/admin/markdown) page, and the Customize (/admin/customize) page of GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.", "creation_timestamp": "2023-12-28T02:58:48.000000Z"}, {"uuid": "436c4822-6fea-41d0-949e-7ca547933a24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50955", "type": "seen", "source": "https://t.me/arpsyndicate/4060", "content": "#ExploitObserverAlert\n\nCVE-2023-50955\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2023-50955. IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system.  IBM X-Force ID:  275777.", "creation_timestamp": "2024-02-22T21:34:52.000000Z"}, {"uuid": "b948c301-494e-4f95-9afa-71d3b1badc9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "Telegram/MI65lLGsaGTIv40PK1J154YyMiL63QZNJWuw9XlT_YRsFb40", "content": "", "creation_timestamp": "2025-01-19T09:05:12.000000Z"}, {"uuid": "f4140097-8c2a-4a52-a660-a904115e641a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "Telegram/1yNdYtjM167PWJ8z4QCuhWfayRW6CDLYSnp7378ajV5EDt8", "content": "", "creation_timestamp": "2024-10-04T00:51:08.000000Z"}, {"uuid": "f1813d6e-359c-4bf5-bfef-dbe88f404e42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50294", "type": "seen", "source": "https://t.me/arpsyndicate/2169", "content": "#ExploitObserverAlert\n\nCVE-2023-50294\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-50294. The App Settings (/admin/app) page in GROWI versions prior to v6.0.6 stores sensitive information in cleartext form. As a result, the Secret access key for external service may be obtained by an attacker who can access the App Settings page.", "creation_timestamp": "2023-12-28T00:51:02.000000Z"}, {"uuid": "cabb3ab8-af2b-4b89-af85-2d190ba13cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50339", "type": "seen", "source": "https://t.me/arpsyndicate/2180", "content": "#ExploitObserverAlert\n\nCVE-2023-50339\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-50339. Stored cross-site scripting vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.1.11. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.", "creation_timestamp": "2023-12-28T02:47:44.000000Z"}, {"uuid": "8ba85618-84b2-4e22-8d9c-9d15060f863f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50917", "type": "seen", "source": "https://t.me/arpsyndicate/2051", "content": "#ExploitObserverAlert\n\nCVE-2023-50917\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-50917. MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager.\n\nFIRST-EPSS: 0.000420000", "creation_timestamp": "2023-12-20T15:46:03.000000Z"}, {"uuid": "c3fe102c-6a98-4e04-bf9a-59f119ec078a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50232", "type": "seen", "source": "https://t.me/arpsyndicate/3976", "content": "#ExploitObserverAlert\n\nZDI-24-184\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to ZDI-24-184. Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target must connect to a malicious server. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-50232.", "creation_timestamp": "2024-02-22T10:20:52.000000Z"}, {"uuid": "9d413579-15ef-431d-90d1-fa2d5bb8a954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50975", "type": "seen", "source": "https://t.me/arpsyndicate/4025", "content": "#ExploitObserverAlert\n\nCVE-2023-50975\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2023-50975. The TD Bank TD Advanced Dashboard client through 3.0.3 for macOS allows arbitrary code execution because of the lack of electron::fuses::IsRunAsNodeEnabled (i.e., ELECTRON_RUN_AS_NODE can be used in production). This makes it easier for a compromised process to access banking information.", "creation_timestamp": "2024-02-22T19:57:15.000000Z"}, {"uuid": "24ce0dd3-1d9e-43e6-a8a8-9d353ad78d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50233", "type": "seen", "source": "https://t.me/arpsyndicate/3955", "content": "#ExploitObserverAlert\n\nZDI-24-185\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to ZDI-24-185. Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target must connect to a malicious server. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-50233.", "creation_timestamp": "2024-02-22T09:55:59.000000Z"}, {"uuid": "d1137913-5ea4-4a9e-ab17-841a1f1e11a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5059", "type": "seen", "source": "https://t.me/cibsecurity/72604", "content": "\u203c CVE-2023-5059 \u203c\n\nSantesoft Sante FFT Imaging lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-19T22:34:45.000000Z"}, {"uuid": "3935f4a9-21de-4930-b125-123ec9899d1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50306", "type": "seen", "source": "https://t.me/arpsyndicate/3755", "content": "#ExploitObserverAlert\n\nCVE-2023-50306\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2023-50306. IBM Common Licensing 9.0 could allow a local user to enumerate usernames due to an observable response discrepancy.  IBM X-Force ID:  273337.", "creation_timestamp": "2024-02-21T13:08:46.000000Z"}, {"uuid": "bdad8969-5140-4d4c-9d49-2cf69fcf5809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50270", "type": "seen", "source": "https://t.me/arpsyndicate/3738", "content": "#ExploitObserverAlert\n\nCVE-2023-50270\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2023-50270. Session Fixation Apache DolphinScheduler before version 3.2.0, which session is still valid after the password change.  Users are recommended to upgrade to version 3.2.1, which fixes this issue.", "creation_timestamp": "2024-02-21T07:40:58.000000Z"}, {"uuid": "d60ad6e6-ccd5-4e2f-b096-9a5a26ea40b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "Telegram/OIy-vi5ELr4cctl8ownkSK8SkQmdcofc4nGKbyP-zK6wBJzg", "content": "", "creation_timestamp": "2025-01-19T10:45:24.000000Z"}, {"uuid": "20499d04-b744-4c27-9f1b-b8ef311d1ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50269", "type": "seen", "source": "https://t.me/arpsyndicate/2722", "content": "#ExploitObserverAlert\n\nCVE-2023-50269\n\nDESCRIPTION: Exploit Observer has 6 entries related to CVE-2023-50269. Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives.\n\nFIRST-EPSS: 0.001190000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-01-09T06:56:09.000000Z"}, {"uuid": "485356c3-47ec-4883-b11a-0ecdc380e1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "seen", "source": "https://t.me/arpsyndicate/2740", "content": "#ExploitObserverAlert\n\nCVE-2023-5044\n\nDESCRIPTION: Exploit Observer has 7 entries related to CVE-2023-5044. Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.\n\nFIRST-EPSS: 0.000610000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2024-01-09T09:37:46.000000Z"}, {"uuid": "6032f0a9-1f66-495c-9fc1-cc1977289efd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "Telegram/OanfqEj1GcfzhREfAfdWJFBafnBl3ccrws5NHK3ldnG3GQ", "content": "", "creation_timestamp": "2023-12-12T07:13:03.000000Z"}, {"uuid": "864ff395-becf-4c02-9ee5-3bada6d3380f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "Telegram/chs_uydgw-Wq0nmQLWTfkNceq5_E767KEzENWtb_-Qdisw", "content": "", "creation_timestamp": "2024-12-18T08:14:25.000000Z"}, {"uuid": "75a8f88d-b13c-4f65-a9a7-c2f0be15ab43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "Telegram/1yNdYtjM167PWJ8z4QCuhWfayRW6CDLYSnp7378ajV5EDt8", "content": "", "creation_timestamp": "2024-10-04T00:51:08.000000Z"}, {"uuid": "128f06c1-a7dc-4eb8-9f21-3be39b390e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50572", "type": "seen", "source": "https://t.me/cibsecurity/73996", "content": "\u203c\ufe0fCVE-2023-50572\u203c\ufe0f\n\nAn issue in the component GroovyEngine.execute of jlinegroovy v3.24.1 allows attackers to cause an OOM OutofMemory error.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:42:33.000000Z"}, {"uuid": "61cafc08-88cf-4928-85f2-96e53476af54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50571", "type": "seen", "source": "https://t.me/cibsecurity/73995", "content": "\u203c\ufe0fCVE-2023-50571\u203c\ufe0f\n\neasyrulesmvel v4.1.0 was discovered to contain a remote code execution RCE vulnerability via the component MVELRule.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:42:28.000000Z"}, {"uuid": "22b8733d-7d4d-48af-b9e2-b5fe74fb7335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "Telegram/OIy-vi5ELr4cctl8ownkSK8SkQmdcofc4nGKbyP-zK6wBJzg", "content": "", "creation_timestamp": "2025-01-19T10:45:24.000000Z"}, {"uuid": "5e316fa5-6b87-49b3-87b3-c5c1b414598c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "Telegram/PfifvZz7tMW-Pq-u9dIIWpX49EGHHaNBJSKvwqdUIESB65tP", "content": "", "creation_timestamp": "2025-01-19T10:54:13.000000Z"}, {"uuid": "6eb37a2b-b564-4e22-a112-2f7c257e0031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://t.me/arpsyndicate/710", "content": "#ExploitObserverAlert\n\nCVE-2023-5043\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-5043. Ingress nginx annotation injection causes arbitrary command execution.\n\nFIRST-EPSS: 0.002640000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-11-29T09:38:53.000000Z"}, {"uuid": "71cc977f-4c3f-4097-ba78-321a503e92f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "Telegram/PfifvZz7tMW-Pq-u9dIIWpX49EGHHaNBJSKvwqdUIESB65tP", "content": "", "creation_timestamp": "2025-01-19T10:54:13.000000Z"}, {"uuid": "eaae880c-605b-4fd8-8a3e-a5a33aeb1070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "Telegram/1Z5p7xYqKVRAHiS5stM6LcQjCrKKZtV6q5K3lriQD01vETjY", "content": "", "creation_timestamp": "2025-01-20T11:03:16.000000Z"}, {"uuid": "45a78d47-6d32-4d0e-bb86-18fa9a77bfaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "Telegram/1Z5p7xYqKVRAHiS5stM6LcQjCrKKZtV6q5K3lriQD01vETjY", "content": "", "creation_timestamp": "2025-01-20T11:03:16.000000Z"}, {"uuid": "43d638cf-2945-4528-8a22-0e0e44416535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "Telegram/MI65lLGsaGTIv40PK1J154YyMiL63QZNJWuw9XlT_YRsFb40", "content": "", "creation_timestamp": "2025-01-19T09:05:12.000000Z"}, {"uuid": "6cc42189-7b0a-4e62-8596-ccebae8816d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5009", "type": "seen", "source": "Telegram/8fzC70k0AqPANaoMqyiurnud2UPl_BqAdrIlayNGsF1OKw", "content": "", "creation_timestamp": "2023-09-20T12:57:35.000000Z"}, {"uuid": "e8e1d55b-8fc6-48cd-a717-55544b229b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "Telegram/7b0KDMH2WfquipCst9Tv71iesbtnEU4bQJg16OEgDf9nbvsj", "content": "", "creation_timestamp": "2024-12-22T22:15:27.000000Z"}, {"uuid": "9f0e3bf9-2f62-48bb-a46b-db1f5a18ce74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "Telegram/7b0KDMH2WfquipCst9Tv71iesbtnEU4bQJg16OEgDf9nbvsj", "content": "", "creation_timestamp": "2024-12-22T22:15:27.000000Z"}, {"uuid": "cdcc25b5-4df3-435f-8cb0-f99fc6853a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "Telegram/MCOtq6YNws1wIQDmkmW4fj5yPvTPQ5hjf1qfUTkU-awDNw", "content": "", "creation_timestamp": "2023-10-30T08:13:06.000000Z"}, {"uuid": "dd4b14fd-c70b-4132-84ae-6689865cf714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/LockBitRaasRansomware/14242", "content": "KeyTrap in DNS (CVE-2023-50387)\n*\nLink", "creation_timestamp": "2024-04-02T18:45:36.000000Z"}, {"uuid": "7e34a012-532d-49ab-896e-58342d4d604b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/LockBitRaasRansomware/13998", "content": "KeyTrap in DNS (CVE-2023-50387)\n*\nLink", "creation_timestamp": "2024-04-02T08:29:31.000000Z"}, {"uuid": "1c41af40-55fe-42be-91a6-89e695c27244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50868", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/200", "content": "Tools - Hackers Factory\n\nThis project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868. \n\nhttps://github.com/Goethe-Universitat-Cybersecurity/NSEC3-Encloser-Attack\n\nGitHub - kgdn/buffet: Web-based virtual machine manager - BSc. Computer Systems dissertation project (Heriot-Watt University)\n\nhttps://github.com/kgdn/buffet\n\nA full Mod_Security guide to use local software like clam-av, chkrootkit, fail2ban, rkhunter for Nginx & Apache \n\nhttps://github.com/VolkanSah/ModSecurity-Webserver-Protection-Guide\n\nMac RDP Client: Kerberos and Protected Users Guide\nhttps://awakecoding.com/posts/mac-rdp-client-kerberos-and-protected-users-guide/\n\n#exploit\n1. CVE-2023-46817:\nphpFox <=4.8.13 (redirect) PHP Object Injection\nhttps://karmainsecurity.com/pocs/CVE-2023-46817.php\n\n2. Magento CE RCE Exploit\nhttps://github.com/Hackhoven/Magento-RCE\n\n#tools #Offensive_security\n\n1. Tools for analyzing EDR agents\nhttps://github.com/outflanknl/edr-internals\n\n2. Benevolent Shellcode Loader\nhttps://github.com/jakobfriedl/BenevolentLoader\n\n#exploit\n1. CVE-2024-30850, CVE-2024-31839:\nCHAOS RAT v5.01 web panel RCE\nhttps://github.com/chebuya/CVE-2024-30850-chaos-rat-rce-poc\n\n2. CVE-2024-28995:\nSolarWinds Serv-U directory transversal\nhttps://github.com/rapid7/metasploit-framework/pull/19255\n\nhttps://attackerkb.com/topics/2k7UrkHyl3/cve-2024-28995/rapid7-analysis\n\n#reversing\n1. TempleOS Reverse Engineering\nhttps://starkeblog.com/bootsector/templeos/2024/06/13/templeos-reverse-engineering-part-i.html\n2. Thecus NAS Firmware Decryption\nhttps://starkeblog.com/cryptography/firmware/2024/06/11/thecus-nas-firmware-decrypt.html\n\nhttps://github.com/nstarke/thecus-firmware-decrypt\n\nHijack clicks on and within links, probably for client-side routing \n\n#Research\n\"Hyperlink Hijacking: Exploiting Erroneous URL Links to Phantom Domains\", 2024.\n\nhttps://github.com/mapbox/link-hijacker\n\n#exploit\n1. CVE-2022-41034:\nVSCode ipynb RCE\nhttps://packetstormsecurity.com/files/179029/VSCode-ipynb-Remote-Code-Execution.html\n\n2. CVE-2024-27801:\nUaF in NSXPC on all Apple platforms\nhttps://github.com/wangtielei/POCs/tree/main/CVE-2024-27801\n+ UAF in AGX (iOS <13):\nhttps://github.com/wangtielei/POCs/tree/main/No_CVE\n\n#HackersFactory", "creation_timestamp": "2024-06-18T09:33:59.000000Z"}, {"uuid": "3035c7fb-ac33-4911-a361-71b09a44d786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5089", "type": "seen", "source": "https://t.me/cibsecurity/72374", "content": "\u203c CVE-2023-5089 \u203c\n\nThe Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:38:23.000000Z"}, {"uuid": "b38b51ad-de2b-4d48-ba0b-646a906efeca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5003", "type": "seen", "source": "https://t.me/cibsecurity/72373", "content": "\u203c CVE-2023-5003 \u203c\n\nThe Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an administrator wants to export said logs. Unfortunately, this log file is never removed, and remains accessible to any users knowing the URL to do so.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:38:22.000000Z"}, {"uuid": "a54b6ce9-0940-4344-83bb-ebc60fce6ef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/247", "content": "\u26a0\ufe0f Urgent Update: Apache warns of a critical RCE flaw in Struts 2 web app framework (CVE-2023-50164) that could lead to remote code execution. \n \nFind details here: https://thehackernews.com/2023/12/new-critical-rce-vulnerability.html \n \nUpgrade to patched versions now to prevent potential breaches.", "creation_timestamp": "2023-12-12T07:49:02.000000Z"}, {"uuid": "84ad7de6-cf85-4c6e-82a7-503c0d60ebaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5087", "type": "seen", "source": "https://t.me/cibsecurity/72363", "content": "\u203c CVE-2023-5087 \u203c\n\nThe Page Builder: Pagelayer WordPress plugin before 1.7.8 doesn't prevent attackers with author privileges and higher from inserting malicious JavaScript inside a post's header or footer code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:38:11.000000Z"}, {"uuid": "be278892-c48c-4671-89b3-03656a3be28c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50019", "type": "seen", "source": "https://t.me/cibsecurity/74209", "content": "\u203c\ufe0fCVE-2023-50019\u203c\ufe0f\n\nAn issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of NudmUECMRegistration response.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:37:57.000000Z"}, {"uuid": "392772b2-ea77-47b8-9a05-4a80fb7abab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50589", "type": "seen", "source": "https://t.me/cibsecurity/74037", "content": "\u203c\ufe0fCVE-2023-50589\u203c\ufe0f\n\nGrupo Embras GEOSIAP ERP v2.2.167.02 was discovered to contain a SQL injection vulnerability via the codLogin parameter on the login page.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-31T01:32:30.000000Z"}, {"uuid": "13b681eb-92f7-4d4a-87e9-5978ba34b3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50110", "type": "seen", "source": "https://t.me/cibsecurity/74036", "content": "\u203c\ufe0fCVE-2023-50110\u203c\ufe0f\n\nTestLink through 1.9.20 allows type juggling for authentication bypass because  is not used.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-31T01:32:25.000000Z"}, {"uuid": "0cbffb85-667c-45da-a457-c6f05a575146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "exploited", "source": "https://t.me/integral_security/709", "content": "\u27a1\ufe0f \u0414\u0430\u0439\u0434\u0436\u0435\u0441\u0442 16\u201417 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \n\n\u0412 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 \u044f\u043d\u0432\u0430\u0440\u044f \u043f\u043e \u043d\u043e\u044f\u0431\u0440\u044c 2023 \u0433\u043e\u0434\u0430 \u043e\u0442 \u0443\u0442\u0435\u0447\u0435\u043a \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u0438 385 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439\n\u0412 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u043f\u0430\u043b\u043e 103,4 \u0422\u0431\u0430\u0439\u0442 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 220 \u043c\u043b\u043d \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u0445 \u043d\u043e\u043c\u0435\u0440\u043e\u0432 \u2014 \u0432 1,5 \u0440\u0430\u0437\u0430 \u0431\u043e\u043b\u044c\u0448\u0435, \u0447\u0435\u043c \u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043d\u0430\u0441\u0435\u043b\u0435\u043d\u0438\u044f \u0420\u0424.\n\n\u0420\u043e\u0441\u0441\u0438\u044f\u043d \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e \u043d\u043e\u0432\u043e\u0439 \u0441\u0445\u0435\u043c\u0435 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u043e\u0432\n\u041c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u0438, \u0432\u044b\u0434\u0430\u0432\u0430\u044f \u0441\u0435\u0431\u044f \u0437\u0430 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u0420\u043e\u0441\u0444\u0438\u043d\u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430, \u0437\u0432\u043e\u043d\u044f\u0442 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0430\u043c, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u043c\u0430\u0445\u0438\u043d\u0430\u0446\u0438\u044f\u0445 \u0438 \u043f\u0440\u043e\u0441\u044f\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Positive Technologies \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438 \u0442\u0440\u0435\u043d\u0434\u044b 2024 \u0433\u043e\u0434\u0430\n\u041e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440, \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 data lake \u0438 \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c. \n\n\u0412 \u041a\u0438\u0442\u0430\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043f\u043b\u0430\u043d \u043f\u043e \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0446\u0432\u0435\u0442\u043e\u0432\u043e\u0439 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0438\n\u041c\u0435\u0440\u044b \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u044b \u0443\u043b\u0443\u0447\u0448\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u043e\u0433\u043e \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Apache Struts 2 \u0440\u0430\u0441\u0442\u0435\u0442\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-50164 \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043f\u043e\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438.", "creation_timestamp": "2023-12-18T13:10:21.000000Z"}, {"uuid": "81355ba6-dd6a-4347-8bed-dd3ad55d0b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50916", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/261", "content": "\u26a0\ufe0f Attention Kyocera & QNAP users: \n\nKyocera addresses dangerous CVE-2023-50916 flaw, preventing unauthorized access. QNAP tackles CVE-2023-39296, safeguarding against crashes. \n\nRead details here: https://thehackernews.com/2024/01/alert-new-vulnerabilities-discovered-in.html", "creation_timestamp": "2024-01-09T15:29:06.000000Z"}, {"uuid": "b6d2b965-8c5b-432b-9253-973997f3f8b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/KomunitiSiber/1200", "content": "New Critical RCE Vulnerability Discovered in Apache Struts 2 - Patch Now\nhttps://thehackernews.com/2023/12/new-critical-rce-vulnerability.html\n\nApache has released a security advisory warning of a critical security flaw in the Struts 2 open-source web application framework that could result in remote code execution.\nTracked as\u00a0CVE-2023-50164, the vulnerability is\u00a0rooted\u00a0in a flawed \"file upload logic\" that could enable unauthorized path traversal and could be exploited under the circumstances to upload a malicious file", "creation_timestamp": "2023-12-12T07:08:55.000000Z"}, {"uuid": "073ee6f5-0c82-4488-a297-8428f6ad9072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/cibsecurity/72180", "content": "\u203c CVE-2023-5072 \u203c\n\nDenial of Service in JSON-Java versions prior to 20230618. \u00c2\u00a0A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.\u00c2\u00a0\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-12T20:23:18.000000Z"}, {"uuid": "b48db573-7705-45c5-a74c-b644dcc887bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5046", "type": "seen", "source": "https://t.me/cibsecurity/72177", "content": "\u203c CVE-2023-5046 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Procost: before 1390.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-12T16:23:18.000000Z"}, {"uuid": "82dd88a9-1077-4031-af3c-03d799272b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://t.me/KomunitiSiber/999", "content": "Urgent: New Security Flaws Discovered in NGINX Ingress Controller for Kubernetes\nhttps://thehackernews.com/2023/10/urgent-new-security-flaws-discovered-in.html\n\nThree unpatched high-severity security flaws have been disclosed in the\u00a0NGINX Ingress controller\u00a0for Kubernetes that could be weaponized by a threat actor to steal secret credentials from the cluster.\nThe vulnerabilities are as follows -\u00a0\n\nCVE-2022-4886\u00a0(CVSS score: 8.8) -\u00a0Ingress-nginx\u00a0path sanitization can be bypassed to obtain the credentials of the ingress-nginx controller\nCVE-2023-5043\u00a0(", "creation_timestamp": "2023-10-30T09:02:14.000000Z"}, {"uuid": "dfaedbf5-ed5f-47ac-a460-1a1c91a5aaa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5009", "type": "seen", "source": "https://t.me/KomunitiSiber/816", "content": "GitLab Releases Urgent Security Patches for Critical Vulnerability\nhttps://thehackernews.com/2023/09/gitlab-releases-urgent-security-patches.html\n\nGitLab has shipped security patches to resolve a critical flaw that allows an attacker to run pipelines as another user.\nThe issue, tracked as\u00a0CVE-2023-5009\u00a0(CVSS score: 9.6), impacts all versions of GitLab Enterprise Edition (EE) starting from 13.12 and prior to 16.2.7 as well as from 16.3 and before 16.3.4.\n\"It was possible for an attacker to\u00a0run pipelines\u00a0as an arbitrary user via scheduled", "creation_timestamp": "2023-09-20T10:49:32.000000Z"}, {"uuid": "1030610f-232c-40f7-9cce-1614bd5493b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50257", "type": "published-proof-of-concept", "source": "Telegram/ilYloj4OwYCEccF9UzeBtubYtnxshYkxXdYt2M-N7723mC8", "content": "", "creation_timestamp": "2025-04-20T21:00:05.000000Z"}, {"uuid": "75eecaee-03f7-4ffb-9d73-74fb27d76ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50257", "type": "published-proof-of-concept", "source": "Telegram/_2iZhze6jswijCm6NsMkH5GB7hxCAMET0bj118-njZt1foI", "content": "", "creation_timestamp": "2025-04-20T17:00:09.000000Z"}, {"uuid": "b35cff37-83b0-49e2-828b-c300b1a7f33f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "Telegram/qhThwZi60otOpMYzEcTqXB90TUPUwGN7QISMJDxqfayg-1U", "content": "", "creation_timestamp": "2025-02-27T10:00:06.000000Z"}, {"uuid": "9a45b02a-11ec-413c-91e8-ed442a73d5f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50901", "type": "seen", "source": "https://t.me/cibsecurity/73939", "content": "\u203c\ufe0fCVE-2023-50901\u203c\ufe0f\n\nImproper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in HasThemes HT Mega  Absolute Addons For Elementor allows Reflected XSS.This issue affects HT Mega  Absolute Addons For Elementor from na through 2.3.8.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:37:49.000000Z"}, {"uuid": "66cc7332-82f2-42e4-b9ed-97e1e51a7a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "Telegram/hCfCsWkJLNX-4ZZS6AKhD47aw1Wu0GxnlvM04EnHwON9-Gg", "content": "", "creation_timestamp": "2025-03-05T22:00:05.000000Z"}, {"uuid": "6a58e38f-3776-4303-8a4d-573af14ed758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "Telegram/QWcAxtRj4CEiw2EsCBPPi9W_svhfflMSFS5WabELl66jBbo", "content": "", "creation_timestamp": "2025-03-05T04:00:07.000000Z"}, {"uuid": "ef027dcb-3784-4c32-ad5b-cba52403a16c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50868", "type": "seen", "source": "https://t.me/GrayHatsHack/7986", "content": "Tools - Hackers Factory\n\nThis project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868. \n\nhttps://github.com/Goethe-Universitat-Cybersecurity/NSEC3-Encloser-Attack\n\nGitHub - kgdn/buffet: Web-based virtual machine manager - BSc. Computer Systems dissertation project (Heriot-Watt University)\n\nhttps://github.com/kgdn/buffet\n\nA full Mod_Security guide to use local software like clam-av, chkrootkit, fail2ban, rkhunter for Nginx & Apache \n\nhttps://github.com/VolkanSah/ModSecurity-Webserver-Protection-Guide\n\nMac RDP Client: Kerberos and Protected Users Guide\nhttps://awakecoding.com/posts/mac-rdp-client-kerberos-and-protected-users-guide/\n\n#exploit\n1. CVE-2023-46817:\nphpFox <=4.8.13 (redirect) PHP Object Injection\nhttps://karmainsecurity.com/pocs/CVE-2023-46817.php\n\n2. Magento CE RCE Exploit\nhttps://github.com/Hackhoven/Magento-RCE\n\n#tools #Offensive_security\n\n1. Tools for analyzing EDR agents\nhttps://github.com/outflanknl/edr-internals\n\n2. Benevolent Shellcode Loader\nhttps://github.com/jakobfriedl/BenevolentLoader\n\n#exploit\n1. CVE-2024-30850, CVE-2024-31839:\nCHAOS RAT v5.01 web panel RCE\nhttps://github.com/chebuya/CVE-2024-30850-chaos-rat-rce-poc\n\n2. CVE-2024-28995:\nSolarWinds Serv-U directory transversal\nhttps://github.com/rapid7/metasploit-framework/pull/19255\n\nhttps://attackerkb.com/topics/2k7UrkHyl3/cve-2024-28995/rapid7-analysis\n\n#reversing\n1. TempleOS Reverse Engineering\nhttps://starkeblog.com/bootsector/templeos/2024/06/13/templeos-reverse-engineering-part-i.html\n2. Thecus NAS Firmware Decryption\nhttps://starkeblog.com/cryptography/firmware/2024/06/11/thecus-nas-firmware-decrypt.html\n\nhttps://github.com/nstarke/thecus-firmware-decrypt\n\nHijack clicks on and within links, probably for client-side routing \n\n#Research\n\"Hyperlink Hijacking: Exploiting Erroneous URL Links to Phantom Domains\", 2024.\n\nhttps://github.com/mapbox/link-hijacker\n\n#exploit\n1. CVE-2022-41034:\nVSCode ipynb RCE\nhttps://packetstormsecurity.com/files/179029/VSCode-ipynb-Remote-Code-Execution.html\n\n2. CVE-2024-27801:\nUaF in NSXPC on all Apple platforms\nhttps://github.com/wangtielei/POCs/tree/main/CVE-2024-27801\n+ UAF in AGX (iOS <13):\nhttps://github.com/wangtielei/POCs/tree/main/No_CVE\n\n#HackersFactory", "creation_timestamp": "2024-06-18T09:34:50.000000Z"}, {"uuid": "bf4e40ed-30b8-4e0b-9dae-9720a53e2f23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50020", "type": "seen", "source": "https://t.me/cibsecurity/74210", "content": "\u203c\ufe0fCVE-2023-50020\u203c\ufe0f\n\nAn issue was discovered in open5gs v2.6.6. SIGPIPE can be used to crash AMF.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:38:02.000000Z"}, {"uuid": "28aae34a-dda9-4475-b390-a43c568c4091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50916", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3823", "content": "#exploit \n1. Capturing the First Flag in Google's New v8CTF \nhttps://www.madstacks.dev/posts/Start-Your-Engines-Capturing-the-First-Flag-in-Google's-New-v8CTF \n \n2. CVE-2023-50916: \nAuthentication Coercion Vulnerability in Kyocera Device Manager \nhttps://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-50916-authentication-coercion-vulnerability-in-kyocera-device-manager \n \n3. CVE-2023-20573: \nA privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests... \nhttps://github.com/Freax13/cve-2023-20573-poc", "creation_timestamp": "2024-01-11T07:31:05.000000Z"}, {"uuid": "2e01895e-324c-49f0-bea1-85b980545b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50254", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3732", "content": "CVE-2023-50254 PoC Exploit for Deepin-reader RCE\n\nhttps://github.com/febinrev/deepin-linux_reader_RCE-exploit\n\nhttps://febin0x4e4a.wordpress.com/2023/12/22/cve-2023-50254-critical-rce-in-deepin-linux-desktop-oss-default-document-reader/", "creation_timestamp": "2023-12-26T13:18:41.000000Z"}, {"uuid": "69cb199f-12d4-4b40-ba1b-674fee02ae27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50072", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3713", "content": "https://github.com/ahrixia/CVE-2023-50072\n\nA stored cross-site scripting (XSS) vulnerability exists in OpenKM version 7.1.40.\n\n#github  #exploit  #XSS", "creation_timestamp": "2023-12-22T15:27:17.000000Z"}, {"uuid": "6a8166df-d9ce-4d4f-8e5f-6e0cc3f5d2e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3701", "content": "https://github.com/Trackflaw/CVE-2023-50164-ApacheStruts2-Docker\n\nVulnerable docker container for Apache Struts 2 RCE CVE-2023-50164\n#github", "creation_timestamp": "2023-12-20T13:43:29.000000Z"}, {"uuid": "2a518f76-c4ab-4bd1-a7c4-50fb942db6f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50071", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3682", "content": "https://github.com/geraldoalcantara/CVE-2023-50071\n#github", "creation_timestamp": "2023-12-17T07:25:40.000000Z"}, {"uuid": "ca6e2345-dd78-4939-af6d-7b526621b7a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50711", "type": "seen", "source": "https://t.me/cibsecurity/74193", "content": "\u203c\ufe0fCVE-2023-50711\u203c\ufe0f\n\nvmmsysutil is a collection of modules that provides helpers and utilities used by multiple rustvmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the FamStructWrapperdeserialize implementation provided by the crate for vmmsysutilfamFamStructWrapper can lead to out of bounds memory accesses. The deserialization does not check that the length stored in the header matches the flexible array length. Mismatch in the lengths might allow out of bounds memory access through Rustsafe methods. The issue was corrected in version 0.12.0 by inserting a check that verifies the lengths of compared flexible arrays are equal for any deserialized header and aborting deserialization otherwise. Moreover, the API was changed so that header length can only be modified through Rustunsafe code. This ensures that users cannot trigger outofbounds memory access from Rustsafe code.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:36:39.000000Z"}, {"uuid": "9e5def7f-00e9-4847-927a-972ca6357060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50868", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3316", "content": "Tools - Hackers Factory\n\nThis project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868. \n\nhttps://github.com/Goethe-Universitat-Cybersecurity/NSEC3-Encloser-Attack\n\nGitHub - kgdn/buffet: Web-based virtual machine manager - BSc. Computer Systems dissertation project (Heriot-Watt University)\n\nhttps://github.com/kgdn/buffet\n\nA full Mod_Security guide to use local software like clam-av, chkrootkit, fail2ban, rkhunter for Nginx & Apache \n\nhttps://github.com/VolkanSah/ModSecurity-Webserver-Protection-Guide\n\nMac RDP Client: Kerberos and Protected Users Guide\nhttps://awakecoding.com/posts/mac-rdp-client-kerberos-and-protected-users-guide/\n\n#exploit\n1. CVE-2023-46817:\nphpFox <=4.8.13 (redirect) PHP Object Injection\nhttps://karmainsecurity.com/pocs/CVE-2023-46817.php\n\n2. Magento CE RCE Exploit\nhttps://github.com/Hackhoven/Magento-RCE\n\n#tools #Offensive_security\n\n1. Tools for analyzing EDR agents\nhttps://github.com/outflanknl/edr-internals\n\n2. Benevolent Shellcode Loader\nhttps://github.com/jakobfriedl/BenevolentLoader\n\n#exploit\n1. CVE-2024-30850, CVE-2024-31839:\nCHAOS RAT v5.01 web panel RCE\nhttps://github.com/chebuya/CVE-2024-30850-chaos-rat-rce-poc\n\n2. CVE-2024-28995:\nSolarWinds Serv-U directory transversal\nhttps://github.com/rapid7/metasploit-framework/pull/19255\n\nhttps://attackerkb.com/topics/2k7UrkHyl3/cve-2024-28995/rapid7-analysis\n\n#reversing\n1. TempleOS Reverse Engineering\nhttps://starkeblog.com/bootsector/templeos/2024/06/13/templeos-reverse-engineering-part-i.html\n2. Thecus NAS Firmware Decryption\nhttps://starkeblog.com/cryptography/firmware/2024/06/11/thecus-nas-firmware-decrypt.html\n\nhttps://github.com/nstarke/thecus-firmware-decrypt\n\nHijack clicks on and within links, probably for client-side routing \n\n#Research\n\"Hyperlink Hijacking: Exploiting Erroneous URL Links to Phantom Domains\", 2024.\n\nhttps://github.com/mapbox/link-hijacker\n\n#exploit\n1. CVE-2022-41034:\nVSCode ipynb RCE\nhttps://packetstormsecurity.com/files/179029/VSCode-ipynb-Remote-Code-Execution.html\n\n2. CVE-2024-27801:\nUaF in NSXPC on all Apple platforms\nhttps://github.com/wangtielei/POCs/tree/main/CVE-2024-27801\n+ UAF in AGX (iOS <13):\nhttps://github.com/wangtielei/POCs/tree/main/No_CVE\n\n#HackersFactory", "creation_timestamp": "2024-06-18T09:33:42.000000Z"}, {"uuid": "d4fb2ae9-c83b-456f-a82c-4e330d4a7ce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50333", "type": "seen", "source": "https://t.me/cibsecurity/74178", "content": "\u203c\ufe0fCVE-2023-50333\u203c\ufe0f\n\nMattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing\u00a0freshly demoted guests to change group names.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:35:24.000000Z"}, {"uuid": "ca36b8b2-f4d7-4e2e-8ecb-849eb196a1da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50879", "type": "seen", "source": "https://t.me/cibsecurity/73956", "content": "\u203c\ufe0fCVE-2023-50879\u203c\ufe0f\n\nImproper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in Automattic WordPress.Com Editing Toolkit allows Stored XSS.This issue affects WordPress.Com Editing Toolkit from na through 3.78784.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:39:12.000000Z"}, {"uuid": "7c7960b5-5eb6-49a5-98aa-002d5d2104ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50837", "type": "seen", "source": "https://t.me/cibsecurity/73955", "content": "\u203c\ufe0fCVE-2023-50837\u203c\ufe0f\n\nImproper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WebFactory Ltd Login Lockdown  Protect Login Form.This issue affects Login Lockdown  Protect Login Form from na through 2.06.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:39:07.000000Z"}, {"uuid": "e3724d30-fe91-4a15-a074-8906489b7384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3219", "content": "Hackers Factory \n\ncheck_cve_2023_22518.py\n\nhttps://github.com/RootUp/PersonalStuff/blob/master/check_cve_2023_22518.py\n\nVitogate300_RCE.md\n\nhttps://github.com/Push3AX/vul/blob/main/viessmann/Vitogate300_RCE.md\n\nunwyze - a Wyze Cam v3 RCE Exploit\n\nhttps://github.com/blasty/unwyze\n\nPoC CVE-2023-5044\n\nhttps://github.com/r0binak/CVE-2023-5044\n\nExploit for CVE-2023-36802 targeting MSKSSRV.SYS driver\n\nhttps://github.com/Nero22k/cve-2023-36802\n\nexploit for cve-2023-46747\n\nhttps://github.com/W01fh4cker/CVE-2023-46747-RCE\n\nRCE Exploit For Maltrail-v0.53\n\nhttps://github.com/spookier/Maltrail-v0.53-Exploit\n\nAdded CVE-2023-46747 (5 BIG-IP - Unauthenticated RCE via AJP Smuggling\n\nhttps://github.com/projectdiscovery/nuclei-templates/pull/8496\n\ncisco-webui-detection.yaml\n\nhttps://github.com/xscorp/Notes/blob/master/PublicTemplates/cisco-webui-detection.yaml\n\nF5 BIG-IP unauthenticated remote code execution (RCE) and authentication bypass vulnerability!\n\nhttps://github.com/AliBrTab/CVE-2023-46747-POC\n\nCVE-2023-22515: Confluence Broken Access Control Exploit\n\nhttps://github.com/Chocapikk/CVE-2023-22515\n\nImage horizontal reel scroll slideshow <= 13.2 - Authenticated (Subscriber+) SQL Injection via Shortcode\n\nhttps://github.com/RandomRobbieBF/CVE-2023-5412\n\nCVE-2023-35078 Remote Unauthenticated API Access Vulnerability Exploit POC\n\nhttps://github.com/vchan-in/CVE-2023-35078-Exploit-POC\n\nBoltWire v6.03 vulnerable to \"Improper Access Control\"\n\nhttps://github.com/Cyber-Wo0dy/CVE-2023-46501\n\nhttps://www.kitploit.com/2023/10/looneypwner-exploit-tool-for-cve-2023.html?m=1\n\n#HackersFactory \ud83d\ude0f#GHOSTS\ud83d\ude0f", "creation_timestamp": "2023-11-09T05:43:54.000000Z"}, {"uuid": "cf48e581-75ee-4830-b5fc-a5b3cf79d9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/proxy_bar/1908", "content": "KeyTrap in DNS (CVE-2023-50387)\n*\nLink", "creation_timestamp": "2024-02-19T06:25:00.000000Z"}, {"uuid": "c85580c2-672f-4891-9e00-0ac2b306d33b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50096", "type": "seen", "source": "https://t.me/cibsecurity/74096", "content": "\u203c\ufe0fCVE-2023-50096\u203c\ufe0f\n\nSTMicroelectronics STSAFEA1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read from and write to the I2C bus. This is caused by an StSafeAReceiveBytes buffer overflow in the XCUBESAFEA1 Software Package for STSAFEA sample applications 1.2.0, and thus can affect userwritten code that was derived from a published sample application.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-02T01:31:35.000000Z"}, {"uuid": "98f4ea85-8f8a-4cc4-86cd-79e958b74a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50094", "type": "seen", "source": "https://t.me/cibsecurity/74095", "content": "\u203c\ufe0fCVE-2023-50094\u203c\ufe0f\n\nreNgine through 2.0.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an apitoolswafdetector?url string. The commands are executed as root via subprocess.checkoutput.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-02T01:31:30.000000Z"}, {"uuid": "797955fc-c667-491b-9e94-14c8be97285e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5009", "type": "seen", "source": "Telegram/UwishMNZTytGOcUkcztejvttJn150wusv9THLvRt7_lz1Co", "content": "", "creation_timestamp": "2023-10-09T01:25:24.000000Z"}, {"uuid": "f922034b-2e85-4461-819c-703ae408265b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "Telegram/nXNgeTXwDNOb7mIcIpPodhvZ1IUdszn-fmMhPPigxTJmI9s", "content": "", "creation_timestamp": "2024-03-29T06:57:04.000000Z"}, {"uuid": "ecb9b908-2fff-4524-8749-96f36989e6c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50868", "type": "seen", "source": "https://t.me/infoinspect/758", "content": "#\u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430\n\n\ud83e\ude9f \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Windows: \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u0438\u0431\u0435\u0440\u0433\u0438\u0433\u0438\u0435\u043d\u044b\n\n\ud83d\udcc4 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Wi-Fi, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 8.8 \u043f\u043e 10-\u0431\u0430\u043b\u043b\u044c\u043d\u043e\u0439 \u0448\u043a\u0430\u043b\u0435. \u041e\u0448\u0438\u0431\u043a\u0430 CVE-2024-30078 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0447\u0435\u0440\u0435\u0437 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 Wi-Fi. \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Windows \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n\u2139\ufe0f \u0422\u0430\u043a\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 Microsoft Message Queuing. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0446\u0435\u043d\u0435\u043d\u043d\u0430\u044f \u043d\u0430 9.8, \u043c\u043e\u0433\u043b\u0430 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0440\u0435\u0448\u0435\u043d\u0430 \u043f\u0430\u0442\u0447\u0435\u043c CVE-2024-30080.\n\n\ud83c\udd98 \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u043d\u043e\u043c\u0435\u0440\u043e\u043c CVE-2023-50868 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u0433\u0440\u0443\u0437\u043a\u0443 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d. \u042d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043c\u0435\u043d\u044c\u0448\u0435 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\ud83d\udcbb \u041f\u0430\u0442\u0447\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0434\u043b\u044f Windows 10 \u0438 11 \u043f\u043e\u0434 \u043d\u043e\u043c\u0435\u0440\u043e\u043c KB5039214 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u043e\u043a 14393.7070, 22621.3737 \u0438 22631.3737.\n\n\u2754 \u041a\u0430\u043a \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u0430\u0448\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b?\n \u2196\ufe0f \u041f\u0435\u0440\u0435\u0439\u0434\u0438\u0442\u0435 \u0432 \"\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Windows\" \u0432 \"\u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445\" \u0438\u043b\u0438 \"\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445\".\n\u2196\ufe0f \u0423\u0431\u0435\u0434\u0438\u0442\u0435\u0441\u044c, \u0447\u0442\u043e \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u0434\u043f\u0438\u0441\u044c \"\u0423 \u0432\u0430\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0432\u0441\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\".\n\u2196\ufe0f \u041d\u0430\u0436\u043c\u0438\u0442\u0435 \u043a\u043d\u043e\u043f\u043a\u0443 \"\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439\", \u0447\u0442\u043e\u0431\u044b \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0432\u0441\u0435 \u043f\u0430\u0442\u0447\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b.\n\n\u2139\ufe0f \u0414\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0433\u043e\u0432\u043e\u0440\u0438\u0442, \u0447\u0442\u043e \u0432\u0441\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435, \u043d\u043e \u0435\u0449\u0435 \u043d\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e\n\n\u26a0\ufe0f \u041d\u0415 \u0420\u0415\u041a\u041e\u041c\u0415\u041d\u0414\u0423\u0415\u0422\u0421\u042f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e \"\u041f\u043e\u043b\u0443\u0447\u0430\u0439\u0442\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u043d\u0438 \u0431\u0443\u0434\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\". \u041b\u0443\u0447\u0448\u0435 \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u041f\u041e \u043d\u0430 \u0432\u0441\u0435\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0440\u0430\u0437 \u0432 \u043c\u0435\u0441\u044f\u0446, \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044f\u0441\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u044b\u0447\u0435\u043a \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u0434\u043f\u0438\u0441\u0430\u0442\u044c\u0441\u044f \u043d\u0430 \u043a\u0430\u043d\u0430\u043b \u2705", "creation_timestamp": "2024-06-30T12:52:04.000000Z"}, {"uuid": "c7fbbe95-c891-4417-acaa-410e2f139481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50578", "type": "seen", "source": "https://t.me/cibsecurity/74029", "content": "\u203c\ufe0fCVE-2023-50578\u203c\ufe0f\n\nMingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at contentlist.do.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-31T21:42:40.000000Z"}, {"uuid": "5d4ee598-cce0-43e7-99f0-393a63f10312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50550", "type": "seen", "source": "https://t.me/cibsecurity/74028", "content": "\u203c\ufe0fCVE-2023-50550\u203c\ufe0f\n\nlayui up to v2.74 was discovered to contain a crosssite scripting XSS vulnerability via the datacontent parameter.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-31T01:31:45.000000Z"}, {"uuid": "b8da514a-56a2-4f89-abac-65c2ea31d060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50896", "type": "seen", "source": "https://t.me/cibsecurity/73938", "content": "\u203c\ufe0fCVE-2023-50896\u203c\ufe0f\n\nImproper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in weForms weForms  Easy Drag  Drop Contact Form Builder For WordPress allows Stored XSS.This issue affects weForms  Easy Drag  Drop Contact Form Builder For WordPress from na through 1.6.17.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:37:44.000000Z"}, {"uuid": "635ac7ac-5807-4fdd-bd51-8b11dad55753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "Telegram/sTEkYJ05kHkpHHOlsAzOUAjLq0A8DNikzWglQk7DQc_MEHU", "content": "", "creation_timestamp": "2023-12-14T15:25:08.000000Z"}, {"uuid": "bbbfe95a-1f06-4d51-a885-fcceb18d7bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5012", "type": "seen", "source": "Telegram/H3vIQ12u4uurIp__O2e9rYfWt28Kv2zKLdHDYAYwXyzQr3g", "content": "", "creation_timestamp": "2023-10-13T22:36:15.000000Z"}, {"uuid": "faca72ad-a569-4436-a7d5-a172b6922959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50651", "type": "seen", "source": "https://t.me/cibsecurity/74038", "content": "\u203c\ufe0fCVE-2023-50651\u203c\ufe0f\n\nTOTOLINK X6000R v9.4.0cu.852B20230719 was discovered to contain a remote command execution RCE vulnerability via the component cgibincstecgi.cgi.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-31T01:32:35.000000Z"}, {"uuid": "2213fde0-6580-4279-8766-15f69ea39d7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50559", "type": "seen", "source": "https://t.me/cibsecurity/74011", "content": "\u203c\ufe0fCVE-2023-50559\u203c\ufe0f\n\nAn issue was discovered in XiangShan v2.1, allows local attackers to obtain sensitive information via the L1D cache.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:43:47.000000Z"}, {"uuid": "64ad7920-fdd4-4528-835c-a11a57a5dfc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50071", "type": "seen", "source": "https://t.me/cibsecurity/74009", "content": "\u203c\ufe0fCVE-2023-50071\u203c\ufe0f\n\nSourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in customersupportajax.php?actionsavedepartment via id or name.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:43:37.000000Z"}, {"uuid": "2efe7622-a51a-49a5-bbc0-f1ecfe1d0780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50070", "type": "seen", "source": "https://t.me/cibsecurity/74008", "content": "\u203c\ufe0fCVE-2023-50070\u203c\ufe0f\n\nSourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in customersupportajax.php?actionsaveticket via departmentid, customerid, and subject.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:43:32.000000Z"}, {"uuid": "b7847ac9-1a43-4ab6-82f5-24672430cee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50069", "type": "seen", "source": "https://t.me/cibsecurity/74007", "content": "\u203c\ufe0fCVE-2023-50069\u203c\ufe0f\n\nWireMock with GUI versions 3.2.0.0 through 3.0.4.0 are vulnerable to stored crosssite scripting SXSS through the recording feature. An attacker can host a malicious payload and perform a test mapping pointing to the attacker's file, and the result will render on the Matched page in the Body area, resulting in the execution of the payload. This occurs because the response body is not validated or sanitized.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:43:27.000000Z"}, {"uuid": "5e29a875-4703-42b0-b221-262b3b7f736b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50035", "type": "seen", "source": "https://t.me/cibsecurity/74006", "content": "\u203c\ufe0fCVE-2023-50035\u203c\ufe0f\n\nPHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of \"password\" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:43:22.000000Z"}, {"uuid": "1c4ba531-28d4-45e2-924e-b8459f4a4c7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50893", "type": "seen", "source": "https://t.me/cibsecurity/73962", "content": "\u203c\ufe0fCVE-2023-50893\u203c\ufe0f\n\nImproper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in UpSolution Impreza  WordPress Website and WooCommerce Builder allows Reflected XSS.This issue affects Impreza  WordPress Website and WooCommerce Builder from na through 8.17.4.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:39:42.000000Z"}, {"uuid": "5db32d23-2840-4e71-a91f-c37045255ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50891", "type": "seen", "source": "https://t.me/cibsecurity/73960", "content": "\u203c\ufe0fCVE-2023-50891\u203c\ufe0f\n\nImproper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in Zoho Forms Form plugin for WordPress  Zoho Forms allows Stored XSS.This issue affects Form plugin for WordPress  Zoho Forms from na through 3.0.1.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:39:32.000000Z"}, {"uuid": "2b1da9a1-4457-4064-bfbc-4677bb4acbe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50889", "type": "seen", "source": "https://t.me/cibsecurity/73959", "content": "\u203c\ufe0fCVE-2023-50889\u203c\ufe0f\n\nImproper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in The Beaver Builder Team Beaver Builder  WordPress Page Builder allows Stored XSS.This issue affects Beaver Builder  WordPress Page Builder from na through 2.7.2.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:39:27.000000Z"}, {"uuid": "244e282e-2c45-4278-9296-98a3bad2c6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50881", "type": "seen", "source": "https://t.me/cibsecurity/73958", "content": "\u203c\ufe0fCVE-2023-50881\u203c\ufe0f\n\nImproper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in AAM Advanced Access Manager  Restricted Content, Users  Roles, Enhanced Security and More allows Stored XSS.This issue affects Advanced Access Manager  Restricted Content, Users  Roles, Enhanced Security and More from na through 6.9.15.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:39:22.000000Z"}, {"uuid": "26eaf572-2342-4f94-af8d-122448873ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50880", "type": "seen", "source": "https://t.me/cibsecurity/73957", "content": "\u203c\ufe0fCVE-2023-50880\u203c\ufe0f\n\nImproper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in The BuddyPress Community BuddyPress allows Stored XSS.This issue affects BuddyPress from na through 11.3.1.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:39:17.000000Z"}, {"uuid": "8eb2e78e-1d97-4fcb-b856-0ccdce2b25c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50570", "type": "seen", "source": "https://t.me/cibsecurity/73994", "content": "\u203c\ufe0fCVE-2023-50570\u203c\ufe0f\n\nAn issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:42:23.000000Z"}, {"uuid": "b734869e-6866-4652-b668-2cd33d0d6498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50902", "type": "seen", "source": "https://t.me/cibsecurity/73968", "content": "\u203c\ufe0fCVE-2023-50902\u203c\ufe0f\n\nCrossSite Request Forgery CSRF vulnerability in WPExpertsio New User Approve.This issue affects New User Approve from na through 2.5.1.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:40:14.000000Z"}, {"uuid": "e90d305b-58c5-4bc0-a15b-8db13fd88a1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50878", "type": "seen", "source": "https://t.me/cibsecurity/73967", "content": "\u203c\ufe0fCVE-2023-50878\u203c\ufe0f\n\nCrossSite Request Forgery CSRF vulnerability in InspireUI MStore API.This issue affects MStore API from na through 4.10.1.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:40:07.000000Z"}, {"uuid": "e912486c-47ec-4697-b07d-ebc8ef61bd8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50892", "type": "seen", "source": "https://t.me/cibsecurity/73961", "content": "\u203c\ufe0fCVE-2023-50892\u203c\ufe0f\n\nImproper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in CodexThemes TheGem  Creative MultiPurpose  WooCommerce WordPress Theme allows Reflected XSS.This issue affects TheGem  Creative MultiPurpose  WooCommerce WordPress Theme from na through 5.9.1.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:39:37.000000Z"}, {"uuid": "d7eef646-2be0-43be-adf8-3d7591983784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50868", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/6752", "content": "Tools - Hackers Factory\n\nThis project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868. \n\nhttps://github.com/Goethe-Universitat-Cybersecurity/NSEC3-Encloser-Attack\n\nGitHub - kgdn/buffet: Web-based virtual machine manager - BSc. Computer Systems dissertation project (Heriot-Watt University)\n\nhttps://github.com/kgdn/buffet\n\nA full Mod_Security guide to use local software like clam-av, chkrootkit, fail2ban, rkhunter for Nginx & Apache \n\nhttps://github.com/VolkanSah/ModSecurity-Webserver-Protection-Guide\n\nMac RDP Client: Kerberos and Protected Users Guide\nhttps://awakecoding.com/posts/mac-rdp-client-kerberos-and-protected-users-guide/\n\n#exploit\n1. CVE-2023-46817:\nphpFox <=4.8.13 (redirect) PHP Object Injection\nhttps://karmainsecurity.com/pocs/CVE-2023-46817.php\n\n2. Magento CE RCE Exploit\nhttps://github.com/Hackhoven/Magento-RCE\n\n#tools #Offensive_security\n\n1. Tools for analyzing EDR agents\nhttps://github.com/outflanknl/edr-internals\n\n2. Benevolent Shellcode Loader\nhttps://github.com/jakobfriedl/BenevolentLoader\n\n#exploit\n1. CVE-2024-30850, CVE-2024-31839:\nCHAOS RAT v5.01 web panel RCE\nhttps://github.com/chebuya/CVE-2024-30850-chaos-rat-rce-poc\n\n2. CVE-2024-28995:\nSolarWinds Serv-U directory transversal\nhttps://github.com/rapid7/metasploit-framework/pull/19255\n\nhttps://attackerkb.com/topics/2k7UrkHyl3/cve-2024-28995/rapid7-analysis\n\n#reversing\n1. TempleOS Reverse Engineering\nhttps://starkeblog.com/bootsector/templeos/2024/06/13/templeos-reverse-engineering-part-i.html\n2. Thecus NAS Firmware Decryption\nhttps://starkeblog.com/cryptography/firmware/2024/06/11/thecus-nas-firmware-decrypt.html\n\nhttps://github.com/nstarke/thecus-firmware-decrypt\n\nHijack clicks on and within links, probably for client-side routing \n\n#Research\n\"Hyperlink Hijacking: Exploiting Erroneous URL Links to Phantom Domains\", 2024.\n\nhttps://github.com/mapbox/link-hijacker\n\n#exploit\n1. CVE-2022-41034:\nVSCode ipynb RCE\nhttps://packetstormsecurity.com/files/179029/VSCode-ipynb-Remote-Code-Execution.html\n\n2. CVE-2024-27801:\nUaF in NSXPC on all Apple platforms\nhttps://github.com/wangtielei/POCs/tree/main/CVE-2024-27801\n+ UAF in AGX (iOS <13):\nhttps://github.com/wangtielei/POCs/tree/main/No_CVE\n\n#HackersFactory", "creation_timestamp": "2024-06-18T09:34:50.000000Z"}, {"uuid": "e04541e7-6e3e-444e-9597-4a8b4b3767ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5074", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1195", "content": "", "creation_timestamp": "2023-09-30T02:04:21.000000Z"}, {"uuid": "dd237bc4-ae19-4eab-82a3-22ca9e3c5159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/MrVGunz/1206", "content": "\ud83d\udccd\u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0631\u0627\u06cc pdns-recursor: \u0631\u0641\u0639 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\n\n\u062f\u0631 19 \u0641\u0648\u0631\u06cc\u0647 2024\u060c \u062f\u0628\u06cc\u0627\u0646 \u0627\u0632 \u0648\u062c\u0648\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc CVE-2023-50387 \u0648 CVE-2023-50868 \u062f\u0631 pdns-recursor \u062e\u0628\u0631 \u062f\u0627\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u062d\u0645\u0644\u0627\u062a DoS \u0634\u0648\u0646\u062f. \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644\u0627\u062a \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS 7.5 \u062f\u0631 \u0646\u0633\u062e\u0647 4.8.6-1 \u0628\u0631\u0627\u06cc \u062a\u0648\u0632\u06cc\u0639 \u067e\u0627\u06cc\u062f\u0627\u0631 \u062f\u0628\u06cc\u0627\u0646 (bookworm) \u0631\u0641\u0639 \u0634\u062f\u0647\u200c\u0627\u0646\u062f. \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0628\u0627\u06cc\u062f \u0628\u0633\u062a\u0647\u200c\u0647\u0627\u06cc pdns-recursor \u062e\u0648\u062f \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83d\udd17 \u062c\u0647\u062a \u0645\u0637\u0627\u0644\u0639\u0647 \u0627\u062f\u0627\u0645\u0647 \u0645\u0642\u0627\u0644\u0647: \u0644\u06cc\u0646\u06a9\n\n\ud83d\udccd Security Update for pdns-recursor: Addressing Serious Vulnerabilities\n\nOn February 19, 2024, Debian announced the presence of vulnerabilities CVE-2023-50387 and CVE-2023-50868 in pdns-recursor. These vulnerabilities can lead to DoS attacks. The issues, with a CVSS score of 7.5, have been resolved in version 4.8.6-1 for the stable Debian distribution (bookworm). Users are advised to update their pdns-recursor packages promptly.\n\n\ud83d\udd17 For more information, please visit: Link", "creation_timestamp": "2024-07-16T17:05:20.000000Z"}, {"uuid": "311c4204-8320-4b91-9bdc-f49b7a3b7478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50868", "type": "seen", "source": "https://t.me/MrVGunz/1206", "content": "\ud83d\udccd\u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0631\u0627\u06cc pdns-recursor: \u0631\u0641\u0639 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\n\n\u062f\u0631 19 \u0641\u0648\u0631\u06cc\u0647 2024\u060c \u062f\u0628\u06cc\u0627\u0646 \u0627\u0632 \u0648\u062c\u0648\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc CVE-2023-50387 \u0648 CVE-2023-50868 \u062f\u0631 pdns-recursor \u062e\u0628\u0631 \u062f\u0627\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u062d\u0645\u0644\u0627\u062a DoS \u0634\u0648\u0646\u062f. \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644\u0627\u062a \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS 7.5 \u062f\u0631 \u0646\u0633\u062e\u0647 4.8.6-1 \u0628\u0631\u0627\u06cc \u062a\u0648\u0632\u06cc\u0639 \u067e\u0627\u06cc\u062f\u0627\u0631 \u062f\u0628\u06cc\u0627\u0646 (bookworm) \u0631\u0641\u0639 \u0634\u062f\u0647\u200c\u0627\u0646\u062f. \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0628\u0627\u06cc\u062f \u0628\u0633\u062a\u0647\u200c\u0647\u0627\u06cc pdns-recursor \u062e\u0648\u062f \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83d\udd17 \u062c\u0647\u062a \u0645\u0637\u0627\u0644\u0639\u0647 \u0627\u062f\u0627\u0645\u0647 \u0645\u0642\u0627\u0644\u0647: \u0644\u06cc\u0646\u06a9\n\n\ud83d\udccd Security Update for pdns-recursor: Addressing Serious Vulnerabilities\n\nOn February 19, 2024, Debian announced the presence of vulnerabilities CVE-2023-50387 and CVE-2023-50868 in pdns-recursor. These vulnerabilities can lead to DoS attacks. The issues, with a CVSS score of 7.5, have been resolved in version 4.8.6-1 for the stable Debian distribution (bookworm). Users are advised to update their pdns-recursor packages promptly.\n\n\ud83d\udd17 For more information, please visit: Link", "creation_timestamp": "2024-07-16T17:05:20.000000Z"}, {"uuid": "470dfd49-c799-4f00-8fd9-24520e2406b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50969", "type": "published-proof-of-concept", "source": "Telegram/b-rTkt2ZerHoeUG2xGDJzv5fZsOQJNwWlNsHtJbdmP-yHoA", "content": "", "creation_timestamp": "2024-04-01T14:05:10.000000Z"}, {"uuid": "fd28cc8c-4696-4086-b3c6-31a8b7396393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "exploited", "source": "https://t.me/CyberSecurityIL/34758", "content": "\u05e2\u05d5\u05d3 \u05dc\u05d0 \u05e2\u05d9\u05d3\u05db\u05e0\u05ea\u05dd \u05d0\u05ea \u05e1\u05e4\u05e8\u05d9\u05ea Apache Struts \u05d0\u05e6\u05dc\u05db\u05dd \u05d1\u05d0\u05e8\u05d2\u05d5\u05df? \u05d0\u05ea\u05dd \u05e2\u05dc \u05d4\u05db\u05d5\u05d5\u05e0\u05ea \u05e9\u05dc \u05d4\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd...\n\n\u05dc\u05e4\u05d9 \u05d0\u05e8\u05d2\u05d5\u05df Shadowserver \u05e7\u05d1\u05d5\u05e6\u05d5\u05ea \u05ea\u05e7\u05d9\u05e4\u05d4 \u05db\u05d1\u05e8 \u05d4\u05d7\u05dc\u05d5 \u05dc\u05e0\u05e6\u05dc \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1\u05e1\u05e4\u05e8\u05d9\u05d9\u05ea/\u05e4\u05dc\u05d8\u05e4\u05d5\u05e8\u05de\u05ea \u05d4\u05e7\u05d5\u05d3 \u05d4\u05e4\u05ea\u05d5\u05d7 Apach Struts.\n\n\u05de\u05d3\u05d5\u05d1\u05e8 \u05d1\u05d7\u05d5\u05dc\u05e9\u05d4 CVE-2023-50164 \u05e9\u05e7\u05d9\u05d1\u05dc\u05d4 \u05d3\u05e8\u05d2\u05ea \u05e1\u05d9\u05db\u05d5\u05df \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea (9.8) \u05d5\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05dc\u05d4\u05e8\u05d9\u05e5 \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7, \u05d4\u05e2\u05dc\u05d0\u05ea \u05e7\u05d1\u05e6\u05d9\u05dd \u05d6\u05d3\u05d5\u05e0\u05d9\u05d9\u05dd \u05d5\u05e2\u05d5\u05d3.\n\n\u05d4\u05de\u05e4\u05ea\u05d7\u05d9\u05dd \u05e9\u05dc Apache Struts \u05e4\u05e8\u05e1\u05de\u05d5 \u05ea\u05d9\u05e7\u05d5\u05df \u05d1-7.12 (\u05e9\u05d3\u05e8\u05d5\u05d2 \u05dc\u05d2\u05e8\u05e1\u05d4 Struts 2.5.33 \u05d0\u05d5 Struts 6.3.0. 2 \u05d5\u05de\u05e2\u05dc\u05d4).\n\n\u05d7\u05d1\u05e8\u05ea \u05e1\u05d9\u05e1\u05e7\u05d5 \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05db\u05d9 \u05d1\u05d7\u05dc\u05e7 \u05de\u05de\u05d5\u05e6\u05e8\u05d9\u05d4 \u05d4\u05d9\u05d0 \u05de\u05e9\u05ea\u05de\u05e9\u05ea \u05d1\u05e1\u05e4\u05e8\u05d9\u05d4 \u05d4\u05d6\u05d5 (\u05db\u05de\u05d5 \u05e2\u05d5\u05d3 \u05d4\u05e8\u05d1\u05d4 \u05d0\u05e8\u05d2\u05d5\u05e0\u05d9\u05dd) \u05d5\u05de\u05e4\u05e8\u05e1\u05de\u05ea \u05e8\u05e9\u05d9\u05de\u05d4 \u05e9\u05dc \u05d4\u05de\u05d5\u05e6\u05e8\u05d9\u05dd \u05d4\u05e9\u05d5\u05e0\u05d9\u05dd  - \u05db\u05d0\u05df.\n\n\u26d4\u05d4\u05d6\u05d3\u05de\u05e0\u05d5\u05ea \u05d8\u05d5\u05d1\u05d4 \u05dc\u05d4\u05d6\u05db\u05d9\u05e8 \u05db\u05d9 \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e4\u05d5\u05e8\u05e1\u05de\u05d4 \u05d1\u05e4\u05d9\u05d3 \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea, \u05d4\u05d6\u05de\u05d9\u05df \u05dc\u05ea\u05d5\u05de\u05db\u05d9 \u05d4\u05e2\u05e8\u05d5\u05e5, \u05db\u05d1\u05e8 \u05d1-7.12.\n\nhttps://t.me/CyberSecurityIL/4237\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea", "creation_timestamp": "2023-12-14T15:41:29.000000Z"}, {"uuid": "16228ada-9163-4307-a4dd-84d73f1f109a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50809", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6078", "content": "\u0412 \u0434\u043e\u0433\u043e\u043d\u043a\u0443 \u043a Cisco, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Claroty \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438  \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u041f\u041b\u041a \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Unitronics, \u0442\u043e\u0439 \u0441\u0430\u043c\u043e\u0439, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0438\u0440\u0430\u043d\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Cyber Av3ngers. \u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b.\n\nJenkins \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0434\u0432\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430.\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Progress, \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0434\u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0440\u0435\u0448\u0435\u043d\u0438\u044e \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0441\u0435\u0442\u0438 WhatsUp Gold.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shadowserver Foundation, \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2024-4885), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0438\u044e\u043d\u044f. \n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 PoC \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0438\u044e\u043b\u044f.\n\n1Password \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 CVE-2024-42219 \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0434\u043b\u044f macOS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 1Password \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u0437 \u0435\u0433\u043e \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430.\n\nGoogle \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435\u00a0\u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0434\u043b\u044f CVE-2023-2163 - \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u044f\u0434\u0440\u0430 Linux eBPF, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f LPE \u0438 \u0430\u0442\u0430\u043a \u0441 \u0446\u0435\u043b\u044c\u044e \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430.\n\nSonos \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0443\u043c\u043d\u044b\u0445 \u043a\u043e\u043b\u043e\u043d\u043a\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 CVE-2023-50809.\n\n\u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u043c\u0441\u044f \u0432 \u0437\u043e\u043d\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f Wi-Fi \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0441\u043c\u0430\u0440\u0442-\u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0430 Sonos, \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0437\u0432\u0443\u043a.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 NCC Group \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0441 \u0432\u0438\u0434\u0435\u043e, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043e\u043a\u0440\u0443\u0436\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0432\u0443\u043a\u0430.", "creation_timestamp": "2024-08-09T16:50:05.000000Z"}, {"uuid": "14d36498-003a-4e74-b1f0-31e294e9a91d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "exploited", "source": "https://t.me/true_secator/6552", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u043d\u0430\u0447\u0430\u043b\u043e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043f\u043e\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Apache Struts 2 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\nApache \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 CVE-2024-53677 (CVSS 4.0: 9,5) \u0448\u0435\u0441\u0442\u044c \u0434\u043d\u0435\u0439 \u043d\u0430\u0437\u0430\u0434.\n\n\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Struts \u0432\u0435\u0440\u0441\u0438\u0439 2.0.0\u20132.3.37 (EoL), 2.5.0\u20132.5.33 \u0438 6.0.0\u20136.3.0.2.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438, \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043b\u043e\u0433\u0438\u043a\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0435\u0439 \u0438 \u0438 \u043f\u0440\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445 - \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f RCE.\n\n\u041f\u0440\u043e\u0449\u0435 \u0433\u043e\u0432\u043e\u0440\u044f, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b, \u043a\u0430\u043a \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0432 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0438 \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0445\u043e\u0436\u0430 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u044e\u044e CVE-2023-50164, \u0438 \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u0439 \u0436\u0435 \u0441\u0430\u043c\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043d\u043e\u0432\u044c \u0432\u0435\u0440\u043d\u0443\u043b\u0430\u0441\u044c \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c ISC SANS \u0419\u043e\u0445\u0430\u043d\u043d\u0435\u0441 \u0423\u043b\u044c\u0440\u0438\u0445 \u043f\u0435\u0440\u0432\u044b\u043c \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0438\u043b\u0438, \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435, \u0432 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043d\u0438\u0445.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u043e\u0440 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u0430 exploit.jsp, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0433\u043e \u043e\u0434\u043d\u0443 \u0441\u0442\u0440\u043e\u043a\u0443 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0441\u0442\u0440\u043e\u043a\u0438 Apache Struts.\n\n\u0417\u0430\u0442\u0435\u043c \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u043a\u0440\u0438\u043f\u0442\u0443, \u0447\u0442\u043e\u0431\u044b \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u0431\u044b\u043b \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d. \u0412\u0441\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0438\u0441\u0445\u043e\u0434\u044f\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043e\u0434\u043d\u043e\u0433\u043e IP 169.150.226.162.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Apache \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e Struts 6.4.0 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u041f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043a\u043e\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 Struts, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u0430\u0442\u044c \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 Action File Upload.\n\n\u0420\u0435\u0433\u0443\u043b\u044f\u0442\u043e\u0440\u044b \u0438\u0437 \u041a\u0430\u043d\u0430\u0434\u044b, \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0438 \u0438 \u0411\u0435\u043b\u044c\u0433\u0438\u0438 \u0443\u0436\u0435 \u0437\u0430\u0431\u0438\u043b\u0438 \u0442\u0440\u0435\u0432\u043e\u0433\u0443, \u043e\u043f\u043e\u0432\u0435\u0449\u0430\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u041f\u041e \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u0441\u0440\u043e\u0447\u043d\u044b\u0435 \u043c\u0435\u0440\u044b.\n\n\u0418 \u043d\u0435 \u0437\u0440\u044f \u043f\u0435\u0440\u0435\u0436\u0438\u0432\u0430\u044e\u0442, \u0432\u0435\u0434\u044c \u0440\u043e\u0432\u043d\u043e \u043b\u0433\u043e\u0434 \u043d\u0430\u0437\u0430\u0434 \u0445\u0430\u043a\u0435\u0440\u044b \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 PoC \u0434\u043b\u044f\u00a0\u0430\u0442\u0430\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Struts\u00a0\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.", "creation_timestamp": "2024-12-18T10:44:47.000000Z"}, {"uuid": "c3fd3b47-69a8-4a57-a6c2-b9e249fd6c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/true_secator/5421", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041d\u0418\u0426 \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 ATHENE \u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 DNS-\u0430\u0442\u0430\u043a\u0438, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0439 \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u041d\u043e, \u043a \u0441\u0447\u0430\u0441\u0442\u044c\u044e \u0434\u043b\u044f \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u00a0KeyTrap, \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. \n\n\u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-50387 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d DNSSEC, \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u044e\u0449\u0435\u0439 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044e \u0438\u043b\u0438 \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u0435 \u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u043d\u0430 DNS-\u0437\u0430\u043f\u0440\u043e\u0441\u044b.\n\n\u041d\u0435\u043c\u0435\u0446\u043a\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0441\u0431\u043e\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0434\u0438\u043d \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 DNS-\u043f\u0430\u043a\u0435\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0438\u0441\u0442\u043e\u0449\u0435\u043d\u0438\u044e \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0426\u041f.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0441\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c DNS \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 DNSSEC, \u0438 \u043f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 \u0434\u0435\u043a\u0430\u0431\u0440\u044c 2023 \u0433\u043e\u0434\u0430 \u0431\u043e\u043b\u0435\u0435 31% \u0432\u0435\u0431-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043a\u0430\u043a \u0440\u0430\u0437 \u0442\u0430\u043a\u0438\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438.\n\n\u0420\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0441 KeyTrap \u0431\u0443\u0434\u0435\u0442 \u0438\u043c\u0435\u0442\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0433\u043e \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u043d\u0430 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u0432\u0441\u0435\u043c\u0438\u0440\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n\u0410\u0442\u0430\u043a\u0430 \u0441 KeyTrap \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 DNS, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0442\u0430\u043a\u0438\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0443\u0441\u043b\u0443\u0433 DNS, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Google \u0438\u043b\u0438 Cloudflare.\n\n\u0412\u0441\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u0431\u044b\u043b\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u0442\u0430\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d 13 \u0444\u0435\u0432\u0440\u0430\u043b\u044f.\n\n\u0421 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a KeyTrap \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u0435\u0440\u0435\u0438\u043d\u0430\u0447\u0438\u0442\u044c \u043e\u0441\u043d\u043e\u0432\u043d\u0443\u044e \u0444\u0438\u043b\u043e\u0441\u043e\u0444\u0438\u044e \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f DNSSEC.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u0434\u0435\u0441\u044f\u0442\u0438\u043b\u0435\u0442\u0438\u0439, \u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e KeyTrap \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f CVE-2023-50387 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b Microsoft, BIND, PowerDNS \u0438 NLnet (Unbound).", "creation_timestamp": "2024-02-15T16:00:07.000000Z"}, {"uuid": "4e2ace27-ac64-4b4e-ac03-31df332da264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50358", "type": "exploited", "source": "https://t.me/true_secator/5413", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Unit 42 \u0438\u0437 Palo Alto Networks \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043d\u043e\u0432\u043e\u043c 0-day \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 NAS \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u043e\u0439 QNAP, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0441 \u043d\u043e\u044f\u0431\u0440\u044f \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-50358 \u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u00a0Quick.cgi \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c \u041f\u041e QTS \u0438 QuTS Hero, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u0440\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\u00a0todo=set_timeinfo\u00a0\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0432\u00a0\u0444\u0430\u0439\u043b\u0435 fast.cgi\u00a0\u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u00a0SPECIFIC_SERVER\u00a0\u0432 \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438\u00a0/tmp/quick/quick_tmp.conf\u00a0\u0441 \u0438\u043c\u0435\u043d\u0435\u043c \u0437\u0430\u043f\u0438\u0441\u0438\u00a0NTP Address.\n\n\u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u0440\u0435\u0441\u0430 NTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u044e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u0442\u0438\u043b\u0438\u0442\u044b\u00a0ntpdate.\n\n\u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0443\u0442\u0435\u043c \u0447\u0442\u0435\u043d\u0438\u044f\u00a0\u0430\u0434\u0440\u0435\u0441\u0430 NTP\u00a0\u0432\u00a0\u0444\u0430\u0439\u043b\u0435 fast_tmp.conf, \u0430 \u0437\u0430\u0442\u0435\u043c \u044d\u0442\u0430 \u0441\u0442\u0440\u043e\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e\u00a0system().\n\n\u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u00a0SPECIFIC_SERVER\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0432 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0412\u043f\u0435\u0440\u0432\u044b\u0435 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e 7 \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c \u0441 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 QNAP.\n\n\u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0432\u044b\u044f\u0432\u0438\u043b \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u0447\u0435\u043c 21 \u043d\u043e\u044f\u0431\u0440\u044f \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 19 \u0434\u0435\u043a\u0430\u0431\u0440\u044f.\n\n\u041f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e QNAP \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u043e \u043d\u043e\u0432\u043e\u0439 0-day. \n\n\u0422\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u044f Palo Alto Networks \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 \u044f\u043d\u0432\u0430\u0440\u044c 2024 \u0433\u043e\u0434\u0430 289 665 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438\u0437 18 \u0441\u0442\u0440\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 NAS.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c, \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c NAS \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c QTS \u0438\u043b\u0438 QuTScloud Hero \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0422\u0430\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 IoT, \u0441\u043e\u0447\u0435\u0442\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u0435 \u043d\u0438\u0437\u043a\u0443\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u043a\u0430\u043a \u044d\u0442\u043e \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u044b QNAP \u0432 \u0445\u043e\u0440\u0434\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0445 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0441 ransomware.", "creation_timestamp": "2024-02-14T12:20:05.000000Z"}, {"uuid": "2ffe57a1-6947-48cc-b335-6d0ad04a77f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5200", "content": "Shadowserver \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 CVE-2023-50164 \u0432 Apache Struts.\n\nRCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Struts 2.0.0 - 2.3.37, 2.5.0 - 2.5.32 \u0438 6.0.0 - 6.3.0, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 7 \u0434\u0435\u043a\u0430\u0431\u0440\u044f Apache \u0432 6.3.0.2 \u0438 2.5.33. \n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c, \u043a\u0440\u0430\u0436\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u0441\u043b\u0443\u0436\u0431 \u0438 \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044e \u0432\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445.\n \n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e \u043b\u0438\u0448\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0447\u0438\u0441\u043b\u043e IP, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0435\u0449\u0435 \u0432\u043f\u0435\u0440\u0435\u0434\u0438.\n\n\u0412\u0435\u0434\u044c 10 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u0441\u0442\u0430\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \u0411\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2023-12-14T13:30:05.000000Z"}, {"uuid": "232b78c3-5836-4878-9105-217b1aa7b36c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50969", "type": "seen", "source": "https://t.me/true_secator/5586", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Imperva SecureSphere Web Application Firewall, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0432 \u0433\u043e\u0441\u0441\u0435\u043a\u0442\u043e\u0440\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043a\u0440\u0443\u043f\u043d\u043e\u043c \u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0431\u0438\u0437\u043d\u0435\u0441\u0435.\n\nCVE-2023-50969\u00a0\u0438\u043c\u0435\u0435\u0442 CVSS 3.1: 9,8 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u0430 WAF \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 POST, \u0430 \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Imperva SecureSphere \u0431\u0435\u0437 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0426\u0435\u043d\u0442\u0440\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (ADC), \u0431\u044b\u043b\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 v14.7.0.40. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c Imperva Cloud WAF \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0435.\n\n\u041e\u0431\u0445\u043e\u0434 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 WAF \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0441 \u0434\u0432\u0443\u043c\u044f (\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435) \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u043c\u0438\u00a0Content-Encoding (\u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0445 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043e\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u044b \u043a \u0442\u0435\u043b\u0443 HTTP-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f, \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f:\u00a0br, compress, deflate \u0438 gzip).\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u00a0gzip, \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 WAF \u043c\u043e\u0436\u043d\u043e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e\u00a0 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u00a0Content-Encoding, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a\u00a0Content-Encoding: deflate.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 10 \u043d\u043e\u044f\u0431\u0440\u044f, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e 26 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432\u0438\u043b ADC \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.", "creation_timestamp": "2024-03-29T18:50:14.000000Z"}, {"uuid": "8671aabc-c762-494b-afbd-09e814d84714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "seen", "source": "https://t.me/cibsecurity/72915", "content": "\u203c CVE-2023-5044 \u203c\n\nCode injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-26T00:39:26.000000Z"}, {"uuid": "564412d1-e7b2-400c-8fef-90b244e44c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/true_secator/5189", "content": "Apache Software Foundation \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u0441\u0440\u0435\u0434\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Struts 2.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u043a\u0430\u043a\u00a0CVE-2023-50164, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0421\u0442\u0438\u0432\u0435\u043d \u0421\u0438\u043b\u0438 \u0438\u0437 Source Incite. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u041d\u043e \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Struts \u0441 2.0.0 \u043f\u043e 2.3.37 (\u0441\u0440\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u0442\u0435\u043a), \u0441 2.5.0 \u043f\u043e 2.5.32 \u0438 \u0441 6.0.0 \u043f\u043e 6.3.0.\n\n\u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0435\u0439, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u044c \u043d\u0430 Struts 2.5.33 \u0438\u043b\u0438 6.3.0.2 (\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u044e\u044e \u0432\u0435\u0440\u0441\u0438\u0438), \u043e\u0442\u043c\u0435\u0447\u0430\u044f, \u0447\u0442\u043e \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c.\n\n\u041d\u0438\u043a\u0430\u043a\u0438\u0445 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Apache, \u043f\u043e\u043a\u0430 \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2023-12-12T11:19:01.000000Z"}, {"uuid": "a1da76c9-3162-41b2-ab96-eed0effea65e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50868", "type": "seen", "source": "https://t.me/true_secator/5848", "content": "\u041f\u043e\u0434\u043a\u0430\u0442\u0438\u043b \u0438\u044e\u043d\u044c\u0441\u043a\u0438\u0439 PatchTuesday \u043e\u0442 Microsoft \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 51 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 18 RCE \u0438 0-day, \u0430 \u0442\u0430\u043a\u0436\u0435 7 - \u0432 Chromium/Edge.\n\n\u041a \u0443\u0434\u0438\u0432\u043b\u0435\u043d\u0438\u044e, \u043b\u0438\u0448\u044c \u043e\u0434\u043d\u0430 CVE \u0432 Microsoft Message Queuing \u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u0435\u0449\u0451 38 \u0438\u043c\u0435\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442 \u0438 12 - \u0441\u0440\u0435\u0434\u043d\u0438\u0439, \u0430 \u0432 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0438 \u043f\u043e \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u043c \u043f\u0440\u0435\u0432\u0430\u043b\u0438\u0440\u0443\u0435\u0442 EoP - 25 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0435\u043c \u0443\u0436\u0435 18 - RCE, 5 - DoS \u0438 3 - \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0415\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u043d\u0443\u043b\u044c - CVE-2023-50868 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 DNS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0430\u0442\u0430\u043a\u0443 Keytrap, \u043f\u043e \u043f\u043e\u0432\u043e\u0434\u0443 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b\u043e \u043c\u043d\u043e\u0433\u043e \u0448\u0443\u043c\u0438\u0445\u0438, \u043d\u043e \u0434\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043b\u043e\u0441\u043a\u043e\u0441\u0442\u0438 \u0442\u0430\u043a \u0438 \u043d\u0435 \u0434\u043e\u0448\u043b\u043e.\n\n\u041e\u0442\u043c\u0435\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-30080 \u0441 CVSS 9.8) \u0432 MSMQ \u043d\u0435 \u0433\u0440\u043e\u0437\u0438\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0414\u0440\u0443\u0433\u043e\u0439 \u0432\u0430\u0436\u043d\u044b\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, CVE-2024-30103 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8,8), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0447\u0435\u0440\u043d\u044b\u0435 \u0441\u043f\u0438\u0441\u043a\u0438 \u0440\u0435\u0435\u0441\u0442\u0440\u0430  Microsoft Outlook \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b DLL.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c \u0438\u0437 \u043f\u0430\u043d\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u043d\u0435\u0432\u0435\u043b\u0438\u043a\u0430 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0430 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043e\u0447\u0435\u043d\u044c \u043f\u0440\u043e\u0441\u0442\u043e.\n\n\u0412\u0441\u0451 \u044d\u0442\u043e \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Morphisec, \u043f\u0440\u0435\u0434\u0432\u0435\u0449\u0430\u0435\u0442 \u043d\u0430\u0447\u0430\u043b\u043e \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Microsoft Office \u0438 EoP-\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u044f\u0434\u0440\u0435 Windows.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043a\u0430\u0436\u0434\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u043d\u0430 \u0432\u043b\u0438\u044f\u0435\u0442, - \u0437\u0434\u0435\u0441\u044c.", "creation_timestamp": "2024-06-13T13:47:26.000000Z"}, {"uuid": "59ca9e7c-0713-4905-a10d-03056b4e32b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/true_secator/5968", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Cloudflare \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0437\u0430 2024 \u0433\u043e\u0434, \u043e\u0442\u0440\u0430\u0436\u0430\u044e\u0449\u0438\u0439 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0442\u0440\u0435\u043d\u0434\u044b \u0438\u043d\u0444\u043e\u0441\u0435\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u044f\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e \u043f\u0440\u0438\u0437\u0430\u0434\u0443\u043c\u0430\u0442\u044c\u0441\u044f.\n\n\u041f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441 \u043c\u0430\u044f 2023 \u0433\u043e\u0434\u0430 \u043f\u043e \u043c\u0430\u0440\u0442 2024 \u0433\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u0440\u0438\u0448\u043b\u0438 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0443\u0436\u0435 \u0447\u0435\u0440\u0435\u0437 22 \u043c\u0438\u043d\u0443\u0442\u044b \u043f\u043e\u0441\u043b\u0435 \u0438\u0445 \u0440\u0435\u043b\u0438\u0437\u0430.\n\n\u041e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c 57 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u0441\u0435\u043a\u0443\u043d\u0434\u0443, Cloudflare \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 CVE, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 PoC \u0434\u043b\u044f \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u044f.\n\n\u0412 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0430 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u0441\u043a\u043e\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c CVE-2023-50164 \u0438 CVE-2022-33891 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Apache, CVE-2023-29298, CVE-2023-38203 \u0438 CVE-2023-26360 \u0432 Coldfusion \u0438 CVE-2023-35082 \u0432 MobileIron.\n\n\u0425\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u043e\u043c \u0440\u043e\u0441\u0442\u0430 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2024-27198, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 JetBrains TeamCity.\n\nCloudflare \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u043b\u0443\u0447\u0430\u0439, \u043a\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 PoC \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 22 \u043c\u0438\u043d\u0443\u0442\u044b \u043f\u043e\u0441\u043b\u0435 \u0435\u0433\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435 \u043e\u0441\u0442\u0430\u0432\u0438\u043b\u043e \u0437\u0430\u0449\u0438\u0442\u043d\u0438\u043a\u0430\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438.\n\nCloudflare \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u044d\u0442\u043e \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u043e \u043e\u0442\u0447\u0430\u0441\u0442\u0438 \u0442\u0435\u043c, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u044b \u0443\u0433\u0440\u043e\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043d\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u0445 CVE, \u0438\u043c\u0435\u044f \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0435 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0431\u044b\u0441\u0442\u0440\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0442\u0430\u043a\u043e\u0439 \u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0435 - \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0418\u0418 \u0434\u043b\u044f \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u0430\u0432\u0438\u043b WAF \u0441 \u0443\u0441\u043b\u043e\u0432\u0438\u0435\u043c \u0431\u0430\u043b\u0430\u043d\u0441\u0430 \u043c\u0435\u0436\u0434\u0443 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043b\u043e\u0436\u043d\u044b\u0445 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0438 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c\u044e \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u0414\u0440\u0443\u0433\u0438\u043c \u043e\u0448\u0435\u043b\u043e\u043c\u043b\u044f\u044e\u0449\u0438\u043c \u0432\u044b\u0432\u043e\u0434\u043e\u043c \u0438\u0437 \u043e\u0442\u0447\u0435\u0442\u0430 Cloudflare \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e, \u0447\u0442\u043e 6,8% \u0432\u0441\u0435\u0433\u043e \u0435\u0436\u0435\u0434\u043d\u0435\u0432\u043d\u043e\u0433\u043e \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u2014 \u044d\u0442\u043e \u0442\u0440\u0430\u0444\u0438\u043a \u0442\u0438\u043f\u0430 DDoS, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043e\u043d\u043b\u0430\u0439\u043d-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u044b.\n\n\u042d\u0442\u043e \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0439 \u0440\u043e\u0441\u0442 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 6%, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0439 \u043f\u0435\u0440\u0438\u043e\u0434 (2022\u20132023 \u0433\u0433.), \u0447\u0442\u043e \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431 \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0438\u0438 \u043e\u0431\u0449\u0435\u0433\u043e \u043e\u0431\u044a\u0435\u043c\u0430 DDoS-\u0430\u0442\u0430\u043a.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cloudflare, \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0442\u044c \u0434\u043e 12% \u0432\u0441\u0435\u0433\u043e HTTP-\u0442\u0440\u0430\u0444\u0438\u043a\u0430.\n\n\u041e\u0442\u0447\u0435\u0442 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 PDF \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0437\u0434\u0435\u0441\u044c \u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0441\u043e\u0431\u0440\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438.", "creation_timestamp": "2024-07-15T14:33:14.000000Z"}, {"uuid": "aef19fa4-2d3f-4d5a-9d56-03047570d391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50898", "type": "seen", "source": "https://t.me/ctinow/208914", "content": "https://ift.tt/Jj7pYgd\nCVE-2023-50898", "creation_timestamp": "2024-03-15T16:26:30.000000Z"}, {"uuid": "6e317031-4b98-45da-af45-c7b7578d31e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50886", "type": "seen", "source": "https://t.me/ctinow/208913", "content": "https://ift.tt/w1zWV9R\nCVE-2023-50886", "creation_timestamp": "2024-03-15T16:26:26.000000Z"}, {"uuid": "fbb5fe35-5cff-4eb1-8fd7-2c82cd2270b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://t.me/true_secator/5023", "content": "\u0412 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 NGINX \u0434\u043b\u044f Kubernetes \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445:\n- CVE-2022-4886\u00a0(\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8): \u043e\u0431\u0445\u043e\u0434 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u043f\u0443\u0442\u0438 Ingress-nginx\u00a0\u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 Ingress-nginx;\n- CVE-2023-5043\u00a0(\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,6): \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0430\u043d\u043d\u043e\u0442\u0430\u0446\u0438\u0438 Ingress-nginx \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n- CVE-2023-5044\u00a0(\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,6): \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u043d\u043e\u0442\u0430\u0446\u0438\u044e nginx.ingress.kubernetes[.io]/permanent-redirect.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430.\n\nCVE-2022-4886 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432 \u043f\u043e\u043b\u0435 \u00abspec.rules[].http.paths[].path\u00bb \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Ingress, \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 API Kubernetes \u0438\u0437 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430.\n\n\u0412\u00a0\u043e\u0431\u044a\u0435\u043a\u0442\u0435 Ingress\u00a0\u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u043c\u043e\u0436\u0435\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c, \u043a\u0430\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u043f\u0443\u0442\u044c HTTP \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u043a\u0430\u043a\u043e\u0439 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u043f\u0443\u0442\u044c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0441\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u0444\u0430\u0439\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0442\u043e\u043a\u0435\u043d \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043b\u0443\u0436\u0431\u044b \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 API.\n\n\u0412 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u041f\u041e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u044e \u043e\u043f\u0446\u0438\u0438 \u00abstrict-validate-path-type\u00bb \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0444\u043b\u0430\u0433\u0430 --enable-annotation-validation, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 Ingress \u0441 \u043d\u0435\u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u043c\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438 \u0438 \u0432\u0432\u0435\u0441\u0442\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f.\n\n\u0412 ARMO \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 NGINX \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.19, \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u00ab--enable-annotation-validation\u00bb, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2023-5043 \u0438 CVE-2023-5044.", "creation_timestamp": "2023-10-30T17:00:07.000000Z"}, {"uuid": "79db6f09-8beb-4324-9e92-958716e3fabf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "seen", "source": "https://t.me/true_secator/5023", "content": "\u0412 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 NGINX \u0434\u043b\u044f Kubernetes \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445:\n- CVE-2022-4886\u00a0(\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8): \u043e\u0431\u0445\u043e\u0434 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u043f\u0443\u0442\u0438 Ingress-nginx\u00a0\u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 Ingress-nginx;\n- CVE-2023-5043\u00a0(\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,6): \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0430\u043d\u043d\u043e\u0442\u0430\u0446\u0438\u0438 Ingress-nginx \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n- CVE-2023-5044\u00a0(\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,6): \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u043d\u043e\u0442\u0430\u0446\u0438\u044e nginx.ingress.kubernetes[.io]/permanent-redirect.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430.\n\nCVE-2022-4886 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432 \u043f\u043e\u043b\u0435 \u00abspec.rules[].http.paths[].path\u00bb \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Ingress, \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 API Kubernetes \u0438\u0437 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430.\n\n\u0412\u00a0\u043e\u0431\u044a\u0435\u043a\u0442\u0435 Ingress\u00a0\u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u043c\u043e\u0436\u0435\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c, \u043a\u0430\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u043f\u0443\u0442\u044c HTTP \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u043a\u0430\u043a\u043e\u0439 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u043f\u0443\u0442\u044c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0441\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u0444\u0430\u0439\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0442\u043e\u043a\u0435\u043d \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043b\u0443\u0436\u0431\u044b \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 API.\n\n\u0412 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u041f\u041e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u044e \u043e\u043f\u0446\u0438\u0438 \u00abstrict-validate-path-type\u00bb \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0444\u043b\u0430\u0433\u0430 --enable-annotation-validation, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 Ingress \u0441 \u043d\u0435\u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u043c\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438 \u0438 \u0432\u0432\u0435\u0441\u0442\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f.\n\n\u0412 ARMO \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 NGINX \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.19, \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u00ab--enable-annotation-validation\u00bb, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2023-5043 \u0438 CVE-2023-5044.", "creation_timestamp": "2023-10-30T17:00:07.000000Z"}, {"uuid": "bde2858c-6454-4f60-b45f-09d6e1173eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50898", "type": "seen", "source": "https://t.me/ctinow/208904", "content": "https://ift.tt/Jj7pYgd\nCVE-2023-50898", "creation_timestamp": "2024-03-15T16:21:50.000000Z"}, {"uuid": "24ef9d64-e316-4867-9d7c-4b577a8a2318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50861", "type": "seen", "source": "https://t.me/ctinow/208851", "content": "https://ift.tt/6J4AaYm\nCVE-2023-50861", "creation_timestamp": "2024-03-15T15:26:51.000000Z"}, {"uuid": "80e0e2d3-0e48-4d1e-a148-43fec92830eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50861", "type": "seen", "source": "https://t.me/ctinow/208843", "content": "https://ift.tt/6J4AaYm\nCVE-2023-50861", "creation_timestamp": "2024-03-15T15:22:09.000000Z"}, {"uuid": "65e52f53-adc9-4181-a219-00d20b468466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/ctinow/228139", "content": "Exploit attempts inspired by recent Struts2 File Upload Vulnerability (CVE-2024-53677, CVE-2023-50164), (Sun, Dec 15th)\nhttps://ift.tt/bfKOcS9", "creation_timestamp": "2024-12-15T20:24:26.000000Z"}, {"uuid": "35258354-603f-41e5-adc5-a5eb260f471f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50886", "type": "seen", "source": "https://t.me/ctinow/208903", "content": "https://ift.tt/w1zWV9R\nCVE-2023-50886", "creation_timestamp": "2024-03-15T16:21:49.000000Z"}, {"uuid": "3c75e3fa-6d5b-447d-ba67-f969b5f0c8b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50726", "type": "seen", "source": "https://t.me/ctinow/207221", "content": "https://ift.tt/Oa9VGDH\nCVE-2023-50726", "creation_timestamp": "2024-03-13T22:26:38.000000Z"}, {"uuid": "7bf236e0-da0d-486a-9952-1d4cb79ad0ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50168", "type": "seen", "source": "https://t.me/ctinow/207966", "content": "https://ift.tt/vARoDrw\nCVE-2023-50168", "creation_timestamp": "2024-03-14T17:36:11.000000Z"}, {"uuid": "4ce27346-8caf-4bd5-84da-a3e9d52755b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50168", "type": "seen", "source": "https://t.me/ctinow/207962", "content": "https://ift.tt/vARoDrw\nCVE-2023-50168", "creation_timestamp": "2024-03-14T17:31:51.000000Z"}, {"uuid": "95284979-f229-438e-9893-8a161b162b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50966", "type": "seen", "source": "https://t.me/ctinow/211681", "content": "https://ift.tt/E1karJ7\nCVE-2023-50966", "creation_timestamp": "2024-03-19T16:26:33.000000Z"}, {"uuid": "14729c60-4dea-4718-989a-5e7ac577bb0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50966", "type": "seen", "source": "https://t.me/ctinow/211750", "content": "https://ift.tt/5PuFW97\nCVE-2023-50966", "creation_timestamp": "2024-03-19T17:41:22.000000Z"}, {"uuid": "75887209-02f2-4a9a-91d7-78d8a32e4c7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50955", "type": "seen", "source": "https://t.me/ctinow/206474", "content": "https://ift.tt/8BJvHOX\nCVE-2023-50955 | IBM InfoSphere Information Server 11.7 information disclosure (XFDB-275777)", "creation_timestamp": "2024-03-13T09:11:45.000000Z"}, {"uuid": "958e20f7-5f18-44e5-8bda-544c8cbeb267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50358", "type": "seen", "source": "https://t.me/ctinow/203119", "content": "https://ift.tt/k9PBRxQ\nCVE-2023-50358 Exploit", "creation_timestamp": "2024-03-08T08:16:55.000000Z"}, {"uuid": "f1f1507d-93d7-47fa-9571-342a7abd5bf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50726", "type": "seen", "source": "https://t.me/ctinow/207239", "content": "https://ift.tt/Oa9VGDH\nCVE-2023-50726", "creation_timestamp": "2024-03-13T22:31:41.000000Z"}, {"uuid": "79e79d7e-08be-4859-ae12-95fbe4ee08de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5053", "type": "seen", "source": "https://t.me/cibsecurity/71238", "content": "\u203c CVE-2023-5053 \u203c\n\nHospital management system version 378c157 allows to bypass authentication.This is possible because the application is vulnerable to SQLI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-29T00:37:05.000000Z"}, {"uuid": "d5127209-0483-472c-9aca-09d3d113f9ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50726", "type": "seen", "source": "https://t.me/ctinow/207493", "content": "https://ift.tt/jBhoerD\nCVE-2023-50726", "creation_timestamp": "2024-03-14T06:16:28.000000Z"}, {"uuid": "85331ef4-75a4-4bb2-a7f3-925029f1bcfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50306", "type": "seen", "source": "https://t.me/ctinow/203370", "content": "https://ift.tt/4q9F2vs\nCVE-2023-50306 | IBM Common Licensing 9.0 Username observable response discrepancy (XFDB-273337)", "creation_timestamp": "2024-03-08T15:21:59.000000Z"}, {"uuid": "4d89f90d-65f5-41ae-86ae-307515e53f5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50015", "type": "seen", "source": "https://t.me/ctinow/203768", "content": "https://ift.tt/ZtpDwh4\nCVE-2023-50015", "creation_timestamp": "2024-03-09T06:26:48.000000Z"}, {"uuid": "1eb408df-f652-4314-a7ea-a8e61afa7ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50071", "type": "seen", "source": "https://t.me/ctinow/201457", "content": "https://ift.tt/qLZfC0m\n[webapps] CVE-2023-50071 - Multiple SQL Injection", "creation_timestamp": "2024-03-06T15:56:30.000000Z"}, {"uuid": "af40358d-bc2b-406d-9c99-d9ea6f293c0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50716", "type": "seen", "source": "https://t.me/ctinow/201697", "content": "https://ift.tt/K6iae0f\nCVE-2023-50716", "creation_timestamp": "2024-03-06T19:32:08.000000Z"}, {"uuid": "f3c6f8a6-070e-4e1d-abb7-c1aae2f771c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50167", "type": "seen", "source": "https://t.me/ctinow/201696", "content": "https://ift.tt/pv0NkLA\nCVE-2023-50167", "creation_timestamp": "2024-03-06T19:32:07.000000Z"}, {"uuid": "e5ef5c67-0bd4-4745-8c0e-481d82496611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "seen", "source": "https://t.me/ctinow/203117", "content": "https://ift.tt/tu9EPhn\nCVE-2023-50386 Exploit", "creation_timestamp": "2024-03-08T08:16:52.000000Z"}, {"uuid": "f0ce14f7-25cd-4cef-8277-95c82a51b9f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50677", "type": "seen", "source": "https://t.me/ctinow/208277", "content": "https://ift.tt/El7RFfS\nCVE-2023-50677", "creation_timestamp": "2024-03-14T23:26:07.000000Z"}, {"uuid": "df1ee252-6e4a-4708-89b2-caeb1fcaa7f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50677", "type": "seen", "source": "https://t.me/ctinow/208269", "content": "https://ift.tt/El7RFfS\nCVE-2023-50677", "creation_timestamp": "2024-03-14T23:21:42.000000Z"}, {"uuid": "db273f88-4c85-4175-a983-e539b32aa157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "seen", "source": "https://t.me/ctinow/198635", "content": "https://ift.tt/G4pEYdT\nCVE-2023-50386 | Apache Solr up to 8.11.2/9.4.0 dynamically-managed code resources", "creation_timestamp": "2024-03-03T09:46:42.000000Z"}, {"uuid": "0de6cea3-6d06-497e-a4f9-0bdd74f96f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50291", "type": "seen", "source": "https://t.me/ctinow/198634", "content": "https://ift.tt/ygF6tcn\nCVE-2023-50291 | Apache Solr up to 8.11.2/9.2.x /admin/info/properties insufficiently protected credentials", "creation_timestamp": "2024-03-03T09:46:41.000000Z"}, {"uuid": "9c44f358-b31e-47ff-aa20-161a704b1957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50298", "type": "seen", "source": "https://t.me/ctinow/198633", "content": "https://ift.tt/Hy1f5kX\nCVE-2023-50298 | Apache Solr up to 8.11.2/9.4.0 /streaming zkHost information disclosure", "creation_timestamp": "2024-03-03T09:46:40.000000Z"}, {"uuid": "28f986b8-5fb6-44ce-83e4-0a24520bdbd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50292", "type": "seen", "source": "https://t.me/ctinow/198632", "content": "https://ift.tt/80FDzvG\nCVE-2023-50292 | Apache Solr up to 8.11.2/9.2.x permission assignment", "creation_timestamp": "2024-03-03T09:46:38.000000Z"}, {"uuid": "7c40270c-48db-41f2-88ba-46c9e6e24b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50026", "type": "seen", "source": "https://t.me/ctinow/198458", "content": "https://ift.tt/4epMzta\nCVE-2023-50026 | Presta Monster Multi Accessories Pro Module up to 5.1.1 on PrestaShop getAccessoriesByIdProducts sql injection", "creation_timestamp": "2024-03-02T19:46:44.000000Z"}, {"uuid": "65da42e6-ab16-494e-b9ac-f446e09eeaa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50957", "type": "seen", "source": "https://t.me/ctinow/198725", "content": "https://ift.tt/Yk1ygZm\nCVE-2023-50957 | IBM Storage Defender 2.0 Resiliency Service privileges management (XFDB-275783)", "creation_timestamp": "2024-03-03T13:46:59.000000Z"}, {"uuid": "f8d5d685-f584-492f-aace-000b434b2ce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50716", "type": "seen", "source": "https://t.me/ctinow/201691", "content": "https://ift.tt/K6iae0f\nCVE-2023-50716", "creation_timestamp": "2024-03-06T19:27:04.000000Z"}, {"uuid": "4d131d3b-3481-4058-a244-23fc8516c2ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50167", "type": "seen", "source": "https://t.me/ctinow/201690", "content": "https://ift.tt/pv0NkLA\nCVE-2023-50167", "creation_timestamp": "2024-03-06T19:27:02.000000Z"}, {"uuid": "9b75c9b5-b0f8-4e4e-9faa-cb62e2a3054a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50875", "type": "seen", "source": "https://t.me/ctinow/198780", "content": "https://ift.tt/OTnpr63\nCVE-2023-50875 | Automattic Sensei LMS Plugin up to 4.17.0 on WordPress cross site scripting", "creation_timestamp": "2024-03-03T15:21:58.000000Z"}, {"uuid": "d0f4b797-e893-4def-b573-0e308f3cc656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50061", "type": "seen", "source": "https://t.me/ctinow/198377", "content": "https://ift.tt/XCIWFRz\nCVE-2023-50061 | Op'art Easy Redirect Module 1.3.8/1.3.9/1.3.10/1.3.11/1.3.12 on PrestaShop hookActionDispatcher sql injection", "creation_timestamp": "2024-03-02T14:46:46.000000Z"}, {"uuid": "c2cd2442-c2ce-4aa8-9601-8b2494b10279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50378", "type": "seen", "source": "https://t.me/ctinow/197771", "content": "https://ift.tt/m27FkBs\nCVE-2023-50378", "creation_timestamp": "2024-03-01T16:21:54.000000Z"}, {"uuid": "762b1bc7-3440-44ad-92c3-60ee58d6224d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5085", "type": "seen", "source": "https://t.me/cibsecurity/72871", "content": "\u203c CVE-2023-5085 \u203c\n\nThe Advanced Menu Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'advMenu' shortcode in versions up to, and including, 0.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-25T22:49:19.000000Z"}, {"uuid": "36bdb785-3a5a-445a-806f-60acc0be07ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50736", "type": "seen", "source": "https://t.me/ctinow/195086", "content": "https://ift.tt/rStKhqD\nCVE-2023-50736", "creation_timestamp": "2024-02-28T04:26:50.000000Z"}, {"uuid": "24d7ffaf-900d-4ce9-b905-8b4f08a7bd67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50735", "type": "seen", "source": "https://t.me/ctinow/195085", "content": "https://ift.tt/SzNWsXQ\nCVE-2023-50735", "creation_timestamp": "2024-02-28T04:26:49.000000Z"}, {"uuid": "a2827d4e-3e03-4534-8a3b-678b0ebdd258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50378", "type": "seen", "source": "https://t.me/ctinow/197765", "content": "https://ift.tt/m27FkBs\nCVE-2023-50378", "creation_timestamp": "2024-03-01T16:21:48.000000Z"}, {"uuid": "dd28712c-eafc-4d60-85bf-7e4f28252c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50395", "type": "seen", "source": "https://t.me/ctinow/197496", "content": "https://ift.tt/UFjQaOC\nCVE-2023-50395 | SolarWinds Platform up to 2023.4.2 UPDATE Statement sql injection", "creation_timestamp": "2024-03-01T11:07:10.000000Z"}, {"uuid": "82cda2f1-d884-429c-9a08-db1c151efe6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50305", "type": "seen", "source": "https://t.me/ctinow/197245", "content": "https://ift.tt/cVIysXD\nCVE-2023-50305", "creation_timestamp": "2024-03-01T03:26:55.000000Z"}, {"uuid": "02126a09-abf2-42f2-a9a3-4082ffba8720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50312", "type": "seen", "source": "https://t.me/ctinow/197276", "content": "https://ift.tt/YXBPVuk\nCVE-2023-50312", "creation_timestamp": "2024-03-01T04:31:59.000000Z"}, {"uuid": "cf80c805-9d88-442f-bd54-0e77529eb60f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50324", "type": "seen", "source": "https://t.me/ctinow/197246", "content": "https://ift.tt/6ODSkuA\nCVE-2023-50324", "creation_timestamp": "2024-03-01T03:26:56.000000Z"}, {"uuid": "5cce3eef-dec8-40b5-8a14-77ae94788b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50312", "type": "seen", "source": "https://t.me/ctinow/197273", "content": "https://ift.tt/YXBPVuk\nCVE-2023-50312", "creation_timestamp": "2024-03-01T04:21:58.000000Z"}, {"uuid": "38ef6319-3f31-47d0-a9c6-a230bc5dc3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50324", "type": "seen", "source": "https://t.me/ctinow/197252", "content": "https://ift.tt/6ODSkuA\nCVE-2023-50324", "creation_timestamp": "2024-03-01T03:27:01.000000Z"}, {"uuid": "ab8f8d02-0c6a-42ca-9553-8a6ac9a858e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50305", "type": "seen", "source": "https://t.me/ctinow/197251", "content": "https://ift.tt/cVIysXD\nCVE-2023-50305", "creation_timestamp": "2024-03-01T03:27:00.000000Z"}, {"uuid": "89e93654-eea8-4ff2-8a71-ce4fd4020b96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/ctinow/202629", "content": "https://ift.tt/zVjDFOk\nCVE-2023-50387 ISC BIND Vulnerability in NetApp Products", "creation_timestamp": "2024-03-07T18:32:27.000000Z"}, {"uuid": "bd405d0d-5d91-40ea-b544-4ce5f3e793ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50868", "type": "seen", "source": "https://t.me/ctinow/202628", "content": "https://ift.tt/rWMQw7A\nCVE-2023-50868 ISC BIND Vulnerability in NetApp Products", "creation_timestamp": "2024-03-07T18:32:26.000000Z"}, {"uuid": "afb24a79-19a8-4bc3-99fc-cc0518ea92a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50740", "type": "seen", "source": "https://t.me/ctinow/201436", "content": "https://ift.tt/MxGF62h\nCVE-2023-50740", "creation_timestamp": "2024-03-06T15:31:34.000000Z"}, {"uuid": "0678205c-98c5-44b3-9d33-174f2463bd7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50740", "type": "seen", "source": "https://t.me/ctinow/201430", "content": "https://ift.tt/MxGF62h\nCVE-2023-50740", "creation_timestamp": "2024-03-06T15:26:24.000000Z"}, {"uuid": "4cd81fd9-c900-43ba-9ceb-a4927e53eada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50905", "type": "seen", "source": "https://t.me/ctinow/196285", "content": "https://ift.tt/DVo2JbL\nCVE-2023-50905", "creation_timestamp": "2024-02-29T07:26:32.000000Z"}, {"uuid": "2e19960f-3558-4e01-b77f-4580abf854c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50737", "type": "seen", "source": "https://t.me/ctinow/195090", "content": "https://ift.tt/vUxj0z5\nCVE-2023-50737", "creation_timestamp": "2024-02-28T04:26:57.000000Z"}, {"uuid": "dd4321e1-e640-45ee-85f5-d4c5e979f53d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50736", "type": "seen", "source": "https://t.me/ctinow/195089", "content": "https://ift.tt/rStKhqD\nCVE-2023-50736", "creation_timestamp": "2024-02-28T04:26:56.000000Z"}, {"uuid": "40930ec0-b74e-49c5-84f0-a0152ba87adc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50868", "type": "seen", "source": "https://t.me/ctinow/201478", "content": "https://ift.tt/uWUBvzy\nCVE-2023-50868 | DNS Protocol Closest Encloser Proof resource consumption (DLA 3736-1)", "creation_timestamp": "2024-03-06T16:16:29.000000Z"}, {"uuid": "f43f4cf4-2f12-4183-bf65-84dbd320b547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/ctinow/201424", "content": "https://ift.tt/B4bHqid\nCVE-2023-50387 | DNSSEC resource consumption (DLA 3736-1)", "creation_timestamp": "2024-03-06T15:16:54.000000Z"}, {"uuid": "4021406a-da4a-418c-8470-c5ac84dc4b9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5042", "type": "seen", "source": "https://t.me/cibsecurity/70801", "content": "\u203c CVE-2023-5042 \u203c\n\nSensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40713.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-02T11:03:57.000000Z"}, {"uuid": "9a8d898c-7f34-4feb-8a3b-bc0fd8ae7ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50735", "type": "seen", "source": "https://t.me/ctinow/195088", "content": "https://ift.tt/SzNWsXQ\nCVE-2023-50735", "creation_timestamp": "2024-02-28T04:26:52.000000Z"}, {"uuid": "a51a3cbc-816d-4174-9615-9cf84cf92628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50737", "type": "seen", "source": "https://t.me/ctinow/195087", "content": "https://ift.tt/vUxj0z5\nCVE-2023-50737", "creation_timestamp": "2024-02-28T04:26:51.000000Z"}, {"uuid": "020dfd5c-467d-4c02-b8b6-3c6cb804f171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50905", "type": "seen", "source": "https://t.me/ctinow/196268", "content": "https://ift.tt/DVo2JbL\nCVE-2023-50905", "creation_timestamp": "2024-02-29T07:21:55.000000Z"}, {"uuid": "c80284b0-d2e6-469b-93aa-b40cb050d7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50380", "type": "seen", "source": "https://t.me/ctinow/194722", "content": "https://ift.tt/BzTHRkt\nCVE-2023-50380", "creation_timestamp": "2024-02-27T18:36:50.000000Z"}, {"uuid": "1bb5c1e4-7c13-4436-8d0b-749892e5715a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50380", "type": "seen", "source": "https://t.me/ctinow/194707", "content": "https://ift.tt/BzTHRkt\nCVE-2023-50380", "creation_timestamp": "2024-02-27T18:31:29.000000Z"}, {"uuid": "900105b0-55b0-46e2-ac91-9482580a05f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50379", "type": "seen", "source": "https://t.me/ctinow/194179", "content": "https://ift.tt/opGqNKt\nCVE-2023-50379", "creation_timestamp": "2024-02-27T10:26:05.000000Z"}, {"uuid": "4d75ecbe-88e2-4ff0-8dc2-23143bdac131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50975", "type": "seen", "source": "https://t.me/ctinow/190039", "content": "https://ift.tt/B8v2JxA\nCVE-2023-50975", "creation_timestamp": "2024-02-21T20:31:36.000000Z"}, {"uuid": "80771e71-a5ae-4782-b699-f4fc82179b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50734", "type": "seen", "source": "https://t.me/ctinow/195056", "content": "https://ift.tt/Pq7OeHr\nCVE-2023-50734", "creation_timestamp": "2024-02-28T03:26:46.000000Z"}, {"uuid": "6657aca4-a9de-4e48-b02a-338286c72f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50734", "type": "seen", "source": "https://t.me/ctinow/195055", "content": "https://ift.tt/Pq7OeHr\nCVE-2023-50734", "creation_timestamp": "2024-02-28T03:26:45.000000Z"}, {"uuid": "6946e14a-4568-48fd-aae5-d42bec6134a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50303", "type": "seen", "source": "https://t.me/ctinow/195039", "content": "https://ift.tt/8s59pSO\nCVE-2023-50303", "creation_timestamp": "2024-02-28T02:26:52.000000Z"}, {"uuid": "4d86fb62-7c57-499e-a473-e4e360f60aa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50303", "type": "seen", "source": "https://t.me/ctinow/195038", "content": "https://ift.tt/8s59pSO\nCVE-2023-50303", "creation_timestamp": "2024-02-28T02:26:51.000000Z"}, {"uuid": "d37592c4-46ee-4ace-b903-9eb3b10ffc81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50379", "type": "seen", "source": "https://t.me/ctinow/194193", "content": "https://ift.tt/opGqNKt\nCVE-2023-50379", "creation_timestamp": "2024-02-27T10:26:22.000000Z"}, {"uuid": "41cb92fc-e0e2-4096-8ce0-fc9ebd60b4a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50955", "type": "seen", "source": "https://t.me/ctinow/189732", "content": "https://ift.tt/j6Th4Kr\nCVE-2023-50955", "creation_timestamp": "2024-02-21T16:31:19.000000Z"}, {"uuid": "8a467c02-9221-481a-bd8e-3f9f20d7782d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50270", "type": "seen", "source": "https://t.me/ctinow/188362", "content": "https://ift.tt/QNauvjE\nCVE-2023-50270", "creation_timestamp": "2024-02-20T11:26:27.000000Z"}, {"uuid": "b6a9d0ed-e4e3-403c-80f8-eaad6a2bf5af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50975", "type": "seen", "source": "https://t.me/ctinow/190030", "content": "https://ift.tt/B8v2JxA\nCVE-2023-50975", "creation_timestamp": "2024-02-21T20:26:12.000000Z"}, {"uuid": "5f0d8d66-739f-408f-a114-7ead85152fa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50955", "type": "seen", "source": "https://t.me/ctinow/189739", "content": "https://ift.tt/j6Th4Kr\nCVE-2023-50955", "creation_timestamp": "2024-02-21T16:31:28.000000Z"}, {"uuid": "24be41c1-3ee7-48c1-915a-abe241fd838f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50306", "type": "seen", "source": "https://t.me/ctinow/188596", "content": "https://ift.tt/ZMyGODH\nCVE-2023-50306", "creation_timestamp": "2024-02-20T15:21:54.000000Z"}, {"uuid": "29ac6393-a238-4202-af53-78a8c4927bb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50923", "type": "seen", "source": "https://t.me/ctinow/189084", "content": "https://ift.tt/Uhxi1HD\nCVE-2023-50923", "creation_timestamp": "2024-02-21T01:21:45.000000Z"}, {"uuid": "69048f7c-9e72-45f4-8851-fc33241022f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50923", "type": "seen", "source": "https://t.me/ctinow/189083", "content": "https://ift.tt/Uhxi1HD\nCVE-2023-50923", "creation_timestamp": "2024-02-21T01:21:44.000000Z"}, {"uuid": "8d4da9ac-e7b1-45d9-b2c3-159092913f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50306", "type": "seen", "source": "https://t.me/ctinow/188603", "content": "https://ift.tt/ZMyGODH\nCVE-2023-50306", "creation_timestamp": "2024-02-20T15:26:57.000000Z"}, {"uuid": "c9ba870a-ef3a-4130-b0f4-ced9523c9168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50270", "type": "seen", "source": "https://t.me/ctinow/188369", "content": "https://ift.tt/QNauvjE\nCVE-2023-50270", "creation_timestamp": "2024-02-20T11:31:54.000000Z"}, {"uuid": "fa9007da-4b58-47bf-ab78-fcb97e85fe68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5074", "type": "seen", "source": "https://t.me/cibsecurity/70807", "content": "\u203c CVE-2023-5074 \u203c\n\nUse of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-20T20:30:18.000000Z"}, {"uuid": "eaca6378-a48d-435f-be94-51128235f3ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5063", "type": "seen", "source": "https://t.me/cibsecurity/70767", "content": "\u203c CVE-2023-5063 \u203c\n\nThe Widget Responsive for Youtube plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'youtube' shortcode in versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-20T07:30:09.000000Z"}, {"uuid": "57812b89-acd0-4d28-9bb4-8bed2d91b364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50488", "type": "seen", "source": "https://t.me/ctinow/192786", "content": "https://ift.tt/aD32S8H\nCVE-2023-50488 | Blurams Lumi Security Camera 23.0406.435.4120 code injection", "creation_timestamp": "2024-02-25T09:11:30.000000Z"}, {"uuid": "96ada132-8c46-4b9b-afcf-a29b160ccd83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50257", "type": "seen", "source": "https://t.me/ctinow/187928", "content": "https://ift.tt/o9mp0ln\nCVE-2023-50257", "creation_timestamp": "2024-02-19T21:26:30.000000Z"}, {"uuid": "580bf6a1-c522-4973-8341-40b3c7b3d313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50939", "type": "seen", "source": "https://t.me/ctinow/192582", "content": "https://ift.tt/HV8RF1J\nCVE-2023-50939 | IBM PowerSC 1.3/2.0/2.1 risky encryption (XFDB-275129)", "creation_timestamp": "2024-02-24T13:46:21.000000Z"}, {"uuid": "efa6ab39-72fa-4e23-b137-ef5d04b4cf91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50359", "type": "seen", "source": "https://t.me/ctinow/192821", "content": "https://ift.tt/eqdMzHO\nCVE-2023-50359 | QNAP Systems QTS/QuTS hero return value (qsa-24-07)", "creation_timestamp": "2024-02-25T10:41:36.000000Z"}, {"uuid": "c32e6ac2-1545-45c0-bf4a-4319ac5a1962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50936", "type": "seen", "source": "https://t.me/ctinow/192615", "content": "https://ift.tt/wYx1Pb9\nCVE-2023-50936 | IBM PowerSC 1.3/2.0/2.1 session expiration (XFDB-275116)", "creation_timestamp": "2024-02-24T15:16:43.000000Z"}, {"uuid": "fad0654d-eaf8-41fa-a754-3ce088af1473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50962", "type": "seen", "source": "https://t.me/ctinow/192610", "content": "https://ift.tt/zwkMKG5\nCVE-2023-50962 | IBM PowerSC 1.3/2.0/2.1 cleartext transmission (XFDB-276004)", "creation_timestamp": "2024-02-24T14:47:11.000000Z"}, {"uuid": "a216812e-9d9e-4eab-9063-72f58dfcb488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50941", "type": "seen", "source": "https://t.me/ctinow/192609", "content": "https://ift.tt/KVNY1hG\nCVE-2023-50941 | IBM PowerSC 1.3/2.0/2.1 Logout session fixiation (XFDB-275131)", "creation_timestamp": "2024-02-24T14:47:09.000000Z"}, {"uuid": "0f518021-ae6f-456a-94fd-b3c0313eb0b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50940", "type": "seen", "source": "https://t.me/ctinow/192608", "content": "https://ift.tt/k6LPGZJ\nCVE-2023-50940 | IBM PowerSC 1.3/2.0/2.1 unknown vulnerability (XFDB-275130)", "creation_timestamp": "2024-02-24T14:47:08.000000Z"}, {"uuid": "921718d5-1639-4d8c-8907-020cb1114111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50937", "type": "seen", "source": "https://t.me/ctinow/192576", "content": "https://ift.tt/K9PDzL7\nCVE-2023-50937 | IBM PowerSC 1.3/2.0/2.1 Cryptographic Algorithm risky encryption (XFDB-275117)", "creation_timestamp": "2024-02-24T13:11:38.000000Z"}, {"uuid": "08c9b1db-066c-4014-b76c-50d87f218cbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50328", "type": "seen", "source": "https://t.me/ctinow/192575", "content": "https://ift.tt/HAxcI6l\nCVE-2023-50328 | IBM PowerSC 1.3/2.0/2.1 Session Identifier get request method with sensitive query strings (XFDB-275110)", "creation_timestamp": "2024-02-24T13:11:37.000000Z"}, {"uuid": "aa9d7842-5097-4c99-b9e5-2a055bd8d4e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50938", "type": "seen", "source": "https://t.me/ctinow/192555", "content": "https://ift.tt/SYAJ15g\nCVE-2023-50938 | IBM PowerSC 1.3/2.0/2.1 clickjacking (XFDB-275128)", "creation_timestamp": "2024-02-24T12:41:35.000000Z"}, {"uuid": "8d307f0b-720e-41ed-a086-75403f42fb1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50291", "type": "seen", "source": "https://t.me/ctinow/182338", "content": "https://ift.tt/mw0e6Js\nCVE-2023-50291", "creation_timestamp": "2024-02-09T23:42:00.000000Z"}, {"uuid": "bb00295f-56bb-4e6a-a989-70052ba0db70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5097", "type": "seen", "source": "https://t.me/ctinow/182581", "content": "https://ift.tt/xsvOLnF\nCVE-2023-5097 | HYPR Workforce Access up to 8.6 on Windows path traversal", "creation_timestamp": "2024-02-10T15:46:12.000000Z"}, {"uuid": "6d482f2c-d073-4f3b-9657-78b42d91d6f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50488", "type": "seen", "source": "https://t.me/ctinow/182466", "content": "https://ift.tt/z6TWIN7\nCVE-2023-50488 Exploit", "creation_timestamp": "2024-02-10T08:16:31.000000Z"}, {"uuid": "40d2359e-a4a7-4962-85f4-f6300b02735f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50349", "type": "seen", "source": "https://t.me/ctinow/182295", "content": "https://ift.tt/CAjHL9a\nCVE-2023-50349", "creation_timestamp": "2024-02-09T22:21:57.000000Z"}, {"uuid": "c26a8f1b-2dba-44d6-8369-4a20d1105d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50030", "type": "seen", "source": "https://t.me/ctinow/185387", "content": "https://ift.tt/VFJyQ9r\nCVE-2023-50030 | Jms Setting Module up to 1.1.0 on PrestaShop getSecondImgs sql injection", "creation_timestamp": "2024-02-15T10:21:02.000000Z"}, {"uuid": "e58199e1-fcba-46cb-92f0-2b7c0650b260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/182483", "content": "https://ift.tt/BQYg5Sf\nCVE-2023-5072 | Oracle PeopleSoft Enterprise PeopleTools 8.59/8.60/8.61 Open Search/Elastic Search/Web Server denial of service", "creation_timestamp": "2024-02-10T09:07:08.000000Z"}, {"uuid": "89a04f8f-6c3d-41c8-831d-d2d90bad085d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50292", "type": "seen", "source": "https://t.me/ctinow/182337", "content": "https://ift.tt/q7I6TaB\nCVE-2023-50292", "creation_timestamp": "2024-02-09T23:41:59.000000Z"}, {"uuid": "445ae27a-0bd3-48d4-8607-b0511647da0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50298", "type": "seen", "source": "https://t.me/ctinow/182336", "content": "https://ift.tt/DrO3lBk\nCVE-2023-50298", "creation_timestamp": "2024-02-09T23:41:59.000000Z"}, {"uuid": "0d6e619c-a226-43e1-bb30-bb90fdf4d1dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "seen", "source": "https://t.me/ctinow/182335", "content": "https://ift.tt/7RISqL9\nCVE-2023-50386", "creation_timestamp": "2024-02-09T23:41:58.000000Z"}, {"uuid": "63e9ab44-332e-4814-9e74-67b06310224e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50694", "type": "seen", "source": "https://t.me/ctinow/185686", "content": "https://ift.tt/a0KzLtW\nCVE-2023-50694 | dom96 HTTPbeast up to 0.4.1 parser.nim Privilege Escalation (Issue 95)", "creation_timestamp": "2024-02-15T16:52:02.000000Z"}, {"uuid": "804acfec-8ae7-4286-b4dd-86998257ae0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50951", "type": "seen", "source": "https://t.me/ctinow/186981", "content": "https://ift.tt/MvsWkuV\nCVE-2023-50951", "creation_timestamp": "2024-02-17T17:26:33.000000Z"}, {"uuid": "6c20964e-d06d-4a49-b64a-f9b3a3ffa18e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50257", "type": "seen", "source": "https://t.me/ctinow/187921", "content": "https://ift.tt/o9mp0ln\nCVE-2023-50257", "creation_timestamp": "2024-02-19T21:21:23.000000Z"}, {"uuid": "c35bf9aa-57c3-416b-a5e5-974fa8981482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/ctinow/187500", "content": "https://ift.tt/lHSidkj\nCVE-2023-50387 Exploit", "creation_timestamp": "2024-02-19T08:16:46.000000Z"}, {"uuid": "6e359c6a-3afb-4fa6-96ba-d57be997b7f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50943", "type": "seen", "source": "https://t.me/ctinow/187059", "content": "https://ift.tt/uTB4gpN\nCVE-2023-50943 | Apache Airflow up to 2.8.0 Xcom Data deserialization", "creation_timestamp": "2024-02-17T22:26:34.000000Z"}, {"uuid": "524e0aa5-5f74-4e43-86dd-8885e503ab29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50944", "type": "seen", "source": "https://t.me/ctinow/187057", "content": "https://ift.tt/vf9uFsO\nCVE-2023-50944 | Apache Airflow up to 2.8.0 authorization", "creation_timestamp": "2024-02-17T21:51:49.000000Z"}, {"uuid": "a938feab-4747-41f3-a319-2c2f6c71ea71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50951", "type": "seen", "source": "https://t.me/ctinow/186985", "content": "https://ift.tt/MvsWkuV\nCVE-2023-50951", "creation_timestamp": "2024-02-17T17:26:38.000000Z"}, {"uuid": "afb6c70f-55bb-4a53-b95e-b221bd05bad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50868", "type": "seen", "source": "https://t.me/ctinow/185352", "content": "https://ift.tt/y30NwtU\nCVE-2023-50868 | Unbound up to 1.19.0 NSEC3 RRSET Response denial of service", "creation_timestamp": "2024-02-15T09:16:35.000000Z"}, {"uuid": "dffe485e-0f9e-420c-9579-612e6fd30fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5084", "type": "seen", "source": "https://t.me/cibsecurity/70791", "content": "\u203c CVE-2023-5084 \u203c\n\nCross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.8.8.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-20T14:30:06.000000Z"}, {"uuid": "98686b47-fed2-4aa8-a260-146ad093c6a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5080", "type": "seen", "source": "https://t.me/ctinow/185864", "content": "https://ift.tt/F8Ehp9n\nCVE-2023-5080 | Lenovo Tablet Device Identifier privileges management", "creation_timestamp": "2024-02-15T20:56:59.000000Z"}, {"uuid": "11909821-8682-48f0-934b-2468a8cd2450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50447", "type": "seen", "source": "https://t.me/ctinow/185821", "content": "https://ift.tt/RyYFUO4\nCVE-2023-50447 | Pillow up to 10.1.0 PIL.ImageMath.eval environment code injection (DLA 3724-1)", "creation_timestamp": "2024-02-15T19:26:55.000000Z"}, {"uuid": "a9957630-7e5f-43fa-ba80-3f6294b2bcc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5036", "type": "seen", "source": "https://t.me/cibsecurity/70637", "content": "\u203c CVE-2023-5036 \u203c\n\nCross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.15.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-18T12:41:19.000000Z"}, {"uuid": "b5f44cc0-c537-46c3-aa6d-8d602659625d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/180589", "content": "https://ift.tt/qcw8BJE\nCVE-2023-5072 | Oracle Communications Convergence 3.0.3.3 Configuration denial of service", "creation_timestamp": "2024-02-07T09:36:59.000000Z"}, {"uuid": "43b844ed-746c-4e33-ae64-b90cc5400ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/ctinow/185353", "content": "https://ift.tt/5p1iMAg\nCVE-2023-50387 | Unbound up to 1.19.0 DNSSEC Validator denial of service", "creation_timestamp": "2024-02-15T09:16:36.000000Z"}, {"uuid": "f2670458-73ba-4258-966f-2ae2d48fa1c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50693", "type": "seen", "source": "https://t.me/ctinow/185722", "content": "https://ift.tt/Vm19W5b\nCVE-2023-50693 | dom96 Jester up to 0.6.0 Request Privilege Escalation (Issue 326)", "creation_timestamp": "2024-02-15T17:51:38.000000Z"}, {"uuid": "a0e12a1c-dc99-4f51-abcb-07023c3cd181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5062", "type": "seen", "source": "https://t.me/cibsecurity/70772", "content": "\u203c CVE-2023-5062 \u203c\n\nThe WordPress Charts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wp_charts' shortcode in versions up to, and including, 0.7.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-20T07:30:18.000000Z"}, {"uuid": "da2bc76b-0a80-4145-ae9a-1103e6e8d9d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50028", "type": "seen", "source": "https://t.me/ctinow/185399", "content": "https://ift.tt/RUupWih\nCVE-2023-50028 | PrestashopModules Sliding Cart Block Module up to 2.3.8 on PrestaShop sql injection", "creation_timestamp": "2024-02-15T10:46:27.000000Z"}, {"uuid": "e9fd7fb8-dede-4044-be61-af434c5758b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/180318", "content": "https://ift.tt/Z3TCrYF\nCVE-2023-5072 | Oracle GoldenGate up to 19.1.0.0.231017/21.12 denial of service", "creation_timestamp": "2024-02-06T21:16:50.000000Z"}, {"uuid": "d3addb06-b7ec-43f9-9295-253a9825abc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/181054", "content": "https://ift.tt/WL3ncV4\nCVE-2023-5072 | Oracle Communications Policy Management 12.6.1.0.0 CMP denial of service", "creation_timestamp": "2024-02-08T00:21:53.000000Z"}, {"uuid": "a00530a5-00e3-489a-be4e-507b38f93c87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50782", "type": "seen", "source": "https://t.me/ctinow/179542", "content": "https://ift.tt/G2LMyt3\nCVE-2023-50782", "creation_timestamp": "2024-02-05T22:21:26.000000Z"}, {"uuid": "3556a02e-ccf0-47ac-a2ae-134415368eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50781", "type": "seen", "source": "https://t.me/ctinow/179541", "content": "https://ift.tt/5qEyNzS\nCVE-2023-50781", "creation_timestamp": "2024-02-05T22:21:25.000000Z"}, {"uuid": "18328712-bc87-488c-88e7-77eb83493489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50241", "type": "seen", "source": "https://t.me/ctinow/184885", "content": "https://ift.tt/WhZQe2F\nCVE-2023-50241", "creation_timestamp": "2024-02-14T18:27:17.000000Z"}, {"uuid": "92c9ce2c-b2bd-4b14-8c4d-b97c17453f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50165", "type": "seen", "source": "https://t.me/ctinow/190979", "content": "https://ift.tt/ey1jn47\nCVE-2023-50165 | Pegasystems Pega Platform up to 23.1.0 PDF server-side request forgery", "creation_timestamp": "2024-02-22T17:52:35.000000Z"}, {"uuid": "f88edced-f644-43b7-b6fa-08e9e98f2d79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50926", "type": "seen", "source": "https://t.me/ctinow/185026", "content": "https://ift.tt/kU6AwyV\nCVE-2023-50926", "creation_timestamp": "2024-02-14T21:21:47.000000Z"}, {"uuid": "85d8debd-d3e1-42e0-9c0b-29f636a20898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50927", "type": "seen", "source": "https://t.me/ctinow/185027", "content": "https://ift.tt/OJvuNGo\nCVE-2023-50927", "creation_timestamp": "2024-02-14T21:21:48.000000Z"}, {"uuid": "3e3789be-701f-4091-a9a5-0eefef270832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/180938", "content": "https://ift.tt/AU3VyLP\nCVE-2023-5072 | Oracle Communications Cloud Native Core Unified Data Repository Signaling denial of service", "creation_timestamp": "2024-02-07T20:16:21.000000Z"}, {"uuid": "9546b20c-4549-4555-879d-1cdff4aade40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/180927", "content": "https://ift.tt/VjJACul\nCVE-2023-5072 | Oracle Communications Cloud Native Core Security Edge Protection Proxy Signaling denial of service", "creation_timestamp": "2024-02-07T19:46:29.000000Z"}, {"uuid": "3d651293-9ce0-426f-aa5e-a4aa9465d1da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50395", "type": "seen", "source": "https://t.me/ctinow/180158", "content": "https://ift.tt/cmqeURA\nCVE-2023-50395", "creation_timestamp": "2024-02-06T17:31:55.000000Z"}, {"uuid": "d00dd112-1ab8-4d77-aa67-c8bce3d4f3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/180832", "content": "https://ift.tt/TV40xjt\nCVE-2023-5072 | Oracle Communications Cloud Native Core Network Exposure Function Platform denial of service", "creation_timestamp": "2024-02-07T17:16:55.000000Z"}, {"uuid": "a077403d-9a5e-42b0-8a6c-b375f91770dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/180390", "content": "https://ift.tt/4uhANYn\nCVE-2023-5072 | Oracle Commerce Guided Search 11.3.2 Workbench denial of service", "creation_timestamp": "2024-02-06T23:21:06.000000Z"}, {"uuid": "49003a54-18ff-4808-9093-ade33d852341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/ctinow/180721", "content": "https://ift.tt/qs750U8\nCVE-2023-50164 | Oracle Communications Policy Management 12.6.1.0.0/15.0.0.0.0 CMP file access", "creation_timestamp": "2024-02-07T14:46:54.000000Z"}, {"uuid": "1cf19b9c-f68f-4cc1-b610-80aa21df9cdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/180603", "content": "https://ift.tt/dUOWwK1\nCVE-2023-5072 | Oracle Communications Pricing Design Center up to 12.0.0.8.0/15.0.0.0.0 REST Services Manager denial of service", "creation_timestamp": "2024-02-07T10:06:46.000000Z"}, {"uuid": "6455dd97-656b-4b89-905b-76caa3c45906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50868", "type": "seen", "source": "https://t.me/ctinow/184835", "content": "https://ift.tt/GDRlEHv\nCVE-2023-50868", "creation_timestamp": "2024-02-14T17:26:56.000000Z"}, {"uuid": "35d05654-43f1-49ee-9daa-90dc989360d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/ctinow/184834", "content": "https://ift.tt/xaI8RNv\nCVE-2023-50387", "creation_timestamp": "2024-02-14T17:26:55.000000Z"}, {"uuid": "434ff57a-349d-4c01-8a45-40e1558ef3fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50236", "type": "seen", "source": "https://t.me/ctinow/183699", "content": "https://ift.tt/gmyx8Yo\nCVE-2023-50236", "creation_timestamp": "2024-02-13T10:21:58.000000Z"}, {"uuid": "cf143372-b442-4210-bc3f-c1677d1ea2b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50875", "type": "seen", "source": "https://t.me/ctinow/182935", "content": "https://ift.tt/6tVOUcg\nCVE-2023-50875", "creation_timestamp": "2024-02-12T08:21:24.000000Z"}, {"uuid": "00629f08-9a61-44a2-82ef-9c715ab04fc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50337", "type": "seen", "source": "https://t.me/ctinow/184890", "content": "https://ift.tt/N1avyKL\nCVE-2023-50337", "creation_timestamp": "2024-02-14T18:27:23.000000Z"}, {"uuid": "bd2ec35b-1158-4bcb-99d9-b685367669f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50336", "type": "seen", "source": "https://t.me/ctinow/184889", "content": "https://ift.tt/UusDTiH\nCVE-2023-50336", "creation_timestamp": "2024-02-14T18:27:21.000000Z"}, {"uuid": "d3193c7a-8dc7-4df1-bc5b-42459e74753d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5060", "type": "seen", "source": "https://t.me/cibsecurity/70696", "content": "\u203c CVE-2023-5060 \u203c\n\nCross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-19T07:29:01.000000Z"}, {"uuid": "0d5a9192-417b-4641-a58b-b2cd1cfb117b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50329", "type": "seen", "source": "https://t.me/ctinow/184887", "content": "https://ift.tt/f2eEUD6\nCVE-2023-50329", "creation_timestamp": "2024-02-14T18:27:19.000000Z"}, {"uuid": "28fe7cce-1058-46f0-a63b-aa2798f657e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50335", "type": "seen", "source": "https://t.me/ctinow/184888", "content": "https://ift.tt/EY7tKLc\nCVE-2023-50335", "creation_timestamp": "2024-02-14T18:27:20.000000Z"}, {"uuid": "b8d97f80-c45b-436d-a564-c8f0f78b7ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50293", "type": "seen", "source": "https://t.me/ctinow/184886", "content": "https://ift.tt/8rA0dHU\nCVE-2023-50293", "creation_timestamp": "2024-02-14T18:27:18.000000Z"}, {"uuid": "c340e315-1cd5-4990-894e-dbce46ec73ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50174", "type": "seen", "source": "https://t.me/ctinow/184884", "content": "https://ift.tt/Iy84LC9\nCVE-2023-50174", "creation_timestamp": "2024-02-14T18:27:16.000000Z"}, {"uuid": "1d2e1dcc-a93a-432c-8d0a-c253e1359e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50170", "type": "seen", "source": "https://t.me/ctinow/184883", "content": "https://ift.tt/qsy7bf8\nCVE-2023-50170", "creation_timestamp": "2024-02-14T18:27:15.000000Z"}, {"uuid": "1d8fbd93-5ba7-44d1-b74b-04b502adebf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50963", "type": "seen", "source": "https://t.me/ctinow/183252", "content": "https://ift.tt/kMalEuB\nCVE-2023-50963 | IBM Storage Defender Data Protect up to 1.4.1 HTTP Header Host injection (XFDB-276101)", "creation_timestamp": "2024-02-12T17:17:10.000000Z"}, {"uuid": "af2e0ed4-5b71-4bd4-9ccb-5bb9877da849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50358", "type": "seen", "source": "https://t.me/ctinow/184575", "content": "https://ift.tt/quJsGH4\nQNAP fixes OS command injection flaws affecting its NAS devices (CVE-2023-47218, CVE-2023-50358)", "creation_timestamp": "2024-02-14T12:16:32.000000Z"}, {"uuid": "a33e6a1d-7e14-468d-a870-005b9fcfa852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/ctinow/184084", "content": "https://ift.tt/K9a3Vyq\nCVE-2023-50387 | Microsoft Windows Server 2008 R2 SP1 up to Server 2022 DNSSEC Verification denial of service", "creation_timestamp": "2024-02-13T19:36:31.000000Z"}, {"uuid": "d866c400-6a2c-4cc3-a70b-3327397b1af5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50358", "type": "seen", "source": "https://t.me/ctinow/183591", "content": "https://ift.tt/EAWnpPv\nCVE-2023-50358", "creation_timestamp": "2024-02-13T04:31:44.000000Z"}, {"uuid": "6624b290-2a7a-4a1d-b963-1156503dfcb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50614", "type": "seen", "source": "https://t.me/ctinow/183253", "content": "https://ift.tt/j5OSA67\nCVE-2023-50614 | EBYTE E880-IR01 1.1 POST Request /cgi-bin/luci information disclosure", "creation_timestamp": "2024-02-12T17:17:12.000000Z"}, {"uuid": "ee1f50af-1f25-405d-b03e-6dd013182a2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50947", "type": "seen", "source": "https://t.me/ctinow/178675", "content": "https://ift.tt/6RBHwle\nCVE-2023-50947", "creation_timestamp": "2024-02-04T02:21:45.000000Z"}, {"uuid": "9a552e3f-33b1-44a3-99e0-e644a4b1fee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50950", "type": "seen", "source": "https://t.me/ctinow/182650", "content": "https://ift.tt/lnEkyJh\nCVE-2023-50950 | IBM QRadar SIEM 7.5 Email information disclosure (XFDB-275709)", "creation_timestamp": "2024-02-10T22:21:32.000000Z"}, {"uuid": "e2baea46-a275-4e67-9600-55e50ecced0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50919", "type": "seen", "source": "https://t.me/ctinow/177987", "content": "https://ift.tt/vHrQGoN\nCVE-2023-50919 | GL.iNet B1300 Nginx improper authentication (Issue 176708)", "creation_timestamp": "2024-02-02T09:06:42.000000Z"}, {"uuid": "ec36db56-ce3c-4eda-8f3e-c34a3679a425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50346", "type": "seen", "source": "https://t.me/ctinow/171894", "content": "https://ift.tt/xevN69C\nCVE-2023-50346 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 Endpoint information disclosure (KB0109608)", "creation_timestamp": "2024-01-23T12:21:19.000000Z"}, {"uuid": "2cb884c3-2278-4c8f-aebd-07325631ab79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50957", "type": "seen", "source": "https://t.me/ctinow/182612", "content": "https://ift.tt/VX6IS8w\nCVE-2023-50957", "creation_timestamp": "2024-02-10T17:26:21.000000Z"}, {"uuid": "7f178a34-371a-49b1-ad82-447f3d1bb10a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5034", "type": "seen", "source": "https://t.me/cibsecurity/70641", "content": "\u203c CVE-2023-5034 \u203c\n\nA vulnerability classified as problematic was found in SourceCodester My Food Recipe 1.0. This vulnerability affects unknown code of the file index.php of the component Image Upload Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-239878 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-18T12:41:26.000000Z"}, {"uuid": "1d350e46-3cfa-47d1-8d8a-e50fe2390581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5033", "type": "seen", "source": "https://t.me/cibsecurity/70633", "content": "\u203c CVE-2023-5033 \u203c\n\nA vulnerability classified as critical has been found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file /admin/category/cate-edit-run.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239877 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-18T12:38:16.000000Z"}, {"uuid": "d5b9fe50-8cd1-417e-a92b-7c59dbb60fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50962", "type": "seen", "source": "https://t.me/ctinow/177895", "content": "https://ift.tt/AquH7aV\nCVE-2023-50962", "creation_timestamp": "2024-02-02T03:21:56.000000Z"}, {"uuid": "f34135a9-4ac0-49dd-be3d-1da8829c2936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50941", "type": "seen", "source": "https://t.me/ctinow/177894", "content": "https://ift.tt/zeY3QVW\nCVE-2023-50941", "creation_timestamp": "2024-02-02T03:21:55.000000Z"}, {"uuid": "04e02849-5e8e-4f89-80b8-94e5d7e7fe2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50938", "type": "seen", "source": "https://t.me/ctinow/177893", "content": "https://ift.tt/7K6iwQT\nCVE-2023-50938", "creation_timestamp": "2024-02-02T03:21:54.000000Z"}, {"uuid": "b4ebbe3a-2d34-4251-a8d8-13e80af71d5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50935", "type": "seen", "source": "https://t.me/ctinow/177892", "content": "https://ift.tt/DzInfJm\nCVE-2023-50935", "creation_timestamp": "2024-02-02T03:21:53.000000Z"}, {"uuid": "6ea596c4-80eb-4797-8593-5cff9755cb35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50934", "type": "seen", "source": "https://t.me/ctinow/177891", "content": "https://ift.tt/nzWk9Vu\nCVE-2023-50934", "creation_timestamp": "2024-02-02T03:21:52.000000Z"}, {"uuid": "4c72cb6b-a24d-411a-915c-a55c6ba6172a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50939", "type": "seen", "source": "https://t.me/ctinow/177860", "content": "https://ift.tt/HG0CsSB\nCVE-2023-50939", "creation_timestamp": "2024-02-02T01:31:12.000000Z"}, {"uuid": "70e5e68a-b338-46fa-9dff-417cc76ffcca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50920", "type": "seen", "source": "https://t.me/ctinow/177988", "content": "https://ift.tt/MXxQaNF\nCVE-2023-50920 | GL.iNet B1300 improper authentication", "creation_timestamp": "2024-02-02T09:06:43.000000Z"}, {"uuid": "50cf10c0-5b25-4e71-b31c-330fab766601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50072", "type": "seen", "source": "https://t.me/ctinow/178398", "content": "https://ift.tt/xGJPBnD\nCVE-2023-50072 | OpenKM 7.1.40 Note Upload cross site scripting", "creation_timestamp": "2024-02-03T06:36:10.000000Z"}, {"uuid": "88178a84-9829-40c1-b6e9-a39b65ae0731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50893", "type": "seen", "source": "https://t.me/ctinow/170810", "content": "https://ift.tt/qw9H3nm\nCVE-2023-50893 | UpSolution Impreza Plugin up to 8.17.4 on WordPress cross site scripting", "creation_timestamp": "2024-01-21T11:41:36.000000Z"}, {"uuid": "0dbbfbd9-21b2-4b09-88f2-3229de31ae4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50940", "type": "seen", "source": "https://t.me/ctinow/177881", "content": "https://ift.tt/p716KjO\nCVE-2023-50940", "creation_timestamp": "2024-02-02T02:21:39.000000Z"}, {"uuid": "94405e49-465d-4c35-9ab0-921bdda02e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50937", "type": "seen", "source": "https://t.me/ctinow/177880", "content": "https://ift.tt/TPQXcZL\nCVE-2023-50937", "creation_timestamp": "2024-02-02T02:21:38.000000Z"}, {"uuid": "94fc23e0-b065-4853-8bba-e537c60513ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50936", "type": "seen", "source": "https://t.me/ctinow/177879", "content": "https://ift.tt/Ow7B5zo\nCVE-2023-50936", "creation_timestamp": "2024-02-02T02:21:37.000000Z"}, {"uuid": "d4f2743a-0298-4f2d-9701-bd4680ee704d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50933", "type": "seen", "source": "https://t.me/ctinow/177878", "content": "https://ift.tt/r1OxtX7\nCVE-2023-50933", "creation_timestamp": "2024-02-02T02:21:36.000000Z"}, {"uuid": "cee2e6ed-333c-4dd6-8c2d-7d518afa92ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50327", "type": "seen", "source": "https://t.me/ctinow/177877", "content": "https://ift.tt/IrHSlwk\nCVE-2023-50327", "creation_timestamp": "2024-02-02T02:21:35.000000Z"}, {"uuid": "8dbf2e74-9ef6-4549-910a-2490739491bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50729", "type": "seen", "source": "https://t.me/ctinow/178566", "content": "https://ift.tt/ihEtALm\nCVE-2023-50729 | Traccar up to 5.10 unrestricted upload (GHSA-pqf7-8g85-vx2q)", "creation_timestamp": "2024-02-03T14:51:57.000000Z"}, {"uuid": "c7e715c3-fd64-4db2-891b-06a448122fff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50328", "type": "seen", "source": "https://t.me/ctinow/177890", "content": "https://ift.tt/1lo7gWb\nCVE-2023-50328", "creation_timestamp": "2024-02-02T03:21:48.000000Z"}, {"uuid": "6bd6500c-7613-4a79-b9e1-edb3bf2b9f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50290", "type": "seen", "source": "https://t.me/ctinow/178432", "content": "https://ift.tt/NkyRTfU\nCVE-2023-50290 | Apache Solr up to 9.2.x Metrics API information disclosure", "creation_timestamp": "2024-02-03T08:41:37.000000Z"}, {"uuid": "00696599-465e-42fb-a91f-ed31c61ceb62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50326", "type": "seen", "source": "https://t.me/ctinow/177876", "content": "https://ift.tt/baqFVr8\nCVE-2023-50326", "creation_timestamp": "2024-02-02T02:21:34.000000Z"}, {"uuid": "c22b44c6-b30a-4fd7-ab58-5839bc9f5443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50368", "type": "seen", "source": "https://t.me/ctinow/166348", "content": "https://ift.tt/kTqgL93\nCVE-2023-50368 | Averta Shortcodes and Extra Features for Phlox Theme up to 2.15.2 on WordPress cross site scripting", "creation_timestamp": "2024-01-11T08:21:53.000000Z"}, {"uuid": "c1177572-29c4-409c-ae04-1e67e358600d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/181368", "content": "https://ift.tt/i07HveY\nCVE-2023-5072 | Oracle Banking Digital Experience 19.1.0/21.1.0/22.1.0/22.2.0 UI General denial of service", "creation_timestamp": "2024-02-08T13:41:14.000000Z"}, {"uuid": "3d8b67d0-b5ae-4781-8732-c8ecd567eda2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50488", "type": "seen", "source": "https://t.me/ctinow/178030", "content": "https://ift.tt/K72lafD\nCVE-2023-50488", "creation_timestamp": "2024-02-02T11:31:48.000000Z"}, {"uuid": "0795a82c-16c8-429d-843f-7e49cb3a5f60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50026", "type": "seen", "source": "https://t.me/ctinow/181903", "content": "https://ift.tt/B3J4iH1\nCVE-2023-50026", "creation_timestamp": "2024-02-09T09:21:44.000000Z"}, {"uuid": "ee40df77-e67f-4495-aa0d-897b6c09d598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50165", "type": "seen", "source": "https://t.me/ctinow/177013", "content": "https://ift.tt/GupQ1Kn\nCVE-2023-50165", "creation_timestamp": "2024-01-31T19:31:38.000000Z"}, {"uuid": "5763a3e7-b5bb-40d1-832f-87ad80c1bc84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/ctinow/182234", "content": "https://ift.tt/wv4mHhj\nCVE-2023-50164 | Oracle MySQL Enterprise Monitor 8.0.36 and prior Monitoring file access", "creation_timestamp": "2024-02-09T20:22:02.000000Z"}, {"uuid": "62b4938b-bb6d-4105-b090-3d9d2e9e8104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50166", "type": "seen", "source": "https://t.me/ctinow/177014", "content": "https://ift.tt/5m0bqd2\nCVE-2023-50166", "creation_timestamp": "2024-01-31T19:31:40.000000Z"}, {"uuid": "d5398654-2484-4e9b-b982-76707db425f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "seen", "source": "https://t.me/ctinow/182212", "content": "https://ift.tt/YPazLXn\nCVE-2023-50386", "creation_timestamp": "2024-02-09T19:26:59.000000Z"}, {"uuid": "00d43bf2-0447-414b-b9bf-1936b591d4a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50357", "type": "seen", "source": "https://t.me/ctinow/176688", "content": "https://ift.tt/28zFZxE\nCVE-2023-50357", "creation_timestamp": "2024-01-31T12:26:35.000000Z"}, {"uuid": "95d4add2-36b4-4d3c-b5e1-51f59d6a6e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50356", "type": "seen", "source": "https://t.me/ctinow/176687", "content": "https://ift.tt/G16w0XL\nCVE-2023-50356", "creation_timestamp": "2024-01-31T12:26:34.000000Z"}, {"uuid": "e6651b64-9fba-42b9-a911-234704d97dfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/181971", "content": "https://ift.tt/ngWq6eL\nCVE-2023-5072 | Oracle Business Intelligence Enterprise Edition 6.4.0.0.0/7.0.0.0.0 Majel Mobile Service denial of service", "creation_timestamp": "2024-02-09T11:52:01.000000Z"}, {"uuid": "98d69d7b-1770-419b-b6cb-9da2abfaee3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/182051", "content": "https://ift.tt/4Qpelnk\nCVE-2023-5072 | Oracle Hyperion Planning 11.2.14.0.000 Security denial of service", "creation_timestamp": "2024-02-09T14:57:16.000000Z"}, {"uuid": "a001d66a-31ad-44a4-b927-4d4d75784035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/182050", "content": "https://ift.tt/1FPSfDW\nCVE-2023-5072 | Oracle Hyperion Infrastructure Technology 11.2.14.0.000 Installation/Configuration denial of service", "creation_timestamp": "2024-02-09T14:57:15.000000Z"}, {"uuid": "74f857e7-2796-4e7b-aa50-70c088cf3159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/182049", "content": "https://ift.tt/lxuLOzI\nCVE-2023-5072 | Oracle Hyperion Financial Data Quality Management 11.2.14.0.000 Security denial of service", "creation_timestamp": "2024-02-09T14:57:14.000000Z"}, {"uuid": "0118b13c-b204-4961-9f4a-1e5475836049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/182048", "content": "https://ift.tt/9DIolhG\nCVE-2023-5072 | Oracle Hyperion Calculation Manager 11.2.14.0.000 Security denial of service", "creation_timestamp": "2024-02-09T14:57:13.000000Z"}, {"uuid": "b41c32ec-1573-47a5-a5c8-22841b777ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/ctinow/182037", "content": "https://ift.tt/NRZjhuq\nCVE-2023-50164 | Oracle Hyperion Infrastructure Technology 11.2.14.0.000 Installation/Configuration Remote Code Execution", "creation_timestamp": "2024-02-09T14:27:15.000000Z"}, {"uuid": "77316ec0-3445-4098-a535-1acbf01f4cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/181869", "content": "https://ift.tt/k8ZaxLj\nCVE-2023-5072 | Oracle Middleware Common Libraries and Tools 12.2.1.4.0 Third Party denial of service", "creation_timestamp": "2024-02-09T08:51:10.000000Z"}, {"uuid": "592df3e2-d045-4245-912f-e1c9aecf166f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50298", "type": "seen", "source": "https://t.me/ctinow/182211", "content": "https://ift.tt/2aBCXgJ\nCVE-2023-50298", "creation_timestamp": "2024-02-09T19:26:58.000000Z"}, {"uuid": "291664e9-e8b9-44f6-8579-dd3c48b48dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50292", "type": "seen", "source": "https://t.me/ctinow/182210", "content": "https://ift.tt/3rgoCRi\nCVE-2023-50292", "creation_timestamp": "2024-02-09T19:26:57.000000Z"}, {"uuid": "b6ac66c6-9ed4-4309-a0f1-2a142a0c4789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50291", "type": "seen", "source": "https://t.me/ctinow/182209", "content": "https://ift.tt/e1u84Ji\nCVE-2023-50291", "creation_timestamp": "2024-02-09T19:26:56.000000Z"}, {"uuid": "b69eba80-43f3-48fa-b9f9-e7ffdb8b6bbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/182087", "content": "https://ift.tt/chJCmsP\nCVE-2023-5072 | Oracle GraalVM for JDK/GraalVM Enterprise Edition Tools denial of service", "creation_timestamp": "2024-02-09T15:56:07.000000Z"}, {"uuid": "db99f203-6c42-4494-87e8-9f0b976d9d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/181835", "content": "https://ift.tt/bAQuotV\nCVE-2023-5072 | Oracle Business Process Management Suite 12.2.1.4.0 BPM Composer denial of service", "creation_timestamp": "2024-02-09T07:51:30.000000Z"}, {"uuid": "ef4dda08-e5d9-480e-8279-8062bb77d2b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50343", "type": "seen", "source": "https://t.me/ctinow/171809", "content": "https://ift.tt/9uo5aNd\nCVE-2023-50343 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 API Endpoint access control (KB0109608)", "creation_timestamp": "2024-01-23T09:56:21.000000Z"}, {"uuid": "445c195d-00fd-4ac1-b083-b56b6998212c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50570", "type": "seen", "source": "https://t.me/ctinow/170883", "content": "https://ift.tt/S1qebGv\nCVE-2023-50570 | seancfoley IPAddress 5.1.0 IPAddressBitsDivision infinite loop (Issue 118)", "creation_timestamp": "2024-01-21T16:41:56.000000Z"}, {"uuid": "57e41be6-1238-4917-9495-7fd6f0ce799d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50572", "type": "seen", "source": "https://t.me/ctinow/170882", "content": "https://ift.tt/BQRlg3S\nCVE-2023-50572 | jline-groovy 3.24.1 GroovyEngine.execute resource consumption (Issue 909)", "creation_timestamp": "2024-01-21T16:41:55.000000Z"}, {"uuid": "f1000ec3-8500-4051-8515-3cedcd3d9ccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50848", "type": "seen", "source": "https://t.me/ctinow/170602", "content": "https://ift.tt/wWt5hyV\nCVE-2023-50848 | Aaron J 404 Solution Plugin up to 2.34.0 on WordPress sql injection", "creation_timestamp": "2024-01-20T12:16:40.000000Z"}, {"uuid": "6bbee451-9ed3-4d83-8cbd-60786a261f81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50849", "type": "seen", "source": "https://t.me/ctinow/170601", "content": "https://ift.tt/IUPGeXw\nCVE-2023-50849 | E2Pdf Plugin up to 1.20.23 on WordPress sql injection", "creation_timestamp": "2024-01-20T12:16:39.000000Z"}, {"uuid": "b4a068b6-cd30-4dae-bc8e-53eeb337e55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50855", "type": "seen", "source": "https://t.me/ctinow/170600", "content": "https://ift.tt/6GyYMjF\nCVE-2023-50855 | Sam Perrow Pre Party Resource Hints Plugin up to 1.8.18 on WordPress sql injection", "creation_timestamp": "2024-01-20T12:16:37.000000Z"}, {"uuid": "1fbfe661-e2eb-47c8-87ab-cbf8c5a9ab34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50851", "type": "seen", "source": "https://t.me/ctinow/170599", "content": "https://ift.tt/fmHDoBy\nCVE-2023-50851 | N Squared Appointment Booking Calendar Plugin up to 1.6.6.0 on WordPress sql injection", "creation_timestamp": "2024-01-20T12:16:36.000000Z"}, {"uuid": "671ddfda-4d56-4b48-ac9f-4a658f50ebf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50856", "type": "seen", "source": "https://t.me/ctinow/170594", "content": "https://ift.tt/AgWBFNl\nCVE-2023-50856 | FunnelKit Funnel Builder Plugin up to 2.14.3 on WordPress sql injection", "creation_timestamp": "2024-01-20T11:46:28.000000Z"}, {"uuid": "1613dd52-f640-482c-b2e4-0e11e5a51c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50853", "type": "seen", "source": "https://t.me/ctinow/170593", "content": "https://ift.tt/m5RfvrQ\nCVE-2023-50853 | Nasirahmed Advanced Form Integration Plugin up to 1.75.0 on WordPress sql injection", "creation_timestamp": "2024-01-20T11:46:27.000000Z"}, {"uuid": "87ad7124-6abe-4783-bc7f-131594305b04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/181871", "content": "https://ift.tt/UurcjIa\nCVE-2023-5072 | Oracle WebCenter Content 12.2.1.4.0 Content Server denial of service", "creation_timestamp": "2024-02-09T08:51:12.000000Z"}, {"uuid": "92ef9bfd-1b4c-4bab-81c6-f3fc9f705bcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/181870", "content": "https://ift.tt/WmQh6pU\nCVE-2023-5072 | Oracle Service Bus 12.2.1.4.0 Centralized Thirdparty Jars denial of service", "creation_timestamp": "2024-02-09T08:51:11.000000Z"}, {"uuid": "f37012f4-7ff6-4356-b058-f950fcba78b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50061", "type": "seen", "source": "https://t.me/ctinow/181570", "content": "https://ift.tt/sKHxO4p\nCVE-2023-50061", "creation_timestamp": "2024-02-08T19:22:21.000000Z"}, {"uuid": "97396d3f-7c2f-4c01-8ac3-e141f67df47d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50589", "type": "seen", "source": "https://t.me/ctinow/171043", "content": "https://ift.tt/pmGZvIW\nCVE-2023-50589 | Grupo Embras GEOSIAP ERP 2.2.167.02 Login Page codLogin sql injection", "creation_timestamp": "2024-01-22T09:11:20.000000Z"}, {"uuid": "6f7855b2-4330-4029-9b7b-e35d7a1a1aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50344", "type": "seen", "source": "https://t.me/ctinow/162181", "content": "https://ift.tt/and0PBY\nCVE-2023-50344", "creation_timestamp": "2024-01-03T04:27:06.000000Z"}, {"uuid": "4da7fafa-e917-432d-8917-ac630652bae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50343", "type": "seen", "source": "https://t.me/ctinow/162180", "content": "https://ift.tt/Fw1aSkZ\nCVE-2023-50343", "creation_timestamp": "2024-01-03T04:27:05.000000Z"}, {"uuid": "3ac50176-cf97-4eb3-bf3c-3090ab2ee34a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50342", "type": "seen", "source": "https://t.me/ctinow/162179", "content": "https://ift.tt/rhDWVBY\nCVE-2023-50342", "creation_timestamp": "2024-01-03T04:27:01.000000Z"}, {"uuid": "6b63e178-7321-4519-97c0-0c6c9ff611ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50094", "type": "seen", "source": "https://t.me/ctinow/171170", "content": "https://ift.tt/3FvaiQ0\nCVE-2023-50094 | reNgine up to 2.0.2 api/tools/waf_detector/ url os command injection", "creation_timestamp": "2024-01-22T14:11:35.000000Z"}, {"uuid": "7ce3e70c-4fd2-43ad-8d03-35ed8b8e0012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50096", "type": "seen", "source": "https://t.me/ctinow/171169", "content": "https://ift.tt/2aZHFgq\nCVE-2023-50096 | STMicroelectronics STSAFE-A1xx Middleware up to 3.3.6 I2C Bus StSafeA_ReceiveBytes buffer overflow", "creation_timestamp": "2024-01-22T14:11:34.000000Z"}, {"uuid": "5d9cf970-075a-494c-b0f4-30d3a5a6417a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50922", "type": "seen", "source": "https://t.me/ctinow/171794", "content": "https://ift.tt/TztLJpC\nCVE-2023-50922 | GL.iNet B1300 up to 4.3.7/4.4.6/4.5.0 crontab File unrestricted upload", "creation_timestamp": "2024-01-23T09:21:41.000000Z"}, {"uuid": "45085ab3-14ee-4a04-b207-51df32a9ed33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50342", "type": "seen", "source": "https://t.me/ctinow/171793", "content": "https://ift.tt/ZvrOQWR\nCVE-2023-50342 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 resource injection (KB0109608)", "creation_timestamp": "2024-01-23T09:21:40.000000Z"}, {"uuid": "b60d01d4-c313-4935-92b2-6f3100501ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/181146", "content": "https://ift.tt/T4mZcnk\nCVE-2023-5072 | Oracle Primavera P6 Enterprise Project Portfolio Management Web denial of service", "creation_timestamp": "2024-02-08T04:11:32.000000Z"}, {"uuid": "d848001e-bab7-45b3-b05a-f92752d06815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50069", "type": "seen", "source": "https://t.me/ctinow/170900", "content": "https://ift.tt/IMbFUDE\nCVE-2023-50069 | WireMock up to 3.2.0.0 cross site scripting (Issue 51)", "creation_timestamp": "2024-01-21T18:46:36.000000Z"}, {"uuid": "6a47bdb9-0731-4655-94e1-fa011864ee61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50071", "type": "seen", "source": "https://t.me/ctinow/170895", "content": "https://ift.tt/0XT3GLk\nCVE-2023-50071 | SourceCodester Customer Support System 1.0 ajax.php id/name sql injection", "creation_timestamp": "2024-01-21T18:16:31.000000Z"}, {"uuid": "53becb87-0401-4d72-9aba-8dfe64e4817f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50035", "type": "seen", "source": "https://t.me/ctinow/170894", "content": "https://ift.tt/okG729v\nCVE-2023-50035 | PHPGurukul Small CRM 3.0 User Login Panel password sql injection", "creation_timestamp": "2024-01-21T18:16:30.000000Z"}, {"uuid": "4b1557e6-8981-4850-82f9-48b5e103031e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50348", "type": "seen", "source": "https://t.me/ctinow/171811", "content": "https://ift.tt/oC1DPQp\nCVE-2023-50348 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 information exposure (KB0109608)", "creation_timestamp": "2024-01-23T09:56:24.000000Z"}, {"uuid": "aec42acf-dd3a-4f67-8d23-778b284c3c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50345", "type": "seen", "source": "https://t.me/ctinow/171810", "content": "https://ift.tt/vmtI79R\nCVE-2023-50345 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 redirect (KB0109608)", "creation_timestamp": "2024-01-23T09:56:23.000000Z"}, {"uuid": "22d2bb87-0730-48a6-9b6f-0b320e8a639e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5072", "type": "seen", "source": "https://t.me/ctinow/181282", "content": "https://ift.tt/J6VyNm2\nCVE-2023-5072 | Oracle Banking APIs 19.1.0/21.1.0/22.1.0/22.2.0 IDM - Authentication denial of service", "creation_timestamp": "2024-02-08T11:07:12.000000Z"}, {"uuid": "3903f525-9a27-4b30-a3cb-52a938b1b349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50447", "type": "seen", "source": "https://t.me/ctinow/170995", "content": "https://ift.tt/CdRwXVA\nCVE-2023-50447", "creation_timestamp": "2024-01-22T06:51:53.000000Z"}, {"uuid": "83bac6f2-c650-41a8-9471-c42a610b08bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50019", "type": "seen", "source": "https://t.me/ctinow/171792", "content": "https://ift.tt/GkhVdO0\nCVE-2023-50019 | Open5GS 2.6.6 InitialUEMessage denial of service (Issue 2733)", "creation_timestamp": "2024-01-23T09:21:38.000000Z"}, {"uuid": "218d2200-7d0a-4892-b55f-2b170440bf64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50341", "type": "seen", "source": "https://t.me/ctinow/171791", "content": "https://ift.tt/I37yxqr\nCVE-2023-50341 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 information disclosure (KB0109608)", "creation_timestamp": "2024-01-23T09:21:37.000000Z"}, {"uuid": "f371d1bc-e081-47db-84ef-dfc79fb85c56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50711", "type": "seen", "source": "https://t.me/ctinow/171758", "content": "https://ift.tt/chUW2fs\nCVE-2023-50711 | vmm-sys-util prior 0.12.0 deserialization", "creation_timestamp": "2024-01-23T08:21:39.000000Z"}, {"uuid": "2486cc34-2c19-492b-a01a-174959f146a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50333", "type": "seen", "source": "https://t.me/ctinow/171352", "content": "https://ift.tt/V5MNo4L\nCVE-2023-50333 | Mattermost up to 8.1.6/9.2.2 Guest Demotion access control", "creation_timestamp": "2024-01-22T18:41:25.000000Z"}, {"uuid": "0febff34-1f9e-4ce3-87a3-bcfe4b667b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50308", "type": "seen", "source": "https://t.me/ctinow/171396", "content": "https://ift.tt/7Nm8uoP\nCVE-2023-50308", "creation_timestamp": "2024-01-22T20:26:20.000000Z"}, {"uuid": "94baebe7-069f-483b-9a74-a34e1cbf35aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50891", "type": "seen", "source": "https://t.me/ctinow/170811", "content": "https://ift.tt/3zRI5E8\nCVE-2023-50891 | Zoho Forms Plugin up to 3.0.1 on WordPress cross site scripting", "creation_timestamp": "2024-01-21T11:41:38.000000Z"}, {"uuid": "5c23ac88-cf73-4fd5-bdfe-a6e6795ce51e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50550", "type": "seen", "source": "https://t.me/ctinow/171010", "content": "https://ift.tt/Hfrn4GN\nCVE-2023-50550 | layui up to 2.74 data-content cross site scripting", "creation_timestamp": "2024-01-22T07:36:41.000000Z"}, {"uuid": "bcce46fd-13e2-4f6d-b2eb-88f709c55de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50559", "type": "seen", "source": "https://t.me/ctinow/170999", "content": "https://ift.tt/qTE8G5J\nCVE-2023-50559 | XiangShan 2.1 L1D Cache information disclosure (Issue 2534)", "creation_timestamp": "2024-01-22T07:07:12.000000Z"}, {"uuid": "a8e0f852-65f2-44d9-befa-9d62f49892db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50571", "type": "seen", "source": "https://t.me/ctinow/170881", "content": "https://ift.tt/Ii0neFQ\nCVE-2023-50571 | easy-rules-mvel 4.1.0 MVELRule Privilege Escalation (Issue 419)", "creation_timestamp": "2024-01-21T16:16:39.000000Z"}, {"uuid": "925d85a0-cbb4-46e1-87dd-d8a83c2b3036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50902", "type": "seen", "source": "https://t.me/ctinow/170879", "content": "https://ift.tt/YkZrKiD\nCVE-2023-50902 | WPExpertsio New User Approve Plugin up to 2.5.1 on WordPress cross-site request forgery", "creation_timestamp": "2024-01-21T16:16:36.000000Z"}, {"uuid": "f40a0828-a724-4574-8fad-3e4060c3ac81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50878", "type": "seen", "source": "https://t.me/ctinow/170878", "content": "https://ift.tt/qIFB75Z\nCVE-2023-50878 | InspireUI MStore API Plugin up to 4.10.1 on WordPress cross-site request forgery", "creation_timestamp": "2024-01-21T16:16:35.000000Z"}, {"uuid": "2aa31e49-78fb-45d5-9049-8c199c16db56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50104", "type": "seen", "source": "https://t.me/ctinow/170651", "content": "https://ift.tt/KmrOpFU\nCVE-2023-50104 | ZZCMS 5.1 index.php unrestricted upload", "creation_timestamp": "2024-01-20T15:17:15.000000Z"}, {"uuid": "7f318702-665c-40e4-bbf7-abfd5df13de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50839", "type": "seen", "source": "https://t.me/ctinow/170645", "content": "https://ift.tt/uWIBGfY\nCVE-2023-50839 | JS Help Desk Best Help Desk & Support Plugin up to 2.8.1 on WordPress sql injection", "creation_timestamp": "2024-01-20T15:17:08.000000Z"}, {"uuid": "60507b10-c4eb-4637-b790-b166555fdd5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50838", "type": "seen", "source": "https://t.me/ctinow/170644", "content": "https://ift.tt/NvwXL0t\nCVE-2023-50838 | Basix NEX-Forms Plugin up to 8.5.5 on WordPress sql injection", "creation_timestamp": "2024-01-20T15:17:07.000000Z"}, {"uuid": "031e00f3-2d03-4736-9fe7-7cea0371b8b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50860", "type": "seen", "source": "https://t.me/ctinow/170586", "content": "https://ift.tt/xSIfQLq\nCVE-2023-50860 | TMS Booking for Appointments and Events Calendar Plugin cross site scripting", "creation_timestamp": "2024-01-20T11:11:09.000000Z"}, {"uuid": "55d082b1-7fc0-4ad1-8756-4d90538dd59b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50859", "type": "seen", "source": "https://t.me/ctinow/170585", "content": "https://ift.tt/QclHp1E\nCVE-2023-50859 | Themeum WP Crowdfunding Plugin up to 2.1.6 on WordPress cross site scripting", "creation_timestamp": "2024-01-20T11:11:08.000000Z"}, {"uuid": "3190e7e7-3e3e-4f3d-9764-7518e1d38a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50836", "type": "seen", "source": "https://t.me/ctinow/170584", "content": "https://ift.tt/IX9h7L0\nCVE-2023-50836 | ibericode HTML Forms Plugin up to 1.3.28 on WordPress cross site scripting", "creation_timestamp": "2024-01-20T11:11:06.000000Z"}, {"uuid": "570a6e61-faa2-4f89-aebd-28ccb3d9a3ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50874", "type": "seen", "source": "https://t.me/ctinow/170581", "content": "https://ift.tt/UAgsWDm\nCVE-2023-50874 | Darren Cooney Infinite Scroll Plugin up to 6.1.0.1 on WordPress cross site scripting", "creation_timestamp": "2024-01-20T10:41:33.000000Z"}, {"uuid": "a92741cc-99b5-4f7a-9b3c-0de1ef65ff18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50857", "type": "seen", "source": "https://t.me/ctinow/170580", "content": "https://ift.tt/3AHpTQ5\nCVE-2023-50857 | FunnelKit Recover WooCommerce Cart Abandonment up to 2.6.1 on WordPress sql injection", "creation_timestamp": "2024-01-20T10:41:32.000000Z"}, {"uuid": "0935d168-b250-4cf4-86f1-57744fab0f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50254", "type": "seen", "source": "https://t.me/ctinow/169642", "content": "https://ift.tt/s7zYHZy\nCVE-2023-50254 | linuxdeepin developer-center up to 6.0.6 docx Document path traversal (GHSA-q9jr-726g-9495)", "creation_timestamp": "2024-01-18T10:11:30.000000Z"}, {"uuid": "3b8401cb-e9e7-47cd-97f1-ce7de092bdc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50250", "type": "seen", "source": "https://t.me/ctinow/169640", "content": "https://ift.tt/NtM3TZB\nCVE-2023-50250 | Cacti up to 1.2.25 XML Template templates_import.php cross site scripting (GHSA-xwqc-7jc4-xm73)", "creation_timestamp": "2024-01-18T10:11:27.000000Z"}, {"uuid": "7af15660-80b5-4e39-8872-64546a9dba9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50578", "type": "seen", "source": "https://t.me/ctinow/171050", "content": "https://ift.tt/q9yLKnE\nCVE-2023-50578 | Mingsoft MCMS 5.2.9 /content/list.do categoryType sql injection", "creation_timestamp": "2024-01-22T09:41:31.000000Z"}, {"uuid": "b131ec34-0227-4923-8727-3caf82653590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50651", "type": "seen", "source": "https://t.me/ctinow/171049", "content": "https://ift.tt/lvODcPZ\nCVE-2023-50651 | Totolink X6000R 9.4.0cu.852_B20230719 /cgi-bin/cstecgi.cgi os command injection", "creation_timestamp": "2024-01-22T09:41:29.000000Z"}, {"uuid": "0b1b5d73-d484-45e3-9bf3-ca906c5e6aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50110", "type": "seen", "source": "https://t.me/ctinow/171044", "content": "https://ift.tt/i1Md9Sn\nCVE-2023-50110 | TestLink up to 1.9.20 type conversion", "creation_timestamp": "2024-01-22T09:11:21.000000Z"}, {"uuid": "009ade6d-727b-42e9-a353-65a902dea5de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50070", "type": "seen", "source": "https://t.me/ctinow/170917", "content": "https://ift.tt/TlSxgej\nCVE-2023-50070 | SourceCodester Customer Support System 1.0 ajax.php department_id/customer_id/subject sql injection", "creation_timestamp": "2024-01-21T20:56:40.000000Z"}, {"uuid": "414f6bbb-a9ab-4927-b356-e4278c3698da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50837", "type": "seen", "source": "https://t.me/ctinow/170837", "content": "https://ift.tt/ARIoyEU\nCVE-2023-50837 | WebFactory Login Lockdown Plugin up to 2.06 on WordPress sql injection", "creation_timestamp": "2024-01-21T14:14:24.000000Z"}, {"uuid": "1d56cb43-5f81-4514-b1e2-fc8aa8bf4abc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50881", "type": "seen", "source": "https://t.me/ctinow/170823", "content": "https://ift.tt/T1aDRuq\nCVE-2023-50881 | AAM Advanced Access Manager Plugin up to 6.9.15 on WordPress cross site scripting", "creation_timestamp": "2024-01-21T13:16:56.000000Z"}, {"uuid": "ee9607ec-6516-459f-be97-de3878befeba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50880", "type": "seen", "source": "https://t.me/ctinow/170822", "content": "https://ift.tt/TKfWIGY\nCVE-2023-50880 | BuddyPress Plugin up to 11.3.1 on WordPress cross site scripting", "creation_timestamp": "2024-01-21T13:16:55.000000Z"}, {"uuid": "55fb21a4-d326-49ec-abaa-5741cdf66b61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50901", "type": "seen", "source": "https://t.me/ctinow/170820", "content": "https://ift.tt/bvn0hXL\nCVE-2023-50901 | HasThemes HT Mega Plugin up to 2.3.8 on WordPress cross site scripting", "creation_timestamp": "2024-01-21T12:36:46.000000Z"}, {"uuid": "c0cb5982-5e5d-43a7-93c4-fa88f3236817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50889", "type": "seen", "source": "https://t.me/ctinow/170812", "content": "https://ift.tt/JCRXFI7\nCVE-2023-50889 | Beaver Builder Plugin up to 2.7.2 on WordPress cross site scripting", "creation_timestamp": "2024-01-21T11:41:39.000000Z"}, {"uuid": "da0d7462-f330-41ff-ae69-a1c9aaed13a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50879", "type": "seen", "source": "https://t.me/ctinow/170809", "content": "https://ift.tt/LmVKt0p\nCVE-2023-50879 | Automattic Editing Toolkit Plugin up to 3.78784 on WordPress cross site scripting", "creation_timestamp": "2024-01-21T11:41:36.000000Z"}, {"uuid": "bd88cdd5-6270-4359-a4d0-0bb142858aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50896", "type": "seen", "source": "https://t.me/ctinow/170805", "content": "https://ift.tt/Q10jZDp\nCVE-2023-50896 | weForms Easy Drag & Drop Contact Form Builder Plugin up to 1.6.17 on WordPress cross site scripting", "creation_timestamp": "2024-01-21T11:11:42.000000Z"}, {"uuid": "d0b5a1fe-5e8a-40af-8b53-1aee705c0ba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50892", "type": "seen", "source": "https://t.me/ctinow/170804", "content": "https://ift.tt/BPIz8rf\nCVE-2023-50892 | CodexThemes TheGem Theme up to 5.9.1 on WordPress cross site scripting", "creation_timestamp": "2024-01-21T11:11:41.000000Z"}, {"uuid": "7f782b3f-8b29-4077-849c-28078a2a3004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50841", "type": "seen", "source": "https://t.me/ctinow/170642", "content": "https://ift.tt/dq28hF7\nCVE-2023-50841 | Repute Infosystems BookingPress Plugin up to 1.0.72 on WordPress sql injection", "creation_timestamp": "2024-01-20T15:17:05.000000Z"}, {"uuid": "c5f42379-0cbc-48ff-9609-20fcc690087e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50671", "type": "seen", "source": "https://t.me/ctinow/176029", "content": "https://ift.tt/5v2xYUy\nCVE-2023-50671 | NIKON exiftags 1.01 nikon.c nikon_prop1 heap-based overflow", "creation_timestamp": "2024-01-30T16:21:52.000000Z"}, {"uuid": "b1add261-d55c-46bf-962c-6defae4447ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50928", "type": "seen", "source": "https://t.me/ctinow/169720", "content": "https://ift.tt/oxOQBVa\nCVE-2023-50928 | awslabs sandbox-accounts-for-events up to 1.0.x access control (GHSA-cg8w-7q5v-g32r)", "creation_timestamp": "2024-01-18T13:46:52.000000Z"}, {"uuid": "fa1bff95-b6e8-4ca1-93f6-277178e72d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50162", "type": "seen", "source": "https://t.me/ctinow/174026", "content": "https://ift.tt/Aarb81S\nCVE-2023-50162 | EmpireCMS 7.5 DoExecSql sql injection", "creation_timestamp": "2024-01-26T07:36:51.000000Z"}, {"uuid": "472edf0d-3298-4160-b7cf-fe21eee8ae44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50982", "type": "seen", "source": "https://t.me/ctinow/173576", "content": "https://ift.tt/rVQJk6C\nCVE-2023-50982 | Stud.IP up to 5.0.8/5.1.6/5.2.5/5.3.3 upload_action/edit_action unrestricted upload", "creation_timestamp": "2024-01-25T16:56:28.000000Z"}, {"uuid": "9827b486-4999-40ef-be45-14de07cf9598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50920", "type": "seen", "source": "https://t.me/ctinow/170096", "content": "https://ift.tt/rbS12XQ\nCVE-2023-50920 Exploit", "creation_timestamp": "2024-01-19T08:17:08.000000Z"}, {"uuid": "09981226-5f34-4d75-b8e9-26a193c3204d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50919", "type": "seen", "source": "https://t.me/ctinow/170095", "content": "https://ift.tt/YgUOtZE\nCVE-2023-50919 Exploit", "creation_timestamp": "2024-01-19T08:17:07.000000Z"}, {"uuid": "f8921296-f650-46c6-b9c2-60bc9dfcf29b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50128", "type": "seen", "source": "https://t.me/ctinow/176096", "content": "https://ift.tt/nYi8mJR\nCVE-2023-50128 | Hozard Alarm System 1.0 Remote Keyless System authentication replay", "creation_timestamp": "2024-01-30T17:21:50.000000Z"}, {"uuid": "81f297e5-e0fd-485e-a9bc-707637e45344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50840", "type": "seen", "source": "https://t.me/ctinow/170639", "content": "https://ift.tt/zyjsYBp\nCVE-2023-50840 | wpdevelop Booking Manager Plugin up to 2.1.5 on WordPress sql injection", "creation_timestamp": "2024-01-20T14:46:21.000000Z"}, {"uuid": "624551e0-ca76-49b8-bc09-1766a2a178e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50846", "type": "seen", "source": "https://t.me/ctinow/170638", "content": "https://ift.tt/jPwfESZ\nCVE-2023-50846 | RegistrationMagic Custom Registration Forms, User Registration, Payment, and User Login Plugin sql injection", "creation_timestamp": "2024-01-20T14:46:19.000000Z"}, {"uuid": "dc307a5a-5ea1-4216-9892-1b08748fbf63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50844", "type": "seen", "source": "https://t.me/ctinow/170637", "content": "https://ift.tt/urPOmq2\nCVE-2023-50844 | James Ward Mail Logging Plugin up to 2.1.3 on WordPress sql injection", "creation_timestamp": "2024-01-20T14:46:18.000000Z"}, {"uuid": "270fdf69-5459-412a-a3d6-1f5747cdcc7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50843", "type": "seen", "source": "https://t.me/ctinow/170636", "content": "https://ift.tt/Oy32T9w\nCVE-2023-50843 | Clockwork SMS Notfications Plugin up to 3.0.4 on WordPress sql injection", "creation_timestamp": "2024-01-20T14:46:17.000000Z"}, {"uuid": "0e0f617f-5db7-4a94-8722-b85d5e07b28f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50842", "type": "seen", "source": "https://t.me/ctinow/170635", "content": "https://ift.tt/TBuZae3\nCVE-2023-50842 | Matthew Fries MF Gig Calendar Plugin up to 1.2.1 on WordPress sql injection", "creation_timestamp": "2024-01-20T14:46:16.000000Z"}, {"uuid": "bd4c3318-fec9-41c0-9242-5fb1c451960f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50845", "type": "seen", "source": "https://t.me/ctinow/170633", "content": "https://ift.tt/2etKclj\nCVE-2023-50845 | AyeCode GeoDirectory Plugin up to 2.3.28 on WordPress sql injection", "creation_timestamp": "2024-01-20T14:46:14.000000Z"}, {"uuid": "c68fef43-30ed-4464-aa91-973b2c01f549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50847", "type": "seen", "source": "https://t.me/ctinow/170634", "content": "https://ift.tt/qXLleJa\nCVE-2023-50847 | Collne Welcart e-Commerce Plugin up to 2.9.3 on WordPress sql injection", "creation_timestamp": "2024-01-20T14:46:15.000000Z"}, {"uuid": "31464e78-92a0-4c13-a9ca-2990ad235ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50470", "type": "seen", "source": "https://t.me/ctinow/170631", "content": "https://ift.tt/07LzhZ1\nCVE-2023-50470 | SeaCMS 12.8 admin_video.php action cross site scripting", "creation_timestamp": "2024-01-20T14:46:11.000000Z"}, {"uuid": "4a67e964-1c60-42c1-a56e-c67075bc02ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50852", "type": "seen", "source": "https://t.me/ctinow/170592", "content": "https://ift.tt/EwHAQi7\nCVE-2023-50852 | StylemixThemes Booking Calendar Plugin up to 2.4.3 on WordPress sql injection", "creation_timestamp": "2024-01-20T11:46:26.000000Z"}, {"uuid": "62c54669-18fe-4e3d-876d-8570fdfe8f2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50854", "type": "seen", "source": "https://t.me/ctinow/170591", "content": "https://ift.tt/g7FsHYT\nCVE-2023-50854 | Squirrly SEO Advanced Pack Plugin up to 2.3.8 on WordPress sql injection", "creation_timestamp": "2024-01-20T11:46:24.000000Z"}, {"uuid": "50dd85c1-16d0-46e6-98b9-6a04e9cb1930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50873", "type": "seen", "source": "https://t.me/ctinow/170590", "content": "https://ift.tt/Cg3YJAF\nCVE-2023-50873 | Marios Alexandrou Add Any Extension to Pages Plugin up to 1.4 on WordPress cross-site request forgery", "creation_timestamp": "2024-01-20T11:46:23.000000Z"}, {"uuid": "5cbbae73-0d08-4be8-b332-8defab325070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50858", "type": "seen", "source": "https://t.me/ctinow/170588", "content": "https://ift.tt/agAY79x\nCVE-2023-50858 | Bill Minozzi Anti Hacker Plugin up to 4.34 on WordPress cross-site request forgery", "creation_timestamp": "2024-01-20T11:11:12.000000Z"}, {"uuid": "b9a8f86d-69c1-453c-a07c-49dc942646a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50038", "type": "seen", "source": "https://t.me/ctinow/170538", "content": "https://ift.tt/qXf3yMx\nCVE-2023-50038 | Textpattern CMS 4.8.8 unrestricted upload", "creation_timestamp": "2024-01-20T06:36:38.000000Z"}, {"uuid": "9bb734d6-6b7a-4e24-b69d-d173554a6217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50125", "type": "seen", "source": "https://t.me/ctinow/176115", "content": "https://ift.tt/IeQ7lih\nCVE-2023-50125 | Hozard Alarm System 1.0 state issue", "creation_timestamp": "2024-01-30T17:47:05.000000Z"}, {"uuid": "4062c28a-f47d-47fa-885d-8385219db2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50126", "type": "seen", "source": "https://t.me/ctinow/176114", "content": "https://ift.tt/jl3iUG8\nCVE-2023-50126 | Hozard Alarm System 1.0 missing encryption", "creation_timestamp": "2024-01-30T17:47:04.000000Z"}, {"uuid": "4d891b3e-f14c-4f06-82fa-36e799229280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50127", "type": "seen", "source": "https://t.me/ctinow/176113", "content": "https://ift.tt/hH1mutG\nCVE-2023-50127 | Hozard Alarm System 1.0 SMS improper authentication", "creation_timestamp": "2024-01-30T17:47:03.000000Z"}, {"uuid": "c7dbebe4-3835-4d9f-8760-7bdc1f832ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50124", "type": "seen", "source": "https://t.me/ctinow/176112", "content": "https://ift.tt/t7JvSw1\nCVE-2023-50124 | Flient Smart Door Lock 1.0 Debug Interface default credentials", "creation_timestamp": "2024-01-30T17:47:01.000000Z"}, {"uuid": "2206300d-0abd-4aef-ad99-959519c7b75e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50123", "type": "seen", "source": "https://t.me/ctinow/176097", "content": "https://ift.tt/0Gv56iJ\nCVE-2023-50123 | Hozard Alarm System 1.0 SMS Authentication excessive authentication", "creation_timestamp": "2024-01-30T17:21:52.000000Z"}, {"uuid": "a16cb9cf-868b-4bdb-9fa2-badde183670d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50159", "type": "seen", "source": "https://t.me/ctinow/175967", "content": "https://ift.tt/XKhI1vH\nCVE-2023-50159 | ScaleFusion 10.5.2 Kiosk Mode access control", "creation_timestamp": "2024-01-30T15:22:18.000000Z"}, {"uuid": "f94df300-7f63-4a39-8aae-e091a3684c48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50693", "type": "seen", "source": "https://t.me/ctinow/174338", "content": "https://ift.tt/Gb8METB\nCVE-2023-50693 Exploit", "creation_timestamp": "2024-01-26T17:16:37.000000Z"}, {"uuid": "d6cba3aa-d71a-413f-b380-20a05c674bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50694", "type": "seen", "source": "https://t.me/ctinow/174337", "content": "https://ift.tt/jpadIf7\nCVE-2023-50694 Exploit", "creation_timestamp": "2024-01-26T17:16:36.000000Z"}, {"uuid": "d769b146-9cae-453c-84a7-dfc712780888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50120", "type": "seen", "source": "https://t.me/ctinow/174871", "content": "https://ift.tt/k8ap4nJ\nCVE-2023-50120 | GPAC 2.3-DEV-rev636-gfbd7e13aa-master MP4Box media_tools/av_parsers.c av1_uvlc infinite loop (Issue 2698)", "creation_timestamp": "2024-01-28T09:56:36.000000Z"}, {"uuid": "b24adbf9-5472-490e-9ef4-344292278528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50269", "type": "seen", "source": "https://t.me/ctinow/170334", "content": "https://ift.tt/PiMSbCw\nCVE-2023-50269 Squid Vulnerability in NetApp Products", "creation_timestamp": "2024-01-19T18:32:11.000000Z"}, {"uuid": "ff178dd3-a479-495d-b322-8a4313824701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50495", "type": "seen", "source": "https://t.me/ctinow/170331", "content": "https://ift.tt/1TQ9pJq\nCVE-2023-50495 GNU Ncurses Vulnerability in NetApp Products", "creation_timestamp": "2024-01-19T18:32:08.000000Z"}, {"uuid": "fa13c356-90d0-4670-8efb-71f8913882f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50129", "type": "seen", "source": "https://t.me/ctinow/170288", "content": "https://ift.tt/IOLJ2RH\nCVE-2023-50129 Exploit", "creation_timestamp": "2024-01-19T17:17:38.000000Z"}, {"uuid": "8487e2ce-df86-448e-a742-9481f35f41f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50932", "type": "seen", "source": "https://t.me/ctinow/174045", "content": "https://ift.tt/4ZkGHFa\nCVE-2023-50932 | Savignano SNotify up to 4.0.1 on Confluence Setting cross-site request forgery", "creation_timestamp": "2024-01-26T08:36:14.000000Z"}, {"uuid": "dd4bc55b-dadc-40b1-9d35-e09030c67dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50930", "type": "seen", "source": "https://t.me/ctinow/174034", "content": "https://ift.tt/kJUVxOS\nCVE-2023-50930 | Savignano SNotify up to 4.0.1 on Jira cross-site request forgery", "creation_timestamp": "2024-01-26T08:11:12.000000Z"}, {"uuid": "1d072f0e-9634-4993-854b-607d2e6b8475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50447", "type": "seen", "source": "https://t.me/ctinow/174339", "content": "https://ift.tt/Lv9aqgM\nCVE-2023-50447 Exploit", "creation_timestamp": "2024-01-26T17:16:38.000000Z"}, {"uuid": "667bf152-cea7-4013-b012-b4300100b7fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50916", "type": "seen", "source": "https://t.me/ctinow/175000", "content": "https://ift.tt/FP0AfKg\nCVE-2023-50916 | Kyocera Device Manager prior 3.1.1213.0 UNC path traversal", "creation_timestamp": "2024-01-28T19:01:30.000000Z"}, {"uuid": "2e6e6533-07fc-4417-9eb1-adae3ef92c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50136", "type": "seen", "source": "https://t.me/ctinow/174855", "content": "https://ift.tt/HDTq948\nCVE-2023-50136 | JFinalcms 5.0.0 New Custom Table Creation name cross site scripting", "creation_timestamp": "2024-01-28T08:26:42.000000Z"}, {"uuid": "c419001c-cdf9-4855-b717-fcdd893e1bfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50120", "type": "seen", "source": "https://t.me/ctinow/165687", "content": "https://ift.tt/j4wPUM8\nCVE-2023-50120", "creation_timestamp": "2024-01-10T10:26:54.000000Z"}, {"uuid": "55e397c3-9a93-4df4-8bcb-61e51c0cf7c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50028", "type": "seen", "source": "https://t.me/ctinow/173855", "content": "https://ift.tt/5CMAIbT\nCVE-2023-50028 Exploit", "creation_timestamp": "2024-01-25T23:16:21.000000Z"}, {"uuid": "dc56518e-630e-4813-a1d0-f1134bad742a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50123", "type": "seen", "source": "https://t.me/ctinow/170355", "content": "https://ift.tt/wRNEbva\nCVE-2023-50123 Exploit", "creation_timestamp": "2024-01-19T19:16:16.000000Z"}, {"uuid": "b7088bd0-a9a3-4c4b-9d13-9a3b1d76d7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50030", "type": "seen", "source": "https://t.me/ctinow/173792", "content": "https://ift.tt/pEbmPLK\nCVE-2023-50030 Exploit", "creation_timestamp": "2024-01-25T21:11:33.000000Z"}, {"uuid": "9333c875-c232-42f2-84e1-32117d3a3952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50974", "type": "seen", "source": "https://t.me/ctinow/174057", "content": "https://ift.tt/VvQbihR\nCVE-2023-50974 | Appwrite CLI up to 2.x Login Command ~/.appwrite/prefs.json permission", "creation_timestamp": "2024-01-26T09:06:16.000000Z"}, {"uuid": "a8015dd8-aea3-4812-8d4a-4fa0ae29556c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50585", "type": "seen", "source": "https://t.me/ctinow/174048", "content": "https://ift.tt/RrLOQ1l\nCVE-2023-50585 | Tenda A18 15.13.07.09 formSetDeviceName devName stack-based overflow", "creation_timestamp": "2024-01-26T08:36:17.000000Z"}, {"uuid": "ba2a1ea7-c2b3-4ccd-bf1c-b20d2bb3a895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50931", "type": "seen", "source": "https://t.me/ctinow/174044", "content": "https://ift.tt/tfFTOqU\nCVE-2023-50931 | Savignano SNotify up to 2.0.0 on Bitbucket Setting cross-site request forgery", "creation_timestamp": "2024-01-26T08:36:13.000000Z"}, {"uuid": "6e3b728a-8e28-49b4-a521-846b1fa7c06d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50072", "type": "seen", "source": "https://t.me/ctinow/170451", "content": "https://ift.tt/hxUszIn\nCVE-2023-50072 Exploit", "creation_timestamp": "2024-01-19T23:17:08.000000Z"}, {"uuid": "eb8e661b-f226-4096-958c-1251b73d3e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50643", "type": "seen", "source": "https://t.me/ctinow/173815", "content": "https://ift.tt/cFj7rKZ\nCVE-2023-50643 | Evernote 10.68.2 on macOS RunAsNode/enableNodeClilnspectArguments Privilege Escalation", "creation_timestamp": "2024-01-25T21:56:38.000000Z"}, {"uuid": "02034737-a046-47d5-a2e0-dd63809949a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50614", "type": "seen", "source": "https://t.me/ctinow/173906", "content": "https://ift.tt/mkSprqY\nCVE-2023-50614 Exploit", "creation_timestamp": "2024-01-26T01:17:03.000000Z"}, {"uuid": "88287f25-3d63-42ba-9ae1-ff88eb11bd49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50124", "type": "seen", "source": "https://t.me/ctinow/170295", "content": "https://ift.tt/eQBtCdu\nCVE-2023-50124 Exploit", "creation_timestamp": "2024-01-19T17:17:47.000000Z"}, {"uuid": "13bd9694-188e-4210-a19f-33edec06af3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50916", "type": "seen", "source": "https://t.me/ctinow/170402", "content": "https://ift.tt/h9CDInd\nCVE-2023-50916 Exploit", "creation_timestamp": "2024-01-19T21:16:23.000000Z"}, {"uuid": "56e71978-581f-4bc5-81b3-4522644b3833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50297", "type": "seen", "source": "https://t.me/ctinow/170123", "content": "https://ift.tt/r8kUjPt\nCVE-2023-50297 | Alfasado PowerCMS up to 4.54/5.24/6.31 URL redirect", "creation_timestamp": "2024-01-19T10:16:33.000000Z"}, {"uuid": "bfeebfbd-dbc9-4cb4-b750-072f06d9019e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50072", "type": "seen", "source": "https://t.me/ctinow/167654", "content": "https://ift.tt/Xe5Qjyb\nCVE-2023-50072", "creation_timestamp": "2024-01-13T02:26:42.000000Z"}, {"uuid": "bfc7df1a-0445-4678-b9b9-f158a725a276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50121", "type": "seen", "source": "https://t.me/ctinow/173182", "content": "https://ift.tt/lZw7xBj\nCVE-2023-50121 | Autel EVO NANO Drone Flight Control Firmware 1.6.5 denial of service", "creation_timestamp": "2024-01-25T00:21:25.000000Z"}, {"uuid": "b15e7695-ccc7-4e7f-a743-3a354e0a2202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50175", "type": "seen", "source": "https://t.me/ctinow/170148", "content": "https://ift.tt/z1Gu5m3\nCVE-2023-50175 | WESEEK GROWI up to 5.x Settings Page /admin/markdown cross site scripting", "creation_timestamp": "2024-01-19T11:16:23.000000Z"}, {"uuid": "26f50258-0dd2-4349-a5ce-a83294517d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50294", "type": "seen", "source": "https://t.me/ctinow/170147", "content": "https://ift.tt/2O5rRka\nCVE-2023-50294 | WESEEK GROWI up to 6.0.5 App Settings Page /admin/app cleartext storage", "creation_timestamp": "2024-01-19T11:16:21.000000Z"}, {"uuid": "f1eb949e-130a-4cf8-b577-71a891cfce52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50469", "type": "seen", "source": "https://t.me/ctinow/166665", "content": "https://ift.tt/mQbivUq\nCVE-2023-50469 | Shenzhen Libituo Technology LBT-T300-T310 2.2.2.6 /apply.cgi ApCliEncrypType buffer overflow", "creation_timestamp": "2024-01-11T17:37:10.000000Z"}, {"uuid": "ae8d33cb-701d-42e1-a9d4-6c5d137de3e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50722", "type": "seen", "source": "https://t.me/ctinow/166663", "content": "https://ift.tt/rTN15kZ\nCVE-2023-50722 | XWiki Platform Admin Section cross site scripting (GHSA-cp3j-273x-3jxc)", "creation_timestamp": "2024-01-11T17:37:07.000000Z"}, {"uuid": "8e5698f6-90de-46b6-b06d-21b646a22e63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50440", "type": "seen", "source": "https://t.me/ctinow/165726", "content": "https://ift.tt/A9HgDk2\nCVE-2023-50440 | PRIMX ZED/ZONECENTRAL/ZEDMAIL UNC Reference access control", "creation_timestamp": "2024-01-10T12:11:09.000000Z"}, {"uuid": "b44564ca-0d3a-4108-8121-003927d75fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50439", "type": "seen", "source": "https://t.me/ctinow/165725", "content": "https://ift.tt/Peb5UMx\nCVE-2023-50439 | PRIMX ZED/ZONECENTRAL/ZEDMAIL Project Name information disclosure", "creation_timestamp": "2024-01-10T12:11:08.000000Z"}, {"uuid": "c6b29a56-d74b-48d4-a3a4-09541a27bf55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50248", "type": "seen", "source": "https://t.me/ctinow/165710", "content": "https://ift.tt/yGi4zJC\nCVE-2023-50248 | CKAN up to 2.9.9/2.10.2 /dataset/new length parameter (GHSA-7fgc-89cx-w8j5)", "creation_timestamp": "2024-01-10T11:41:52.000000Z"}, {"uuid": "6ef0b603-d14e-40b7-955c-2954e388c33e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50444", "type": "seen", "source": "https://t.me/ctinow/165708", "content": "https://ift.tt/o7T9Rty\nCVE-2023-50444 | PRIMX ZED/ZONECENTRAL/ZEDMAIL information disclosure", "creation_timestamp": "2024-01-10T11:41:50.000000Z"}, {"uuid": "325cdbb3-eafe-4518-9abb-65237714f4fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50262", "type": "seen", "source": "https://t.me/ctinow/165702", "content": "https://ift.tt/dOu89tw\nCVE-2023-50262 | Dompdf up to 2.0.3 SVG Document Parser memory leak (GHSA-3qx2-6f78-w2j2)", "creation_timestamp": "2024-01-10T11:11:33.000000Z"}, {"uuid": "f07bf78e-43d1-42b2-88c3-f1bfd3f3a22f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50290", "type": "seen", "source": "https://t.me/ctinow/168284", "content": "https://ift.tt/upc1N6z\nCVE-2023-50290", "creation_timestamp": "2024-01-15T11:26:44.000000Z"}, {"uuid": "be5e88f1-0ebf-464e-90ed-1c001107e896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50127", "type": "seen", "source": "https://t.me/ctinow/169985", "content": "https://ift.tt/dE6ZDyN\nCVE-2023-50127 Exploit", "creation_timestamp": "2024-01-18T23:17:00.000000Z"}, {"uuid": "9576002a-dcb9-4c59-a35a-2d14a7080690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50671", "type": "seen", "source": "https://t.me/ctinow/169938", "content": "https://ift.tt/FRtrYka\nCVE-2023-50671 Exploit", "creation_timestamp": "2024-01-18T21:16:52.000000Z"}, {"uuid": "0903e36a-c348-4a26-b312-3de6ddb1106e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50159", "type": "seen", "source": "https://t.me/ctinow/169934", "content": "https://ift.tt/qKDtVWv\nCVE-2023-50159 Exploit", "creation_timestamp": "2024-01-18T21:16:46.000000Z"}, {"uuid": "999cf187-9d2c-49f0-a80c-5550e0df9854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50255", "type": "seen", "source": "https://t.me/ctinow/170232", "content": "https://ift.tt/glvqFV0\nCVE-2023-50255 | linuxdeepin developer-center up to 5.12.20 deepin-compressor path traversal", "creation_timestamp": "2024-01-19T15:16:34.000000Z"}, {"uuid": "144195c5-aad2-45b4-a71c-38cebb1e1632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50341", "type": "seen", "source": "https://t.me/ctinow/162178", "content": "https://ift.tt/SYzcw3m\nCVE-2023-50341", "creation_timestamp": "2024-01-03T04:27:00.000000Z"}, {"uuid": "2330994a-fe31-47bc-943f-e0f30dc2d419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50714", "type": "seen", "source": "https://t.me/ctinow/167209", "content": "https://ift.tt/UQiy1a6\nCVE-2023-50714 | yii2-authclient prior 2.2.15 Oauth2 PKCE improper authentication", "creation_timestamp": "2024-01-12T12:11:27.000000Z"}, {"uuid": "edfc14af-9bba-4d0f-bb49-62d30ec018e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50082", "type": "seen", "source": "https://t.me/ctinow/166068", "content": "https://ift.tt/6YBaIDz\nCVE-2023-50082 Exploit", "creation_timestamp": "2024-01-10T19:17:08.000000Z"}, {"uuid": "ba90e3a1-8716-4998-8f60-65f8427f7874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50101", "type": "seen", "source": "https://t.me/ctinow/166374", "content": "https://ift.tt/qCtUADJ\nCVE-2023-50101 | JFinalcms 5.0.0 Label Management Editing cross site scripting", "creation_timestamp": "2024-01-11T08:57:05.000000Z"}, {"uuid": "9b9950c0-04d0-4435-8119-3822131a6acc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50712", "type": "seen", "source": "https://t.me/ctinow/169722", "content": "https://ift.tt/ygS5Kjd\nCVE-2023-50712 | dfir-iris iris-web up to 2.3.6 cross site scripting (GHSA-593r-747g-p92p)", "creation_timestamp": "2024-01-18T13:46:55.000000Z"}, {"uuid": "d956b6ca-a1ef-4e86-bac1-fce1484d5cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50785", "type": "seen", "source": "https://t.me/ctinow/173408", "content": "https://ift.tt/7qYzt8M\nCVE-2023-50785 | Zoho ManageEngine ADAudit Plus up to 7269 path traversal", "creation_timestamp": "2024-01-25T12:41:18.000000Z"}, {"uuid": "7d68543b-c615-4423-a9fe-8d4b8f16810b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50120", "type": "seen", "source": "https://t.me/ctinow/169933", "content": "https://ift.tt/WYAJ3h7\nCVE-2023-50120 Exploit", "creation_timestamp": "2024-01-18T21:16:43.000000Z"}, {"uuid": "42228a38-86fb-4294-b648-2ec8b1dfc001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50172", "type": "seen", "source": "https://t.me/ctinow/169834", "content": "https://ift.tt/mJLIfTv\nCVE-2023-50172 Exploit", "creation_timestamp": "2024-01-18T17:17:02.000000Z"}, {"uuid": "3c19ee1b-ac24-43ec-a614-fb80d095fde5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50924", "type": "seen", "source": "https://t.me/ctinow/169712", "content": "https://ift.tt/aDNkjIf\nCVE-2023-50924 | Englesystem up to 3.4.0 DECT number/mobile number/work-log comment cross site scripting (GHSA-p5ch-rrpm-wvhm)", "creation_timestamp": "2024-01-18T13:21:18.000000Z"}, {"uuid": "2dcce9c3-7b54-4717-a533-7fa1bde4fcba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50950", "type": "seen", "source": "https://t.me/ctinow/169405", "content": "https://ift.tt/K6jsfvZ\nCVE-2023-50950", "creation_timestamp": "2024-01-17T18:27:20.000000Z"}, {"uuid": "a0825d85-7fbc-4b0d-9b5e-59d6045d60ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5041", "type": "seen", "source": "https://t.me/ctinow/169329", "content": "https://ift.tt/xsi4wFS\nCVE-2023-5041", "creation_timestamp": "2024-01-17T16:26:29.000000Z"}, {"uuid": "81827732-1e0c-474e-82e2-2e43d84077ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50147", "type": "seen", "source": "https://t.me/ctinow/169710", "content": "https://ift.tt/Fo6n57s\nCVE-2023-50147 | Totolink A3700R 9.1.2u.5822_B20200513 cstecgi.cgi setDiagnosisCfg os command injection", "creation_timestamp": "2024-01-18T13:21:15.000000Z"}, {"uuid": "ace27843-b17f-42ef-ab5d-edc9971765d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50831", "type": "seen", "source": "https://t.me/ctinow/168071", "content": "https://ift.tt/6jSwbNX\nCVE-2023-50831 | VillaTheme CURCY Plugin up to 2.2.0 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T16:11:07.000000Z"}, {"uuid": "3797d6dc-23d2-4197-921e-c0389e537778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50785", "type": "seen", "source": "https://t.me/ctinow/173296", "content": "https://ift.tt/rQysgul\nCVE-2023-50785", "creation_timestamp": "2024-01-25T07:26:42.000000Z"}, {"uuid": "031dab93-85fe-44c8-9923-83a094ea619a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50259", "type": "seen", "source": "https://t.me/ctinow/169657", "content": "https://ift.tt/qDEYXly\nCVE-2023-50259 | pymedusa Medusa up to 1.0.18 POST Request handler.py testslack slack_webhook server-side request forgery (GHSA-8mcr-vffr-jwxv)", "creation_timestamp": "2024-01-18T10:41:34.000000Z"}, {"uuid": "e5523e35-96c7-4042-9e96-41034c225bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50136", "type": "seen", "source": "https://t.me/ctinow/169006", "content": "https://ift.tt/Ftfhvuj\nCVE-2023-50136 Exploit", "creation_timestamp": "2024-01-16T21:16:47.000000Z"}, {"uuid": "0c1b9eb8-7c1c-481f-b50d-f4af615011ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50985", "type": "seen", "source": "https://t.me/ctinow/167950", "content": "https://ift.tt/YFwTzWX\nCVE-2023-50985 | Tenda i29 1.0.0.5 lanCfgSet lanGw buffer overflow", "creation_timestamp": "2024-01-14T07:41:25.000000Z"}, {"uuid": "29a726eb-990e-4feb-b559-238201a3a5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5006", "type": "seen", "source": "https://t.me/ctinow/169328", "content": "https://ift.tt/sGjvB9a\nCVE-2023-5006", "creation_timestamp": "2024-01-17T16:26:26.000000Z"}, {"uuid": "4bfb66e9-c08d-4674-bcfc-f90fe874c658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50729", "type": "seen", "source": "https://t.me/ctinow/168465", "content": "https://ift.tt/uW9kyOB\nCVE-2023-50729", "creation_timestamp": "2024-01-15T17:27:09.000000Z"}, {"uuid": "3efa9dc6-6469-400b-b6c5-d406325b342e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50767", "type": "seen", "source": "https://t.me/ctinow/165763", "content": "https://ift.tt/gSiQC08\nCVE-2023-50767 | Nexus Platform Plugin up to 3.18.0-03 on Jenkins HTTP Request permission", "creation_timestamp": "2024-01-10T13:07:44.000000Z"}, {"uuid": "56103733-106b-46d6-a659-d4e1e2e91cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50765", "type": "seen", "source": "https://t.me/ctinow/165762", "content": "https://ift.tt/uaTBQ8D\nCVE-2023-50765 | Scriptler Plugin up to 342.v6a_89fd40f466 on Jenkins Groovy Script permission", "creation_timestamp": "2024-01-10T13:07:43.000000Z"}, {"uuid": "5946ccb2-d55f-48f3-8931-0748c97dcc46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50136", "type": "seen", "source": "https://t.me/ctinow/165429", "content": "https://ift.tt/IMtXZ9r\nCVE-2023-50136", "creation_timestamp": "2024-01-09T23:26:33.000000Z"}, {"uuid": "4924cce0-68b4-4bd4-85e5-5f96a7c783ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50094", "type": "seen", "source": "https://t.me/ctinow/165425", "content": "https://ift.tt/wOMNPbG\nCVE-2023-50094 Exploit", "creation_timestamp": "2024-01-09T23:17:31.000000Z"}, {"uuid": "0a20bd91-ef41-4aa4-ab35-4c27562c8b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50974", "type": "seen", "source": "https://t.me/ctinow/164912", "content": "https://ift.tt/tAKwGL1\nCVE-2023-50974", "creation_timestamp": "2024-01-09T10:26:22.000000Z"}, {"uuid": "81bf53ca-e3e2-4cdc-b571-e6a3a8bedfaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50585", "type": "seen", "source": "https://t.me/ctinow/164911", "content": "https://ift.tt/iwgUFkv\nCVE-2023-50585", "creation_timestamp": "2024-01-09T10:26:21.000000Z"}, {"uuid": "493a3428-90fa-4d8b-8439-711b5eb49f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50707", "type": "seen", "source": "https://t.me/ctinow/167775", "content": "https://ift.tt/K8YIGyE\nCVE-2023-50707 | EFACEC BCU 500 4.07 resource consumption (icsa-23-353-02)", "creation_timestamp": "2024-01-13T09:51:35.000000Z"}, {"uuid": "2bf4d7f9-088d-4947-b26a-c98ab7a2d64c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50706", "type": "seen", "source": "https://t.me/ctinow/167774", "content": "https://ift.tt/5YfW6jG\nCVE-2023-50706 | EFACEC UC 500 10.1.0 access control (icsa-23-353-03)", "creation_timestamp": "2024-01-13T09:51:34.000000Z"}, {"uuid": "c4fe98ef-ea80-4d01-b010-5489501e2d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50705", "type": "seen", "source": "https://t.me/ctinow/167773", "content": "https://ift.tt/prSCvNt\nCVE-2023-50705 | EFACEC UC 500 10.1.0 Request information disclosure (icsa-23-353-03)", "creation_timestamp": "2024-01-13T09:51:33.000000Z"}, {"uuid": "e0c5ac6d-935c-4143-bfc2-d03daa2608f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50704", "type": "seen", "source": "https://t.me/ctinow/167772", "content": "https://ift.tt/nsqIx3f\nCVE-2023-50704 | EFACEC UC 500 10.1.0 redirect (icsa-23-353-03)", "creation_timestamp": "2024-01-13T09:51:32.000000Z"}, {"uuid": "9df5da7e-6db8-4ce2-a809-049bc45b0414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50703", "type": "seen", "source": "https://t.me/ctinow/167771", "content": "https://ift.tt/jwA04at\nCVE-2023-50703 | EFACEC UC 500 10.1.0 cleartext transmission (icsa-23-353-03)", "creation_timestamp": "2024-01-13T09:51:31.000000Z"}, {"uuid": "618be2f8-d64b-402a-8a53-8f23e1d2dade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50948", "type": "seen", "source": "https://t.me/ctinow/173358", "content": "https://ift.tt/7Rf6NiS\nCVE-2023-50948 | IBM Storage Fusion HCI up to 2.6.1 hard-coded password (XFDB-275671)", "creation_timestamp": "2024-01-25T10:11:22.000000Z"}, {"uuid": "467a9af3-441e-4e3b-aef5-5492bc323fb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50290", "type": "seen", "source": "https://t.me/ctinow/167578", "content": "https://ift.tt/nQ9PALb\nCVE-2023-50290", "creation_timestamp": "2024-01-12T22:41:55.000000Z"}, {"uuid": "481db54e-4462-4b20-b757-9624ac5f6e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50630", "type": "seen", "source": "https://t.me/ctinow/162856", "content": "https://ift.tt/bFogI8d\nCVE-2023-50630", "creation_timestamp": "2024-01-04T09:26:45.000000Z"}, {"uuid": "eb7ced95-955f-4fb6-a7a5-d2c400a740ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50093", "type": "seen", "source": "https://t.me/ctinow/162404", "content": "https://ift.tt/pZr6Xqs\nCVE-2023-50093", "creation_timestamp": "2024-01-03T15:26:31.000000Z"}, {"uuid": "3addd019-acb0-4d94-8d10-3b74d55be4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50835", "type": "seen", "source": "https://t.me/ctinow/167812", "content": "https://ift.tt/ihVHut2\nCVE-2023-50835 | Praveen Goswami Advanced Category Template Plugin up to 0.1 on WordPress cross-site request forgery", "creation_timestamp": "2024-01-13T12:16:54.000000Z"}, {"uuid": "d4f82f53-d0c0-43c4-9103-8c5b0d575379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50609", "type": "seen", "source": "https://t.me/ctinow/173181", "content": "https://ift.tt/nGkLtDa\nCVE-2023-50609 | AVA Teaching Video Application Service Platform 3.1 ajax.aspx cross site scripting", "creation_timestamp": "2024-01-25T00:21:24.000000Z"}, {"uuid": "98d4f48e-34da-4f0d-ac8f-e3f663df2004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50833", "type": "seen", "source": "https://t.me/ctinow/168078", "content": "https://ift.tt/m67Y8Af\nCVE-2023-50833 | ExtendThemes Colibri Page Builder Plugin up to 1.0.239 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T17:16:30.000000Z"}, {"uuid": "0531ea8a-9a46-4e08-a0a2-c6f4bc79aca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50832", "type": "seen", "source": "https://t.me/ctinow/168077", "content": "https://ift.tt/4En5QdN\nCVE-2023-50832 | Mondula Multi Step Form Plugin up to 1.7.13 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T16:46:22.000000Z"}, {"uuid": "a9f73516-84e2-407c-a1ca-2bfa6fe54779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50830", "type": "seen", "source": "https://t.me/ctinow/168076", "content": "https://ift.tt/O4ShTts\nCVE-2023-50830 | Seosbg Seos Contact Form Plugin up to 1.8.0 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T16:46:21.000000Z"}, {"uuid": "b5cda67a-1e97-4435-b7c5-7851ffadf412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50829", "type": "seen", "source": "https://t.me/ctinow/168075", "content": "https://ift.tt/AHlRpLF\nCVE-2023-50829 | Aerin Loan Repayment Calculator and Application Form Plugin cross site scripting", "creation_timestamp": "2024-01-14T16:46:19.000000Z"}, {"uuid": "4572f8f0-9d71-4915-804e-5d323b6e987c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50834", "type": "seen", "source": "https://t.me/ctinow/168072", "content": "https://ift.tt/KuX9c7C\nCVE-2023-50834 | August Infotech WooCommerce Menu Extension Plugin up to 1.6.2 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T16:11:09.000000Z"}, {"uuid": "15c718b3-4c11-4f4a-a794-7288d602bc1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50628", "type": "seen", "source": "https://t.me/ctinow/167824", "content": "https://ift.tt/eGpvt30\nCVE-2023-50628 | libming 0.4.8 parser.c buffer overflow (Issue 289)", "creation_timestamp": "2024-01-13T13:51:36.000000Z"}, {"uuid": "53ca4f05-113a-4e8b-9685-ed0b06ff5bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50732", "type": "seen", "source": "https://t.me/ctinow/167819", "content": "https://ift.tt/pBCkrg2\nCVE-2023-50732 | XWiki xwiki-platform-index-tree-macro authorization", "creation_timestamp": "2024-01-13T13:21:03.000000Z"}, {"uuid": "de74a17e-8467-4f54-ab9f-fed63b053547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50466", "type": "seen", "source": "https://t.me/ctinow/167792", "content": "https://ift.tt/kQhyOL9\nCVE-2023-50466 | Weintek cMT2078X Easyweb 2.1.3 HMI Name command injection", "creation_timestamp": "2024-01-13T10:51:31.000000Z"}, {"uuid": "5d94d067-5259-477d-b991-4f032c334e35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50473", "type": "seen", "source": "https://t.me/ctinow/167988", "content": "https://ift.tt/odXFuBn\nCVE-2023-50473 | bill-ahmed qbit-matUI 1.16.4 Session Identifier index.js cross site scripting (Issue 207)", "creation_timestamp": "2024-01-14T10:11:44.000000Z"}, {"uuid": "e7678397-cc87-487a-8122-ef9090df81fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50477", "type": "seen", "source": "https://t.me/ctinow/167987", "content": "https://ift.tt/rz9D2wQ\nCVE-2023-50477 | NOS Client 0.6.6 getRPCEndpoint.js Privilege Escalation (Issue 1485)", "creation_timestamp": "2024-01-14T10:11:43.000000Z"}, {"uuid": "cffd5a67-a142-4fd4-998a-2e70cb83bb97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50481", "type": "seen", "source": "https://t.me/ctinow/167986", "content": "https://ift.tt/lb0IiL9\nCVE-2023-50481 | blinksocks 3.3.8 ssr-auth-chain.js inadequate encryption (Issue 108)", "creation_timestamp": "2024-01-14T10:11:42.000000Z"}, {"uuid": "69046965-ca04-41e9-bf5d-2b6f05a98ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50992", "type": "seen", "source": "https://t.me/ctinow/167960", "content": "https://ift.tt/lEROukG\nCVE-2023-50992 | Tenda i29 1.0.0.5 setPing ip stack-based overflow", "creation_timestamp": "2024-01-14T08:36:54.000000Z"}, {"uuid": "c521a1f9-c576-4c03-b1cc-3bb59154593f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50993", "type": "seen", "source": "https://t.me/ctinow/167959", "content": "https://ift.tt/X7iTuYf\nCVE-2023-50993 | Ruijie WS6008/WS6108 downFiles command injection", "creation_timestamp": "2024-01-14T08:36:52.000000Z"}, {"uuid": "44829a1b-1156-4114-b574-0cd2f3494f60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50823", "type": "seen", "source": "https://t.me/ctinow/168007", "content": "https://ift.tt/RiFKko0\nCVE-2023-50823 | Wipeout Media CSS & JavaScript Toolbox Plugin up to 11.7 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T12:16:15.000000Z"}, {"uuid": "f7f5034c-6f93-4bc7-bca1-4d0ba1874f17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50986", "type": "seen", "source": "https://t.me/ctinow/167949", "content": "https://ift.tt/3Kn5Yka\nCVE-2023-50986 | Tenda i29 1.0.0.5 sysLogin time buffer overflow", "creation_timestamp": "2024-01-14T07:41:24.000000Z"}, {"uuid": "d4308cca-bbee-46cd-929e-f4c0ded103d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50475", "type": "seen", "source": "https://t.me/ctinow/167985", "content": "https://ift.tt/zEDkn1m\nCVE-2023-50475 | bcoin 2.2.0 faye-websocket.js weak hash (Issue 1174)", "creation_timestamp": "2024-01-14T10:11:40.000000Z"}, {"uuid": "dc17418a-0032-4af2-b0e3-f1586daabe5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50783", "type": "seen", "source": "https://t.me/ctinow/167982", "content": "https://ift.tt/8rn3TwU\nCVE-2023-50783 | Apache Airflow up to 2.7.x Variable access control", "creation_timestamp": "2024-01-14T10:11:36.000000Z"}, {"uuid": "15d0c396-92b1-4b87-bed4-1bc062876481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50987", "type": "seen", "source": "https://t.me/ctinow/167948", "content": "https://ift.tt/zKx5MAV\nCVE-2023-50987 | Tenda i29 1.0.0.5 sysTimeInfoSet time buffer overflow", "creation_timestamp": "2024-01-14T07:41:23.000000Z"}, {"uuid": "12571229-64a4-43dc-b09c-0c94389ca3a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50822", "type": "seen", "source": "https://t.me/ctinow/168011", "content": "https://ift.tt/NDbRHg2\nCVE-2023-50822 | Currency.Wiki Currency Converter Widget Plugin up to 3.0.2 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T12:46:51.000000Z"}, {"uuid": "2c7591f7-5fc0-40e7-bb65-5ac2eafcd538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50377", "type": "seen", "source": "https://t.me/ctinow/168009", "content": "https://ift.tt/8dqXc2w\nCVE-2023-50377 | AB-WP Simple Counter Plugin up to 1.0.2 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T12:16:17.000000Z"}, {"uuid": "5a8ec515-c219-40a9-8978-0fb82054f707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50983", "type": "seen", "source": "https://t.me/ctinow/167952", "content": "https://ift.tt/cfMCuRp\nCVE-2023-50983 | Tenda i29 1.0.0.5 sysScheduleRebootSet command injection", "creation_timestamp": "2024-01-14T08:07:00.000000Z"}, {"uuid": "d89770ac-49b6-4699-bd01-e43ff1e01cc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50984", "type": "seen", "source": "https://t.me/ctinow/167951", "content": "https://ift.tt/87A6VnJ\nCVE-2023-50984 | Tenda i29 1.0.0.5 spdtstConfigAndStart ip buffer overflow", "creation_timestamp": "2024-01-14T08:06:58.000000Z"}, {"uuid": "76889656-19a2-482a-9e34-d80f951043e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50825", "type": "seen", "source": "https://t.me/ctinow/168030", "content": "https://ift.tt/diQUIhl\nCVE-2023-50825 | Terrier Tenacity iframe Shortcode Plugin up to 2.0 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T14:11:43.000000Z"}, {"uuid": "054da9d1-a7ca-460b-b6d8-7a88b6ac1cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50827", "type": "seen", "source": "https://t.me/ctinow/168029", "content": "https://ift.tt/ZnzuioP\nCVE-2023-50827 | Accredible Certificates & Open Badges Plugin up to 1.4.8 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T14:11:42.000000Z"}, {"uuid": "29344500-0b26-4147-8129-645345a306d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50826", "type": "seen", "source": "https://t.me/ctinow/168028", "content": "https://ift.tt/KA9fHDR\nCVE-2023-50826 | Freshlight Lab Menu Image, Icons Made Easy Plugin up to 3.10 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T14:11:40.000000Z"}, {"uuid": "d7397621-e651-4778-885a-38b2dab1dadc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50824", "type": "seen", "source": "https://t.me/ctinow/168026", "content": "https://ift.tt/4Qracxn\nCVE-2023-50824 | Brian Batt Insert or Embed Articulate Content into WordPress Plugin cross site scripting", "creation_timestamp": "2024-01-14T13:41:41.000000Z"}, {"uuid": "40d6b68f-8fc8-4346-9fad-1d0672562c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50828", "type": "seen", "source": "https://t.me/ctinow/168025", "content": "https://ift.tt/I2ZWHON\nCVE-2023-50828 | David Vongries Ultimate Dashboard Plugin up to 3.7.11 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T13:41:40.000000Z"}, {"uuid": "b1936be4-ea93-4445-bf49-269083403853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50639", "type": "seen", "source": "https://t.me/ctinow/167957", "content": "https://ift.tt/7LRrXV4\nCVE-2023-50639 | CuteHttpFileServer 1.0/2.0 File Upload cross site scripting", "creation_timestamp": "2024-01-14T08:36:50.000000Z"}, {"uuid": "d519b6a8-fc2d-4064-af4c-7347a85c6685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50989", "type": "seen", "source": "https://t.me/ctinow/167954", "content": "https://ift.tt/mpL43UY\nCVE-2023-50989 | Tenda i29 1.0.0.5 pingSet command injection", "creation_timestamp": "2024-01-14T08:07:02.000000Z"}, {"uuid": "05000bc1-c150-4bfc-a245-72b30e57fedc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50990", "type": "seen", "source": "https://t.me/ctinow/167955", "content": "https://ift.tt/GHE5ZKO\nCVE-2023-50990 | Tenda i29 1.0.0.5 sysScheduleRebootSet rebootTime buffer overflow", "creation_timestamp": "2024-01-14T08:07:03.000000Z"}, {"uuid": "57979db8-04ae-471b-a573-ea47fa97f489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50988", "type": "seen", "source": "https://t.me/ctinow/167953", "content": "https://ift.tt/Y2vuXTW\nCVE-2023-50988 | Tenda i29 1.0.0.5 wifiRadioSetIndoor bandwidth buffer overflow", "creation_timestamp": "2024-01-14T08:07:01.000000Z"}, {"uuid": "f142dcf7-a1a9-46f5-a012-7b97a8467770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50246", "type": "seen", "source": "https://t.me/ctinow/165827", "content": "https://ift.tt/3zTxGn2\nCVE-2023-50246 | jq 1.7 buffer overflow (GHSA-686w-5m7m-54vc)", "creation_timestamp": "2024-01-10T14:36:42.000000Z"}, {"uuid": "52515f42-f3d3-48d4-80be-0f07f3c26811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50268", "type": "seen", "source": "https://t.me/ctinow/165826", "content": "https://ift.tt/b1G7VXB\nCVE-2023-50268 | jq = 1.7 decNumber buffer overflow (GHSA-7hmr-442f-qc8j)", "creation_timestamp": "2024-01-10T14:36:41.000000Z"}, {"uuid": "c9205905-218d-408d-8bdb-150c19b4429c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50272", "type": "seen", "source": "https://t.me/ctinow/167749", "content": "https://ift.tt/Oet04wA\nCVE-2023-50272 | HPE Integrated Lights-Out 5/Integrated Lights-Out 6 improper authentication", "creation_timestamp": "2024-01-13T08:46:23.000000Z"}, {"uuid": "e0fc6d7d-e5c3-4c3a-a098-2f2514d07d90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50017", "type": "seen", "source": "https://t.me/ctinow/166458", "content": "https://ift.tt/r6lnziX\nCVE-2023-50017 | Dreamer CMS 4.1.3 /admin/database/backup cross-site request forgery", "creation_timestamp": "2024-01-11T11:27:11.000000Z"}, {"uuid": "d7499527-0ece-4bb1-93fe-5fb80b0cf09c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5091", "type": "seen", "source": "https://t.me/ctinow/173371", "content": "https://ift.tt/KSBZXGY\nCVE-2023-5091 | Arm Valhall GPU Kernel Driver up to r40p0 use after free", "creation_timestamp": "2024-01-25T10:46:10.000000Z"}, {"uuid": "88ae89dc-dc47-424e-9012-df75cc285a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50564", "type": "seen", "source": "https://t.me/ctinow/166323", "content": "https://ift.tt/hjH40F2\nCVE-2023-50564 | Pluck-CMS 4.7.18 ZIP File /inc/modules_install.php unrestricted upload", "creation_timestamp": "2024-01-11T07:21:49.000000Z"}, {"uuid": "d6d8c1a4-1582-4970-b659-85ee4436785f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50044", "type": "seen", "source": "https://t.me/ctinow/167825", "content": "https://ift.tt/xb3VQRI\nCVE-2023-50044 | Cesanta MJS 2.22.0 getprop_builtin_foreign buffer overflow (Issue 254)", "creation_timestamp": "2024-01-13T13:51:38.000000Z"}, {"uuid": "0ed03446-9bb7-4f7a-a60d-260ae10532eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50974", "type": "seen", "source": "https://t.me/ctinow/167589", "content": "https://ift.tt/wx1PDaJ\nCVE-2023-50974 Exploit", "creation_timestamp": "2024-01-12T23:16:31.000000Z"}, {"uuid": "8e48645e-fc0e-484e-ae8b-0c914872ba7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5006", "type": "seen", "source": "https://t.me/ctinow/173082", "content": "https://ift.tt/g3AsmDx\nCVE-2023-5006 Exploit", "creation_timestamp": "2024-01-24T21:16:21.000000Z"}, {"uuid": "eaafb394-a71c-4f96-bc85-11fac48c57d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50027", "type": "seen", "source": "https://t.me/ctinow/172648", "content": "https://ift.tt/DrT1Wmt\nCVE-2023-50027 | Buy Addons baproductzoommagnifier Module up to 1.0.16 on PrestaShop run sql injection", "creation_timestamp": "2024-01-24T10:36:17.000000Z"}, {"uuid": "339d0dfe-b021-4fdf-b1d8-673734a52872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50921", "type": "seen", "source": "https://t.me/ctinow/171965", "content": "https://ift.tt/TAQSuMh\nCVE-2023-50921 | GL.iNet B1300 System Module add_user Privilege Escalation", "creation_timestamp": "2024-01-23T13:56:11.000000Z"}, {"uuid": "bc6d5ddc-c19a-430f-8fea-062d3c41c2a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50092", "type": "seen", "source": "https://t.me/ctinow/172221", "content": "https://ift.tt/khEPYIA\nCVE-2023-50092 | APIIDA API Gateway Manager for Broadcom Layer7 2023.2 cross site scripting", "creation_timestamp": "2024-01-23T19:01:45.000000Z"}, {"uuid": "fbc19c5c-09e4-498c-bfe2-e32da23b671b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50093", "type": "seen", "source": "https://t.me/ctinow/172211", "content": "https://ift.tt/5fBscHA\nCVE-2023-50093 | APIIDA API Gateway Manager for Broadcom Layer7 2023.2.2 Header Host injection", "creation_timestamp": "2024-01-23T18:32:03.000000Z"}, {"uuid": "2070f7c0-6d55-4f16-a8cf-42416dde26f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50842", "type": "seen", "source": "https://t.me/ctinow/160172", "content": "https://ift.tt/edk5NwI\nCVE-2023-50842", "creation_timestamp": "2023-12-28T20:26:47.000000Z"}, {"uuid": "a3f5d887-d6ac-4161-b936-2c07060dcf45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50840", "type": "seen", "source": "https://t.me/ctinow/160170", "content": "https://ift.tt/50vZDuz\nCVE-2023-50840", "creation_timestamp": "2023-12-28T20:26:44.000000Z"}, {"uuid": "d2c26d34-80bd-4911-ab11-d70a023fc2c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "https://t.me/ctinow/159326", "content": "https://ift.tt/cduJb32\nCVE-2023-50968", "creation_timestamp": "2023-12-26T13:26:46.000000Z"}, {"uuid": "1f934e73-cf46-4df0-aa6a-5269b6b54292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50723", "type": "seen", "source": "https://t.me/ctinow/166661", "content": "https://ift.tt/3TIXZit\nCVE-2023-50723 | XWiki Platform Administration Interface neutralization of directives (GHSA-qj86-p74r-7wp5)", "creation_timestamp": "2024-01-11T17:37:04.000000Z"}, {"uuid": "cedb1b34-ebc9-424f-8793-38af06bb1fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5041", "type": "seen", "source": "https://t.me/ctinow/173153", "content": "https://ift.tt/x6J10bv\nCVE-2023-5041 Exploit", "creation_timestamp": "2024-01-24T23:16:24.000000Z"}, {"uuid": "db45b3ae-4661-4d04-a11b-4b056d67c39b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50728", "type": "seen", "source": "https://t.me/ctinow/162800", "content": "https://ift.tt/fZAx09U\nCVE-2023-50728", "creation_timestamp": "2024-01-04T07:51:42.000000Z"}, {"uuid": "bde5f300-1973-43fa-8725-3722c76733f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50922", "type": "seen", "source": "https://t.me/ctinow/162259", "content": "https://ift.tt/eU7Rrih\nCVE-2023-50922", "creation_timestamp": "2024-01-03T09:26:20.000000Z"}, {"uuid": "8b121524-0e01-4cc0-9324-b288729574e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50918", "type": "seen", "source": "https://t.me/ctinow/166625", "content": "https://ift.tt/hluxp1g\nCVE-2023-50918 | MISP up to 2.4.181 Audit Log ACL AuditLogsController.php Privilege Escalation", "creation_timestamp": "2024-01-11T16:31:43.000000Z"}, {"uuid": "b93e06b0-01ec-418e-8696-f3d8631f2c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50090", "type": "seen", "source": "https://t.me/ctinow/172373", "content": "https://ift.tt/winNgf7\nCVE-2023-50090 | ureport2 up to 2.2.9 HTTP POST Request saveReportFile Privilege Escalation (GHSA-445x-c8qq-qfr9)", "creation_timestamp": "2024-01-23T23:02:23.000000Z"}, {"uuid": "d076b272-5f78-421a-8b09-9efd55540eeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50764", "type": "seen", "source": "https://t.me/ctinow/165750", "content": "https://ift.tt/TmQ9MhF\nCVE-2023-50764 | Scriptler Plugin up to 342.v6a_89fd40f466 on Jenkins HTTP Endpoint permission", "creation_timestamp": "2024-01-10T12:41:33.000000Z"}, {"uuid": "dd99e672-5d97-48d7-9998-1f600c3d4843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50612", "type": "seen", "source": "https://t.me/ctinow/172879", "content": "https://ift.tt/S2DxBzN\nCVE-2023-50612 | fit2cloud Cloud Explorer Lite 1.4.1 Permissions accounts information disclosure", "creation_timestamp": "2024-01-24T16:16:19.000000Z"}, {"uuid": "b107d8bf-2cf9-4511-b912-e884bce6141e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50944", "type": "seen", "source": "https://t.me/ctinow/172781", "content": "https://ift.tt/6MTKqSG\nCVE-2023-50944", "creation_timestamp": "2024-01-24T14:26:48.000000Z"}, {"uuid": "561a7a0b-7c7b-4195-a1ac-64f4e2aa6fbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50943", "type": "seen", "source": "https://t.me/ctinow/172780", "content": "https://ift.tt/heYJ3Ug\nCVE-2023-50943", "creation_timestamp": "2024-01-24T14:26:47.000000Z"}, {"uuid": "128e7362-03e3-4c42-8590-61f0788bfbd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50162", "type": "seen", "source": "https://t.me/ctinow/164735", "content": "https://ift.tt/IWQSXqr\nCVE-2023-50162", "creation_timestamp": "2024-01-09T01:26:30.000000Z"}, {"uuid": "a9b1c672-32ca-4be0-9c8d-e4f60dbb7ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50082", "type": "seen", "source": "https://t.me/ctinow/172570", "content": "https://ift.tt/Q8ZvMBz\nCVE-2023-50082 | Aoyun PbootCMS 3.1.2 Backend Management Platform information disclosure", "creation_timestamp": "2024-01-24T08:11:29.000000Z"}, {"uuid": "7dae5430-ae9a-4b29-ab67-bfbef88bb39e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50020", "type": "seen", "source": "https://t.me/ctinow/171919", "content": "https://ift.tt/MqOCYZK\nCVE-2023-50020 | Open5GS 2.6.6 AMF denial of service (Issue 2734)", "creation_timestamp": "2024-01-23T12:51:46.000000Z"}, {"uuid": "a839e654-f166-4ba0-a18f-4743c2a63c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50263", "type": "seen", "source": "https://t.me/ctinow/162861", "content": "https://ift.tt/pNoZwIx\nCVE-2023-50263 | Nautobot up to 1.6.6/2.0.5 /files/get/ name information disclosure (GHSA-75mc-3pjc-727q)", "creation_timestamp": "2024-01-04T09:41:51.000000Z"}, {"uuid": "35bff578-635f-40c5-852a-88d4df776572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50991", "type": "seen", "source": "https://t.me/ctinow/172647", "content": "https://ift.tt/pPE9Kym\nCVE-2023-50991 | Tenda i29 1.0.0.2/1.0.0.5 pingSet pingIp denial of service", "creation_timestamp": "2024-01-24T10:36:16.000000Z"}, {"uuid": "e2b3f14b-16b7-4df5-befa-30421967a62c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50643", "type": "seen", "source": "https://t.me/ctinow/167468", "content": "https://ift.tt/DQ9dVbw\nCVE-2023-50643 Exploit", "creation_timestamp": "2024-01-12T19:26:58.000000Z"}, {"uuid": "973f6b10-fcc6-435b-a22d-03bc8a6c8b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50630", "type": "seen", "source": "https://t.me/ctinow/172577", "content": "https://ift.tt/RxuUjOd\nCVE-2023-50630 | xiweicheng TMS 2.28.0 Click Here cross site scripting (Issue 19)", "creation_timestamp": "2024-01-24T08:41:37.000000Z"}, {"uuid": "e8b3623c-7650-4fc3-9e10-e494e5871af5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50275", "type": "seen", "source": "https://t.me/ctinow/172207", "content": "https://ift.tt/Kj0cSqu\nCVE-2023-50275", "creation_timestamp": "2024-01-23T18:26:34.000000Z"}, {"uuid": "f1e92b41-376a-4b4b-bddc-d605e782cb52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50274", "type": "seen", "source": "https://t.me/ctinow/172206", "content": "https://ift.tt/c1WXRC2\nCVE-2023-50274", "creation_timestamp": "2024-01-23T18:26:33.000000Z"}, {"uuid": "c503c856-78d4-40dc-a4ac-9218e806dc6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50766", "type": "seen", "source": "https://t.me/ctinow/165832", "content": "https://ift.tt/sP6YDJO\nCVE-2023-50766 | Nexus Platform Plugin up to 3.18.0-03 on Jenkins HTTP Request cross-site request forgery", "creation_timestamp": "2024-01-10T14:36:47.000000Z"}, {"uuid": "8722a0e2-b1da-449b-9bfb-d911bea02fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50253", "type": "seen", "source": "https://t.me/ctinow/172309", "content": "https://ift.tt/G18jv5P\nCVE-2023-50253 | labring laf up to 1.0.0-beta.13 information disclosure (GHSA-g9c8-wh35-g75f)", "creation_timestamp": "2024-01-23T21:26:17.000000Z"}, {"uuid": "8d33b744-26fe-4e8f-8fe0-ef5acbb3141b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50082", "type": "seen", "source": "https://t.me/ctinow/162855", "content": "https://ift.tt/KXZ7noG\nCVE-2023-50082", "creation_timestamp": "2024-01-04T09:26:44.000000Z"}, {"uuid": "0811eda4-afa5-4feb-a104-b72a694339a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50252", "type": "seen", "source": "https://t.me/ctinow/162852", "content": "https://ift.tt/uNWYpMI\nCVE-2023-50252 | dompdf php-svg-lib up to 0.5.0 SVG File unknown vulnerability", "creation_timestamp": "2024-01-04T09:07:07.000000Z"}, {"uuid": "6e8e881a-5d5d-4c1e-9911-3fcf134c3108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50251", "type": "seen", "source": "https://t.me/ctinow/162850", "content": "https://ift.tt/OqpLves\nCVE-2023-50251 | dompdf php-svg-lib up to 0.5.0 SVG File recursion", "creation_timestamp": "2024-01-04T09:07:04.000000Z"}, {"uuid": "d25ef0b7-7f6a-4c36-8b48-fa5b1650dc30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50247", "type": "seen", "source": "https://t.me/ctinow/162844", "content": "https://ift.tt/zhFPkvl\nCVE-2023-50247 | H2O up to 2.3.0-beta2 QUIC Stack allocation of resources", "creation_timestamp": "2024-01-04T08:41:43.000000Z"}, {"uuid": "b757fb88-988b-482c-9bc3-3435a145799d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50100", "type": "seen", "source": "https://t.me/ctinow/166383", "content": "https://ift.tt/V1xv8RE\nCVE-2023-50100 | JFinalcms 5.0.0 Carousel Image Editing cross site scripting", "creation_timestamp": "2024-01-11T09:26:09.000000Z"}, {"uuid": "2b5cddd3-dc4d-4598-847e-f773cecdca8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50982", "type": "seen", "source": "https://t.me/ctinow/164646", "content": "https://ift.tt/RUVF4x7\nCVE-2023-50982", "creation_timestamp": "2024-01-08T21:26:52.000000Z"}, {"uuid": "4f758996-4d53-4751-96a6-4f475734aa9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50147", "type": "seen", "source": "https://t.me/ctinow/160712", "content": "https://ift.tt/eS0rbME\nCVE-2023-50147 Exploit", "creation_timestamp": "2023-12-29T23:16:45.000000Z"}, {"uuid": "76b0a834-f15d-4de9-8c02-f89b95077e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50256", "type": "seen", "source": "https://t.me/ctinow/162698", "content": "https://ift.tt/gpo12RT\nCVE-2023-50256", "creation_timestamp": "2024-01-04T00:32:12.000000Z"}, {"uuid": "746f075a-8f0d-4ad4-aa65-b59a1ab6a84d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50351", "type": "seen", "source": "https://t.me/ctinow/171940", "content": "https://ift.tt/KJU7xXh\nCVE-2023-50351 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 Key Rotation cryptographic issues (KB0109608)", "creation_timestamp": "2024-01-23T13:31:48.000000Z"}, {"uuid": "37a38ebd-0072-47e7-b3cb-c422c6a06dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50350", "type": "seen", "source": "https://t.me/ctinow/171921", "content": "https://ift.tt/PdYi89k\nCVE-2023-50350 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 cryptographic issues (KB0109608)", "creation_timestamp": "2024-01-23T12:51:48.000000Z"}, {"uuid": "7ffc3252-6411-4705-87c3-fca4eb0dfb27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50921", "type": "seen", "source": "https://t.me/ctinow/162282", "content": "https://ift.tt/Sb2E8XC\nCVE-2023-50921", "creation_timestamp": "2024-01-03T10:26:50.000000Z"}, {"uuid": "ffeee36c-6b65-4b5f-b654-b425184e7386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50254", "type": "seen", "source": "https://t.me/ctinow/162654", "content": "https://ift.tt/A5zKknE\nCVE-2023-50254 Exploit", "creation_timestamp": "2024-01-03T23:17:17.000000Z"}, {"uuid": "6ec07078-62aa-4add-a338-fac796edef0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50258", "type": "seen", "source": "https://t.me/ctinow/162653", "content": "https://ift.tt/9nHslZq\nCVE-2023-50258 Exploit", "creation_timestamp": "2024-01-03T23:17:16.000000Z"}, {"uuid": "2ea150d1-e379-4677-b88e-47586283523f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50259", "type": "seen", "source": "https://t.me/ctinow/162652", "content": "https://ift.tt/5tirYRu\nCVE-2023-50259 Exploit", "creation_timestamp": "2024-01-03T23:17:15.000000Z"}, {"uuid": "c1838f35-ead2-488c-8686-7ca1cb2301cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50760", "type": "seen", "source": "https://t.me/ctinow/165597", "content": "https://ift.tt/r5Pltau\nCVE-2023-50760 Exploit", "creation_timestamp": "2024-01-10T08:16:14.000000Z"}, {"uuid": "c102c01b-fa06-4ae1-b5d6-1bb0c00551ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50092", "type": "seen", "source": "https://t.me/ctinow/162374", "content": "https://ift.tt/uSg0p2s\nCVE-2023-50092", "creation_timestamp": "2024-01-03T14:26:30.000000Z"}, {"uuid": "9c16d715-d17b-400a-b7b1-2a05a83a1536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50351", "type": "seen", "source": "https://t.me/ctinow/162166", "content": "https://ift.tt/4ivBNpl\nCVE-2023-50351", "creation_timestamp": "2024-01-03T03:26:34.000000Z"}, {"uuid": "80f53278-796c-4009-9a1b-a4cd444a480a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50350", "type": "seen", "source": "https://t.me/ctinow/162165", "content": "https://ift.tt/x0sI2NB\nCVE-2023-50350", "creation_timestamp": "2024-01-03T03:26:33.000000Z"}, {"uuid": "460cc6fd-aca6-4ddf-9659-d1e0e9a6dcf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50348", "type": "seen", "source": "https://t.me/ctinow/162164", "content": "https://ift.tt/5x9hfs7\nCVE-2023-50348", "creation_timestamp": "2024-01-03T03:26:32.000000Z"}, {"uuid": "9a9d52b1-1663-4fd8-9b69-6e59e42881e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50346", "type": "seen", "source": "https://t.me/ctinow/162163", "content": "https://ift.tt/EQ1lNL8\nCVE-2023-50346", "creation_timestamp": "2024-01-03T03:26:31.000000Z"}, {"uuid": "8892fad5-633e-46d1-a3d4-6e0de0c172f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50345", "type": "seen", "source": "https://t.me/ctinow/162162", "content": "https://ift.tt/zD2EuWZ\nCVE-2023-50345", "creation_timestamp": "2024-01-03T03:26:30.000000Z"}, {"uuid": "e2ca2516-66fa-4ca3-908c-9cae3d611d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50761", "type": "seen", "source": "https://t.me/ctinow/167434", "content": "https://ift.tt/xgQD90W\nCVE-2023-50761 | Mozilla Thunderbird up to 115.5 SMIME comparison (DLA 3698-1)", "creation_timestamp": "2024-01-12T18:52:00.000000Z"}, {"uuid": "4de93d39-caac-4bd0-be28-1511d2b514fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50976", "type": "seen", "source": "https://t.me/ctinow/167139", "content": "https://ift.tt/WgMp75P\nCVE-2023-50976 | Redpanda up to 23.1.20/23.2.17 Transactions API authorization (Issue 15048)", "creation_timestamp": "2024-01-12T09:11:39.000000Z"}, {"uuid": "6a8e75a0-28d7-4e02-b471-c822f45302b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50728", "type": "seen", "source": "https://t.me/ctinow/166681", "content": "https://ift.tt/eEa9sjI\nCVE-2023-50728 | octokit webhooks.js prior 9.26.3/10.9.2/11.1.2/12.0.4 exceptional condition (GHSA-pwfr-8pq7-x9qv)", "creation_timestamp": "2024-01-11T18:02:27.000000Z"}, {"uuid": "349f49d6-10bc-485f-8af3-802f8517484f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50253", "type": "seen", "source": "https://t.me/ctinow/162522", "content": "https://ift.tt/UVM0Xi7\nCVE-2023-50253", "creation_timestamp": "2024-01-03T18:31:51.000000Z"}, {"uuid": "3bd2e625-fcca-49c3-9327-5795f794cdab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50671", "type": "seen", "source": "https://t.me/ctinow/166722", "content": "https://ift.tt/HjV8pcx\nCVE-2023-50671", "creation_timestamp": "2024-01-11T18:37:34.000000Z"}, {"uuid": "abb3525a-3a5c-4735-80fb-979dc717154f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50448", "type": "seen", "source": "https://t.me/ctinow/166718", "content": "https://ift.tt/vtbkUs6\nCVE-2023-50448 | activeadmin Gem prior 2.12.0 on Ruby CSV Export information disclosure (GHSA-356j-hg45-x525)", "creation_timestamp": "2024-01-11T18:31:27.000000Z"}, {"uuid": "36f5b7a2-a489-4e50-99ce-4e7d032e4cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50137", "type": "seen", "source": "https://t.me/ctinow/166388", "content": "https://ift.tt/SJOuzCA\nCVE-2023-50137 | JFinalcms 5.0.0 Site Management Office cross site scripting", "creation_timestamp": "2024-01-11T09:26:15.000000Z"}, {"uuid": "22a14468-c9e4-47a2-9cde-aa1d73371f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50269", "type": "seen", "source": "https://t.me/ctinow/166389", "content": "https://ift.tt/rokvIsS\nCVE-2023-50269 | Squid Web Proxy up to 2.7.STABLE9/5.9/6.5 HTTP Request Parser X-Forwarded-For recursion (GHSA-wgq4-4cfg-c4x3)", "creation_timestamp": "2024-01-11T09:26:16.000000Z"}, {"uuid": "c890ca5c-6a32-47a6-b76d-c9fe262182e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50443", "type": "seen", "source": "https://t.me/ctinow/165764", "content": "https://ift.tt/Vvx7wEM\nCVE-2023-50443 | PRIMX CRYHOD prior 2020.4/2023.5 on Windows UNC Reference access control", "creation_timestamp": "2024-01-10T13:07:45.000000Z"}, {"uuid": "ba070668-d126-41bb-a67e-6a03388d1c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50090", "type": "seen", "source": "https://t.me/ctinow/162599", "content": "https://ift.tt/TO5uYPn\nCVE-2023-50090", "creation_timestamp": "2024-01-03T21:27:03.000000Z"}, {"uuid": "16f5e5aa-b8e5-407e-b719-1eb277508536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50870", "type": "seen", "source": "https://t.me/ctinow/166535", "content": "https://ift.tt/zIA90fq\nCVE-2023-50870 | JetBrains TeamCity prior 2023.11.1 Login cross-site request forgery", "creation_timestamp": "2024-01-11T14:27:33.000000Z"}, {"uuid": "8902d450-421d-4cb1-845b-89d777b811ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50020", "type": "seen", "source": "https://t.me/ctinow/162092", "content": "https://ift.tt/nHqurDL\nCVE-2023-50020", "creation_timestamp": "2024-01-02T23:26:53.000000Z"}, {"uuid": "9afd40d0-e881-43a6-8c85-4edfe4b2d582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50019", "type": "seen", "source": "https://t.me/ctinow/162091", "content": "https://ift.tt/uAzjKk4\nCVE-2023-50019", "creation_timestamp": "2024-01-02T23:26:52.000000Z"}, {"uuid": "0aaec817-372a-42b5-a1e5-7b4f25fbea49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50566", "type": "seen", "source": "https://t.me/ctinow/166351", "content": "https://ift.tt/6rmLwkV\nCVE-2023-50566 | EyouCMS 1.6.5-UTF8 Public Security Registration Number cross site scripting (Issue 56)", "creation_timestamp": "2024-01-11T08:21:56.000000Z"}, {"uuid": "738ec212-b3e7-40ea-91f0-4b0668d65114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50011", "type": "seen", "source": "https://t.me/ctinow/166349", "content": "https://ift.tt/SrkJqRQ\nCVE-2023-50011 | PopojiCMS 2.0.1 Meta Social Privilege Escalation (ID 175924)", "creation_timestamp": "2024-01-11T08:21:54.000000Z"}, {"uuid": "cb11a8d8-348b-409f-b393-372ed7f93c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50982", "type": "seen", "source": "https://t.me/ctinow/167470", "content": "https://ift.tt/tJujCrp\nCVE-2023-50982 Exploit", "creation_timestamp": "2024-01-12T19:27:01.000000Z"}, {"uuid": "d702437d-0fd8-4126-9491-ad042ce357dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50711", "type": "seen", "source": "https://t.me/ctinow/162026", "content": "https://ift.tt/8TL1q2A\nCVE-2023-50711", "creation_timestamp": "2024-01-02T21:26:17.000000Z"}, {"uuid": "65dae095-e2a1-43b5-bf33-c3b7d39e2d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50724", "type": "seen", "source": "https://t.me/ctinow/162022", "content": "https://ift.tt/bIapT2d\nCVE-2023-50724 Exploit", "creation_timestamp": "2024-01-02T21:16:38.000000Z"}, {"uuid": "53b0a3d9-85fe-4a77-a82b-1716b1e28906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50121", "type": "seen", "source": "https://t.me/ctinow/167535", "content": "https://ift.tt/BGzw4O7\nCVE-2023-50121 Exploit", "creation_timestamp": "2024-01-12T21:17:26.000000Z"}, {"uuid": "58b5c7ca-795a-4097-a533-5957b07eb879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50430", "type": "seen", "source": "https://t.me/ctinow/161257", "content": "https://ift.tt/9tUKrGB\nCVE-2023-50430 | Goodix Fingerprint Device SDCP improper authentication", "creation_timestamp": "2024-01-01T10:31:25.000000Z"}, {"uuid": "6b1ecb88-99fa-43de-b574-e6493a9f46a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50495", "type": "seen", "source": "https://t.me/ctinow/161788", "content": "https://ift.tt/WP0YfEo\nCVE-2023-50495 | NCurse 6.4-20230418 _nc_wrap_entry memory corruption", "creation_timestamp": "2024-01-02T14:36:31.000000Z"}, {"uuid": "b68f441d-08e2-433c-aa17-c8d751aff993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50585", "type": "seen", "source": "https://t.me/ctinow/167469", "content": "https://ift.tt/fOEGveI\nCVE-2023-50585 Exploit", "creation_timestamp": "2024-01-12T19:27:00.000000Z"}, {"uuid": "644168c1-7c79-4bfd-b8a7-5af77fbafe04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50980", "type": "seen", "source": "https://t.me/ctinow/167135", "content": "https://ift.tt/YnUEOQC\nCVE-2023-50980 | Crypto++ up to 8.9.0 DER gf2n.cpp denial of service (Issue 1248)", "creation_timestamp": "2024-01-12T09:11:34.000000Z"}, {"uuid": "f0037a93-1896-49ca-bbfc-5892ba9a9b63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50981", "type": "seen", "source": "https://t.me/ctinow/167134", "content": "https://ift.tt/3zIWSbj\nCVE-2023-50981 | Crypto++ up to 8.9.0 DER ModularSquareRoot infinite loop (Issue 1249)", "creation_timestamp": "2024-01-12T09:11:33.000000Z"}, {"uuid": "44463be5-2aaf-4cc2-9cfa-9097973604f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50271", "type": "seen", "source": "https://t.me/ctinow/167127", "content": "https://ift.tt/U3AcDXg\nCVE-2023-50271 | HPE System Management Homepage prior A.3.2.23.09 on HP-UX information disclosure", "creation_timestamp": "2024-01-12T08:41:41.000000Z"}, {"uuid": "257945af-873c-4f69-b45e-320b73d0565b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50770", "type": "seen", "source": "https://t.me/ctinow/165793", "content": "https://ift.tt/yhe37q1\nCVE-2023-50770 | OpenId Connect Authentication Plugin up to 2.6 on Jenkins Controller File System information disclosure", "creation_timestamp": "2024-01-10T14:07:07.000000Z"}, {"uuid": "f3bdd758-10b1-47f4-9bf1-08240228dfd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50559", "type": "seen", "source": "https://t.me/ctinow/160735", "content": "https://ift.tt/mTbLpet\nCVE-2023-50559", "creation_timestamp": "2023-12-30T01:26:26.000000Z"}, {"uuid": "4dc2671d-7258-48e4-8828-6c71abb78c74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50071", "type": "seen", "source": "https://t.me/ctinow/160719", "content": "https://ift.tt/RWK6CX9\nCVE-2023-50071", "creation_timestamp": "2023-12-29T23:26:27.000000Z"}, {"uuid": "5fe8f85d-7740-491b-a309-f1c998597021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50070", "type": "seen", "source": "https://t.me/ctinow/160718", "content": "https://ift.tt/MZba5J9\nCVE-2023-50070", "creation_timestamp": "2023-12-29T23:26:26.000000Z"}, {"uuid": "a46303fb-0b1d-4797-ac98-114bc58bda29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50250", "type": "seen", "source": "https://t.me/ctinow/160715", "content": "https://ift.tt/JSPqZ0m\nCVE-2023-50250 Exploit", "creation_timestamp": "2023-12-29T23:16:49.000000Z"}, {"uuid": "46523df3-ad15-4e34-b853-18cdfb6a809c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50708", "type": "seen", "source": "https://t.me/ctinow/167202", "content": "https://ift.tt/SsWxpwi\nCVE-2023-50708 | yii2-authclient up to 2.2.14 OAuth1/OAuth2/OpenID timing discrepancy", "creation_timestamp": "2024-01-12T11:36:31.000000Z"}, {"uuid": "0e08729c-d847-4c45-92c0-ec8ec6f23e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50709", "type": "seen", "source": "https://t.me/ctinow/165848", "content": "https://ift.tt/fEiOAw8\nCVE-2023-50709 | Cube up to 0.34.33 API denial of service (GHSA-9759-3276-g2pm)", "creation_timestamp": "2024-01-10T15:11:50.000000Z"}, {"uuid": "5dc3fcaf-a1a8-4251-be46-7e2616e953f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50779", "type": "seen", "source": "https://t.me/ctinow/165792", "content": "https://ift.tt/CrXTm0w\nCVE-2023-50779 | PaaSLane Estimate Plugin up to 1.0.4 on Jenkins permission", "creation_timestamp": "2024-01-10T14:07:05.000000Z"}, {"uuid": "24a0744a-d291-45d5-b268-b2c5c58431b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50762", "type": "seen", "source": "https://t.me/ctinow/167387", "content": "https://ift.tt/QIXcfUC\nCVE-2023-50762 | Mozilla Thunderbird up to 115.5 PGP/MIME denial of service (DLA 3698-1)", "creation_timestamp": "2024-01-12T17:11:54.000000Z"}, {"uuid": "51f20a3c-3b1d-4c5c-bb1e-61eb7acbf11b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50979", "type": "seen", "source": "https://t.me/ctinow/167137", "content": "https://ift.tt/bhopFPQ\nCVE-2023-50979 | Crypto++ up to 8.9.0 PKCS#1 Padding observable behavioral discrepancy (Issue 1247)", "creation_timestamp": "2024-01-12T09:11:36.000000Z"}, {"uuid": "52a3270f-26ca-407d-b2b7-6ec67bd2e9b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50129", "type": "seen", "source": "https://t.me/ctinow/166883", "content": "https://ift.tt/CoU4tNs\nCVE-2023-50129", "creation_timestamp": "2024-01-11T22:31:45.000000Z"}, {"uuid": "aec42ded-ff81-40ca-989f-3b18b5f86d36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50128", "type": "seen", "source": "https://t.me/ctinow/166882", "content": "https://ift.tt/KfpcGDt\nCVE-2023-50128", "creation_timestamp": "2024-01-11T22:31:44.000000Z"}, {"uuid": "b0d27ee4-474a-4a5b-a7ca-da5b9dd376a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50127", "type": "seen", "source": "https://t.me/ctinow/166881", "content": "https://ift.tt/PMvWRZl\nCVE-2023-50127", "creation_timestamp": "2024-01-11T22:31:43.000000Z"}, {"uuid": "e7ca3ca3-5bdf-4282-b049-405c48f2ee4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50126", "type": "seen", "source": "https://t.me/ctinow/166880", "content": "https://ift.tt/Xq3LvWF\nCVE-2023-50126", "creation_timestamp": "2024-01-11T22:31:42.000000Z"}, {"uuid": "a644735f-974e-449d-b25c-be3b733f5f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50125", "type": "seen", "source": "https://t.me/ctinow/166879", "content": "https://ift.tt/8gv0Jxo\nCVE-2023-50125", "creation_timestamp": "2024-01-11T22:31:41.000000Z"}, {"uuid": "ed117d28-8310-454d-87d1-03d7ed0c226e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50124", "type": "seen", "source": "https://t.me/ctinow/166878", "content": "https://ift.tt/lgHA5uy\nCVE-2023-50124", "creation_timestamp": "2024-01-11T22:31:40.000000Z"}, {"uuid": "f031c7c4-bd59-4a67-8389-16831fcc3dfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50123", "type": "seen", "source": "https://t.me/ctinow/166877", "content": "https://ift.tt/956xVuc\nCVE-2023-50123", "creation_timestamp": "2024-01-11T22:31:39.000000Z"}, {"uuid": "482eabd7-5cbc-4b46-aa0d-c52dc2f0325e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50092", "type": "seen", "source": "https://t.me/ctinow/165418", "content": "https://ift.tt/7wgRcFV\nCVE-2023-50092 Exploit", "creation_timestamp": "2024-01-09T23:17:22.000000Z"}, {"uuid": "e5cbe47e-7a15-451c-b372-83c47b632bf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50376", "type": "seen", "source": "https://t.me/ctinow/167303", "content": "https://ift.tt/Cg7Qvie\nCVE-2023-50376 | smp7 Simple Membership Plugin up to 4.3.8 on WordPress cross site scripting", "creation_timestamp": "2024-01-12T15:11:35.000000Z"}, {"uuid": "cae2d91c-9bd6-41c6-9adc-6335fe136ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50730", "type": "seen", "source": "https://t.me/ctinow/167302", "content": "https://ift.tt/cHl4s0G\nCVE-2023-50730 | graphql/grackle GraphQL Query stack-based overflow", "creation_timestamp": "2024-01-12T15:11:34.000000Z"}, {"uuid": "7347b444-e152-4e8e-b0eb-0e1105dc896f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50249", "type": "seen", "source": "https://t.me/ctinow/167208", "content": "https://ift.tt/xKk47bJ\nCVE-2023-50249 | Sentry Astro prior 7.87.0 redos", "creation_timestamp": "2024-01-12T12:11:26.000000Z"}, {"uuid": "e72a728c-2d75-4d15-8bc3-feb5cc6fc13a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50920", "type": "seen", "source": "https://t.me/ctinow/167150", "content": "https://ift.tt/6wl7dvS\nCVE-2023-50920", "creation_timestamp": "2024-01-12T09:26:43.000000Z"}, {"uuid": "42dff3b6-fab3-494a-bbb0-10a6f80d07c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50919", "type": "seen", "source": "https://t.me/ctinow/167149", "content": "https://ift.tt/y6YehPf\nCVE-2023-50919", "creation_timestamp": "2024-01-12T09:26:42.000000Z"}, {"uuid": "fc87c2c9-a64c-4d7b-a84d-438c62bf9614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50775", "type": "seen", "source": "https://t.me/ctinow/165828", "content": "https://ift.tt/xoZFS75\nCVE-2023-50775 | Deployment Dashboard Plugin up to 1.0.10 on Jenkins Job cross-site request forgery", "creation_timestamp": "2024-01-10T14:36:43.000000Z"}, {"uuid": "03d703ce-4a3b-4eb3-be50-d6477da1b339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50932", "type": "seen", "source": "https://t.me/ctinow/164850", "content": "https://ift.tt/Flwqfh4\nCVE-2023-50932", "creation_timestamp": "2024-01-09T08:26:34.000000Z"}, {"uuid": "c0d84db3-efcf-441c-a9bd-b437b9201ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50931", "type": "seen", "source": "https://t.me/ctinow/164849", "content": "https://ift.tt/nAVDb0q\nCVE-2023-50931", "creation_timestamp": "2024-01-09T08:26:33.000000Z"}, {"uuid": "d838e3ec-2245-44f0-8116-9f84c8c8d6d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50930", "type": "seen", "source": "https://t.me/ctinow/164848", "content": "https://ift.tt/OVC2D0Y\nCVE-2023-50930", "creation_timestamp": "2024-01-09T08:26:32.000000Z"}, {"uuid": "88c8f1a5-095d-4652-9717-0c7eec5dbbbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50727", "type": "seen", "source": "https://t.me/ctinow/167231", "content": "https://ift.tt/7Nx0DzY\nCVE-2023-50727 | resque Gem prior 2.6.0 on Ruby Queue Endpoint cross site scripting", "creation_timestamp": "2024-01-12T13:11:59.000000Z"}, {"uuid": "599b23bb-61b8-41e0-ab8c-8ba3e5afcc92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50725", "type": "seen", "source": "https://t.me/ctinow/167226", "content": "https://ift.tt/KYND39J\nCVE-2023-50725 | resque Gem prior 2.2.1 on Ruby cross site scripting", "creation_timestamp": "2024-01-12T12:46:22.000000Z"}, {"uuid": "0ed1d49b-ae1d-44d8-9224-9412530a0c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50724", "type": "seen", "source": "https://t.me/ctinow/167225", "content": "https://ift.tt/5C84uno\nCVE-2023-50724 | resque Gem prior 2.1.0 on Ruby cross site scripting (ID 1679)", "creation_timestamp": "2024-01-12T12:46:21.000000Z"}, {"uuid": "c6ed053f-2265-45ee-8672-2db79df3cc05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50777", "type": "seen", "source": "https://t.me/ctinow/165789", "content": "https://ift.tt/uG9U18P\nCVE-2023-50777 | PaaSLane Estimate Plugin up to 1.0.4 on Jenkins Job Configuration Form information disclosure", "creation_timestamp": "2024-01-10T14:07:01.000000Z"}, {"uuid": "656becde-06d2-42f6-92cc-870245cf84ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50965", "type": "seen", "source": "https://t.me/ctinow/166903", "content": "https://ift.tt/vmiWD6R\nCVE-2023-50965 | starnight MicroHttpServer up to 4398570 URI lib/middleware.c _ReadStaticFiles stack-based overflow", "creation_timestamp": "2024-01-11T23:22:08.000000Z"}, {"uuid": "7ae65c10-3617-4894-b2ec-2b47fed63b8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50784", "type": "seen", "source": "https://t.me/ctinow/166902", "content": "https://ift.tt/ksutrQD\nCVE-2023-50784 | UnrealIRCd up to 6.1.3 Websocket buffer overflow (FEDORA-2023-41f41fbb69)", "creation_timestamp": "2024-01-11T23:22:07.000000Z"}, {"uuid": "bc79e3f3-92ed-445c-9abc-823a04f1ff84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50159", "type": "seen", "source": "https://t.me/ctinow/166571", "content": "https://ift.tt/1isDCkL\nCVE-2023-50159", "creation_timestamp": "2024-01-11T15:52:04.000000Z"}, {"uuid": "c130a694-c063-4814-9103-a3b75c1b3e13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50255", "type": "seen", "source": "https://t.me/ctinow/159723", "content": "https://ift.tt/st4x51R\nCVE-2023-50255", "creation_timestamp": "2023-12-27T18:26:13.000000Z"}, {"uuid": "cf6ec787-4b76-4cc1-8dea-c58c45021c5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50472", "type": "seen", "source": "https://t.me/ctinow/166455", "content": "https://ift.tt/vOLs28w\nCVE-2023-50472 | cJSON 1.7.16 cJSON.c cJSON_SetValuestring memory corruption (Issue 803)", "creation_timestamp": "2024-01-11T11:27:07.000000Z"}, {"uuid": "db938239-f071-4379-9c0d-50fbc14c34c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50089", "type": "seen", "source": "https://t.me/ctinow/166658", "content": "https://ift.tt/ZRVayXx\nCVE-2023-50089 | Netgear WNR2000v4 1.0.0.70 HTTP for SOAP Authentication command injection", "creation_timestamp": "2024-01-11T17:37:00.000000Z"}, {"uuid": "80a11ad0-f6da-49f0-8c9a-ec5ef81dc87c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50027", "type": "seen", "source": "https://t.me/ctinow/166652", "content": "https://ift.tt/HroBcfV\nCVE-2023-50027 Exploit", "creation_timestamp": "2024-01-11T17:17:10.000000Z"}, {"uuid": "933d67f1-1f88-49d8-9ac9-b2ce218abd81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50471", "type": "seen", "source": "https://t.me/ctinow/166454", "content": "https://ift.tt/ShsXpFr\nCVE-2023-50471 | cJSON 1.7.16 cJSON.c cJSON_InsertItemInArray memory corruption (Issue 802)", "creation_timestamp": "2024-01-11T11:27:06.000000Z"}, {"uuid": "e6eed99e-1c91-46aa-aad8-b14a7f56d425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50710", "type": "seen", "source": "https://t.me/ctinow/166409", "content": "https://ift.tt/dDjHJCy\nCVE-2023-50710 | honojs hono up to 3.11.6 path code injection", "creation_timestamp": "2024-01-11T09:56:33.000000Z"}, {"uuid": "50aacc5c-5bfb-41fa-8159-219f6b2712b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50630", "type": "seen", "source": "https://t.me/ctinow/166067", "content": "https://ift.tt/mVfqS0g\nCVE-2023-50630 Exploit", "creation_timestamp": "2024-01-10T19:17:06.000000Z"}, {"uuid": "86163cdf-29a0-4d1a-bcf5-34d9bb0674be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50429", "type": "seen", "source": "https://t.me/ctinow/161255", "content": "https://ift.tt/kChl8sE\nCVE-2023-50429 | IzyBat Orange Casiers prior 20230803_1 getEnsemble.php sql injection (GHSA-mc3w-rv8p-f9xf)", "creation_timestamp": "2024-01-01T09:56:37.000000Z"}, {"uuid": "20b440da-64f3-4538-83ee-ad151c9bec89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50428", "type": "seen", "source": "https://t.me/ctinow/161254", "content": "https://ift.tt/KjSmiDR\nCVE-2023-50428 | Bitcoin Core/Knots Datacarrier Size Limit access control", "creation_timestamp": "2024-01-01T09:56:36.000000Z"}, {"uuid": "22dc6753-66a0-469a-9817-7f52f6a53811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50044", "type": "seen", "source": "https://t.me/ctinow/160232", "content": "https://ift.tt/p6erDnB\nCVE-2023-50044 Exploit", "creation_timestamp": "2023-12-28T23:16:42.000000Z"}, {"uuid": "e13e388a-c055-4eb3-9bf8-e68abc948b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50035", "type": "seen", "source": "https://t.me/ctinow/160698", "content": "https://ift.tt/yVdgNuS\nCVE-2023-50035", "creation_timestamp": "2023-12-29T22:26:53.000000Z"}, {"uuid": "4a5a2f33-e7b6-4709-a2ff-5ee84085ad30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50102", "type": "seen", "source": "https://t.me/ctinow/166375", "content": "https://ift.tt/PXGFNSn\nCVE-2023-50102 | JFinalcms 5.0.0 cross site scripting", "creation_timestamp": "2024-01-11T08:57:06.000000Z"}, {"uuid": "06833a9c-439a-435e-9055-abbfd6c6d424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50465", "type": "seen", "source": "https://t.me/ctinow/161295", "content": "https://ift.tt/jkO6MTG\nCVE-2023-50465 | Monica 4.0.0 SVG Document cross site scripting", "creation_timestamp": "2024-01-01T12:36:49.000000Z"}, {"uuid": "1c9d0480-2a5c-4fb3-bdd3-c9a4729ce656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50776", "type": "seen", "source": "https://t.me/ctinow/165783", "content": "https://ift.tt/boDdO41\nCVE-2023-50776 | PaaSLane Estimate Plugin up to 1.0.4 on Jenkins Controller File System information disclosure", "creation_timestamp": "2024-01-10T13:37:28.000000Z"}, {"uuid": "f2303f78-0a41-4ff4-a19c-dec111f30b87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50773", "type": "seen", "source": "https://t.me/ctinow/165782", "content": "https://ift.tt/yrRktgf\nCVE-2023-50773 | Dingding JSON Pusher Plugin up to 2.0 on Jenkins Job Configuration Form information disclosure", "creation_timestamp": "2024-01-10T13:37:27.000000Z"}, {"uuid": "f150e00e-c5b9-4585-a3c4-cbf4fc704383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50424", "type": "seen", "source": "https://t.me/ctinow/161382", "content": "https://ift.tt/qBkI4AM\nCVE-2023-50424 | SAP cloud-security-client-go up to 0.16.x authorization (GHSA-59c9-pxq8-9c73)", "creation_timestamp": "2024-01-01T17:07:17.000000Z"}, {"uuid": "a0e7a2a6-523d-48da-9e37-265f97447a66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50980", "type": "seen", "source": "https://t.me/ctinow/159812", "content": "https://ift.tt/ha9VBpj\nCVE-2023-50980 Exploit", "creation_timestamp": "2023-12-27T23:17:08.000000Z"}, {"uuid": "8b88c8ed-3738-43c4-b975-9bff8796966a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50172", "type": "seen", "source": "https://t.me/ctinow/165994", "content": "https://ift.tt/KdBYLbA\nCVE-2023-50172", "creation_timestamp": "2024-01-10T17:22:34.000000Z"}, {"uuid": "692d46e7-51af-4617-a61e-04e6f12bf745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50441", "type": "seen", "source": "https://t.me/ctinow/165749", "content": "https://ift.tt/gijwK2e\nCVE-2023-50441 | PRIMX ZONECENTRAL prior 2021.2/2023.5 on Windows UNC Reference access control", "creation_timestamp": "2024-01-10T12:41:32.000000Z"}, {"uuid": "40dc9d7c-bf48-4654-8139-97208793e129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50096", "type": "seen", "source": "https://t.me/ctinow/165369", "content": "https://ift.tt/OdhES5C\nCVE-2023-50096 Exploit", "creation_timestamp": "2024-01-09T21:16:37.000000Z"}, {"uuid": "5e44af84-c7f6-4af2-9f82-486b6fc51fa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50256", "type": "seen", "source": "https://t.me/ctinow/166198", "content": "https://ift.tt/CbD8F5k\nCVE-2023-50256 Exploit", "creation_timestamp": "2024-01-10T23:16:42.000000Z"}, {"uuid": "04a3b105-7a54-4d2d-b38d-c9d861698513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50916", "type": "seen", "source": "https://t.me/ctinow/166104", "content": "https://ift.tt/lkE9264\nCVE-2023-50916", "creation_timestamp": "2024-01-10T20:29:03.000000Z"}, {"uuid": "c9f57a95-6c36-47ce-aa8b-b29a1bb3b33d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50370", "type": "seen", "source": "https://t.me/ctinow/166087", "content": "https://ift.tt/M8NCIDt\nCVE-2023-50370 | Livemesh WPBakery Page Builder Addons Plugin up to 3.5 on WordPress cross site scripting", "creation_timestamp": "2024-01-10T19:46:38.000000Z"}, {"uuid": "fd3ede31-4a04-46c9-8e4d-e11f3eed90d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50922", "type": "seen", "source": "https://t.me/ctinow/165971", "content": "https://ift.tt/gmRzsh5\nCVE-2023-50922 Exploit", "creation_timestamp": "2024-01-10T17:17:39.000000Z"}, {"uuid": "22e10c5a-c0e7-4cad-8ccb-fea5d85cd574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50371", "type": "seen", "source": "https://t.me/ctinow/166031", "content": "https://ift.tt/76bWSIq\nCVE-2023-50371 | Page Visit Counter Plugin up to 8.0.6 on WordPress cross site scripting", "creation_timestamp": "2024-01-10T18:11:59.000000Z"}, {"uuid": "1853f043-d03e-49f8-a2fd-342e7c85d959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50772", "type": "seen", "source": "https://t.me/ctinow/165781", "content": "https://ift.tt/LKHxrDC\nCVE-2023-50772 | Dingding JSON Pusher Plugin up to 2.0 on Jenkins Controller File System permission", "creation_timestamp": "2024-01-10T13:37:26.000000Z"}, {"uuid": "3c8d6479-456c-476a-85c0-15a8e90b5563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50769", "type": "seen", "source": "https://t.me/ctinow/165780", "content": "https://ift.tt/eW2fj7t\nCVE-2023-50769 | Nexus Platform Plugin up to 3.18.0-03 on Jenkins permission", "creation_timestamp": "2024-01-10T13:37:25.000000Z"}, {"uuid": "eb57341e-e7ba-469d-a892-1bc26e78719f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50771", "type": "seen", "source": "https://t.me/ctinow/165779", "content": "https://ift.tt/csW2Fv6\nCVE-2023-50771 | OpenId Connect Authentication Plugin up to 2.6 on Jenkins redirect", "creation_timestamp": "2024-01-10T13:37:24.000000Z"}, {"uuid": "7e5a1220-df47-46e3-b5cc-075f799fe5ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50752", "type": "seen", "source": "https://t.me/ctinow/165599", "content": "https://ift.tt/POqC9Fe\nCVE-2023-50752 Exploit", "creation_timestamp": "2024-01-10T08:16:16.000000Z"}, {"uuid": "7ce4bb4d-b262-4e1b-a33e-e20c12f43473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50753", "type": "seen", "source": "https://t.me/ctinow/165598", "content": "https://ift.tt/PCcmoEV\nCVE-2023-50753 Exploit", "creation_timestamp": "2024-01-10T08:16:15.000000Z"}, {"uuid": "e908932a-d04a-4fd5-b0fe-4138f3666aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50569", "type": "seen", "source": "https://t.me/ctinow/160492", "content": "https://ift.tt/OFod3RU\nCVE-2023-50569 Exploit", "creation_timestamp": "2023-12-29T13:16:43.000000Z"}, {"uuid": "9c339b5c-67cd-4300-b9b2-36f0cb1a3aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50855", "type": "seen", "source": "https://t.me/ctinow/160048", "content": "https://ift.tt/6bPFIe2\nCVE-2023-50855", "creation_timestamp": "2023-12-28T13:26:54.000000Z"}, {"uuid": "e9a405b0-fcbf-43c4-b15a-f41414b01d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50836", "type": "seen", "source": "https://t.me/ctinow/160013", "content": "https://ift.tt/zGFcXVZ\nCVE-2023-50836", "creation_timestamp": "2023-12-28T12:26:43.000000Z"}, {"uuid": "aca9ce70-6664-43e5-9584-9834345d985f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50874", "type": "seen", "source": "https://t.me/ctinow/159999", "content": "https://ift.tt/OAvVhTk\nCVE-2023-50874", "creation_timestamp": "2023-12-28T11:26:39.000000Z"}, {"uuid": "722f2649-8c6b-434a-951b-6817646959e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50038", "type": "seen", "source": "https://t.me/ctinow/159961", "content": "https://ift.tt/AD0HSnp\nCVE-2023-50038", "creation_timestamp": "2023-12-28T08:26:11.000000Z"}, {"uuid": "84d86f2b-1881-4077-bf65-ec3a6499ddfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50692", "type": "seen", "source": "https://t.me/ctinow/159953", "content": "https://ift.tt/CBypYVJ\nCVE-2023-50692", "creation_timestamp": "2023-12-28T07:26:27.000000Z"}, {"uuid": "47d5645b-0714-46a7-b0f9-d2590e56ac56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50774", "type": "seen", "source": "https://t.me/ctinow/165831", "content": "https://ift.tt/kWMbVsK\nCVE-2023-50774 | HTMLResource Plugin up to 1.02 on Jenkins Controller File System cross-site request forgery", "creation_timestamp": "2024-01-10T14:36:46.000000Z"}, {"uuid": "f2dedf38-7b2d-44ba-a1a2-7f9ee2c883df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50778", "type": "seen", "source": "https://t.me/ctinow/165830", "content": "https://ift.tt/VGv8XUx\nCVE-2023-50778 | PaaSLane Estimate Plugin up to 1.0.4 on Jenkins cross-site request forgery", "creation_timestamp": "2024-01-10T14:36:45.000000Z"}, {"uuid": "0d470da5-1f64-4215-9eb8-1cc2275e72dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50768", "type": "seen", "source": "https://t.me/ctinow/165829", "content": "https://ift.tt/MsEIPe2\nCVE-2023-50768 | Nexus Platform Plugin up to 3.18.0-03 on Jenkins cross-site request forgery", "creation_timestamp": "2024-01-10T14:36:44.000000Z"}, {"uuid": "4d58f128-3285-414e-a824-ed7c4708af34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50110", "type": "seen", "source": "https://t.me/ctinow/163733", "content": "https://ift.tt/Gx6PrZL\nCVE-2023-50110 Exploit", "creation_timestamp": "2024-01-05T22:16:36.000000Z"}, {"uuid": "e9ad727c-572f-4f3f-aa67-0b5edb2bb73b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50442", "type": "seen", "source": "https://t.me/ctinow/165791", "content": "https://ift.tt/DzbY0C8\nCVE-2023-50442 | PRIMX ZONECENTRAL up to 2023.5 cleartext storage", "creation_timestamp": "2024-01-10T14:07:04.000000Z"}, {"uuid": "c98be0fc-69fb-47dc-8fbb-311d05661b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50457", "type": "seen", "source": "https://t.me/ctinow/161274", "content": "https://ift.tt/Timd8ax\nCVE-2023-50457 | Zammad up to 6.1.x Ticket Listing permission", "creation_timestamp": "2024-01-01T11:31:48.000000Z"}, {"uuid": "1df81760-edf5-48c1-b16f-3b3b16d12342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50454", "type": "seen", "source": "https://t.me/ctinow/161273", "content": "https://ift.tt/xRiCkcd\nCVE-2023-50454 | Zammad up to 6.1.x SSL/TLS certificate validation", "creation_timestamp": "2024-01-01T11:31:47.000000Z"}, {"uuid": "60ef47e5-7c83-444b-91fe-fcd482844532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50372", "type": "seen", "source": "https://t.me/ctinow/161252", "content": "https://ift.tt/2kvKcmS\nCVE-2023-50372 | Custom Post Type Page Template Plugin up to 1.1 on WordPress cross-site request forgery", "creation_timestamp": "2024-01-01T09:56:33.000000Z"}, {"uuid": "55fb72ad-6c6b-4868-8c42-e16b4d6721d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50589", "type": "seen", "source": "https://t.me/ctinow/160940", "content": "https://ift.tt/4CvZmiu\nCVE-2023-50589", "creation_timestamp": "2023-12-30T18:26:15.000000Z"}, {"uuid": "68e84da4-58c4-41fc-9ec3-8405b0038ac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50093", "type": "seen", "source": "https://t.me/ctinow/165419", "content": "https://ift.tt/HLUmYoE\nCVE-2023-50093 Exploit", "creation_timestamp": "2024-01-09T23:17:23.000000Z"}, {"uuid": "0672d9b6-3e39-408a-8e18-d8b966a6c47c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5011", "type": "seen", "source": "https://t.me/ctinow/159489", "content": "https://ift.tt/10vWYJB\nCVE-2023-5011 Exploit", "creation_timestamp": "2023-12-27T01:17:08.000000Z"}, {"uuid": "5f9ca7e5-ded9-4245-8ce5-353e3ef095cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50901", "type": "seen", "source": "https://t.me/ctinow/160454", "content": "https://ift.tt/ptFJIUY\nCVE-2023-50901", "creation_timestamp": "2023-12-29T12:26:34.000000Z"}, {"uuid": "c58bd5e1-a4ff-4b92-bb70-3b0735e04c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50896", "type": "seen", "source": "https://t.me/ctinow/160453", "content": "https://ift.tt/aAo0xe7\nCVE-2023-50896", "creation_timestamp": "2023-12-29T12:26:33.000000Z"}, {"uuid": "4a696377-6cb9-4d98-b983-bdd1d9c5ac39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50991", "type": "seen", "source": "https://t.me/ctinow/165244", "content": "https://ift.tt/iG3YpdP\nCVE-2023-50991 Exploit", "creation_timestamp": "2024-01-09T19:16:28.000000Z"}, {"uuid": "178d3d44-8a9c-4495-a6a2-464c3b44fb0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50333", "type": "seen", "source": "https://t.me/ctinow/161684", "content": "https://ift.tt/wDHILyk\nCVE-2023-50333", "creation_timestamp": "2024-01-02T11:26:28.000000Z"}, {"uuid": "9245f3fd-72f0-4a89-8aea-82d6f464afaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50841", "type": "seen", "source": "https://t.me/ctinow/160171", "content": "https://ift.tt/KupHR3Z\nCVE-2023-50841", "creation_timestamp": "2023-12-28T20:26:46.000000Z"}, {"uuid": "bb38548b-8a02-4881-88b1-431db57e0025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50578", "type": "seen", "source": "https://t.me/ctinow/160919", "content": "https://ift.tt/z035K2D\nCVE-2023-50578", "creation_timestamp": "2023-12-30T17:26:47.000000Z"}, {"uuid": "aaf99444-5e97-4fa9-a2af-a4a2ab0dd6b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50550", "type": "seen", "source": "https://t.me/ctinow/160918", "content": "https://ift.tt/0mbjUf8\nCVE-2023-50550", "creation_timestamp": "2023-12-30T17:26:46.000000Z"}, {"uuid": "01d3445a-f401-460c-8c12-d13b427ca890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/ctinow/159535", "content": "https://ift.tt/zDO8qp3\nYet Another Apache Struts 2 Vulnerability \u2013 CVE-2023-50164", "creation_timestamp": "2023-12-27T07:02:37.000000Z"}, {"uuid": "3bf2232d-8370-4ff5-9671-1e265aa00049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5007", "type": "seen", "source": "https://t.me/ctinow/159491", "content": "https://ift.tt/ufAYTrx\nCVE-2023-5007 Exploit", "creation_timestamp": "2023-12-27T01:17:11.000000Z"}, {"uuid": "c6149041-7149-4e06-832c-7b6698afe7c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5010", "type": "seen", "source": "https://t.me/ctinow/159490", "content": "https://ift.tt/4IFOqP0\nCVE-2023-5010 Exploit", "creation_timestamp": "2023-12-27T01:17:10.000000Z"}, {"uuid": "2d3ef477-2f05-4cf9-ab87-93e228d5f8f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50823", "type": "seen", "source": "https://t.me/ctinow/157797", "content": "https://ift.tt/kdr3EFz\nCVE-2023-50823", "creation_timestamp": "2023-12-21T16:28:08.000000Z"}, {"uuid": "d4d4466a-3614-484b-a311-3584b15a3a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50643", "type": "seen", "source": "https://t.me/ctinow/164750", "content": "https://ift.tt/nBlwcpi\nCVE-2023-50643", "creation_timestamp": "2024-01-09T02:26:24.000000Z"}, {"uuid": "935f9060-499f-4d61-8512-11995ef62976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50096", "type": "seen", "source": "https://t.me/ctinow/161398", "content": "https://ift.tt/1W3Plez\nCVE-2023-50096", "creation_timestamp": "2024-01-01T19:26:44.000000Z"}, {"uuid": "c7aa01da-ab5a-4575-a218-fb03420a7acc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50094", "type": "seen", "source": "https://t.me/ctinow/161397", "content": "https://ift.tt/yQqzlSD\nCVE-2023-50094", "creation_timestamp": "2024-01-01T19:26:43.000000Z"}, {"uuid": "8c10c5d9-390c-43ee-b2ac-9cfe9cc063d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50651", "type": "seen", "source": "https://t.me/ctinow/160941", "content": "https://ift.tt/k8JgVoX\nCVE-2023-50651", "creation_timestamp": "2023-12-30T18:26:16.000000Z"}, {"uuid": "b487a83e-4e05-4331-adbe-41d0907f5751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50110", "type": "seen", "source": "https://t.me/ctinow/160939", "content": "https://ift.tt/L0YlBKg\nCVE-2023-50110", "creation_timestamp": "2023-12-30T18:26:13.000000Z"}, {"uuid": "d4d09c98-0ba8-46ee-8939-5650800c0986", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/ctinow/160887", "content": "https://ift.tt/gajzCs2\nCVE-2023-50164 | Apache Struts up to 2.5.32/6.3.0.1 File Upload file access (ID 176157)", "creation_timestamp": "2023-12-30T15:01:57.000000Z"}, {"uuid": "bb8b16d8-afb6-4946-afb1-6f5236852af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50449", "type": "seen", "source": "https://t.me/ctinow/161281", "content": "https://ift.tt/LAgwK4n\nCVE-2023-50449 | JFinalCMS 5.0.0 /common/down/file fileKey path traversal", "creation_timestamp": "2024-01-01T12:02:08.000000Z"}, {"uuid": "cdc68d98-c87f-4a7a-9bb8-61e7c9142db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50456", "type": "seen", "source": "https://t.me/ctinow/161272", "content": "https://ift.tt/0rcC4kV\nCVE-2023-50456 | Zammad up to 6.1.x Notification unknown vulnerability", "creation_timestamp": "2024-01-01T11:31:46.000000Z"}, {"uuid": "dfc8d2c0-f2b2-442e-90de-42036ba18dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50463", "type": "seen", "source": "https://t.me/ctinow/161271", "content": "https://ift.tt/Wum7513\nCVE-2023-50463 | caddy-geo-ip up to 0.6.0 Header X-Forwarded-For protection mechanism", "creation_timestamp": "2024-01-01T11:31:45.000000Z"}, {"uuid": "d4d52e3e-5861-4c37-b07e-881cc00e4c52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50422", "type": "seen", "source": "https://t.me/ctinow/161386", "content": "https://ift.tt/QsnFqi8\nCVE-2023-50422 | SAP cloud-security-services-integration-library up to 2.16.x/3.2.x authorization (GHSA-59c9-pxq8-9c73)", "creation_timestamp": "2024-01-01T17:41:37.000000Z"}, {"uuid": "3832fb53-b662-4097-84db-9ff6089ef5bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50297", "type": "seen", "source": "https://t.me/ctinow/159267", "content": "https://ift.tt/jxBXy41\nCVE-2023-50297", "creation_timestamp": "2023-12-26T07:26:49.000000Z"}, {"uuid": "d3d0ba21-8dbf-4f54-a5da-8badf116e251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50423", "type": "seen", "source": "https://t.me/ctinow/161322", "content": "https://ift.tt/1k6Iqiz\nCVE-2023-50423 | SAP sap-xssec up to 4.0.0 authorization (GHSA-6mjg-37cp-42x5)", "creation_timestamp": "2024-01-01T15:06:54.000000Z"}, {"uuid": "2123c4af-a17b-41cf-b870-a313427f1f41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50369", "type": "seen", "source": "https://t.me/ctinow/161250", "content": "https://ift.tt/3xvSK2F\nCVE-2023-50369 | Alma Plugin up to 5.1.3 on WordPress cross site scripting", "creation_timestamp": "2024-01-01T09:56:31.000000Z"}, {"uuid": "fcc71552-f03e-46de-936e-b86ce42900d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50446", "type": "seen", "source": "https://t.me/ctinow/161293", "content": "https://ift.tt/EsfUBK8\nCVE-2023-50446 | Mullvad VPN App prior 2023.6-beta1 on Windows permission", "creation_timestamp": "2024-01-01T12:36:47.000000Z"}, {"uuid": "69051916-f66c-422b-a941-9036c0b76f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50431", "type": "seen", "source": "https://t.me/ctinow/161259", "content": "https://ift.tt/0P3ZztD\nCVE-2023-50431 | Linux Kernel up to 6.6.5 habanalabs_ioctl.c sec_attest_info information disclosure", "creation_timestamp": "2024-01-01T10:31:28.000000Z"}, {"uuid": "6a519028-0912-40fe-8023-13e98502f5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50475", "type": "seen", "source": "https://t.me/ctinow/160656", "content": "https://ift.tt/0jW8Uci\nCVE-2023-50475 Exploit", "creation_timestamp": "2023-12-29T19:16:49.000000Z"}, {"uuid": "8b6ceb56-599a-4920-af24-629b479448c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50453", "type": "seen", "source": "https://t.me/ctinow/161268", "content": "https://ift.tt/mXryMh6\nCVE-2023-50453 | Zammad up to 6.1.x Login Screen /api/v1/signshow information disclosure", "creation_timestamp": "2024-01-01T11:01:53.000000Z"}, {"uuid": "f48bca13-4350-4d53-b789-020a40cddce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50455", "type": "seen", "source": "https://t.me/ctinow/161267", "content": "https://ift.tt/g1urPvT\nCVE-2023-50455 | Zammad up to 6.1.x Email Address Verification denial of service", "creation_timestamp": "2024-01-01T11:01:52.000000Z"}, {"uuid": "7c1f7d4b-e1dc-4344-8cf8-6b379fff261d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5058", "type": "seen", "source": "https://t.me/ctinow/161038", "content": "https://ift.tt/a7W9fQU\nCVE-2023-5058 | Phoenix SecureCore Technology 4 4.0 User-supplied Splash Screen input validation", "creation_timestamp": "2023-12-31T09:46:32.000000Z"}, {"uuid": "3b411fcd-5b76-4491-83a0-bfdca4ce0110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50069", "type": "seen", "source": "https://t.me/ctinow/160699", "content": "https://ift.tt/mO1ku3h\nCVE-2023-50069", "creation_timestamp": "2023-12-29T22:26:54.000000Z"}, {"uuid": "1d5db2b7-3bc9-4f6f-b79f-0ffae648aa58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50002", "type": "seen", "source": "https://t.me/ctinow/161001", "content": "https://ift.tt/jsB2fX1\nCVE-2023-50002 | Tenda W30E 16.01.0.12(4843) formRebootMeshNode stack-based overflow", "creation_timestamp": "2023-12-31T08:16:25.000000Z"}, {"uuid": "d4b0933d-b497-41a3-9394-353e92dec886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50001", "type": "seen", "source": "https://t.me/ctinow/160999", "content": "https://ift.tt/UrX2xYA\nCVE-2023-50001 | Tenda W30E 16.01.0.12(4843) formUpgradeMeshOnline stack-based overflow", "creation_timestamp": "2023-12-31T07:46:40.000000Z"}, {"uuid": "fd85d841-7378-4541-a124-e2cb38bd4fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50000", "type": "seen", "source": "https://t.me/ctinow/160998", "content": "https://ift.tt/nqfjXBU\nCVE-2023-50000 | Tenda W30E 16.01.0.12(4843) formResetMeshNode stack-based overflow", "creation_timestamp": "2023-12-31T07:46:38.000000Z"}, {"uuid": "cb25b6a6-00f6-4885-8e92-f948c17f7adf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50854", "type": "seen", "source": "https://t.me/ctinow/160047", "content": "https://ift.tt/jqBODtn\nCVE-2023-50854", "creation_timestamp": "2023-12-28T13:26:53.000000Z"}, {"uuid": "a8750f81-9d42-4a59-97a7-f4e3770912e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50853", "type": "seen", "source": "https://t.me/ctinow/160046", "content": "https://ift.tt/4Lq1jsA\nCVE-2023-50853", "creation_timestamp": "2023-12-28T13:26:52.000000Z"}, {"uuid": "7e2aff94-300c-4b10-8ff9-3de94fe097a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50852", "type": "seen", "source": "https://t.me/ctinow/160045", "content": "https://ift.tt/3XID04K\nCVE-2023-50852", "creation_timestamp": "2023-12-28T13:26:51.000000Z"}, {"uuid": "5d73dbd1-2660-4c3c-b872-55b793f9c07e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50847", "type": "seen", "source": "https://t.me/ctinow/160177", "content": "https://ift.tt/RAX097v\nCVE-2023-50847", "creation_timestamp": "2023-12-28T20:26:52.000000Z"}, {"uuid": "410841bf-9abc-474a-a2cf-4c17c617057b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50846", "type": "seen", "source": "https://t.me/ctinow/160176", "content": "https://ift.tt/CquHyA4\nCVE-2023-50846", "creation_timestamp": "2023-12-28T20:26:51.000000Z"}, {"uuid": "c19bb541-29db-43c3-8f9c-7dd4f6fa2190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50845", "type": "seen", "source": "https://t.me/ctinow/160175", "content": "https://ift.tt/i8R6kWd\nCVE-2023-50845", "creation_timestamp": "2023-12-28T20:26:50.000000Z"}, {"uuid": "ec2f7c11-91b8-4f2c-ac11-284c55a08b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50844", "type": "seen", "source": "https://t.me/ctinow/160174", "content": "https://ift.tt/hVCuskm\nCVE-2023-50844", "creation_timestamp": "2023-12-28T20:26:49.000000Z"}, {"uuid": "0c0c8e24-cca3-43b9-9298-7a8aaa961e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50849", "type": "seen", "source": "https://t.me/ctinow/160043", "content": "https://ift.tt/qNKzQET\nCVE-2023-50849", "creation_timestamp": "2023-12-28T13:26:49.000000Z"}, {"uuid": "a56f9f9f-b080-4a0c-a9f1-144d3a06e0fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50848", "type": "seen", "source": "https://t.me/ctinow/160042", "content": "https://ift.tt/oRvlFTi\nCVE-2023-50848", "creation_timestamp": "2023-12-28T13:26:48.000000Z"}, {"uuid": "fd64a2b6-0a3e-44db-98df-e285cff2182e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50715", "type": "seen", "source": "https://t.me/ctinow/159781", "content": "https://ift.tt/LTY64ky\nCVE-2023-50715 Exploit", "creation_timestamp": "2023-12-27T21:16:43.000000Z"}, {"uuid": "9ab28cd5-0b7a-4bff-aaab-09b9277ff49f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50589", "type": "seen", "source": "https://t.me/ctinow/163732", "content": "https://ift.tt/ZKfHEIC\nCVE-2023-50589 Exploit", "creation_timestamp": "2024-01-05T22:16:34.000000Z"}, {"uuid": "27ea1b6e-d2d7-4ad0-aca0-a83d5dfa5949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50651", "type": "seen", "source": "https://t.me/ctinow/163731", "content": "https://ift.tt/8RYCMpc\nCVE-2023-50651 Exploit", "creation_timestamp": "2024-01-05T22:16:33.000000Z"}, {"uuid": "9742bcca-8f63-47f2-8e26-1167a81ec56b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50727", "type": "seen", "source": "https://t.me/ctinow/158632", "content": "https://ift.tt/CAQfrmw\nCVE-2023-50727", "creation_timestamp": "2023-12-22T22:22:06.000000Z"}, {"uuid": "69beda75-2e17-4e4e-a9b7-077a180e467d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50725", "type": "seen", "source": "https://t.me/ctinow/158626", "content": "https://ift.tt/TKc5wC0\nCVE-2023-50725", "creation_timestamp": "2023-12-22T21:27:51.000000Z"}, {"uuid": "2ebc1ca1-adda-4b57-bc3c-9477ce978507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50714", "type": "seen", "source": "https://t.me/ctinow/158588", "content": "https://ift.tt/Sd7X9TD\nCVE-2023-50714", "creation_timestamp": "2023-12-22T20:24:44.000000Z"}, {"uuid": "c2203861-b7aa-4dd2-b681-d683dc1bfe25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50893", "type": "seen", "source": "https://t.me/ctinow/160507", "content": "https://ift.tt/ipWn2bB\nCVE-2023-50893", "creation_timestamp": "2023-12-29T13:27:13.000000Z"}, {"uuid": "9ac8800c-f693-487e-bcff-cf7c03287f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50892", "type": "seen", "source": "https://t.me/ctinow/160506", "content": "https://ift.tt/CLbUPMJ\nCVE-2023-50892", "creation_timestamp": "2023-12-29T13:27:12.000000Z"}, {"uuid": "182289b2-00f2-4722-b8c2-ba1d07625151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50891", "type": "seen", "source": "https://t.me/ctinow/160505", "content": "https://ift.tt/9CzUNlE\nCVE-2023-50891", "creation_timestamp": "2023-12-29T13:27:11.000000Z"}, {"uuid": "61812492-6a73-422c-b190-7bc635a54981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50889", "type": "seen", "source": "https://t.me/ctinow/160504", "content": "https://ift.tt/Bmsn3yu\nCVE-2023-50889", "creation_timestamp": "2023-12-29T13:27:10.000000Z"}, {"uuid": "fedd5c4a-baf8-4968-b3c6-64daaf0f89de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50881", "type": "seen", "source": "https://t.me/ctinow/160503", "content": "https://ift.tt/2WoQm1b\nCVE-2023-50881", "creation_timestamp": "2023-12-29T13:27:09.000000Z"}, {"uuid": "5e9b6482-9535-4b5b-8326-ba8e6eb66c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50880", "type": "seen", "source": "https://t.me/ctinow/160502", "content": "https://ift.tt/7ajZUrQ\nCVE-2023-50880", "creation_timestamp": "2023-12-29T13:27:08.000000Z"}, {"uuid": "bb36fab9-58c7-4b7c-ae9b-2f1d03fc5c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50879", "type": "seen", "source": "https://t.me/ctinow/160501", "content": "https://ift.tt/YkfwK4n\nCVE-2023-50879", "creation_timestamp": "2023-12-29T13:27:06.000000Z"}, {"uuid": "e75d8104-d143-4a3e-ada7-da4cced7f99e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50837", "type": "seen", "source": "https://t.me/ctinow/160500", "content": "https://ift.tt/A9nWHvI\nCVE-2023-50837", "creation_timestamp": "2023-12-29T13:27:05.000000Z"}, {"uuid": "b69d3c9a-1512-4b20-b86a-5ec30a1088ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50832", "type": "seen", "source": "https://t.me/ctinow/160782", "content": "https://ift.tt/DgFq2Wd\nCVE-2023-50832 Exploit", "creation_timestamp": "2023-12-30T08:16:10.000000Z"}, {"uuid": "205691b1-448a-4274-888a-a11ce3306d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50572", "type": "seen", "source": "https://t.me/ctinow/160575", "content": "https://ift.tt/izD6G4g\nCVE-2023-50572", "creation_timestamp": "2023-12-29T16:26:42.000000Z"}, {"uuid": "4c5b0178-9d59-44e1-b9c4-cebeeb7b7490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50571", "type": "seen", "source": "https://t.me/ctinow/160574", "content": "https://ift.tt/PySFN7Q\nCVE-2023-50571", "creation_timestamp": "2023-12-29T16:26:41.000000Z"}, {"uuid": "9133dc5e-e9f1-4b5e-9bf4-8533624ebdd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50570", "type": "seen", "source": "https://t.me/ctinow/160573", "content": "https://ift.tt/T9VnSgM\nCVE-2023-50570", "creation_timestamp": "2023-12-29T16:26:40.000000Z"}, {"uuid": "9032a896-a31e-45de-9d99-7d9211383ca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50843", "type": "seen", "source": "https://t.me/ctinow/160173", "content": "https://ift.tt/aKXR04d\nCVE-2023-50843", "creation_timestamp": "2023-12-28T20:26:48.000000Z"}, {"uuid": "ec520290-c919-4b06-8c8b-c184406e2500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50902", "type": "seen", "source": "https://t.me/ctinow/160529", "content": "https://ift.tt/475rdpy\nCVE-2023-50902", "creation_timestamp": "2023-12-29T14:26:33.000000Z"}, {"uuid": "410ec402-3978-44b9-907d-cbef9faf0ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50878", "type": "seen", "source": "https://t.me/ctinow/160528", "content": "https://ift.tt/N6XGAeR\nCVE-2023-50878", "creation_timestamp": "2023-12-29T14:26:33.000000Z"}, {"uuid": "39c26eb8-079d-4438-ac74-6611081ecac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50981", "type": "seen", "source": "https://t.me/ctinow/159813", "content": "https://ift.tt/74dZiUC\nCVE-2023-50981 Exploit", "creation_timestamp": "2023-12-27T23:17:09.000000Z"}, {"uuid": "ffa3e366-63bd-4fc0-ad4e-1b092b199018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50979", "type": "seen", "source": "https://t.me/ctinow/159784", "content": "https://ift.tt/Z0WnrP4\nCVE-2023-50979 Exploit", "creation_timestamp": "2023-12-27T21:16:47.000000Z"}, {"uuid": "82a2711f-ae71-4a7f-b022-da61ca47cc21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50071", "type": "seen", "source": "https://t.me/ctinow/163766", "content": "https://ift.tt/fAbcips\nCVE-2023-50071 Exploit", "creation_timestamp": "2024-01-05T23:16:24.000000Z"}, {"uuid": "e71ced4e-9c7a-4036-9206-d681f7d3e3f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50035", "type": "seen", "source": "https://t.me/ctinow/163763", "content": "https://ift.tt/3Pn70Re\nCVE-2023-50035 Exploit", "creation_timestamp": "2024-01-05T23:16:20.000000Z"}, {"uuid": "993ea764-82e8-4755-9faf-698fa909c136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50833", "type": "seen", "source": "https://t.me/ctinow/160373", "content": "https://ift.tt/zUXlDm3\nCVE-2023-50833 Exploit", "creation_timestamp": "2023-12-29T08:16:44.000000Z"}, {"uuid": "7b30d6b2-08f1-48bd-a4c3-55e6d50a821a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50828", "type": "seen", "source": "https://t.me/ctinow/160372", "content": "https://ift.tt/0rwRt4e\nCVE-2023-50828 Exploit", "creation_timestamp": "2023-12-29T08:16:43.000000Z"}, {"uuid": "1c4ed7d2-0045-427c-b7c2-b1da9e633ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50831", "type": "seen", "source": "https://t.me/ctinow/160371", "content": "https://ift.tt/SlYN8XM\nCVE-2023-50831 Exploit", "creation_timestamp": "2023-12-29T08:16:41.000000Z"}, {"uuid": "10a5ee69-85b1-42f8-9759-d7838053ea1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50267", "type": "seen", "source": "https://t.me/ctinow/160118", "content": "https://ift.tt/YLiWOHr\nCVE-2023-50267", "creation_timestamp": "2023-12-28T17:26:22.000000Z"}, {"uuid": "304e39c3-bb95-4ee5-94aa-100a3bceabe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50731", "type": "seen", "source": "https://t.me/ctinow/163546", "content": "https://ift.tt/8IaBqcg\nCVE-2023-50731 Exploit", "creation_timestamp": "2024-01-05T15:16:36.000000Z"}, {"uuid": "33bc735b-f299-4df9-895e-e107bc95ee00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50104", "type": "seen", "source": "https://t.me/ctinow/160270", "content": "https://ift.tt/dhDAUz6\nCVE-2023-50104", "creation_timestamp": "2023-12-29T01:26:46.000000Z"}, {"uuid": "78c32fe0-dd63-49cd-9b1f-ee001d302a9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50448", "type": "seen", "source": "https://t.me/ctinow/160252", "content": "https://ift.tt/xkDzC2I\nCVE-2023-50448", "creation_timestamp": "2023-12-29T00:26:14.000000Z"}, {"uuid": "b6d107f2-a845-4fee-ba57-dc5d2f4861a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50628", "type": "seen", "source": "https://t.me/ctinow/160233", "content": "https://ift.tt/TuevA6P\nCVE-2023-50628 Exploit", "creation_timestamp": "2023-12-28T23:16:43.000000Z"}, {"uuid": "913f7d23-043a-465f-96a8-a90c95665dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50851", "type": "seen", "source": "https://t.me/ctinow/160044", "content": "https://ift.tt/dTnIoQB\nCVE-2023-50851", "creation_timestamp": "2023-12-28T13:26:50.000000Z"}, {"uuid": "4c7219ad-b740-46c7-9d49-fb93379631a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50859", "type": "seen", "source": "https://t.me/ctinow/160017", "content": "https://ift.tt/Benyw2k\nCVE-2023-50859", "creation_timestamp": "2023-12-28T12:26:48.000000Z"}, {"uuid": "2078e078-4f28-4875-b239-97a83a70f60d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50858", "type": "seen", "source": "https://t.me/ctinow/160016", "content": "https://ift.tt/vu1cMb3\nCVE-2023-50858", "creation_timestamp": "2023-12-28T12:26:46.000000Z"}, {"uuid": "505ceaeb-ab2c-4c9b-b102-242a05ab3243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50857", "type": "seen", "source": "https://t.me/ctinow/160015", "content": "https://ift.tt/WoOk54b\nCVE-2023-50857", "creation_timestamp": "2023-12-28T12:26:45.000000Z"}, {"uuid": "22aa78a0-c0dc-4086-9079-905bd567a7d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50445", "type": "seen", "source": "https://t.me/ctinow/159934", "content": "https://ift.tt/yD2H8J1\nCVE-2023-50445", "creation_timestamp": "2023-12-28T06:26:24.000000Z"}, {"uuid": "a2246cf6-cbf2-4c20-ae46-42874ab15023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50566", "type": "seen", "source": "https://t.me/ctinow/159815", "content": "https://ift.tt/sNcPVtX\nCVE-2023-50566 Exploit", "creation_timestamp": "2023-12-27T23:17:11.000000Z"}, {"uuid": "6ecb7b10-ae9c-461c-ae2c-0d9304b10d9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50470", "type": "seen", "source": "https://t.me/ctinow/160091", "content": "https://ift.tt/3q2p9Tt\nCVE-2023-50470", "creation_timestamp": "2023-12-28T16:26:46.000000Z"}, {"uuid": "41d28e87-370a-4037-b133-c9047a4b7c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "https://t.me/ctinow/159716", "content": "https://ift.tt/NShB5db\nApache OFBiz Arbitrary File Reading and Remote Code Execution Vulnerabilities (CVE-2023-50968/CVE-2023-51467) Alert", "creation_timestamp": "2023-12-27T18:11:27.000000Z"}, {"uuid": "8a876582-28ec-4792-a92e-9910147d7a1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50250", "type": "seen", "source": "https://t.me/ctinow/158517", "content": "https://ift.tt/KviDoem\nCVE-2023-50250", "creation_timestamp": "2023-12-22T18:23:30.000000Z"}, {"uuid": "35d821b2-c5c3-408d-9d90-b64f38e8b705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50873", "type": "seen", "source": "https://t.me/ctinow/160019", "content": "https://ift.tt/nxXfrSb\nCVE-2023-50873", "creation_timestamp": "2023-12-28T12:26:50.000000Z"}, {"uuid": "1117942c-3529-4bd8-a3f7-2161ad55178e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50860", "type": "seen", "source": "https://t.me/ctinow/160018", "content": "https://ift.tt/Qyd4OJ6\nCVE-2023-50860", "creation_timestamp": "2023-12-28T12:26:49.000000Z"}, {"uuid": "13be89c3-064f-4a0e-9d48-222f779c0f68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50856", "type": "seen", "source": "https://t.me/ctinow/160014", "content": "https://ift.tt/jNM4dTV\nCVE-2023-50856", "creation_timestamp": "2023-12-28T12:26:44.000000Z"}, {"uuid": "bf42c5a5-275d-4d22-96ec-6646df7ba6c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50571", "type": "seen", "source": "https://t.me/ctinow/163727", "content": "https://ift.tt/nAzxvjG\nCVE-2023-50571 Exploit", "creation_timestamp": "2024-01-05T22:16:27.000000Z"}, {"uuid": "3f346b6a-287c-4bd0-b24b-ef8964810d60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50732", "type": "seen", "source": "https://t.me/ctinow/163224", "content": "https://ift.tt/LTiRtWx\nCVE-2023-50732 Exploit", "creation_timestamp": "2024-01-04T21:21:57.000000Z"}, {"uuid": "d4e1b572-7a76-4fc5-b8f1-6fbc7dc58b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50984", "type": "seen", "source": "https://t.me/ctinow/158659", "content": "https://ift.tt/Wxv8BXr\nCVE-2023-50984 Exploit", "creation_timestamp": "2023-12-22T23:17:07.000000Z"}, {"uuid": "d10e52c8-714a-4885-8d96-f9749f25b6ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50175", "type": "seen", "source": "https://t.me/ctinow/159290", "content": "https://ift.tt/1bhgKk9\nCVE-2023-50175", "creation_timestamp": "2023-12-26T09:27:01.000000Z"}, {"uuid": "6fa085de-de2c-4c09-a321-d73be67cf331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50339", "type": "seen", "source": "https://t.me/ctinow/159293", "content": "https://ift.tt/Tcz3fAd\nCVE-2023-50339", "creation_timestamp": "2023-12-26T09:27:08.000000Z"}, {"uuid": "96d9e24f-6ede-4480-b917-cd34c3fda1c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50332", "type": "seen", "source": "https://t.me/ctinow/159292", "content": "https://ift.tt/lkeHL5m\nCVE-2023-50332", "creation_timestamp": "2023-12-26T09:27:03.000000Z"}, {"uuid": "3171ef26-0078-42bb-aecf-22a32c949256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50294", "type": "seen", "source": "https://t.me/ctinow/159291", "content": "https://ift.tt/uNaFJnG\nCVE-2023-50294", "creation_timestamp": "2023-12-26T09:27:02.000000Z"}, {"uuid": "ee03ecb5-9b36-48a5-a916-8ade4b13d1d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50867", "type": "seen", "source": "https://t.me/ctinow/163088", "content": "https://ift.tt/RTNdJ74\nCVE-2023-50867", "creation_timestamp": "2024-01-04T16:32:08.000000Z"}, {"uuid": "2aefc963-a3cc-482d-ab71-fb0cf224aeb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50578", "type": "seen", "source": "https://t.me/ctinow/164556", "content": "https://ift.tt/Kj1B7Ic\nCVE-2023-50578 Exploit", "creation_timestamp": "2024-01-08T19:16:29.000000Z"}, {"uuid": "9bd93f5f-f47e-4f4e-9998-10d17c283518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50714", "type": "seen", "source": "https://t.me/ctinow/164558", "content": "https://ift.tt/6SMQZoF\nCVE-2023-50714 Exploit", "creation_timestamp": "2024-01-08T19:16:32.000000Z"}, {"uuid": "1d7b2c8e-dc88-4c46-8740-de224da83a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50070", "type": "seen", "source": "https://t.me/ctinow/163765", "content": "https://ift.tt/ULaDkxM\nCVE-2023-50070 Exploit", "creation_timestamp": "2024-01-05T23:16:22.000000Z"}, {"uuid": "4eb1ad46-959f-4a54-8ba7-ba41f1356e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50570", "type": "seen", "source": "https://t.me/ctinow/163728", "content": "https://ift.tt/n7QAzYb\nCVE-2023-50570 Exploit", "creation_timestamp": "2024-01-05T22:16:29.000000Z"}, {"uuid": "a3c71766-0e49-4590-8ac6-48ff845648cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50834", "type": "seen", "source": "https://t.me/ctinow/157940", "content": "https://ift.tt/xJPkGbI\nCVE-2023-50834", "creation_timestamp": "2023-12-21T20:22:37.000000Z"}, {"uuid": "574318ed-a2e5-4bee-89d8-f88d644bd92c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50928", "type": "seen", "source": "https://t.me/ctinow/158636", "content": "https://ift.tt/W9b2ZnI\nCVE-2023-50928", "creation_timestamp": "2023-12-22T22:22:10.000000Z"}, {"uuid": "c4aa80d9-44af-4c87-a5fb-e141d91bcd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50258", "type": "seen", "source": "https://t.me/ctinow/158519", "content": "https://ift.tt/fGpbUXV\nCVE-2023-50258", "creation_timestamp": "2023-12-22T18:23:32.000000Z"}, {"uuid": "7a126949-6496-4cb8-a07d-220997dc113c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50254", "type": "seen", "source": "https://t.me/ctinow/158518", "content": "https://ift.tt/JyzUc0Y\nCVE-2023-50254", "creation_timestamp": "2023-12-22T18:23:31.000000Z"}, {"uuid": "8405f4ce-0db1-48a7-9e6b-368be35eca5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5091", "type": "seen", "source": "https://t.me/ctinow/164287", "content": "https://ift.tt/P34mcUg\nCVE-2023-5091", "creation_timestamp": "2024-01-08T11:26:21.000000Z"}, {"uuid": "ce7365d8-eea7-4e15-9759-930b64378175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50948", "type": "seen", "source": "https://t.me/ctinow/164184", "content": "https://ift.tt/oFU4ZIK\nCVE-2023-50948", "creation_timestamp": "2024-01-08T03:31:42.000000Z"}, {"uuid": "13662f03-e4b7-405c-a7db-39a8301b3cdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50445", "type": "seen", "source": "https://t.me/ctinow/163601", "content": "https://ift.tt/xripLu5\nCVE-2023-50445 Exploit", "creation_timestamp": "2024-01-05T17:16:22.000000Z"}, {"uuid": "b289b489-f620-428a-adbf-2c21e7f3f128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50027", "type": "seen", "source": "https://t.me/ctinow/163451", "content": "https://ift.tt/XTpRfEh\nCVE-2023-50027", "creation_timestamp": "2024-01-05T10:26:53.000000Z"}, {"uuid": "00bc0923-8ba8-4593-b316-2bd410c0ad42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50038", "type": "seen", "source": "https://t.me/ctinow/163290", "content": "https://ift.tt/FXMzTvh\nCVE-2023-50038 Exploit", "creation_timestamp": "2024-01-04T23:16:45.000000Z"}, {"uuid": "f25f33c8-ec31-4d54-9e55-f5e24a011fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50976", "type": "seen", "source": "https://t.me/ctinow/158679", "content": "https://ift.tt/pYLRgNy\nCVE-2023-50976 Exploit", "creation_timestamp": "2023-12-23T01:18:49.000000Z"}, {"uuid": "92b4b915-2535-4eca-92a3-4167361d15b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50121", "type": "seen", "source": "https://t.me/ctinow/163825", "content": "https://ift.tt/ScB8YZQ\nCVE-2023-50121", "creation_timestamp": "2024-01-06T06:22:00.000000Z"}, {"uuid": "91b5b14b-a042-4e74-884d-4a29715524ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50609", "type": "seen", "source": "https://t.me/ctinow/163820", "content": "https://ift.tt/0dv4CEu\nCVE-2023-50609", "creation_timestamp": "2024-01-06T05:31:41.000000Z"}, {"uuid": "ac3d0738-2245-498a-905d-910dbcc0b824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50612", "type": "seen", "source": "https://t.me/ctinow/163814", "content": "https://ift.tt/vPyn7Of\nCVE-2023-50612", "creation_timestamp": "2024-01-06T04:21:32.000000Z"}, {"uuid": "35c4aab6-58bb-4e67-8a4b-200f3ae501a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50069", "type": "seen", "source": "https://t.me/ctinow/163809", "content": "https://ift.tt/lB6rSz3\nCVE-2023-50069 Exploit", "creation_timestamp": "2024-01-06T04:16:14.000000Z"}, {"uuid": "a8880910-707d-4527-9e24-a0aace439074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50864", "type": "seen", "source": "https://t.me/ctinow/163085", "content": "https://ift.tt/o0purmk\nCVE-2023-50864", "creation_timestamp": "2024-01-04T16:32:04.000000Z"}, {"uuid": "3b47fa5b-5737-443f-a145-6d1fe72c20d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50863", "type": "seen", "source": "https://t.me/ctinow/163084", "content": "https://ift.tt/rq2P6IB\nCVE-2023-50863", "creation_timestamp": "2024-01-04T16:32:03.000000Z"}, {"uuid": "47166b5a-3637-4103-8bc6-941ca832cdea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50862", "type": "seen", "source": "https://t.me/ctinow/163083", "content": "https://ift.tt/Jxw209T\nCVE-2023-50862", "creation_timestamp": "2024-01-04T16:32:00.000000Z"}, {"uuid": "6f7922c5-5c37-4df5-b953-7208aa6207b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50760", "type": "seen", "source": "https://t.me/ctinow/163082", "content": "https://ift.tt/Jmpy9Vq\nCVE-2023-50760", "creation_timestamp": "2024-01-04T16:31:59.000000Z"}, {"uuid": "11ecc467-d5f9-4d81-b165-64e72c79e5b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50712", "type": "seen", "source": "https://t.me/ctinow/158625", "content": "https://ift.tt/vk60NnS\nCVE-2023-50712", "creation_timestamp": "2023-12-22T21:27:50.000000Z"}, {"uuid": "978c1f7d-91bb-4ce5-ab8c-fcaa4eb770f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50104", "type": "seen", "source": "https://t.me/ctinow/163370", "content": "https://ift.tt/AmkrYxl\nCVE-2023-50104 Exploit", "creation_timestamp": "2024-01-05T04:16:41.000000Z"}, {"uuid": "4296b806-975d-4416-884f-fff2eaa72858", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50987", "type": "seen", "source": "https://t.me/ctinow/157391", "content": "https://ift.tt/S8oTcZ5\nCVE-2023-50987", "creation_timestamp": "2023-12-20T23:42:31.000000Z"}, {"uuid": "b900e1a2-1d81-4397-9dc3-8468f5f0eeb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50985", "type": "seen", "source": "https://t.me/ctinow/157389", "content": "https://ift.tt/aRGJ2i4\nCVE-2023-50985", "creation_timestamp": "2023-12-20T23:42:29.000000Z"}, {"uuid": "2993f0a6-9dac-4c6f-a685-317e82669745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50984", "type": "seen", "source": "https://t.me/ctinow/157388", "content": "https://ift.tt/HrxtlBv\nCVE-2023-50984", "creation_timestamp": "2023-12-20T23:42:28.000000Z"}, {"uuid": "28742c08-eaf7-4032-9b7f-2ed034758122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50983", "type": "seen", "source": "https://t.me/ctinow/157387", "content": "https://ift.tt/Ci21k6r\nCVE-2023-50983", "creation_timestamp": "2023-12-20T23:42:26.000000Z"}, {"uuid": "2278bbe4-830b-4263-97e8-6f582b9988d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50692", "type": "seen", "source": "https://t.me/ctinow/163291", "content": "https://ift.tt/mZVBgkP\nCVE-2023-50692 Exploit", "creation_timestamp": "2024-01-04T23:16:46.000000Z"}, {"uuid": "2354597d-ad68-4f96-a66a-208939e30f06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50987", "type": "seen", "source": "https://t.me/ctinow/158656", "content": "https://ift.tt/LgX9xKI\nCVE-2023-50987 Exploit", "creation_timestamp": "2023-12-22T23:17:03.000000Z"}, {"uuid": "f25c2ada-52f0-4e9e-92ed-cd6ccad3f121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50988", "type": "seen", "source": "https://t.me/ctinow/158655", "content": "https://ift.tt/mw9qc7L\nCVE-2023-50988 Exploit", "creation_timestamp": "2023-12-22T23:17:02.000000Z"}, {"uuid": "51bca49f-a607-4dbb-89aa-be29ab05c813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50989", "type": "seen", "source": "https://t.me/ctinow/158654", "content": "https://ift.tt/IBPQvUS\nCVE-2023-50989 Exploit", "creation_timestamp": "2023-12-22T23:17:01.000000Z"}, {"uuid": "feaedd59-ee69-4b79-b0bc-58305b300647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50990", "type": "seen", "source": "https://t.me/ctinow/158653", "content": "https://ift.tt/pgBDL5U\nCVE-2023-50990 Exploit", "creation_timestamp": "2023-12-22T23:17:00.000000Z"}, {"uuid": "c130bbbf-0189-44c8-ac33-6d28b621af96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50992", "type": "seen", "source": "https://t.me/ctinow/158652", "content": "https://ift.tt/QRLNjO0\nCVE-2023-50992 Exploit", "creation_timestamp": "2023-12-22T23:16:59.000000Z"}, {"uuid": "3dfcad32-d30d-4f87-9f87-af9b05b2f78c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50983", "type": "seen", "source": "https://t.me/ctinow/158651", "content": "https://ift.tt/Q9tDibs\nCVE-2023-50983 Exploit", "creation_timestamp": "2023-12-22T23:16:58.000000Z"}, {"uuid": "edbc02d3-0ff2-4565-9f50-f662adc8ca5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50833", "type": "seen", "source": "https://t.me/ctinow/157900", "content": "https://ift.tt/WxnOh2E\nCVE-2023-50833", "creation_timestamp": "2023-12-21T19:26:31.000000Z"}, {"uuid": "246bfd51-ac23-4f6a-bb76-39e3e7ad69c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50866", "type": "seen", "source": "https://t.me/ctinow/163087", "content": "https://ift.tt/xOpd7o0\nCVE-2023-50866", "creation_timestamp": "2024-01-04T16:32:07.000000Z"}, {"uuid": "1e323aba-af53-4d41-9bab-5878d79dde3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50865", "type": "seen", "source": "https://t.me/ctinow/163086", "content": "https://ift.tt/UHaPW1F\nCVE-2023-50865", "creation_timestamp": "2024-01-04T16:32:06.000000Z"}, {"uuid": "d12c6a8d-873d-4276-b51f-71b053842caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50965", "type": "seen", "source": "https://t.me/ctinow/157421", "content": "https://ift.tt/rLZigvh\nCVE-2023-50965 Exploit", "creation_timestamp": "2023-12-21T00:18:00.000000Z"}, {"uuid": "7d5c79d6-5ee6-469c-a45a-5ecef45b870a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50639", "type": "seen", "source": "https://t.me/ctinow/157344", "content": "https://ift.tt/zsNgCix\nCVE-2023-50639", "creation_timestamp": "2023-12-20T22:22:31.000000Z"}, {"uuid": "7057a991-f72a-4b25-917d-48bedafc456b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50753", "type": "seen", "source": "https://t.me/ctinow/163047", "content": "https://ift.tt/lkzWCbO\nCVE-2023-50753", "creation_timestamp": "2024-01-04T15:21:48.000000Z"}, {"uuid": "dec9f583-a427-4f03-8b1a-49dfbf233047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50752", "type": "seen", "source": "https://t.me/ctinow/163046", "content": "https://ift.tt/VQhJTbz\nCVE-2023-50752", "creation_timestamp": "2024-01-04T15:21:47.000000Z"}, {"uuid": "5bc7b07b-ac5b-4294-9baf-03ca52c6667b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50743", "type": "seen", "source": "https://t.me/ctinow/163045", "content": "https://ift.tt/5VXa64N\nCVE-2023-50743", "creation_timestamp": "2024-01-04T15:21:46.000000Z"}, {"uuid": "6889ab14-8da7-4fc3-aed2-d8c4b29fbed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50985", "type": "seen", "source": "https://t.me/ctinow/158658", "content": "https://ift.tt/uldjCaJ\nCVE-2023-50985 Exploit", "creation_timestamp": "2023-12-22T23:17:06.000000Z"}, {"uuid": "730050ca-1f3b-4175-988a-9adc2f23ce84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50986", "type": "seen", "source": "https://t.me/ctinow/158657", "content": "https://ift.tt/DxAuZt5\nCVE-2023-50986 Exploit", "creation_timestamp": "2023-12-22T23:17:05.000000Z"}, {"uuid": "04805f37-7986-494e-a4a5-28f90709e872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50924", "type": "seen", "source": "https://t.me/ctinow/158635", "content": "https://ift.tt/mFkAc3q\nCVE-2023-50924", "creation_timestamp": "2023-12-22T22:22:09.000000Z"}, {"uuid": "62ed8f62-02c8-489b-ba3c-2034989101b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50730", "type": "seen", "source": "https://t.me/ctinow/158633", "content": "https://ift.tt/IElZXmV\nCVE-2023-50730", "creation_timestamp": "2023-12-22T22:22:07.000000Z"}, {"uuid": "37b8a76b-dbe8-437f-a9ae-a75d1f25ff8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50731", "type": "seen", "source": "https://t.me/ctinow/158634", "content": "https://ift.tt/BYmzMd5\nCVE-2023-50731", "creation_timestamp": "2023-12-22T22:22:08.000000Z"}, {"uuid": "c136c32c-201f-4ec4-ab5b-ab616ed061ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50708", "type": "seen", "source": "https://t.me/ctinow/158587", "content": "https://ift.tt/mvf0P5u\nCVE-2023-50708", "creation_timestamp": "2023-12-22T20:24:43.000000Z"}, {"uuid": "5c1d6733-7ad2-4449-96b2-40c7a0993003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50147", "type": "seen", "source": "https://t.me/ctinow/158586", "content": "https://ift.tt/tCQMhwE\nCVE-2023-50147", "creation_timestamp": "2023-12-22T20:24:42.000000Z"}, {"uuid": "6aecd5fd-a64e-4e74-88ac-4cbaf2e3be87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50259", "type": "seen", "source": "https://t.me/ctinow/158520", "content": "https://ift.tt/Y35fHEG\nCVE-2023-50259", "creation_timestamp": "2023-12-22T18:23:33.000000Z"}, {"uuid": "73a49b63-e64e-4d66-8278-b78d59d54076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50569", "type": "seen", "source": "https://t.me/ctinow/158344", "content": "https://ift.tt/DeYdqLz\nCVE-2023-50569", "creation_timestamp": "2023-12-22T12:21:51.000000Z"}, {"uuid": "2c0f4f9c-cc79-4e89-a075-a437e7f1ac41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50832", "type": "seen", "source": "https://t.me/ctinow/157899", "content": "https://ift.tt/14K3hDT\nCVE-2023-50832", "creation_timestamp": "2023-12-21T19:26:30.000000Z"}, {"uuid": "fecf6ab9-7698-4893-9666-a51cccd8b203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50831", "type": "seen", "source": "https://t.me/ctinow/157898", "content": "https://ift.tt/ula1Lv0\nCVE-2023-50831", "creation_timestamp": "2023-12-21T19:26:29.000000Z"}, {"uuid": "c79310cd-42ff-46fe-85e1-c4ad49ce2e22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50830", "type": "seen", "source": "https://t.me/ctinow/157897", "content": "https://ift.tt/OHANQx4\nCVE-2023-50830", "creation_timestamp": "2023-12-21T19:26:28.000000Z"}, {"uuid": "e2cc3047-52ae-40ce-b35b-14db94adc945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50829", "type": "seen", "source": "https://t.me/ctinow/157896", "content": "https://ift.tt/ru84bUH\nCVE-2023-50829", "creation_timestamp": "2023-12-21T19:26:27.000000Z"}, {"uuid": "04fde5e8-009a-462f-bfca-e8aeefc04025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50477", "type": "seen", "source": "https://t.me/ctinow/157648", "content": "https://ift.tt/kEM70Xz\nCVE-2023-50477", "creation_timestamp": "2023-12-21T12:24:05.000000Z"}, {"uuid": "ce04396e-2040-4817-b0e9-d59272d0532f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50475", "type": "seen", "source": "https://t.me/ctinow/157647", "content": "https://ift.tt/b9EWKas\nCVE-2023-50475", "creation_timestamp": "2023-12-21T12:24:04.000000Z"}, {"uuid": "b319c632-f832-4b4b-9e8c-ca2dab4c1a74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50473", "type": "seen", "source": "https://t.me/ctinow/157646", "content": "https://ift.tt/8P9OYZg\nCVE-2023-50473", "creation_timestamp": "2023-12-21T12:24:03.000000Z"}, {"uuid": "1c7e03fe-3d89-40da-be7a-9690b8ebf416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50783", "type": "seen", "source": "https://t.me/ctinow/157614", "content": "https://ift.tt/I1fyzNV\nCVE-2023-50783", "creation_timestamp": "2023-12-21T11:22:23.000000Z"}, {"uuid": "20a57ed1-686f-47bc-9570-36d92a70daab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5005", "type": "seen", "source": "https://t.me/ctinow/158032", "content": "https://ift.tt/BHPWfX8\nCVE-2023-5005 Exploit", "creation_timestamp": "2023-12-21T23:16:42.000000Z"}, {"uuid": "9f78295c-6e57-4508-be4c-d3988cc85f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50732", "type": "seen", "source": "https://t.me/ctinow/157958", "content": "https://ift.tt/s6aXECt\nCVE-2023-50732", "creation_timestamp": "2023-12-21T21:21:56.000000Z"}, {"uuid": "91f45821-25d0-436a-ba7b-658b2275163e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50822", "type": "seen", "source": "https://t.me/ctinow/157796", "content": "https://ift.tt/a9oHGJW\nCVE-2023-50822", "creation_timestamp": "2023-12-21T16:28:07.000000Z"}, {"uuid": "e800d274-0351-4c77-b0c7-72501c9c572a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50724", "type": "seen", "source": "https://t.me/ctinow/157795", "content": "https://ift.tt/bYAwmZs\nCVE-2023-50724", "creation_timestamp": "2023-12-21T16:28:06.000000Z"}, {"uuid": "79b4cee6-74ae-4f25-90da-25fbc7b0909e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50119", "type": "seen", "source": "https://t.me/ctinow/157793", "content": "https://ift.tt/6fHPQey\nCVE-2023-50119", "creation_timestamp": "2023-12-21T16:28:04.000000Z"}, {"uuid": "6087ee3b-b073-43d1-8f60-c434856ef87a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50481", "type": "seen", "source": "https://t.me/ctinow/157649", "content": "https://ift.tt/HG9x5lo\nCVE-2023-50481", "creation_timestamp": "2023-12-21T12:24:06.000000Z"}, {"uuid": "ec4a4132-fee1-433a-bb2d-5f38cc7d706e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50828", "type": "seen", "source": "https://t.me/ctinow/157802", "content": "https://ift.tt/nfDtmFl\nCVE-2023-50828", "creation_timestamp": "2023-12-21T16:28:17.000000Z"}, {"uuid": "2d5d6433-b21f-44bc-bc06-20c083b3fa8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50826", "type": "seen", "source": "https://t.me/ctinow/157800", "content": "https://ift.tt/awmAi4K\nCVE-2023-50826", "creation_timestamp": "2023-12-21T16:28:15.000000Z"}, {"uuid": "fedff917-cdbd-4bb9-8638-3d169788d414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50825", "type": "seen", "source": "https://t.me/ctinow/157799", "content": "https://ift.tt/fW6O951\nCVE-2023-50825", "creation_timestamp": "2023-12-21T16:28:10.000000Z"}, {"uuid": "dfc6f148-31b6-4063-b57e-647bd277e107", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50824", "type": "seen", "source": "https://t.me/ctinow/157798", "content": "https://ift.tt/5d4mHoK\nCVE-2023-50824", "creation_timestamp": "2023-12-21T16:28:09.000000Z"}, {"uuid": "6c5fec48-b563-4c4c-8b15-f0e0e4c8751f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50377", "type": "seen", "source": "https://t.me/ctinow/157794", "content": "https://ift.tt/t09zG3n\nCVE-2023-50377", "creation_timestamp": "2023-12-21T16:28:05.000000Z"}, {"uuid": "3d12f03d-73ba-4874-b596-4e6b0a0b9649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50993", "type": "seen", "source": "https://t.me/ctinow/157396", "content": "https://ift.tt/vj5dg9D\nCVE-2023-50993", "creation_timestamp": "2023-12-20T23:42:36.000000Z"}, {"uuid": "27a3c647-8a4c-49c8-ad29-20ee025db25f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50992", "type": "seen", "source": "https://t.me/ctinow/157395", "content": "https://ift.tt/uxvnTUk\nCVE-2023-50992", "creation_timestamp": "2023-12-20T23:42:35.000000Z"}, {"uuid": "d4a57a1c-9307-4393-97a6-a37fe10ff2f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50990", "type": "seen", "source": "https://t.me/ctinow/157394", "content": "https://ift.tt/9cpP5Sn\nCVE-2023-50990", "creation_timestamp": "2023-12-20T23:42:34.000000Z"}, {"uuid": "e21e2bf3-9016-405d-b50e-35070a5561ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50989", "type": "seen", "source": "https://t.me/ctinow/157393", "content": "https://ift.tt/CDojAr6\nCVE-2023-50989", "creation_timestamp": "2023-12-20T23:42:33.000000Z"}, {"uuid": "c886b26c-76e8-406b-b687-38f7b7b32745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50988", "type": "seen", "source": "https://t.me/ctinow/157392", "content": "https://ift.tt/ygPjzTR\nCVE-2023-50988", "creation_timestamp": "2023-12-20T23:42:32.000000Z"}, {"uuid": "2fbeaf94-638f-4d82-b15b-f6d920ede38f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50986", "type": "seen", "source": "https://t.me/ctinow/157390", "content": "https://ift.tt/Ow5mLC3\nCVE-2023-50986", "creation_timestamp": "2023-12-20T23:42:29.000000Z"}, {"uuid": "ec0cc939-0b99-457a-8e4a-aca1147ea79f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5002", "type": "seen", "source": "https://t.me/cibsecurity/70949", "content": "\u203c CVE-2023-5002 \u203c\n\nA flaw was found in pgAdmin. This issue occurs when the pgAdmin server HTTP API validates the path a user selects to external PostgreSQL utilities such as pg_dump and pg_restore. Versions of pgAdmin prior to 7.6 failed to properly control the server code executed on this API, allowing an authenticated user to run arbitrary commands on the server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-22T18:31:52.000000Z"}, {"uuid": "5c1a0513-1169-418f-b971-913fb8916c64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/sysadm_in_up/2029", "content": "PoC. Apache Struts Remote Code Execution Vulnerability ( S2-066 CVE-2023-50164)\n\nhttps://trganda.github.io/notes/security/vulnerabilities/apache-struts/Apache-Struts-Remote-Code-Execution-Vulnerability-(-S2-066-CVE-2023-50164)", "creation_timestamp": "2026-07-30T00:03:04.475893Z"}, {"uuid": "ce6a9ba8-3d82-443e-9876-c3f776c5d38d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "Telegram/WrRm1maBRq0wnWnqHcBRNKkL4Ujgx3aMjLBjm_7TvOwiqe0", "content": "", "creation_timestamp": "2026-09-02T01:00:19.045581Z"}, {"uuid": "17790191-27b0-4e46-ad01-e1a74a3f0c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50447", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4225", "content": "Pillow\u2019s Critical Flaw: CVE-2023-50447 Exposes Python Projects to Risk https://securityonline.info/pillows-critical-flaw-cve-2023-50447-exposes-python-projects-to-risk/", "creation_timestamp": "2026-08-03T02:07:15.982175Z"}, {"uuid": "53d8acd1-04f5-472b-a63d-f7e47aacf57c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4103", "content": "cve-2023-50164-poc: Proof of Concept for Path Traversal in Apache Struts (\"CVE-2023-50164\") https://github.com/dwisiswant0/cve-2023-50164-poc", "creation_timestamp": "2026-08-03T02:07:13.676104Z"}, {"uuid": "5be6bcd3-d12d-430f-af90-0dc96ec88812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50096", "type": "seen", "source": "https://t.me/arpsyndicate/2318", "content": "#ExploitObserverAlert\n\nCVE-2023-50096\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-50096. STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read from and write to the I2C bus. This is caused by an StSafeA_ReceiveBytes buffer overflow in the X-CUBE-SAFEA1 Software Package for STSAFE-A sample applications (1.2.0), and thus can affect user-written code that was derived from a published sample application.", "creation_timestamp": "2024-01-02T18:32:53.000000Z"}, {"uuid": "0408b9aa-28f9-49eb-b5be-e49e2e589d5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50969", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/193", "content": "https://www.hoyahaxa.com/2024/03/imperva-waf-bypass-cve-2023-50969.html\n\nBypassing Imperva SecureSphere WAF (CVE-2023-50969)\n#github", "creation_timestamp": "2024-04-02T18:49:27.000000Z"}, {"uuid": "ec6766b6-ddfb-40a4-86e2-a6c6e416611c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50916", "type": "seen", "source": "https://t.me/thehackernews/4372", "content": "\u26a0\ufe0f Attention Kyocera & QNAP users: \n \nKyocera addresses dangerous CVE-2023-50916 flaw, preventing unauthorized access. QNAP tackles CVE-2023-39296, safeguarding against crashes. \n \nRead details here: https://thehackernews.com/2024/01/alert-new-vulnerabilities-discovered-in.html", "creation_timestamp": "2024-01-09T14:34:43.000000Z"}, {"uuid": "d780529c-d64b-4d76-8f18-c6beec2222c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/thehackernews/4269", "content": "\u26a0\ufe0f Urgent Update: Apache warns of a critical RCE flaw in Struts 2 web app framework (CVE-2023-50164) that could lead to remote code execution. \n \nFind details here: https://thehackernews.com/2023/12/new-critical-rce-vulnerability.html \n \nUpgrade to patched versions now to prevent potential breaches.", "creation_timestamp": "2023-12-12T06:34:12.000000Z"}, {"uuid": "dae38bff-ee69-41ff-bebd-f3180e21c1e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5009", "type": "seen", "source": "https://t.me/thehackernews/3896", "content": "\ud83d\udea8 Critical Security Alert! GitLab issues patches for CVE-2023-5009, a flaw allowing attackers to run pipelines as other users. \n \nProtect your code\u2014update now: https://thehackernews.com/2023/09/gitlab-releases-urgent-security-patches.html", "creation_timestamp": "2023-09-20T09:19:47.000000Z"}, {"uuid": "d3f3b4e0-0ef0-4acb-bc67-5ce27b73e897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/xakep_ru/15408", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c KeyTrap, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 DNSSEC, \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u0445\u0443\u0434\u0448\u0435\u0439 \u0438\u0437 \u0432\u0441\u0435\u0445 DNS-\u0430\u0442\u0430\u043a\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 DNS \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-50387), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0443\u044e \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 KeyTrap. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u044d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\nhttps://xakep.ru/2024/02/19/keytrap/", "creation_timestamp": "2024-02-19T09:36:22.000000Z"}, {"uuid": "82023f8f-ec58-4a5d-904b-fba37c44528a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5058", "type": "exploited", "source": "https://t.me/cultofwire/1146", "content": "Just about every Windows and Linux device vulnerable to new LogoFAIL firmware attack\n\n\u041f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows \u0438 Linux \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u043d\u043e\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 UEFI/BIOS.\n\n\u041a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows \u0438 Linux \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442 \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u043d\u043e\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0435, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u043d\u0430 \u0440\u0430\u043d\u043d\u0438\u0445 \u044d\u0442\u0430\u043f\u0430\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0440\u0430\u0437\u0438\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u0410\u0442\u0430\u043a\u0430, \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 LogoFAIL, \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u043e\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0448\u0438\u0440\u043e\u0442\u043e\u0439 \u043e\u0445\u0432\u0430\u0442\u0430 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043a\u043b\u0430\u0441\u0441\u0430. \u0412\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 LogoFAIL \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u0432 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f\u0445 \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0442\u0435\u0445\u043d\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a. \u0410 \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0441\u0430\u043c\u044b\u0445 \u0440\u0430\u043d\u043d\u0438\u0445 \u0441\u0442\u0430\u0434\u0438\u044f\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u043e\u043d\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0431\u0449\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0443\u044e \u0432 \u043e\u0442\u0440\u0430\u0441\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 Secure Boot, Secure Boot \u043e\u0442 Intel \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0431\u0443\u0442\u043a\u0438\u0442\u0430\u043c\u0438.\n\nLogoFAIL \u044d\u0442\u043e \u043d\u0435 \u043e\u0434\u043d\u0430  \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0430\u043c\u0430 \u043f\u043e \u0441\u0435\u0431\u0435, \u0430 \u0446\u0435\u043b\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u0438\u0437 \u0434\u0432\u0443\u0445 \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043b\u0438\u0431\u043e \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435, \u043b\u0438\u0431\u043e \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u043c.\n\n\u0412\u0438\u0434\u0435\u043e PoC: Finding LogoFAIL: The Dangers of Image Parsing During System Boot\n\n\u0423\u0436\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043d\u044b\u0435 CVE:\n- CVE-2023-5058\n- CVE-2023-39538\n- CVE-2023-39539\n- CVE-2023-40238", "creation_timestamp": "2023-12-11T10:24:17.000000Z"}, {"uuid": "efb314e6-3744-4556-bdfc-91b8583f6dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50915", "type": "published-proof-of-concept", "source": "https://t.me/cultofwire/1253", "content": "Galactical Bug Hunting: How we discovered new issues in CD Projekt Red\u2019s Gaming Platform\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Anvil Secure \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431, \u043a\u043e\u0442\u043e\u0440\u044b\u043c GOG Galaxy 2.0 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0441 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0438 \u043c\u0435\u0436\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043d\u044b\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435\u043c (IPC) \u043c\u0435\u0436\u0434\u0443 \u0441\u0432\u043e\u0438\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u043e\u0439. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e \u0434\u0432\u0443\u0445 \u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u043d\u043e\u043c\u0435\u0440 CVE-2023-50915, \u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0435 \u043d\u043e\u043c\u0435\u0440 CVE-2023-50914.\n\n\u041d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435 \u044f\u0441\u043d\u043e, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043b\u0438 CD Projekt \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, 90 \u0434\u043d\u0435\u0439 \u043f\u0440\u043e\u0448\u043b\u043e, \u0430 \u0432\u043d\u044f\u0442\u043d\u043e\u0433\u043e \u043e\u0442\u0432\u0435\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438.\n\u0422\u0430\u043a\u0436\u0435 \u043d\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e CVE \u0432 MITRE/NIST.\n\n\u0414\u0435\u043c\u043e \u0438 Po\u0421 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043d\u0430 Github: github.com/anvilsecure/gog-galaxy-app-research", "creation_timestamp": "2024-04-10T10:16:39.000000Z"}, {"uuid": "e65d6080-b9e2-4a20-be9b-6fef1ec535ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50914", "type": "published-proof-of-concept", "source": "https://t.me/cultofwire/1253", "content": "Galactical Bug Hunting: How we discovered new issues in CD Projekt Red\u2019s Gaming Platform\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Anvil Secure \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431, \u043a\u043e\u0442\u043e\u0440\u044b\u043c GOG Galaxy 2.0 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0441 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0438 \u043c\u0435\u0436\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043d\u044b\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435\u043c (IPC) \u043c\u0435\u0436\u0434\u0443 \u0441\u0432\u043e\u0438\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u043e\u0439. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e \u0434\u0432\u0443\u0445 \u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u043d\u043e\u043c\u0435\u0440 CVE-2023-50915, \u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0435 \u043d\u043e\u043c\u0435\u0440 CVE-2023-50914.\n\n\u041d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435 \u044f\u0441\u043d\u043e, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043b\u0438 CD Projekt \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, 90 \u0434\u043d\u0435\u0439 \u043f\u0440\u043e\u0448\u043b\u043e, \u0430 \u0432\u043d\u044f\u0442\u043d\u043e\u0433\u043e \u043e\u0442\u0432\u0435\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438.\n\u0422\u0430\u043a\u0436\u0435 \u043d\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e CVE \u0432 MITRE/NIST.\n\n\u0414\u0435\u043c\u043e \u0438 Po\u0421 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043d\u0430 Github: github.com/anvilsecure/gog-galaxy-app-research", "creation_timestamp": "2024-04-10T10:16:39.000000Z"}, {"uuid": "ed7a02ec-6516-4c33-8bf9-941d3d270d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50071", "type": "seen", "source": "https://t.me/VulnerabilityNews/35418", "content": "[webapps] CVE-2023-50071 - Multiple SQL Injection\nRead More", "creation_timestamp": "2024-03-06T16:14:34.000000Z"}, {"uuid": "2399c44a-540e-46e7-89a7-dad820cddc48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1999", "content": "https://github.com/knqyf263/CVE-2023-50387\nCVE-2023-50387\n#github", "creation_timestamp": "2024-02-21T04:15:19.000000Z"}, {"uuid": "1a3336d1-54bd-46f5-9f6d-cfe6162ece74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50071", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1716", "content": "https://github.com/geraldoalcantara/CVE-2023-50071\n#github", "creation_timestamp": "2023-12-17T10:51:34.000000Z"}, {"uuid": "8f4dc7c6-9bf5-4191-b438-715cdfda06a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1730", "content": "https://github.com/Trackflaw/CVE-2023-50164-ApacheStruts2-Docker\n\nVulnerable docker container for Apache Struts 2 RCE CVE-2023-50164\n#github", "creation_timestamp": "2023-12-20T13:20:57.000000Z"}, {"uuid": "3485a39a-265e-4b24-a6d4-3d0fdef8237c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50643", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1854", "content": "https://github.com/V3x0r/CVE-2023-50643\n#github", "creation_timestamp": "2024-01-17T04:54:56.000000Z"}, {"uuid": "ab7bdd0a-559f-4b1e-b91a-60af9b24e0c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50072", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1746", "content": "https://github.com/ahrixia/CVE-2023-50072\n\nA stored cross-site scripting (XSS) vulnerability exists in OpenKM version 7.1.40.\n\n#github  #exploit  #XSS", "creation_timestamp": "2023-12-23T20:45:28.000000Z"}, {"uuid": "bf76e6ac-fe3c-44e4-adb2-f5e40d88223d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50719", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2715", "content": "CVE-2023-50719\n\nGET  /bin/view/Main/Search?r=1&text=propertyvalue%3A%3F*%20AND%20reference%3A*.password&f_locale=en&f_locale=\n\nGET  /xwiki/bin/view/Main/Search?r=1&text=propertyvalue%3A%3F*%20AND%20reference%3A*.password&f_locale=en&f_locale=\n\n#exploit  #poc", "creation_timestamp": "2024-06-25T12:03:20.000000Z"}, {"uuid": "d7bc016c-e4e8-4e67-96fa-dfeaf71c4ad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50969", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2235", "content": "https://www.hoyahaxa.com/2024/03/imperva-waf-bypass-cve-2023-50969.html\n\nBypassing Imperva SecureSphere WAF (CVE-2023-50969)\n#github", "creation_timestamp": "2024-04-06T00:37:11.000000Z"}, {"uuid": "c10c9079-f216-47a9-9b54-c23a6329ef93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50969", "type": "seen", "source": "Telegram/bzTrdAryems4FPAROTn9hIEuei_rXxA0rFalNyBGgr7yZsM", "content": "", "creation_timestamp": "2024-04-04T00:58:04.000000Z"}, {"uuid": "cf703144-1087-4195-8764-b6be5d7b53c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50071", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9604", "content": "#exploit\n1. CVE-2023-50071:\nMultiple SQL injection in Customer Support System 1.0\nhttps://github.com/geraldoalcantara/CVE-2023-50071\n\n2. CVE-2023-46998:\nCross Site Scripting in Bootbox.js 3.2-6.0\nhttps://github.com/soy-oreocato/CVE-2023-46998", "creation_timestamp": "2023-12-17T12:43:01.000000Z"}, {"uuid": "9bc325e3-9101-4f1f-b686-b2c8fdea4ab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50072", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9637", "content": "#exploit\n1. CVE-2023-50072\nXSS vulnerability in OpenKM ver. 7.1.40\nhttps://github.com/ahrixia/CVE-2023-50072\n\n2. CVE-2020-24186:\nWordPress wpDiscuz 7.0.4 RCE\nhttps://github.com/hev0x/CVE-2020-24186-WordPress-wpDiscuz-7.0.4-RCE\n]-> reverse shell upload: https://github.com/substing/CVE-2020-24186_reverse_shell_upload", "creation_timestamp": "2023-12-22T13:47:08.000000Z"}, {"uuid": "9904a52c-9ffb-482d-9f7d-7a11a2b9298b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50919", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9846", "content": "#exploit\n1. CVE-2023-45185:\nRCE via insecure deserialisation in IBM i Access Client Solutions < 1.1.9\nhttps://github.com/afine-com/CVE-2023-45185\n\n2. CVE-2023-50445/CVE-2023-50919:\nGL.iNet Unauthenticated RCE\nhttps://packetstormsecurity.com/files/176708/GL.iNet-Unauthenticated-Remote-Command-Execution.html\n\n3. CVE-2024 -20698:\nWindows Kernel EoP\nhttps://github.com/RomanRybachek/CVE-2024-20698", "creation_timestamp": "2024-01-25T12:47:06.000000Z"}, {"uuid": "2ad569fb-d2ea-4a27-8f50-d08721e5b27e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9579", "content": "#exploit\n1. CVE-2023-50164:\nApache Struts2 Exploit\nhttps://xz.aliyun.com/t/13172\n\n2. CVE-2023-31546:\nDedeBIZ v6.0.3 XSS vulnerability\nhttps://github.com/ran9ege/CVE-2023-31546/blob/main/CVE-2023-31546.md\n\n3. Exploits with pwntools library in Python3. ROP, BOF, SHELLCODE\nhttps://github.com/davidenetti/SoftwareSecurityNotes", "creation_timestamp": "2023-12-13T15:20:17.000000Z"}, {"uuid": "9f3c6dc2-6df2-4e7e-bf51-8bbd65e51d23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50917", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9620", "content": "#exploit\n1. CVE-2023-50917:\nMajorDoMo Unauthenticated RCE\nhttps://github.com/Chocapikk/CVE-2023-50917\n\n2. CVE-2023-41772:\nUIFuckUp exploit to gain system privileges as user on Windows 10 (>=1809) and 11\nhttps://github.com/R41N3RZUF477/CVE-2023-41772\n\n3. CVE-2023-49786:\nAsterisk 20.1.0 - DoS via DTLS\nhttps://packetstormsecurity.com/files/176251/Asterisk-20.1.0-Denial-Of-Service.html", "creation_timestamp": "2023-12-20T11:00:39.000000Z"}, {"uuid": "c1e2704e-7b30-4b6a-8f4c-1438f4710f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50643", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/9800", "content": "#exploit\n1. CVE-2023-5347, CVE-2023-5376:\nKorenix JetNet Series Unauthenticated Access\nhttps://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html\n\n2. CVE-2023-51252:\nXSS vulnerability caused by file uploads in PublicCMS V4.0\nhttps://github.com/sanluan/PublicCMS/issues/79\n\n3. CVE-2023-50643:\nArbitrary code execution in MacOS Evernote\nhttps://github.com/V3x0r/CVE-2023-50643", "creation_timestamp": "2024-01-17T18:40:36.000000Z"}, {"uuid": "d327236d-ebb4-4db9-910f-2abb7406d7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50445", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9846", "content": "#exploit\n1. CVE-2023-45185:\nRCE via insecure deserialisation in IBM i Access Client Solutions < 1.1.9\nhttps://github.com/afine-com/CVE-2023-45185\n\n2. CVE-2023-50445/CVE-2023-50919:\nGL.iNet Unauthenticated RCE\nhttps://packetstormsecurity.com/files/176708/GL.iNet-Unauthenticated-Remote-Command-Execution.html\n\n3. CVE-2024 -20698:\nWindows Kernel EoP\nhttps://github.com/RomanRybachek/CVE-2024-20698", "creation_timestamp": "2024-01-25T12:47:06.000000Z"}, {"uuid": "14c350c0-a40d-445c-8ce6-bdd0c5e9e98f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50916", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9765", "content": "#exploit\n1. Capturing the First Flag in Google's New v8CTF\nhttps://www.madstacks.dev/posts/Start-Your-Engines-Capturing-the-First-Flag-in-Google's-New-v8CTF\n\n2. CVE-2023-50916:\nAuthentication Coercion Vulnerability in Kyocera Device Manager\nhttps://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-50916-authentication-coercion-vulnerability-in-kyocera-device-manager\n\n3. CVE-2023-20573:\nA privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests...\nhttps://github.com/Freax13/cve-2023-20573-poc", "creation_timestamp": "2024-01-12T01:36:25.000000Z"}, {"uuid": "03d22a4f-ef79-4161-a477-0f3a35086f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10008", "content": "#exploit\n1. CVE-2024-0811:\nChrome pageCapture.saveAsMHTML() Extension API Blocked Origin Bypass\nhttps://packetstormsecurity.com/files/177172/Chrome-chrome.pageCapture.saveAsMHTML-Extension-API-Blocked-Origin-Bypass.html\n\n2. CVE-2023-50387:\nKeyTrap in DNS/DNSSEC\nhttps://github.com/knqyf263/CVE-2023-50387\n\n3. CVE-2024-22369:\nApache Camel Unsafe Deserialization\nhttps://github.com/oscerd/CVE-2024-22369", "creation_timestamp": "2024-02-20T14:41:20.000000Z"}, {"uuid": "ee8dfae4-ef1e-4631-b68a-780bd34e3fac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10069", "content": "#exploit\n1. CVE-2023-50386:\nApache Solr Backup/Restore APIs RCE\nhttps://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC\n\n2. Buffer Overflow:\nExploiting Easy RM to MP3 Converter\nhttps://vandanpathak.com/kernels-and-buffers/buffer-overflow-exploiting-easy-rm-to-mp3-converter", "creation_timestamp": "2024-03-26T14:32:38.000000Z"}, {"uuid": "f597d5a2-197c-4e25-b8b0-87c9b40ee798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50969", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10261", "content": "#exploit\n1. CVE-2023-50969:\nImperva SecureSphere WAF Bypass for POST Data Inspection Rules\nhttps://www.hoyahaxa.com/2024/03/imperva-waf-bypass-cve-2023-50969.html\n\n2. CVE-2023-42931:\nLPE through Apple macOS filesystems\nhttps://www.alter-solutions.fr/blog/local-privilege-escalating-my-way-to-root-throught-apple-macos-filesystems", "creation_timestamp": "2024-04-02T10:58:01.000000Z"}, {"uuid": "684dcddf-cef1-4f33-9ae8-fa2f6ed28631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50915", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/10295", "content": "#exploit\nCVE-2023-50914, CVE-2023-50915:\nPrivilege Escalation via Insecure Inter-Process Communication/DoS in CD Projekt Red\u2019s Gaming Platform\nhttps://www.anvilsecure.com/blog/galactical-bug-hunting-how-we-discovered-new-issues-in-cd-projekt-reds-gaming-platform.html", "creation_timestamp": "2024-05-02T04:09:16.000000Z"}, {"uuid": "749e0484-d081-472b-87b6-e0fca38a3d1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50914", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/10295", "content": "#exploit\nCVE-2023-50914, CVE-2023-50915:\nPrivilege Escalation via Insecure Inter-Process Communication/DoS in CD Projekt Red\u2019s Gaming Platform\nhttps://www.anvilsecure.com/blog/galactical-bug-hunting-how-we-discovered-new-issues-in-cd-projekt-reds-gaming-platform.html", "creation_timestamp": "2024-05-02T04:09:16.000000Z"}, {"uuid": "ab475f89-1cb8-451b-81f4-68edac757bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5074", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9121", "content": "#exploit\n1. CVE-2023-5074:\nD-Link D-View Authentication Bypass\nhttps://github.com/codeb0ss/CVE-2023-5074-PoC\n\n2. CVE-2023-38139:\nWindows Kernel Refcount Overflow/UaF\nhttps://packetstormsecurity.com/files/174849/Microsoft-Windows-Kernel-Refcount-Overflow-Use-After-Free.html", "creation_timestamp": "2023-10-01T12:50:40.000000Z"}, {"uuid": "ba2a21e3-2667-412f-8be6-58dd1ee0385f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9295", "content": "#exploit\n1. Wyze Cam v3 RCE Exploit\nhttps://github.com/blasty/unwyze\n\n2. CVE-2023-5044:\nKubernetes ingress-nginx <1.9.0 - API command injection\nhttps://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044\n]-> https://github.com/r0binak/CVE-2023-5044\n\n3. CVE-2023-46747:\nF5 BIG-IP Unauthenticated RCE/Authentication bypass\nhttps://github.com/AliBrTab/CVE-2023-46747-POC\n]-> https://github.com/fu2x2000/CVE-2023-46747", "creation_timestamp": "2023-11-08T12:37:14.000000Z"}, {"uuid": "b5376b4b-f141-447f-869c-60ba844cb8f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50428", "type": "seen", "source": "Telegram/Sbeol9kZByHrffO_5QzU_Rr0V0c4ub_NzYd0UlMqgU2WmOs", "content": "", "creation_timestamp": "2023-12-11T15:12:17.000000Z"}, {"uuid": "4aa56ec5-20e9-406a-bb0a-ec40effd94da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50254", "type": "published-proof-of-concept", "source": "https://t.me/LearnExploit/5802", "content": "CVE-2023-50254 PoC Exploit for Deepin-reader RCE\n\nPOC\n\nRead\n\n#CVE #POC #Exploit \n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "creation_timestamp": "2023-12-23T11:53:32.000000Z"}, {"uuid": "7d9f7669-ea16-45dc-96ad-bab59faa74ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/LearnExploit/5788", "content": "PoC for CVE-2023-50164 - Proof of Concept for Path Traversal in Apache Struts \n\nGithub\n\n#POC #CVE \n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "creation_timestamp": "2023-12-20T13:44:31.000000Z"}, {"uuid": "83c7a9bf-0a45-4b1f-8ea0-d37f8bc2a271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2260", "content": "#exploit\n1. CVE-2023-50164:\nApache Struts2 Exploit\nhttps://xz.aliyun.com/t/13172\n\n2. CVE-2023-31546:\nDedeBIZ v6.0.3 XSS vulnerability\nhttps://github.com/ran9ege/CVE-2023-31546/blob/main/CVE-2023-31546.md\n\n3. Exploits with pwntools library in Python3. ROP, BOF, SHELLCODE\nhttps://github.com/davidenetti/SoftwareSecurityNotes", "creation_timestamp": "2024-08-16T08:56:12.000000Z"}, {"uuid": "b838db6c-bdf3-4ed7-b76d-1505735e4412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50071", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2285", "content": "#exploit\n1. CVE-2023-50071:\nMultiple SQL injection in Customer Support System 1.0\nhttps://github.com/geraldoalcantara/CVE-2023-50071\n\n2. CVE-2023-46998:\nCross Site Scripting in Bootbox.js 3.2-6.0\nhttps://github.com/soy-oreocato/CVE-2023-46998", "creation_timestamp": "2024-08-16T08:57:34.000000Z"}, {"uuid": "6b5bbe47-b23a-49ee-bb0c-6354d1942ddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50917", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2301", "content": "#exploit\n1. CVE-2023-50917:\nMajorDoMo Unauthenticated RCE\nhttps://github.com/Chocapikk/CVE-2023-50917\n\n2. CVE-2023-41772:\nUIFuckUp exploit to gain system privileges as user on Windows 10 (>=1809) and 11\nhttps://github.com/R41N3RZUF477/CVE-2023-41772\n\n3. CVE-2023-49786:\nAsterisk 20.1.0 - DoS via DTLS\nhttps://packetstormsecurity.com/files/176251/Asterisk-20.1.0-Denial-Of-Service.html", "creation_timestamp": "2024-08-16T08:57:35.000000Z"}, {"uuid": "673be19e-3529-4285-8c7d-822e75292d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50072", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2320", "content": "#exploit\n1. CVE-2023-50072\nXSS vulnerability in OpenKM ver. 7.1.40\nhttps://github.com/ahrixia/CVE-2023-50072\n\n2. CVE-2020-24186:\nWordPress wpDiscuz 7.0.4 RCE\nhttps://github.com/hev0x/CVE-2020-24186-WordPress-wpDiscuz-7.0.4-RCE\n]-> reverse shell upload: https://github.com/substing/CVE-2020-24186_reverse_shell_upload", "creation_timestamp": "2024-08-16T08:57:36.000000Z"}, {"uuid": "3d56dd7b-0e94-489d-ad69-b4d9cf20b3ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1595", "content": "#exploit\n1. Wyze Cam v3 RCE Exploit\nhttps://github.com/blasty/unwyze\n\n2. CVE-2023-5044:\nKubernetes ingress-nginx <1.9.0 - API command injection\nhttps://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044\n]-> https://github.com/r0binak/CVE-2023-5044\n\n3. CVE-2023-46747:\nF5 BIG-IP unauthenticated RCE and authentication bypass\nhttps://github.com/AliBrTab/CVE-2023-46747-POC", "creation_timestamp": "2024-08-16T08:43:26.000000Z"}, {"uuid": "2dccce32-eaa1-4801-bda9-2ff3e55928d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50445", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2568", "content": "#exploit\n1. CVE-2023-45185:\nRCE via insecure deserialisation in IBM i Access Client Solutions < 1.1.9\nhttps://github.com/afine-com/CVE-2023-45185\n\n2. CVE-2023-50445/CVE-2023-50919:\nGL.iNet Unauthenticated RCE\nhttps://packetstormsecurity.com/files/176708/GL.iNet-Unauthenticated-Remote-Command-Execution.html\n\n3. CVE-2024-20698:\nWindows Kernel EoP\nhttps://github.com/RomanRybachek/CVE-2024-20698", "creation_timestamp": "2024-08-16T09:02:40.000000Z"}, {"uuid": "0cb7bcec-76d1-49f0-b9da-46f132df1aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5074", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1218", "content": "#exploit\n1. CVE-2023-5074:\nD-Link D-View Authentication Bypass\nhttps://github.com/codeb0ss/CVE-2023-5074-PoC\n\n2. CVE-2023-38139:\nWindows Kernel Refcount Overflow/UaF\nhttps://packetstormsecurity.com/files/174849/Microsoft-Windows-Kernel-Refcount-Overflow-Use-After-Free.html", "creation_timestamp": "2024-08-16T08:30:30.000000Z"}, {"uuid": "64f02d79-c099-4f5a-a6b6-f9e0bb5cb2ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50919", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2568", "content": "#exploit\n1. CVE-2023-45185:\nRCE via insecure deserialisation in IBM i Access Client Solutions < 1.1.9\nhttps://github.com/afine-com/CVE-2023-45185\n\n2. CVE-2023-50445/CVE-2023-50919:\nGL.iNet Unauthenticated RCE\nhttps://packetstormsecurity.com/files/176708/GL.iNet-Unauthenticated-Remote-Command-Execution.html\n\n3. CVE-2024-20698:\nWindows Kernel EoP\nhttps://github.com/RomanRybachek/CVE-2024-20698", "creation_timestamp": "2024-08-16T09:02:40.000000Z"}, {"uuid": "40f4fe36-2c52-4ff2-920c-b1c0acba66ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50916", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2480", "content": "#exploit\n1. Capturing the First Flag in Google's New v8CTF\nhttps://www.madstacks.dev/posts/Start-Your-Engines-Capturing-the-First-Flag-in-Google's-New-v8CTF\n\n2. CVE-2023-50916:\nAuthentication Coercion Vulnerability in Kyocera Device Manager\nhttps://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-50916-authentication-coercion-vulnerability-in-kyocera-device-manager\n\n3. CVE-2023-20573:\nA privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests...\nhttps://github.com/Freax13/cve-2023-20573-poc", "creation_timestamp": "2024-08-16T09:01:21.000000Z"}, {"uuid": "88bba130-07ef-4ab7-a556-10bb4cabea11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50643", "type": "seen", "source": "https://t.me/Rootsec_2/2619", "content": "#exploit\n1. CVE-2023-5347, CVE-2023-5376:\nKorenix JetNet Series Unauthenticated Access\nhttps://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html\n\n2. CVE-2023-51252:\nXSS vulnerability caused by file uploads in PublicCMS V4.0\nhttps://github.com/sanluan/PublicCMS/issues/79\n\n3. CVE-2023-50643:\nArbitrary code execution in MacOS Evernote\nhttps://github.com/V3x0r/CVE-2023-50643", "creation_timestamp": "2024-08-16T09:09:02.000000Z"}, {"uuid": "ca3b7dcf-08cf-4459-aacf-4b5424faf4b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50969", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2796", "content": "#exploit\n1. CVE-2023-50969:\nImperva SecureSphere WAF Bypass for POST Data Inspection Rules\nhttps://www.hoyahaxa.com/2024/03/imperva-waf-bypass-cve-2023-50969.html\n\n2. CVE-2023-42931:\nLPE through Apple macOS filesystems\nhttps://www.alter-solutions.fr/blog/local-privilege-escalating-my-way-to-root-throught-apple-macos-filesystems", "creation_timestamp": "2024-08-16T09:16:38.000000Z"}, {"uuid": "3ae87c63-3881-4606-933c-4ed28ccd1dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50564", "type": "published-proof-of-concept", "source": "https://t.me/haj3imad/178", "content": "https://github.com/xpltive/CVE-2023-50564\n\nPluck-CMS v4.7.18 RCE exploit\n#github #poc", "creation_timestamp": "2024-12-22T16:25:51.000000Z"}, {"uuid": "702907d9-8d76-4024-9d23-a888754c7374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50072", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/109", "content": "https://github.com/ahrixia/CVE-2023-50072\n\nA stored cross-site scripting (XSS) vulnerability exists in OpenKM version 7.1.40.\n\n#github  #exploit  #XSS", "creation_timestamp": "2024-12-21T15:53:25.000000Z"}, {"uuid": "4cd6849a-90aa-4f23-8682-8c9b74ecb762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50564", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/241", "content": "https://github.com/xpltive/CVE-2023-50564\n\nPluck-CMS v4.7.18 RCE exploit\n#github #poc", "creation_timestamp": "2024-12-22T17:04:10.000000Z"}, {"uuid": "672a6ce9-5dda-4d8b-8793-7371f58897f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5009", "type": "seen", "source": "https://t.me/secmedia/1390", "content": "\u0412 GitLab Community Edition \u0438 Enterprise Edition \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 13.12 \u043f\u043e 16.2.7 \u0438 \u0441 16.3 \u043f\u043e 16.3.4 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-5009 \u0438 \u043e\u0446\u0435\u043d\u043a\u0443 9.6 \u043f\u043e CVSS.", "creation_timestamp": "2023-09-21T14:18:21.000000Z"}, {"uuid": "d5502b11-abf1-4483-bf33-272355be3b1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50447", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4225", "content": "Pillow\u2019s Critical Flaw: CVE-2023-50447 Exposes Python Projects to Risk https://securityonline.info/pillows-critical-flaw-cve-2023-50447-exposes-python-projects-to-risk/", "creation_timestamp": "2026-08-02T09:00:04.529571Z"}, {"uuid": "d34ed749-dc2f-494b-8092-6dfae4520d41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4103", "content": "cve-2023-50164-poc: Proof of Concept for Path Traversal in Apache Struts (\"CVE-2023-50164\") https://github.com/dwisiswant0/cve-2023-50164-poc", "creation_timestamp": "2026-08-02T10:08:43.377626Z"}, {"uuid": "c6c9850b-6be0-4748-bef2-881419ecd895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://bsky.app/profile/open-neurosecurity.org/post/3mmgo6knlmk2f", "content": "DNS highjacking can also affects a wide range of consumer devices such as the PS4 and PS5 gaming consoles, through unpatched userland apps supporting Javascript, including the 'Netflix' app. \ud83d\udea8\n\nRelated CVEs :\n\nCVE-2017-7117\nCVE-2018-4441 \nCVE-2023-50224", "creation_timestamp": "2026-05-22T09:55:58.332694Z"}, {"uuid": "2ee7dd0a-5a10-4aa3-b569-d3d911b8f4b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2029", "content": "PoC. Apache Struts Remote Code Execution Vulnerability ( S2-066 CVE-2023-50164)\n\nhttps://trganda.github.io/notes/security/vulnerabilities/apache-struts/Apache-Struts-Remote-Code-Execution-Vulnerability-(-S2-066-CVE-2023-50164)", "creation_timestamp": "2026-08-04T02:00:03.777115Z"}, {"uuid": "1383984b-727a-49d4-8bb6-79b15473bdf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2029", "content": "PoC. Apache Struts Remote Code Execution Vulnerability ( S2-066 CVE-2023-50164)\n\nhttps://trganda.github.io/notes/security/vulnerabilities/apache-struts/Apache-Struts-Remote-Code-Execution-Vulnerability-(-S2-066-CVE-2023-50164)", "creation_timestamp": "2026-08-05T00:00:58.550680Z"}, {"uuid": "fb8ec058-040c-4495-84ea-7328c50d5d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-5072", "type": "published-proof-of-concept", "source": "https://github.com/google/security-research/security/advisories/GHSA-4jq9-2xhw-jpx7", "content": "", "creation_timestamp": "2023-11-14T14:53:20.000000Z"}, {"uuid": "cee8c243-bbd8-4136-83f0-3ed6af02311d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-50251", "type": "published-proof-of-concept", "source": "https://github.com/dompdf/php-svg-lib/security/advisories/GHSA-ff5x-7qg5-vwf2", "content": "", "creation_timestamp": "2023-12-12T14:22:32.000000Z"}, {"uuid": "9f29b23f-f3a4-4d5c-8fde-1b6ce502a973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-50262", "type": "published-proof-of-concept", "source": "https://github.com/dompdf/dompdf/security/advisories/GHSA-3qx2-6f78-w2j2", "content": "", "creation_timestamp": "2023-12-13T14:08:21.000000Z"}, {"uuid": "54c34eea-ae10-49db-b26e-58b9e91070c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-50715", "type": "published-proof-of-concept", "source": "https://github.com/home-assistant/core/security/advisories/GHSA-jqpc-rc7g-vf83", "content": "", "creation_timestamp": "2023-12-14T22:04:05.000000Z"}, {"uuid": "5d0897f8-7e97-40dd-8d3e-2e1220f35b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-50245", "type": "published-proof-of-concept", "source": "https://github.com/afichet/openexr-viewer/security/advisories/GHSA-99jg-r3f4-rpxj", "content": "", "creation_timestamp": "2023-12-10T17:02:05.000000Z"}, {"uuid": "0a50d4ab-3865-4e20-864b-038fbf1aac69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "creation_timestamp": "2026-05-27T00:00:00.000000Z"}, {"uuid": "5e906569-516d-40e4-a1a6-4cae6cef5096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-03)", "content": "", "creation_timestamp": "2026-06-03T00:00:00.000000Z"}, {"uuid": "7c98c70e-457a-4fb5-8c87-22bc02734511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50360", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mnkq7kahtd2r", "content": "CVE-2023-50360 - High-severity SQLi in Qnap Video Station. CVSS 8.8. Authenticated users can inject malicious code. Update to Video Station 5.8.1+ immediately. #CVE #Qnap #infosec\n\nhttps://www.valtersit.com/cve/CVE-2023-50360/", "creation_timestamp": "2026-06-05T18:08:09.238353Z"}, {"uuid": "6dd36b0e-4dfe-4501-96ea-3fbc1bc1fc6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-16)", "content": "", "creation_timestamp": "2026-08-17T10:00:24.759911Z"}, {"uuid": "95f37f99-b981-45f7-b2ac-1cbd3ffbb633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-13)", "content": "", "creation_timestamp": "2026-06-13T00:00:00.000000Z"}, {"uuid": "2c6462be-c5aa-43d5-8e5f-52f1f331b286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5074", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-14)", "content": "", "creation_timestamp": "2026-06-14T00:00:00.000000Z"}, {"uuid": "0c97cca1-411c-4dda-a65d-4faa0c28e2d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50780", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3modj3fhfbl2f", "content": "\ud83d\udccc CVE-2023-50780 - Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticated Jolokia ... https://www.cyberhub.blog/cves/CVE-2023-50780", "creation_timestamp": "2026-06-15T14:37:20.609664Z"}, {"uuid": "52db06a6-5383-4366-822d-cd42ab25f08b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/linuxkalii/701", "content": "\ud83d\udcbb \u0410\u0442\u0430\u043a\u0430 KeyTrap \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f DNS-\u0441\u0435\u0440\u0432\u0435\u0440\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u043d\u0435\u043c\u0435\u0446\u043a\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 DNSSEC \u2014 \u043d\u0430\u0431\u043e\u0440\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 DNS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0435\u0433\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\u0410\u0442\u0430\u043a\u0430 KeyTrap, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0430\u044f \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f DNS-\u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0435\u043c\u0443 1 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\n\ud83d\uddc4\u041a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0430 KeyTrap\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 DNSSEC \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434 \u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043a\u0430\u043a CVE-2023-50387. \u0415\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430 \u043e\u0446\u0435\u043d\u043a\u0430 7,5 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u0438 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u00ab\u0432\u044b\u0441\u043e\u043a\u0438\u0439\u00bb.\n\n\u0421\u0443\u0442\u044c KeyTrap. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 DNS-\u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0438\u0445 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043f\u0430\u043a\u0435\u0442\u043e\u043c. \u0414\u0430\u043b\u0435\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c DNS-\u0437\u0430\u043f\u0438\u0441\u044c \u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432 \u043e\u0442\u0432\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u0443\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e DNS-\u0437\u0430\u043f\u0438\u0441\u044c. \u041f\u043e\u0434\u043f\u0438\u0441\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0447\u0442\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0435\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0439 DNS-\u0441\u0435\u0440\u0432\u0435\u0440 \u0437\u0430\u0432\u0438\u0441\u0430\u0435\u0442 \u0441 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 100%.\n\n\u0412 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u041f\u041e \u043d\u0430 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u044d\u0442\u0430 \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u0437\u0430\u0432\u0438\u0441\u043d\u0443\u0442\u044c \u043d\u0430 \u0441\u0440\u043e\u043a \u0434\u043e 16 \u0447\u0430\u0441\u043e\u0432. \u0410\u0442\u0430\u043a\u0430 KeyTrap \u043c\u043e\u0436\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u0438\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0435\u0431-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0443 \u0432\u0441\u0435\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043d\u043e \u0438 \u043f\u043e\u043c\u0435\u0448\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0441\u043f\u0430\u043c\u0430, \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 (PKI) \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u043c\u0435\u0436\u0434\u043e\u043c\u0435\u043d\u043d\u0430\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f (RPKI).\n\nKeyTrap \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u00ab\u0441\u0430\u043c\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0438\u0437 \u0430\u0442\u0430\u043a \u043d\u0430 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b\u00bb. \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0447\u0442\u043e \u0438\u0437\u044a\u044f\u043d\u044b \u0432 \u043b\u043e\u0433\u0438\u043a\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0435\u043b\u0430\u044e\u0442 \u044d\u0442\u0443 \u0430\u0442\u0430\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0435\u0449\u0435 \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 DNSSEC, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0436 \u0432 1999 \u0433\u043e\u0434\u0443. \n\n\n\ud83d\uddc4\u0417\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 KeyTrap\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u0432\u0441\u0435\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 DNS-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432. \u0417\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-50387 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f PowerDNS, NLnet Labs Unbound \u0438 Internet Systems Consortium BIND9. \u0422\u0430\u043a \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u0432\u044b \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440, \u0441\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n@linuxkalii", "creation_timestamp": "2026-08-06T04:00:05.125966Z"}, {"uuid": "17014b3c-373c-49ce-8b51-b58516497d4c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/09a45478-1569-483a-8966-18a0d6a225cd", "content": "", "creation_timestamp": "2026-06-19T12:45:26.360252Z"}, {"uuid": "bb803d60-c7ee-4563-afeb-6ca37cf74725", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dae5dc10-edc0-4bed-ba76-1c5c9c0c8a27", "content": "", "creation_timestamp": "2026-06-19T12:45:45.726153Z"}, {"uuid": "18f4d15f-3684-4804-b77d-c68f674fd4df", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5074", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b6ba0f8e-e6e1-44f4-8e75-ecfc6ff8b7c9", "content": "", "creation_timestamp": "2026-06-19T12:45:44.335596Z"}, {"uuid": "85b2df82-3f47-4f67-b85c-636ab5804e41", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50358", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/15a4ae43-9ad0-4fe7-a666-b423a588a40a", "content": "", "creation_timestamp": "2026-06-19T12:45:50.142097Z"}, {"uuid": "5baae481-8cf4-4530-8d11-48d40b8c8ed1", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50428", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/67a13fec-f3f6-46fd-b181-1d0ba8e5d8b5", "content": "", "creation_timestamp": "2026-06-19T12:46:44.326386Z"}, {"uuid": "2e5cf160-c83d-4102-8757-f1afa86f4acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-09)", "content": "", "creation_timestamp": "2026-08-10T10:00:08.000131Z"}, {"uuid": "d6730e2d-e4fb-4a93-bcfc-0f64e12d805d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50589", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mowon5ay4e2m", "content": "\ud83d\udccc CVE-2023-50589 - Grupo Embras GEOSIAP ERP v2.2.167.02 was discovered to contain a SQL injection vulnerability via the codLogin parameter on the login page. https://www.cyberhub.blog/cves/CVE-2023-50589", "creation_timestamp": "2026-06-23T05:37:06.296897Z"}, {"uuid": "05e5c747-6cb8-4102-a29b-d8ff81a01714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50578", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mowqcsp4hh2p", "content": "\ud83d\udccc CVE-2023-50578 - Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/list.do. https://www.cyberhub.blog/cves/CVE-2023-50578", "creation_timestamp": "2026-06-23T06:07:07.601235Z"}, {"uuid": "fb5a090b-eefd-4ec8-8a49-7d14e3582683", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5074", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a1078acb-a7e6-402d-be6b-56c96c462043", "content": "", "creation_timestamp": "2026-06-23T14:03:12.840660Z"}, {"uuid": "bcb71b8f-cf06-4611-9f46-c625c125f2e3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50358", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/94b74466-2e7c-41c8-a331-2a273a2581ad", "content": "", "creation_timestamp": "2026-06-23T14:03:16.381773Z"}, {"uuid": "619b0a5b-cdf0-4b1f-a79e-fc267f6d9826", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/08ab1256-d512-403e-9e25-a2a472737c6b", "content": "", "creation_timestamp": "2026-06-23T14:03:51.702458Z"}, {"uuid": "7b02054d-e88f-4d4d-9143-5b76ee044ea7", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/29053fbe-43c1-4456-bd59-5d84122c8d32", "content": "", "creation_timestamp": "2026-06-23T14:03:13.766455Z"}, {"uuid": "933420b5-a7e5-42b1-9dfa-735c93be937d", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-50968", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/117b75d8-d5b9-4c17-b4c7-fc803d85f3a7", "content": "", "creation_timestamp": "2026-06-30T09:23:33.902085Z"}, {"uuid": "c9636376-a2bb-4f8e-9916-9bc7bd716de6", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-5074", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eb6772cb-120c-49f7-9ce4-07f9598ed6df", "content": "", "creation_timestamp": "2026-06-30T09:23:24.838586Z"}, {"uuid": "359f0000-29ee-4f4d-9185-9afea830b396", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-50358", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/98fa9144-4a06-4b85-8589-42a2f78b0187", "content": "", "creation_timestamp": "2026-06-30T10:22:29.111456Z"}, {"uuid": "19e50586-b257-49e2-a779-0bc070042b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50969", "type": "seen", "source": "https://t.me/ZerodayAlert/201", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Imperva SecureSphere \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u0432\u0435\u0440\u0438 \u0434\u043b\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 \u0438 XSS\n\n\ud83d\udea8 \u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Imperva SecureSphere \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-50969. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0442\u044c \u0432\u0435\u0431-\u0430\u0442\u0430\u043a\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0438 XSS.\n\n\ud83d\udcbb \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c HoyaHaxa \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0434\u0435\u0442\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044f \u043e\u0431\u0445\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u044b WAF \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c.\n\n\ud83c\udf29 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Imperva SecureSphere WAF 14.7.0.40 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0435\u0437 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442 26 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2024 \u0433\u043e\u0434\u0430. \u041e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 WAF Imperva Cloud \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #Imperva #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0432\u0435\u0431-\u0430\u0442\u0430\u043a\u0438\n\n@ZerodayAlert", "creation_timestamp": "2026-07-06T11:00:08.200498Z"}, {"uuid": "92901fd5-f84a-4376-83aa-9bc3e2c8f06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50358", "type": "seen", "source": "https://t.me/ZerodayAlert/170", "content": "CVE-2023-50358: \u0434\u044b\u0440\u0430 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 QNAP, \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u044b\u043d\u0435\u0442 \u043a\u0440\u043e\u0432\u044c\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0438\u043b\u0438 \u043f\u0440\u0435\u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0438\u0435?\n\n\ud83d\udcac \u0427\u0442\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\n\n\u2022 \u0412 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 QTS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 NAS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 QNAP, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-50358.\n\n\u2022 \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a NAS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443, \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0432\u0430\u0448\u0438 \u0434\u0430\u043d\u043d\u044b\u0435, \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438 \u0432\u0437\u044f\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c.\n\nQNAP \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u0430\u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430 \u0438 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0435\u0435 \u043a\u0430\u043a \u00ab\u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438\u00bb. Palo Alto Networks \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0447\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u0430 \u0438 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0435\u0435 \u043a\u0430\u043a \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\u00bb.\n\n\ud83d\ude33 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c\n\n\u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0432\u0430\u0448\u0435\u0433\u043e NAS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \u0421\u043a\u0430\u0447\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 QNAP.\n\n#QNAP #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #ZeroDay #NAS #Security\n\n@ZerodayAlert", "creation_timestamp": "2026-07-06T11:00:13.333788Z"}, {"uuid": "78adb304-6492-41b2-885d-50a65ab2ca96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/ZerodayAlert/113", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Struts 2: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u044f\u0442 \u0437\u0430\u0449\u0438\u0442\u0443 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u26a1\ufe0f \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-50164 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0432\u0435\u0431-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Apache Struts 2, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\ud83d\udc40 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043e\u0431\u0445\u043e\u0434\u044f \u043f\u0443\u0442\u044c \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\ud83d\udcac \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Apache Struts \u0441 2.0.0 \u043f\u043e 2.5.32 \u0438 \u0441 6.0.0 \u043f\u043e 6.3.0.1, \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0439 2.5.33 \u0438 6.3.0.2.\n\n#ApacheStruts2 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #RCE #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-06T11:00:14.869221Z"}, {"uuid": "5118517b-66cf-49e6-9c23-63a75cface7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50969", "type": "seen", "source": "https://t.me/ZerodayAlert/201", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Imperva SecureSphere \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u0432\u0435\u0440\u0438 \u0434\u043b\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 \u0438 XSS\n\n\ud83d\udea8 \u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Imperva SecureSphere \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-50969. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0442\u044c \u0432\u0435\u0431-\u0430\u0442\u0430\u043a\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0438 XSS.\n\n\ud83d\udcbb \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c HoyaHaxa \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0434\u0435\u0442\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044f \u043e\u0431\u0445\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u044b WAF \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c.\n\n\ud83c\udf29 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Imperva SecureSphere WAF 14.7.0.40 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0435\u0437 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442 26 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2024 \u0433\u043e\u0434\u0430. \u041e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 WAF Imperva Cloud \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #Imperva #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0432\u0435\u0431-\u0430\u0442\u0430\u043a\u0438\n\n@ZerodayAlert", "creation_timestamp": "2026-07-07T00:00:20.231392Z"}, {"uuid": "ced209de-cdf9-499b-9c15-86e9bf8d5788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50358", "type": "seen", "source": "https://t.me/ZerodayAlert/170", "content": "CVE-2023-50358: \u0434\u044b\u0440\u0430 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 QNAP, \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u044b\u043d\u0435\u0442 \u043a\u0440\u043e\u0432\u044c\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0438\u043b\u0438 \u043f\u0440\u0435\u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0438\u0435?\n\n\ud83d\udcac \u0427\u0442\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\n\n\u2022 \u0412 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 QTS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 NAS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 QNAP, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-50358.\n\n\u2022 \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a NAS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443, \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0432\u0430\u0448\u0438 \u0434\u0430\u043d\u043d\u044b\u0435, \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438 \u0432\u0437\u044f\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c.\n\nQNAP \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u0430\u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430 \u0438 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0435\u0435 \u043a\u0430\u043a \u00ab\u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438\u00bb. Palo Alto Networks \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0447\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u0430 \u0438 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0435\u0435 \u043a\u0430\u043a \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\u00bb.\n\n\ud83d\ude33 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c\n\n\u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0432\u0430\u0448\u0435\u0433\u043e NAS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \u0421\u043a\u0430\u0447\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 QNAP.\n\n#QNAP #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #ZeroDay #NAS #Security\n\n@ZerodayAlert", "creation_timestamp": "2026-07-07T00:00:21.421678Z"}, {"uuid": "166264a5-c14c-4969-8d8a-e55122e6b6dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/ZerodayAlert/113", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Struts 2: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u044f\u0442 \u0437\u0430\u0449\u0438\u0442\u0443 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u26a1\ufe0f \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-50164 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0432\u0435\u0431-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Apache Struts 2, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\ud83d\udc40 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043e\u0431\u0445\u043e\u0434\u044f \u043f\u0443\u0442\u044c \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\ud83d\udcac \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Apache Struts \u0441 2.0.0 \u043f\u043e 2.5.32 \u0438 \u0441 6.0.0 \u043f\u043e 6.3.0.1, \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0439 2.5.33 \u0438 6.3.0.2.\n\n#ApacheStruts2 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #RCE #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-07T00:00:23.146008Z"}, {"uuid": "1216d74a-843c-4ea7-9c01-6a4fdbbc4c5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/linuxkalii/701", "content": "\ud83d\udcbb \u0410\u0442\u0430\u043a\u0430 KeyTrap \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f DNS-\u0441\u0435\u0440\u0432\u0435\u0440\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u043d\u0435\u043c\u0435\u0446\u043a\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 DNSSEC \u2014 \u043d\u0430\u0431\u043e\u0440\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 DNS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0435\u0433\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\u0410\u0442\u0430\u043a\u0430 KeyTrap, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0430\u044f \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f DNS-\u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0435\u043c\u0443 1 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\n\ud83d\uddc4\u041a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0430 KeyTrap\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 DNSSEC \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434 \u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043a\u0430\u043a CVE-2023-50387. \u0415\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430 \u043e\u0446\u0435\u043d\u043a\u0430 7,5 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u0438 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u00ab\u0432\u044b\u0441\u043e\u043a\u0438\u0439\u00bb.\n\n\u0421\u0443\u0442\u044c KeyTrap. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 DNS-\u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0438\u0445 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043f\u0430\u043a\u0435\u0442\u043e\u043c. \u0414\u0430\u043b\u0435\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c DNS-\u0437\u0430\u043f\u0438\u0441\u044c \u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432 \u043e\u0442\u0432\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u0443\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e DNS-\u0437\u0430\u043f\u0438\u0441\u044c. \u041f\u043e\u0434\u043f\u0438\u0441\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0447\u0442\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0435\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0439 DNS-\u0441\u0435\u0440\u0432\u0435\u0440 \u0437\u0430\u0432\u0438\u0441\u0430\u0435\u0442 \u0441 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 100%.\n\n\u0412 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u041f\u041e \u043d\u0430 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u044d\u0442\u0430 \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u0437\u0430\u0432\u0438\u0441\u043d\u0443\u0442\u044c \u043d\u0430 \u0441\u0440\u043e\u043a \u0434\u043e 16 \u0447\u0430\u0441\u043e\u0432. \u0410\u0442\u0430\u043a\u0430 KeyTrap \u043c\u043e\u0436\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u0438\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0435\u0431-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0443 \u0432\u0441\u0435\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043d\u043e \u0438 \u043f\u043e\u043c\u0435\u0448\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0441\u043f\u0430\u043c\u0430, \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 (PKI) \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u043c\u0435\u0436\u0434\u043e\u043c\u0435\u043d\u043d\u0430\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f (RPKI).\n\nKeyTrap \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u00ab\u0441\u0430\u043c\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0438\u0437 \u0430\u0442\u0430\u043a \u043d\u0430 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b\u00bb. \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0447\u0442\u043e \u0438\u0437\u044a\u044f\u043d\u044b \u0432 \u043b\u043e\u0433\u0438\u043a\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0435\u043b\u0430\u044e\u0442 \u044d\u0442\u0443 \u0430\u0442\u0430\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0435\u0449\u0435 \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 DNSSEC, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0436 \u0432 1999 \u0433\u043e\u0434\u0443. \n\n\n\ud83d\uddc4\u0417\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 KeyTrap\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u0432\u0441\u0435\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 DNS-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432. \u0417\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-50387 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f PowerDNS, NLnet Labs Unbound \u0438 Internet Systems Consortium BIND9. \u0422\u0430\u043a \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u0432\u044b \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440, \u0441\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n@linuxkalii", "creation_timestamp": "2026-08-07T00:40:12.095050Z"}, {"uuid": "c7fb8031-4196-4459-8986-32021c53691d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50969", "type": "published-proof-of-concept", "source": "https://t.me/ZerodayAlert/201", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Imperva SecureSphere \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u0432\u0435\u0440\u0438 \u0434\u043b\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 \u0438 XSS\n\n\ud83d\udea8 \u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Imperva SecureSphere \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-50969. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0442\u044c \u0432\u0435\u0431-\u0430\u0442\u0430\u043a\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0438 XSS.\n\n\ud83d\udcbb \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c HoyaHaxa \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0434\u0435\u0442\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044f \u043e\u0431\u0445\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u044b WAF \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c.\n\n\ud83c\udf29 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Imperva SecureSphere WAF 14.7.0.40 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0435\u0437 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442 26 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2024 \u0433\u043e\u0434\u0430. \u041e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 WAF Imperva Cloud \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #Imperva #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0432\u0435\u0431-\u0430\u0442\u0430\u043a\u0438\n\n@ZerodayAlert", "creation_timestamp": "2026-07-12T01:00:04.163517Z"}, {"uuid": "36d0301d-c7bc-40cd-a2a7-9fb317bd9c1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50358", "type": "seen", "source": "https://t.me/ZerodayAlert/170", "content": "CVE-2023-50358: \u0434\u044b\u0440\u0430 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 QNAP, \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u044b\u043d\u0435\u0442 \u043a\u0440\u043e\u0432\u044c\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0438\u043b\u0438 \u043f\u0440\u0435\u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0438\u0435?\n\n\ud83d\udcac \u0427\u0442\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\n\n\u2022 \u0412 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 QTS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 NAS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 QNAP, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-50358.\n\n\u2022 \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a NAS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443, \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0432\u0430\u0448\u0438 \u0434\u0430\u043d\u043d\u044b\u0435, \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438 \u0432\u0437\u044f\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c.\n\nQNAP \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u0430\u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430 \u0438 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0435\u0435 \u043a\u0430\u043a \u00ab\u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438\u00bb. Palo Alto Networks \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0447\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u0430 \u0438 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0435\u0435 \u043a\u0430\u043a \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\u00bb.\n\n\ud83d\ude33 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c\n\n\u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0432\u0430\u0448\u0435\u0433\u043e NAS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \u0421\u043a\u0430\u0447\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 QNAP.\n\n#QNAP #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #ZeroDay #NAS #Security\n\n@ZerodayAlert", "creation_timestamp": "2026-07-12T02:00:05.609894Z"}, {"uuid": "6004960c-2d45-4907-ae06-fa540170d64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/ZerodayAlert/113", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Struts 2: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u044f\u0442 \u0437\u0430\u0449\u0438\u0442\u0443 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u26a1\ufe0f \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-50164 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0432\u0435\u0431-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Apache Struts 2, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\ud83d\udc40 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043e\u0431\u0445\u043e\u0434\u044f \u043f\u0443\u0442\u044c \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\ud83d\udcac \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Apache Struts \u0441 2.0.0 \u043f\u043e 2.5.32 \u0438 \u0441 6.0.0 \u043f\u043e 6.3.0.1, \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0439 2.5.33 \u0438 6.3.0.2.\n\n#ApacheStruts2 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #RCE #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-12T04:00:04.628541Z"}, {"uuid": "53eed38e-7727-4600-8586-370aad95a4d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50969", "type": "published-proof-of-concept", "source": "https://t.me/ZerodayAlert/201", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Imperva SecureSphere \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u0432\u0435\u0440\u0438 \u0434\u043b\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 \u0438 XSS\n\n\ud83d\udea8 \u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Imperva SecureSphere \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-50969. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0442\u044c \u0432\u0435\u0431-\u0430\u0442\u0430\u043a\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0438 XSS.\n\n\ud83d\udcbb \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c HoyaHaxa \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0434\u0435\u0442\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044f \u043e\u0431\u0445\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u044b WAF \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c.\n\n\ud83c\udf29 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Imperva SecureSphere WAF 14.7.0.40 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0435\u0437 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442 26 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2024 \u0433\u043e\u0434\u0430. \u041e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 WAF Imperva Cloud \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #Imperva #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0432\u0435\u0431-\u0430\u0442\u0430\u043a\u0438\n\n@ZerodayAlert", "creation_timestamp": "2026-07-13T00:00:56.165482Z"}, {"uuid": "43a2a3d9-ea4d-437e-8d85-4cfaf26115d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50358", "type": "seen", "source": "https://t.me/ZerodayAlert/170", "content": "CVE-2023-50358: \u0434\u044b\u0440\u0430 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 QNAP, \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u044b\u043d\u0435\u0442 \u043a\u0440\u043e\u0432\u044c\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0438\u043b\u0438 \u043f\u0440\u0435\u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0438\u0435?\n\n\ud83d\udcac \u0427\u0442\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\n\n\u2022 \u0412 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 QTS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 NAS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 QNAP, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-50358.\n\n\u2022 \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a NAS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443, \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0432\u0430\u0448\u0438 \u0434\u0430\u043d\u043d\u044b\u0435, \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438 \u0432\u0437\u044f\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c.\n\nQNAP \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u0430\u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430 \u0438 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0435\u0435 \u043a\u0430\u043a \u00ab\u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438\u00bb. Palo Alto Networks \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0447\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u0430 \u0438 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0435\u0435 \u043a\u0430\u043a \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\u00bb.\n\n\ud83d\ude33 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c\n\n\u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0432\u0430\u0448\u0435\u0433\u043e NAS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \u0421\u043a\u0430\u0447\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 QNAP.\n\n#QNAP #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #ZeroDay #NAS #Security\n\n@ZerodayAlert", "creation_timestamp": "2026-07-13T00:00:54.413671Z"}, {"uuid": "9394f5ad-3a81-418b-95b2-5b2053b3169e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/ZerodayAlert/113", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Struts 2: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u044f\u0442 \u0437\u0430\u0449\u0438\u0442\u0443 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u26a1\ufe0f \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-50164 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0432\u0435\u0431-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Apache Struts 2, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\ud83d\udc40 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043e\u0431\u0445\u043e\u0434\u044f \u043f\u0443\u0442\u044c \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\ud83d\udcac \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Apache Struts \u0441 2.0.0 \u043f\u043e 2.5.32 \u0438 \u0441 6.0.0 \u043f\u043e 6.3.0.1, \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0439 2.5.33 \u0438 6.3.0.2.\n\n#ApacheStruts2 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #RCE #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-13T01:00:36.753071Z"}, {"uuid": "56d7853f-753b-44d0-aad5-77cc5240574f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50968", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-06)", "content": "", "creation_timestamp": "2026-08-07T10:51:45.373432Z"}, {"uuid": "208f6923-9395-49b2-971c-5837c58e4dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM", "content": "", "creation_timestamp": "2026-08-27T12:00:12.028515Z"}, {"uuid": "ab25e15a-60b4-4ee6-8416-462f6cce369a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50564", "type": "seen", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-27T12:00:11.008721Z"}, {"uuid": "fb151f7b-3cbd-4dee-83c3-44d55d668d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/divannyi_it/240", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432\u0441\u0435\u0433\u043e \u0437\u0430 22 \u043c\u0438\u043d\u0443\u0442\u044b\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 Cloudflare Application Security \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0442\u0447\u0451\u0442, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u00a0 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u041f\u043e \u044d\u0442\u043e\u043c\u0443 \u043e\u0442\u0447\u0451\u0442\u0443, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0431\u0435\u0440\u0443\u0442 \u0432 \u043e\u0431\u043e\u0440\u043e\u0442 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b (PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b) \u0447\u0435\u0440\u0435\u0437 22 \u043c\u0438\u043d\u0443\u0442\u044b \u043f\u043e\u0441\u043b\u0435 \u0438\u0445 \u0432\u044b\u0445\u043e\u0434\u0430.\n\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 Cloudflare \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438, \u0447\u0442\u043e \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442 57 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u0441\u0435\u043a\u0443\u043d\u0434\u0443 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0441\u0432\u0435\u0436\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 PoC.\u00a0 \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2023-50164, CVE-2022-33891, CVE-2023-29298, CVE-2023-38203, CVE-2023-26360, CVE-2023-35082.\u00a0\u00a0\n\n\u042d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u0431\u043e\u0440\u044c\u0431\u0430 \u0441 \u0442\u0430\u043a\u043e\u0439 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418-\u043f\u043e\u043c\u043e\u0449\u043d\u0438\u043a\u043e\u0432 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0430\u0432\u0438\u043b \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043d\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0434\u043b\u044f \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\u00a0\u00a0\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437 #\u0438\u0431 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u043e\u0442\u0447\u0451\u0442", "creation_timestamp": "2026-07-17T11:00:03.812307Z"}, {"uuid": "c34bf93d-3f53-478c-9839-f9300baa8609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/divannyi_it/240", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432\u0441\u0435\u0433\u043e \u0437\u0430 22 \u043c\u0438\u043d\u0443\u0442\u044b\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 Cloudflare Application Security \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0442\u0447\u0451\u0442, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u00a0 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u041f\u043e \u044d\u0442\u043e\u043c\u0443 \u043e\u0442\u0447\u0451\u0442\u0443, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0431\u0435\u0440\u0443\u0442 \u0432 \u043e\u0431\u043e\u0440\u043e\u0442 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b (PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b) \u0447\u0435\u0440\u0435\u0437 22 \u043c\u0438\u043d\u0443\u0442\u044b \u043f\u043e\u0441\u043b\u0435 \u0438\u0445 \u0432\u044b\u0445\u043e\u0434\u0430.\n\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 Cloudflare \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438, \u0447\u0442\u043e \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442 57 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u0441\u0435\u043a\u0443\u043d\u0434\u0443 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0441\u0432\u0435\u0436\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 PoC.\u00a0 \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2023-50164, CVE-2022-33891, CVE-2023-29298, CVE-2023-38203, CVE-2023-26360, CVE-2023-35082.\u00a0\u00a0\n\n\u042d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u0431\u043e\u0440\u044c\u0431\u0430 \u0441 \u0442\u0430\u043a\u043e\u0439 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418-\u043f\u043e\u043c\u043e\u0449\u043d\u0438\u043a\u043e\u0432 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0430\u0432\u0438\u043b \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043d\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0434\u043b\u044f \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\u00a0\u00a0\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437 #\u0438\u0431 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u043e\u0442\u0447\u0451\u0442", "creation_timestamp": "2026-07-18T00:00:31.883067Z"}, {"uuid": "07f42d43-7c78-4146-b3d9-97b0bf22bd42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/6874", "content": "CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited \u2013 thehackernews.com\n\nThu, 04 Sep 2025 18:03:00", "creation_timestamp": "2026-07-20T19:00:06.484112Z"}, {"uuid": "64144a95-f651-4925-86b2-444527ddf2ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/6874", "content": "CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited \u2013 thehackernews.com\n\nThu, 04 Sep 2025 18:03:00", "creation_timestamp": "2026-07-21T00:00:24.348029Z"}, {"uuid": "e28df8f2-d74a-45af-9d3c-e78727b583d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50969", "type": "seen", "source": "https://t.me/poheque/114", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Imperva SecureSphere Web Application Firewall, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0432 \u0433\u043e\u0441\u0441\u0435\u043a\u0442\u043e\u0440\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043a\u0440\u0443\u043f\u043d\u043e\u043c \u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0431\u0438\u0437\u043d\u0435\u0441\u0435.\n\nCVE-2023-50969\u00a0\u0438\u043c\u0435\u0435\u0442 CVSS 3.1: 9,8 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u0430 WAF \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 POST, \u0430 \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Imperva SecureSphere \u0431\u0435\u0437 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0426\u0435\u043d\u0442\u0440\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (ADC), \u0431\u044b\u043b\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 v14.7.0.40. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c Imperva Cloud WAF \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0435.\n\n\u041e\u0431\u0445\u043e\u0434 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 WAF \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0441 \u0434\u0432\u0443\u043c\u044f (\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435) \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u043c\u0438\u00a0Content-Encoding (\u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0445 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043e\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u044b \u043a \u0442\u0435\u043b\u0443 HTTP-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f, \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f:\u00a0br, compress, deflate \u0438 gzip).\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u00a0gzip, \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 WAF \u043c\u043e\u0436\u043d\u043e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e\u00a0 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u00a0Content-Encoding, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a\u00a0Content-Encoding: deflate.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 10 \u043d\u043e\u044f\u0431\u0440\u044f, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e 26 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432\u0438\u043b ADC \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-08-25T22:00:03.935009Z"}, {"uuid": "c572dc4e-4868-47be-a406-6a018a17923d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM", "content": "", "creation_timestamp": "2026-08-28T00:00:55.837540Z"}, {"uuid": "b6ed1324-f13a-44d2-b347-acf4636bf85d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50224", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/6874", "content": "CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited \u2013 thehackernews.com\n\nThu, 04 Sep 2025 18:03:00", "creation_timestamp": "2026-07-22T00:00:30.286726Z"}, {"uuid": "a2c2b9e4-c7a3-4238-8814-a3badd11d0e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50564", "type": "seen", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-28T00:00:54.660508Z"}, {"uuid": "8ebba60b-fbab-4644-9154-7cb39b5ee33b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50969", "type": "seen", "source": "https://t.me/poheque/114", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Imperva SecureSphere Web Application Firewall, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0432 \u0433\u043e\u0441\u0441\u0435\u043a\u0442\u043e\u0440\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043a\u0440\u0443\u043f\u043d\u043e\u043c \u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0431\u0438\u0437\u043d\u0435\u0441\u0435.\n\nCVE-2023-50969\u00a0\u0438\u043c\u0435\u0435\u0442 CVSS 3.1: 9,8 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u0430 WAF \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 POST, \u0430 \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Imperva SecureSphere \u0431\u0435\u0437 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0426\u0435\u043d\u0442\u0440\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (ADC), \u0431\u044b\u043b\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 v14.7.0.40. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c Imperva Cloud WAF \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0435.\n\n\u041e\u0431\u0445\u043e\u0434 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 WAF \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0441 \u0434\u0432\u0443\u043c\u044f (\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435) \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u043c\u0438\u00a0Content-Encoding (\u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0445 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043e\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u044b \u043a \u0442\u0435\u043b\u0443 HTTP-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f, \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f:\u00a0br, compress, deflate \u0438 gzip).\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u00a0gzip, \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 WAF \u043c\u043e\u0436\u043d\u043e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e\u00a0 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u00a0Content-Encoding, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a\u00a0Content-Encoding: deflate.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 10 \u043d\u043e\u044f\u0431\u0440\u044f, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e 26 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432\u0438\u043b ADC \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-08-26T00:00:07.990163Z"}, {"uuid": "89b04103-6e06-4bf8-8ab1-a482e42a1e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50564", "type": "published-proof-of-concept", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-29T00:00:15.450384Z"}, {"uuid": "ccf6ca35-2972-404d-a3f2-5ab933e06c26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/linuxkalii/701", "content": "\ud83d\udcbb \u0410\u0442\u0430\u043a\u0430 KeyTrap \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f DNS-\u0441\u0435\u0440\u0432\u0435\u0440\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u043d\u0435\u043c\u0435\u0446\u043a\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 DNSSEC \u2014 \u043d\u0430\u0431\u043e\u0440\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 DNS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0435\u0433\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\u0410\u0442\u0430\u043a\u0430 KeyTrap, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0430\u044f \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f DNS-\u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0435\u043c\u0443 1 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\n\ud83d\uddc4\u041a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0430 KeyTrap\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 DNSSEC \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434 \u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043a\u0430\u043a CVE-2023-50387. \u0415\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430 \u043e\u0446\u0435\u043d\u043a\u0430 7,5 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u0438 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u00ab\u0432\u044b\u0441\u043e\u043a\u0438\u0439\u00bb.\n\n\u0421\u0443\u0442\u044c KeyTrap. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 DNS-\u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0438\u0445 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043f\u0430\u043a\u0435\u0442\u043e\u043c. \u0414\u0430\u043b\u0435\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c DNS-\u0437\u0430\u043f\u0438\u0441\u044c \u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432 \u043e\u0442\u0432\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u0443\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e DNS-\u0437\u0430\u043f\u0438\u0441\u044c. \u041f\u043e\u0434\u043f\u0438\u0441\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0447\u0442\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0435\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0439 DNS-\u0441\u0435\u0440\u0432\u0435\u0440 \u0437\u0430\u0432\u0438\u0441\u0430\u0435\u0442 \u0441 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 100%.\n\n\u0412 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u041f\u041e \u043d\u0430 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u044d\u0442\u0430 \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u0437\u0430\u0432\u0438\u0441\u043d\u0443\u0442\u044c \u043d\u0430 \u0441\u0440\u043e\u043a \u0434\u043e 16 \u0447\u0430\u0441\u043e\u0432. \u0410\u0442\u0430\u043a\u0430 KeyTrap \u043c\u043e\u0436\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u0438\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0435\u0431-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0443 \u0432\u0441\u0435\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043d\u043e \u0438 \u043f\u043e\u043c\u0435\u0448\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0441\u043f\u0430\u043c\u0430, \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 (PKI) \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u043c\u0435\u0436\u0434\u043e\u043c\u0435\u043d\u043d\u0430\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f (RPKI).\n\nKeyTrap \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u00ab\u0441\u0430\u043c\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0438\u0437 \u0430\u0442\u0430\u043a \u043d\u0430 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b\u00bb. \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0447\u0442\u043e \u0438\u0437\u044a\u044f\u043d\u044b \u0432 \u043b\u043e\u0433\u0438\u043a\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0435\u043b\u0430\u044e\u0442 \u044d\u0442\u0443 \u0430\u0442\u0430\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0435\u0449\u0435 \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 DNSSEC, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0436 \u0432 1999 \u0433\u043e\u0434\u0443. \n\n\n\ud83d\uddc4\u0417\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 KeyTrap\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u0432\u0441\u0435\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 DNS-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432. \u0417\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-50387 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f PowerDNS, NLnet Labs Unbound \u0438 Internet Systems Consortium BIND9. \u0422\u0430\u043a \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u0432\u044b \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440, \u0441\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n@linuxkalii", "creation_timestamp": "2026-07-26T00:00:13.422345Z"}, {"uuid": "e2a76345-1760-446d-95c2-59283fc65269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50868", "type": "seen", "source": "https://t.me/EchelonEyes/2840", "content": "\u0412 \u0438\u044e\u043d\u044c\u0441\u043a\u0438\u0439 \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 Microsoft \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 51 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0443 0-day\n\n\u0421\u0440\u0435\u0434\u0438 51 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Microsoft, 50 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043a\u0430\u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435,  \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0438 \u043e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0435\u0449\u0435 \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043e\u0448\u0438\u0431\u043e\u043a \u0443\u043a\u0430\u0437\u0430\u043d\u0430 \u043a\u0430\u043a \u043e\u0431\u0449\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f, \u0442\u0430\u043a \u0442\u0435\u0445\u0433\u0438\u0433\u0430\u043d\u0442 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f. \u041e\u043d\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0443 CVE-2023-50868 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5). \n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u2014 \u044d\u0442\u043e \u0440\u0430\u043d\u0435\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u00abKeytrap\u00bb \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 DNS, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 DNSSEC, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u2013 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b NSEC3, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0438\u0441\u0442\u043e\u0449\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 \u043d\u0430 \u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u0435, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u043c DNSSEC.\n\n\u00abCVE-2023-50868 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 DNSSEC, \u043a\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b DNSSEC, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 DNS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u0431\u044b\u0442\u043e\u0447\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u043d\u0430 \u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u0435, \u0432\u044b\u0437\u044b\u0432\u0430\u044f \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0434\u043b\u044f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. MITRE \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u044d\u0442\u043e\u0442 CVE \u043e\u0442 \u0438\u0445 \u0438\u043c\u0435\u043d\u0438\u00bb, - \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 Microsoft.\n\n\u0420\u0430\u043d\u0435\u0435 \u044d\u0442\u043e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u044b\u043b \u0440\u0430\u0441\u043a\u0440\u044b\u0442 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f\u0445 DNS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f BIND, PowerDNS, Unbound, Knot Resolver \u0438 Dnsmasq.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, - \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 Microsoft Office, \u0430 \u0442\u0430\u043a\u0436\u0435 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u044f\u0434\u0440\u0430 Windows.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://msrc.microsoft.com/update-guide/releaseNote/2024-Jun \n\n#\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-26T02:02:09.158478Z"}, {"uuid": "9b9ff590-0abc-43d9-bb0e-b8bf1848bce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/EchelonEyes/2485", "content": "KeyTrap: \u043a\u0430\u043a \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c DNS-\u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0434\u043d\u0438\u043c \u043f\u0430\u043a\u0435\u0442\u043e\u043c\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u043d\u0435\u043c\u0435\u0446\u043a\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0438 \u041d\u0418\u0418 \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 ATHENE \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 DNSSEC \u2014 \u043d\u0430\u0431\u043e\u0440\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 DNS, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0435\u0433\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438, \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u0435 DNS. \n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u0434\u0430\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 KeyTrap, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0437\u0430\u043f\u0440\u0435\u0442\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0435\u0440\u0438\u043e\u0434.\n\nKeyTrap \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-50387 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f DNSSEC \u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0441\u043b\u0443\u0436\u0431\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS). \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS) \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u043e\u0434\u0438\u043d DNS-\u043f\u0430\u043a\u0435\u0442.\n\nDNSSEC \u2014 \u044d\u0442\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u044f DNS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a \u0437\u0430\u043f\u0438\u0441\u044f\u043c DNS, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043e\u0442\u0432\u0435\u0442\u043e\u0432. \u042d\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u0443\u0435\u0442, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0435 DNS \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u044e\u0442 \u0438\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u043c\u0435\u043d \u0438 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435\u043c DNSSEC \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0432\u0441\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043b\u044e\u0447\u0438 \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0448\u0438\u0444\u0440\u043e\u0432 \u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438. \u041f\u0440\u043e\u0446\u0435\u0441\u0441 \u0442\u043e\u0442 \u0436\u0435, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 DNSSEC \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u044b, \u043d\u0435\u0432\u0435\u0440\u043d\u044b \u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u0448\u0438\u0444\u0440\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f.\n\n\u0412\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 DNSSEC, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0442\u044c \u0432 2 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0440\u0430\u0437 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 \u0426\u041f \u0432 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435 DNS, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0437\u0430\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044f \u0435\u0433\u043e \u043e\u0442\u0432\u0435\u0442. \u041e\u0434\u0438\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0430\u0442\u0430\u043a\u0443 \u043c\u043e\u0436\u0435\u0442 \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u043e\u0442\u0432\u0435\u0442 \u043e\u0442 56 \u0441\u0435\u043a\u0443\u043d\u0434 \u0434\u043e 16 \u0447\u0430\u0441\u043e\u0432.\n\n\u00ab\u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e KeyTrap \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u0432\u0441\u0435\u043c\u0438\u0440\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u00bb, \u2014 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438.\n\n\u0412 ATHENE \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e KeyTrap \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430\u0445 \u0441 1999 \u0433\u043e\u0434\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u0439 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0447\u0442\u0438 25 \u043b\u0435\u0442, \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0438\u0437-\u0437\u0430 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 DNSSEC.\n\n\u0425\u043e\u0442\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u0443\u0436\u0435 \u0432\u043d\u0435\u0441\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043c\u0435\u0440 \u043f\u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e \u0440\u0438\u0441\u043a\u0430 \u043e\u0442 KeyTrap, ATHENE \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0430 \u0444\u0443\u043d\u0434\u0430\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043e\u0446\u0435\u043d\u043a\u0438 \u0444\u0438\u043b\u043e\u0441\u043e\u0444\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f DNSSEC.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.presseportal.de/pm/173495/5713546 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-26T02:02:13.541757Z"}, {"uuid": "f02126ed-93df-4d78-ad41-6062e5c1f418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM", "content": "", "creation_timestamp": "2026-08-29T00:00:14.856703Z"}, {"uuid": "21a437f0-2256-4565-ad09-f2a475c7d1ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50806", "type": "seen", "source": "https://t.me/EchelonEyes/3072", "content": "\u041c\u0435\u0442\u043e\u0434 SIMurai \u0432\u044b\u044f\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SIM-\u043a\u0430\u0440\u0442\n\n\u0412 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0440\u0435\u0434\u043a\u043e \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442\u0441\u044f SIM-\u043a\u0430\u0440\u0442\u044b. \u041c\u043e\u0436\u043d\u043e \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u043e\u043d\u0438 \u0441\u0447\u0438\u0442\u0430\u044e\u0442\u0441\u044f \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c\u0438 \u0432 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445. \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0411\u0438\u0440\u043c\u0438\u043d\u0433\u0435\u043c\u0430 \u0438 \u041d\u0435\u043c\u0435\u0446\u043a\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u0438\u043c\u0435\u043d\u0438 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u043b\u0438 SIM-\u043a\u0430\u0440\u0442\u044b \u043a\u0430\u043a \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438, \u0447\u0442\u043e \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0438\u0445 \u0431\u0430\u0437\u043e\u0432\u044b\u0435 \u043f\u043e\u043b\u043e\u0441\u044b.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0432\u043e\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0443\u0447\u0435\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 SIMURAI \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u043e\u0432 \u0441 SIM-\u043a\u0430\u0440\u0442\u0430\u043c\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0433\u0438\u0431\u043a\u0443\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e SIM-\u043a\u0430\u0440\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0439 SIM-\u043a\u0430\u0440\u0442\u044b \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u043d\u0430\u0440\u0443\u0448\u0430\u0442\u044c \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0441 \u0446\u0435\u043b\u044c\u044e \u0438\u0437\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a. \n\n\u00ab\u041c\u044b \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u0443\u0435\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0432 \u043e\u0431\u0449\u0438\u0435 \u0438\u0441\u043f\u044b\u0442\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0442\u0435\u043d\u0434\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044f, \u0447\u0442\u043e \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b \u043c\u043e\u0433\u0443\u0442 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0430\u0448\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 SIM-\u043a\u0430\u0440\u0442\u044b, - \u043f\u0438\u0448\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u2013 \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043c\u044b \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u0443\u0435\u043c SIMURAI \u0441 \u044d\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u043c\u0438 \u0431\u0430\u0437\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u043e\u0441 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u043f\u043e \u043d\u0435\u0447\u0435\u0442\u043a\u043e\u043c\u0443 \u0430\u043d\u0430\u043b\u0438\u0437\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0444\u043b\u0430\u0433\u043c\u0430\u043d\u0441\u043a\u0438\u0445 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430\u0445\u00bb.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0434\u0435\u0442 \u0440\u0435\u0447\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-50806 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,4) \u0438 CVE-2024-27209 (\u0431\u0435\u0437 \u043e\u0446\u0435\u043d\u043a\u0438). \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0434\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u0447\u0442\u043e \u043d\u0435\u0434\u043e\u0431\u0440\u043e\u0441\u043e\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0441\u0432\u044f\u0437\u0438 \u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u043c\u043e\u0433\u0443\u0442 \u0441 \u043b\u0435\u0433\u043a\u043e\u0441\u0442\u044c\u044e \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0410\u0442\u0430\u043a\u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c\u0438 \u043d\u0430 \u0440\u044f\u0434\u0435 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 Samsung Galaxy, Google Pixel \u0438 Motorola One Vision. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c SIMURAI \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b Apple.\n\n\u0421\u0432\u043e\u0438\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0445\u043e\u0442\u0435\u043b\u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u044b\u0445 SIM-\u043a\u0430\u0440\u0442 \u0432 \u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u0443\u0433\u0440\u043e\u0437 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.usenix.org/conference/usenixsecurity24/presentation/lisowski \n\n#\u0418\u0411 #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-26T07:00:31.622244Z"}, {"uuid": "017dda01-3b1d-42f5-be4a-ea67e3621770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50806", "type": "seen", "source": "https://t.me/EchelonEyes/3072", "content": "\u041c\u0435\u0442\u043e\u0434 SIMurai \u0432\u044b\u044f\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SIM-\u043a\u0430\u0440\u0442\n\n\u0412 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0440\u0435\u0434\u043a\u043e \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442\u0441\u044f SIM-\u043a\u0430\u0440\u0442\u044b. \u041c\u043e\u0436\u043d\u043e \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u043e\u043d\u0438 \u0441\u0447\u0438\u0442\u0430\u044e\u0442\u0441\u044f \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c\u0438 \u0432 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445. \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0411\u0438\u0440\u043c\u0438\u043d\u0433\u0435\u043c\u0430 \u0438 \u041d\u0435\u043c\u0435\u0446\u043a\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u0438\u043c\u0435\u043d\u0438 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u043b\u0438 SIM-\u043a\u0430\u0440\u0442\u044b \u043a\u0430\u043a \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438, \u0447\u0442\u043e \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0438\u0445 \u0431\u0430\u0437\u043e\u0432\u044b\u0435 \u043f\u043e\u043b\u043e\u0441\u044b.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0432\u043e\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0443\u0447\u0435\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 SIMURAI \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u043e\u0432 \u0441 SIM-\u043a\u0430\u0440\u0442\u0430\u043c\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0433\u0438\u0431\u043a\u0443\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e SIM-\u043a\u0430\u0440\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0439 SIM-\u043a\u0430\u0440\u0442\u044b \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u043d\u0430\u0440\u0443\u0448\u0430\u0442\u044c \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0441 \u0446\u0435\u043b\u044c\u044e \u0438\u0437\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a. \n\n\u00ab\u041c\u044b \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u0443\u0435\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0432 \u043e\u0431\u0449\u0438\u0435 \u0438\u0441\u043f\u044b\u0442\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0442\u0435\u043d\u0434\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044f, \u0447\u0442\u043e \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b \u043c\u043e\u0433\u0443\u0442 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0430\u0448\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 SIM-\u043a\u0430\u0440\u0442\u044b, - \u043f\u0438\u0448\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u2013 \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043c\u044b \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u0443\u0435\u043c SIMURAI \u0441 \u044d\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u043c\u0438 \u0431\u0430\u0437\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u043e\u0441 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u043f\u043e \u043d\u0435\u0447\u0435\u0442\u043a\u043e\u043c\u0443 \u0430\u043d\u0430\u043b\u0438\u0437\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0444\u043b\u0430\u0433\u043c\u0430\u043d\u0441\u043a\u0438\u0445 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430\u0445\u00bb.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0434\u0435\u0442 \u0440\u0435\u0447\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-50806 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,4) \u0438 CVE-2024-27209 (\u0431\u0435\u0437 \u043e\u0446\u0435\u043d\u043a\u0438). \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0434\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u0447\u0442\u043e \u043d\u0435\u0434\u043e\u0431\u0440\u043e\u0441\u043e\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0441\u0432\u044f\u0437\u0438 \u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u043c\u043e\u0433\u0443\u0442 \u0441 \u043b\u0435\u0433\u043a\u043e\u0441\u0442\u044c\u044e \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0410\u0442\u0430\u043a\u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c\u0438 \u043d\u0430 \u0440\u044f\u0434\u0435 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 Samsung Galaxy, Google Pixel \u0438 Motorola One Vision. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c SIMURAI \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b Apple.\n\n\u0421\u0432\u043e\u0438\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0445\u043e\u0442\u0435\u043b\u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u044b\u0445 SIM-\u043a\u0430\u0440\u0442 \u0432 \u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u0443\u0433\u0440\u043e\u0437 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.usenix.org/conference/usenixsecurity24/presentation/lisowski \n\n#\u0418\u0411 #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-27T00:00:44.507586Z"}, {"uuid": "f39e8c17-9648-41d3-a189-69bd27c29e35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50868", "type": "seen", "source": "https://t.me/EchelonEyes/2840", "content": "\u0412 \u0438\u044e\u043d\u044c\u0441\u043a\u0438\u0439 \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 Microsoft \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 51 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0443 0-day\n\n\u0421\u0440\u0435\u0434\u0438 51 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Microsoft, 50 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043a\u0430\u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435,  \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0438 \u043e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0435\u0449\u0435 \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043e\u0448\u0438\u0431\u043e\u043a \u0443\u043a\u0430\u0437\u0430\u043d\u0430 \u043a\u0430\u043a \u043e\u0431\u0449\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f, \u0442\u0430\u043a \u0442\u0435\u0445\u0433\u0438\u0433\u0430\u043d\u0442 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f. \u041e\u043d\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0443 CVE-2023-50868 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5). \n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u2014 \u044d\u0442\u043e \u0440\u0430\u043d\u0435\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u00abKeytrap\u00bb \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 DNS, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 DNSSEC, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u2013 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b NSEC3, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0438\u0441\u0442\u043e\u0449\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 \u043d\u0430 \u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u0435, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u043c DNSSEC.\n\n\u00abCVE-2023-50868 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 DNSSEC, \u043a\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b DNSSEC, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 DNS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u0431\u044b\u0442\u043e\u0447\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u043d\u0430 \u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u0435, \u0432\u044b\u0437\u044b\u0432\u0430\u044f \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0434\u043b\u044f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. MITRE \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u044d\u0442\u043e\u0442 CVE \u043e\u0442 \u0438\u0445 \u0438\u043c\u0435\u043d\u0438\u00bb, - \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 Microsoft.\n\n\u0420\u0430\u043d\u0435\u0435 \u044d\u0442\u043e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u044b\u043b \u0440\u0430\u0441\u043a\u0440\u044b\u0442 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f\u0445 DNS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f BIND, PowerDNS, Unbound, Knot Resolver \u0438 Dnsmasq.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, - \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 Microsoft Office, \u0430 \u0442\u0430\u043a\u0436\u0435 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u044f\u0434\u0440\u0430 Windows.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://msrc.microsoft.com/update-guide/releaseNote/2024-Jun \n\n#\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-27T00:00:47.413461Z"}, {"uuid": "a404ab5f-55e4-447e-bc47-572f1bdd4fae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/EchelonEyes/2485", "content": "KeyTrap: \u043a\u0430\u043a \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c DNS-\u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0434\u043d\u0438\u043c \u043f\u0430\u043a\u0435\u0442\u043e\u043c\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u043d\u0435\u043c\u0435\u0446\u043a\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0438 \u041d\u0418\u0418 \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 ATHENE \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 DNSSEC \u2014 \u043d\u0430\u0431\u043e\u0440\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 DNS, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0435\u0433\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438, \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u0435 DNS. \n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u0434\u0430\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 KeyTrap, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0437\u0430\u043f\u0440\u0435\u0442\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0435\u0440\u0438\u043e\u0434.\n\nKeyTrap \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-50387 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f DNSSEC \u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0441\u043b\u0443\u0436\u0431\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS). \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS) \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u043e\u0434\u0438\u043d DNS-\u043f\u0430\u043a\u0435\u0442.\n\nDNSSEC \u2014 \u044d\u0442\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u044f DNS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a \u0437\u0430\u043f\u0438\u0441\u044f\u043c DNS, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043e\u0442\u0432\u0435\u0442\u043e\u0432. \u042d\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u0443\u0435\u0442, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0435 DNS \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u044e\u0442 \u0438\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u043c\u0435\u043d \u0438 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435\u043c DNSSEC \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0432\u0441\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043b\u044e\u0447\u0438 \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0448\u0438\u0444\u0440\u043e\u0432 \u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438. \u041f\u0440\u043e\u0446\u0435\u0441\u0441 \u0442\u043e\u0442 \u0436\u0435, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 DNSSEC \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u044b, \u043d\u0435\u0432\u0435\u0440\u043d\u044b \u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u0448\u0438\u0444\u0440\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f.\n\n\u0412\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 DNSSEC, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0442\u044c \u0432 2 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0440\u0430\u0437 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 \u0426\u041f \u0432 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435 DNS, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0437\u0430\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044f \u0435\u0433\u043e \u043e\u0442\u0432\u0435\u0442. \u041e\u0434\u0438\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0430\u0442\u0430\u043a\u0443 \u043c\u043e\u0436\u0435\u0442 \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u043e\u0442\u0432\u0435\u0442 \u043e\u0442 56 \u0441\u0435\u043a\u0443\u043d\u0434 \u0434\u043e 16 \u0447\u0430\u0441\u043e\u0432.\n\n\u00ab\u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e KeyTrap \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u0432\u0441\u0435\u043c\u0438\u0440\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u00bb, \u2014 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438.\n\n\u0412 ATHENE \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e KeyTrap \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430\u0445 \u0441 1999 \u0433\u043e\u0434\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u0439 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0447\u0442\u0438 25 \u043b\u0435\u0442, \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0438\u0437-\u0437\u0430 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 DNSSEC.\n\n\u0425\u043e\u0442\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u0443\u0436\u0435 \u0432\u043d\u0435\u0441\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043c\u0435\u0440 \u043f\u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e \u0440\u0438\u0441\u043a\u0430 \u043e\u0442 KeyTrap, ATHENE \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0430 \u0444\u0443\u043d\u0434\u0430\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043e\u0446\u0435\u043d\u043a\u0438 \u0444\u0438\u043b\u043e\u0441\u043e\u0444\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f DNSSEC.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.presseportal.de/pm/173495/5713546 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-27T00:00:50.694728Z"}, {"uuid": "17d0c0f1-f6a3-4cee-a434-6bc2e945b87b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50387", "type": "seen", "source": "https://t.me/EchelonEyes/2485", "content": "KeyTrap: \u043a\u0430\u043a \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c DNS-\u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0434\u043d\u0438\u043c \u043f\u0430\u043a\u0435\u0442\u043e\u043c\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u043d\u0435\u043c\u0435\u0446\u043a\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0438 \u041d\u0418\u0418 \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 ATHENE \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 DNSSEC \u2014 \u043d\u0430\u0431\u043e\u0440\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 DNS, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0435\u0433\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438, \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u0435 DNS. \n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u0434\u0430\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 KeyTrap, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0437\u0430\u043f\u0440\u0435\u0442\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0435\u0440\u0438\u043e\u0434.\n\nKeyTrap \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-50387 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f DNSSEC \u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0441\u043b\u0443\u0436\u0431\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS). \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS) \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u043e\u0434\u0438\u043d DNS-\u043f\u0430\u043a\u0435\u0442.\n\nDNSSEC \u2014 \u044d\u0442\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u044f DNS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a \u0437\u0430\u043f\u0438\u0441\u044f\u043c DNS, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043e\u0442\u0432\u0435\u0442\u043e\u0432. \u042d\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u0443\u0435\u0442, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0435 DNS \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u044e\u0442 \u0438\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u043c\u0435\u043d \u0438 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435\u043c DNSSEC \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0432\u0441\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043b\u044e\u0447\u0438 \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0448\u0438\u0444\u0440\u043e\u0432 \u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438. \u041f\u0440\u043e\u0446\u0435\u0441\u0441 \u0442\u043e\u0442 \u0436\u0435, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 DNSSEC \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u044b, \u043d\u0435\u0432\u0435\u0440\u043d\u044b \u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u0448\u0438\u0444\u0440\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f.\n\n\u0412\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 DNSSEC, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0442\u044c \u0432 2 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0440\u0430\u0437 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 \u0426\u041f \u0432 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435 DNS, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0437\u0430\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044f \u0435\u0433\u043e \u043e\u0442\u0432\u0435\u0442. \u041e\u0434\u0438\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0430\u0442\u0430\u043a\u0443 \u043c\u043e\u0436\u0435\u0442 \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u043e\u0442\u0432\u0435\u0442 \u043e\u0442 56 \u0441\u0435\u043a\u0443\u043d\u0434 \u0434\u043e 16 \u0447\u0430\u0441\u043e\u0432.\n\n\u00ab\u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e KeyTrap \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u0432\u0441\u0435\u043c\u0438\u0440\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u00bb, \u2014 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438.\n\n\u0412 ATHENE \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e KeyTrap \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430\u0445 \u0441 1999 \u0433\u043e\u0434\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u0439 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0447\u0442\u0438 25 \u043b\u0435\u0442, \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0438\u0437-\u0437\u0430 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 DNSSEC.\n\n\u0425\u043e\u0442\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u0443\u0436\u0435 \u0432\u043d\u0435\u0441\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043c\u0435\u0440 \u043f\u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e \u0440\u0438\u0441\u043a\u0430 \u043e\u0442 KeyTrap, ATHENE \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0430 \u0444\u0443\u043d\u0434\u0430\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043e\u0446\u0435\u043d\u043a\u0438 \u0444\u0438\u043b\u043e\u0441\u043e\u0444\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f DNSSEC.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.presseportal.de/pm/173495/5713546 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-28T00:00:37.094743Z"}, {"uuid": "78aa5c09-5805-4e44-bffb-4d469a117145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50868", "type": "seen", "source": "https://t.me/EchelonEyes/2840", "content": "\u0412 \u0438\u044e\u043d\u044c\u0441\u043a\u0438\u0439 \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 Microsoft \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 51 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0443 0-day\n\n\u0421\u0440\u0435\u0434\u0438 51 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Microsoft, 50 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043a\u0430\u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435,  \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0438 \u043e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0435\u0449\u0435 \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043e\u0448\u0438\u0431\u043e\u043a \u0443\u043a\u0430\u0437\u0430\u043d\u0430 \u043a\u0430\u043a \u043e\u0431\u0449\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f, \u0442\u0430\u043a \u0442\u0435\u0445\u0433\u0438\u0433\u0430\u043d\u0442 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f. \u041e\u043d\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0443 CVE-2023-50868 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5). \n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u2014 \u044d\u0442\u043e \u0440\u0430\u043d\u0435\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u00abKeytrap\u00bb \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 DNS, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 DNSSEC, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u2013 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b NSEC3, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0438\u0441\u0442\u043e\u0449\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 \u043d\u0430 \u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u0435, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u043c DNSSEC.\n\n\u00abCVE-2023-50868 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 DNSSEC, \u043a\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b DNSSEC, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 DNS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u0431\u044b\u0442\u043e\u0447\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u043d\u0430 \u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u0435, \u0432\u044b\u0437\u044b\u0432\u0430\u044f \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0434\u043b\u044f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. MITRE \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u044d\u0442\u043e\u0442 CVE \u043e\u0442 \u0438\u0445 \u0438\u043c\u0435\u043d\u0438\u00bb, - \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 Microsoft.\n\n\u0420\u0430\u043d\u0435\u0435 \u044d\u0442\u043e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u044b\u043b \u0440\u0430\u0441\u043a\u0440\u044b\u0442 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f\u0445 DNS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f BIND, PowerDNS, Unbound, Knot Resolver \u0438 Dnsmasq.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, - \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 Microsoft Office, \u0430 \u0442\u0430\u043a\u0436\u0435 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u044f\u0434\u0440\u0430 Windows.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://msrc.microsoft.com/update-guide/releaseNote/2024-Jun \n\n#\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-28T00:00:41.902377Z"}, {"uuid": "ea9a0d52-0f91-4e73-8cb2-17b420e411c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50806", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/3072", "content": "\u041c\u0435\u0442\u043e\u0434 SIMurai \u0432\u044b\u044f\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SIM-\u043a\u0430\u0440\u0442\n\n\u0412 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0440\u0435\u0434\u043a\u043e \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442\u0441\u044f SIM-\u043a\u0430\u0440\u0442\u044b. \u041c\u043e\u0436\u043d\u043e \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u043e\u043d\u0438 \u0441\u0447\u0438\u0442\u0430\u044e\u0442\u0441\u044f \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c\u0438 \u0432 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445. \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0411\u0438\u0440\u043c\u0438\u043d\u0433\u0435\u043c\u0430 \u0438 \u041d\u0435\u043c\u0435\u0446\u043a\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u0438\u043c\u0435\u043d\u0438 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u043b\u0438 SIM-\u043a\u0430\u0440\u0442\u044b \u043a\u0430\u043a \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438, \u0447\u0442\u043e \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0438\u0445 \u0431\u0430\u0437\u043e\u0432\u044b\u0435 \u043f\u043e\u043b\u043e\u0441\u044b.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0432\u043e\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0443\u0447\u0435\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 SIMURAI \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u043e\u0432 \u0441 SIM-\u043a\u0430\u0440\u0442\u0430\u043c\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0433\u0438\u0431\u043a\u0443\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e SIM-\u043a\u0430\u0440\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0439 SIM-\u043a\u0430\u0440\u0442\u044b \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u043d\u0430\u0440\u0443\u0448\u0430\u0442\u044c \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0441 \u0446\u0435\u043b\u044c\u044e \u0438\u0437\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a. \n\n\u00ab\u041c\u044b \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u0443\u0435\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0432 \u043e\u0431\u0449\u0438\u0435 \u0438\u0441\u043f\u044b\u0442\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0442\u0435\u043d\u0434\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044f, \u0447\u0442\u043e \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b \u043c\u043e\u0433\u0443\u0442 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0430\u0448\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 SIM-\u043a\u0430\u0440\u0442\u044b, - \u043f\u0438\u0448\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u2013 \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043c\u044b \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u0443\u0435\u043c SIMURAI \u0441 \u044d\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u043c\u0438 \u0431\u0430\u0437\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u043e\u0441 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u043f\u043e \u043d\u0435\u0447\u0435\u0442\u043a\u043e\u043c\u0443 \u0430\u043d\u0430\u043b\u0438\u0437\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0444\u043b\u0430\u0433\u043c\u0430\u043d\u0441\u043a\u0438\u0445 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430\u0445\u00bb.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0434\u0435\u0442 \u0440\u0435\u0447\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-50806 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,4) \u0438 CVE-2024-27209 (\u0431\u0435\u0437 \u043e\u0446\u0435\u043d\u043a\u0438). \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0434\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u0447\u0442\u043e \u043d\u0435\u0434\u043e\u0431\u0440\u043e\u0441\u043e\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0441\u0432\u044f\u0437\u0438 \u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u043c\u043e\u0433\u0443\u0442 \u0441 \u043b\u0435\u0433\u043a\u043e\u0441\u0442\u044c\u044e \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0410\u0442\u0430\u043a\u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c\u0438 \u043d\u0430 \u0440\u044f\u0434\u0435 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 Samsung Galaxy, Google Pixel \u0438 Motorola One Vision. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c SIMURAI \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b Apple.\n\n\u0421\u0432\u043e\u0438\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0445\u043e\u0442\u0435\u043b\u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u044b\u0445 SIM-\u043a\u0430\u0440\u0442 \u0432 \u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u0443\u0433\u0440\u043e\u0437 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.usenix.org/conference/usenixsecurity24/presentation/lisowski \n\n#\u0418\u0411 #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-28T00:00:44.475801Z"}, {"uuid": "ede3a918-049c-4ea6-a6b5-3205d42546e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50447", "type": "seen", "source": "https://t.me/reverseame/4225", "content": "Pillow\u2019s Critical Flaw: CVE-2023-50447 Exposes Python Projects to Risk https://securityonline.info/pillows-critical-flaw-cve-2023-50447-exposes-python-projects-to-risk/", "creation_timestamp": "2026-07-29T12:02:19.481973Z"}, {"uuid": "c8206e45-e7ec-41f6-b5e4-3d748184f9d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/reverseame/4103", "content": "cve-2023-50164-poc: Proof of Concept for Path Traversal in Apache Struts (\"CVE-2023-50164\") https://github.com/dwisiswant0/cve-2023-50164-poc", "creation_timestamp": "2026-07-29T12:02:22.092139Z"}, {"uuid": "32a3f163-0277-4dcb-83e1-ce5ad56ca250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/sysadm_in_up/2029", "content": "PoC. Apache Struts Remote Code Execution Vulnerability ( S2-066 CVE-2023-50164)\n\nhttps://trganda.github.io/notes/security/vulnerabilities/apache-struts/Apache-Struts-Remote-Code-Execution-Vulnerability-(-S2-066-CVE-2023-50164)", "creation_timestamp": "2026-07-29T12:03:18.695599Z"}, {"uuid": "e337d9ef-7cd9-4754-aa7f-16d51b97abe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50447", "type": "seen", "source": "https://t.me/reverseame/4225", "content": "Pillow\u2019s Critical Flaw: CVE-2023-50447 Exposes Python Projects to Risk https://securityonline.info/pillows-critical-flaw-cve-2023-50447-exposes-python-projects-to-risk/", "creation_timestamp": "2026-07-30T00:02:23.180484Z"}, {"uuid": "825e4357-3f9f-4bcc-bead-47350114bc40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "seen", "source": "https://t.me/reverseame/4103", "content": "cve-2023-50164-poc: Proof of Concept for Path Traversal in Apache Struts (\"CVE-2023-50164\") https://github.com/dwisiswant0/cve-2023-50164-poc", "creation_timestamp": "2026-07-30T00:02:24.528230Z"}, {"uuid": "9d8b5421-083b-45fa-a359-8081faf1c9d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://t.me/Hackme_news/875", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432  ingress \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 NGINX \u0438 \u0438\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 Kubernetes (3 \u043c\u0438\u043d\u0443\u0442\u044b \u0447\u0442\u0435\u043d\u0438\u044f)                                                                                                                                                                        \u0422\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c NGINX ingress \u0432 Kubernetes (CVE-2023-5043, CVE-2023-5044 \u0438 CVE-2022-4886), \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b 27 \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Kubernetes API \u0441 \u043e\u0447\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.                                                                                                         \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\u2192 https://www.armosec.io/blog/cve-2023-5043-nginx-ingress/", "creation_timestamp": "2026-09-01T17:00:07.122887Z"}, {"uuid": "a3c5876c-a7bc-4e6c-9809-5b18e87627ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "seen", "source": "https://t.me/Hackme_news/879", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ingress-nginx, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes\n\n\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Kubernetes ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c Kubernetes, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Kubernetes \u0438 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 kubernetes-ingress, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NGINX. https://www.nginx.com/blog/which-nginx-ingress-controllers-are-impacted-by-cve-2022-4886-cve-2023-5043-and-cve-2023-5044/", "creation_timestamp": "2026-09-01T17:00:06.999723Z"}, {"uuid": "28218bd0-2508-460d-bf63-7d62b1627732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://t.me/Hackme_news/879", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ingress-nginx, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes\n\n\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Kubernetes ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c Kubernetes, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Kubernetes \u0438 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 kubernetes-ingress, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NGINX. https://www.nginx.com/blog/which-nginx-ingress-controllers-are-impacted-by-cve-2022-4886-cve-2023-5043-and-cve-2023-5044/", "creation_timestamp": "2026-09-01T17:00:07.029817Z"}, {"uuid": "6fc5adeb-197c-4d81-88e2-bcdf966d5bad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "seen", "source": "https://t.me/Hackme_news/875", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432  ingress \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 NGINX \u0438 \u0438\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 Kubernetes (3 \u043c\u0438\u043d\u0443\u0442\u044b \u0447\u0442\u0435\u043d\u0438\u044f)                                                                                                                                                                        \u0422\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c NGINX ingress \u0432 Kubernetes (CVE-2023-5043, CVE-2023-5044 \u0438 CVE-2022-4886), \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b 27 \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Kubernetes API \u0441 \u043e\u0447\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.                                                                                                         \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\u2192 https://www.armosec.io/blog/cve-2023-5043-nginx-ingress/", "creation_timestamp": "2026-09-01T17:00:07.089709Z"}, {"uuid": "8716c77c-5743-4a14-9a9f-ed68958eb8fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "seen", "source": "https://t.me/cissp/7303", "content": "exploit\n1. Wyze Cam v3 RCE Exploit\nhttps://github.com/blasty/unwyze\n\n2. CVE-2023-5044:\nKubernetes ingress-nginx <1.9.0 - API command injection\nhttps://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044\nhttps://github.com/r0binak/CVE-2023-5044\n\n3. CVE-2023-46747:\nF5 BIG-IP unauthenticated RCE and authentication bypass\nhttps://github.com/AliBrTab/CVE-2023-46747-POC\n\n\n-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.08.09", "creation_timestamp": "2026-09-01T17:00:16.325082Z"}, {"uuid": "662ac137-f1f8-4927-9aaf-053a11f15723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5074", "type": "seen", "source": "https://t.me/cissp/7235", "content": "exploit\n1. CVE-2023-5074:\nD-Link D-View Authentication Bypass\nhttps://github.com/codeb0ss/CVE-2023-5074-PoC\n\n2. CVE-2023-38139:\nWindows Kernel Refcount Overflow/UaF\nhttps://packetstormsecurity.com/files/174849/Microsoft-Windows-Kernel-Refcount-Overflow-Use-After-Free.html\n\n\n\u2069-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.07.11", "creation_timestamp": "2026-09-01T17:00:17.265418Z"}, {"uuid": "a931fbec-c3d8-4d5d-a36c-638beb4a3689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5089", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/191963", "content": "NASA \u2014 Hidden Login Page Bypass via auth\\_redirect + 403 Bypass (CVE-2023\u20135089)\n\nDefender Security versions prior to 4.1.0 fail to properly restrict access to the WordPress login page when the Hide Login Page feature is enabled. By abusing the auth_redirect function (CVE-2023\u20135089), an unauthenticated attacker can trigger a redirect to the login endpoint and bypass the initial HTTP 403 restriction via URL path manipulation, gaining access to the WordPress login page. This issue constitutes a Broken Access Control vulnerability, as unauthenticated users can bypass enforced access restrictions and interact with a fully restricted authentication endpoint, resulting in an implicit privilege escalation and enabling further attacks such as brute force, credential stuffing, and user enumeration.Trigger auth_redirect (CVE-2023\u20135089) The application triggers a redirect to the WordPress login endpoint via auth_redirect. Target:https://partnerships.gsfc.nasa.gov/?gf_page=randomstring The initial HTTP request is performed, which triggers an automatic redirection to a protected resource. The redirection is followed to the authentication endpoint, which is expected to display the login interface; however, due to the configured access restrictions, this resource should not be accessible or visible to unauthenticated users.Step 2 \u2014 Login Page Access Blocked (403) The identified condition is validated by reproducing it directly within a web browser. Redirected URL: https://partnerships.gsfc.nasa.gov/code102/?redirect_to=https%3A%2F%2Fpartnerships.gsfc.nasa.gov%2F%3Fgf_page%3Drandomstring&reauth=1 Result:403 restriction is bypassedWordPress login page becomes accessible By manipulating the URL through GET parameters, it is possible to access and display the WordPress login interface, effectively bypassing the previously configured access restrictions. Next, the same HTTP 403 (Forbidden) bypass technique is tested to validate authentication credentials. The HTTP request is captured in order to apply the required URL manipulation to bypass the 403 (Forbidden) response. Finally, the bypass is successful, as the application processes the credential validation mechanism even when the supplied credentials are not valid. The combination of:auth_redirect abuse (CVE-2023-5089)URL Path Manipulation allows an unauthenticated attacker to fully bypass the hidden login protection.https://medium.com/media/cc90accf29eb31c7a56f93cdffae7b06/href NASA \u2014 Hidden Login Page Bypass via auth_redirect + 403 Bypass (CVE-2023\u20135089) was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-01T20:00:04.407073Z"}, {"uuid": "562c7e35-a16c-4eee-b93d-c2cc273681e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "seen", "source": "https://t.me/hacking_Attack/125027", "content": "Black Hat Ethical Hacking\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\n\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\nPost Views: 0 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA trio of unpatched high-severity security vulnerabilities in the NGINX Ingress controller for Kubernetes has recently been disclosed, posing a substantial threat to Kubernetes clusters. These vulnerabilities could potentially be exploited by threat actors to steal sensitive credentials from the cluster.\n\nThe identified vulnerabilities are as follows:\n\n1. CVE-2022-4886 (CVSS score: 8.8) \u2013 This vulnerability allows the bypassing of Ingress-nginx path sanitization, potentially leading to the theft of credentials from the ingress-nginx controller.\n\n2. CVE-2023-5043 (CVSS score: 7.6) \u2013 An Ingress-nginx annotation injection flaw enables arbitrary command execution, putting the cluster\u2019s security at risk.\n\n3. CVE-2023-5044 (CVSS score: 7.6) \u2013 This vulnerability facilitates code injection through the nginx.ingress.kubernetes.io/permanent-redirect annotation.\nAccording to Ben Hirschberg, CTO and co-founder of Kubernetes security platform ARMO, these vulnerabilities offer an attacker who can control the configuration of the Ingress object the ability to steal secret credentials from the cluster, particularly with CVE-2023-5043 and CVE-2023-5044.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe successful exploitation of these vulnerabilities could result in an adversary injecting arbitrary code into the ingress controller process, potentially gaining unauthorized access to sensitive data.\n\nCVE-2022-4886 stems from a lack of validation in the \u201cspec.rules[].http.paths[].path\u201d field, allowing an attacker with access to the Ingress object to pilfer Kubernetes API credentials from the ingress controller. Mitigations\n\nTo mitigate these issues, the software maintainers have released specific steps, including enabling the \u201cstrict-validate-path-type\u201d option and setting the \u2013enable-annotation-validation flag to prevent the creation of Ingress objects with invalid characters and enforce additional restrictions.\nTrending: Jeff Foley \u2013 OWASP Amass Founder Trending: Recon Tool: CHOMTE.SH\nUpgrading NGINX to version 1.19, in addition to adding the \u201c\u2013enable-annotation-validation\u201d command-line configuration, is recommended by ARMO to address CVE-2023-5043 and CVE-2023-5044.\n\nHirschberg emphasized that all these vulnerabilities converge on the same underlying problem \u2013 the privileged nature of ingress controllers, which have access to TLS secrets and Kubernetes API. Being public-facing components, they are especially vulnerable to external traffic entering the cluster through them. This calls for heightened security measures to protect Kubernetes clusters from potential breaches.\nTrending: StripedFly Malware: A Five-Year Undetected Threat to Windows and Linux Systems Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-4-1-300x15[...]", "creation_timestamp": "2026-09-01T20:00:44.730612Z"}, {"uuid": "a06bd7fc-06cd-445f-a61b-008b87974420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://t.me/hacking_Attack/125027", "content": "Black Hat Ethical Hacking\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\n\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\nPost Views: 0 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA trio of unpatched high-severity security vulnerabilities in the NGINX Ingress controller for Kubernetes has recently been disclosed, posing a substantial threat to Kubernetes clusters. These vulnerabilities could potentially be exploited by threat actors to steal sensitive credentials from the cluster.\n\nThe identified vulnerabilities are as follows:\n\n1. CVE-2022-4886 (CVSS score: 8.8) \u2013 This vulnerability allows the bypassing of Ingress-nginx path sanitization, potentially leading to the theft of credentials from the ingress-nginx controller.\n\n2. CVE-2023-5043 (CVSS score: 7.6) \u2013 An Ingress-nginx annotation injection flaw enables arbitrary command execution, putting the cluster\u2019s security at risk.\n\n3. CVE-2023-5044 (CVSS score: 7.6) \u2013 This vulnerability facilitates code injection through the nginx.ingress.kubernetes.io/permanent-redirect annotation.\nAccording to Ben Hirschberg, CTO and co-founder of Kubernetes security platform ARMO, these vulnerabilities offer an attacker who can control the configuration of the Ingress object the ability to steal secret credentials from the cluster, particularly with CVE-2023-5043 and CVE-2023-5044.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe successful exploitation of these vulnerabilities could result in an adversary injecting arbitrary code into the ingress controller process, potentially gaining unauthorized access to sensitive data.\n\nCVE-2022-4886 stems from a lack of validation in the \u201cspec.rules[].http.paths[].path\u201d field, allowing an attacker with access to the Ingress object to pilfer Kubernetes API credentials from the ingress controller. Mitigations\n\nTo mitigate these issues, the software maintainers have released specific steps, including enabling the \u201cstrict-validate-path-type\u201d option and setting the \u2013enable-annotation-validation flag to prevent the creation of Ingress objects with invalid characters and enforce additional restrictions.\nTrending: Jeff Foley \u2013 OWASP Amass Founder Trending: Recon Tool: CHOMTE.SH\nUpgrading NGINX to version 1.19, in addition to adding the \u201c\u2013enable-annotation-validation\u201d command-line configuration, is recommended by ARMO to address CVE-2023-5043 and CVE-2023-5044.\n\nHirschberg emphasized that all these vulnerabilities converge on the same underlying problem \u2013 the privileged nature of ingress controllers, which have access to TLS secrets and Kubernetes API. Being public-facing components, they are especially vulnerable to external traffic entering the cluster through them. This calls for heightened security measures to protect Kubernetes clusters from potential breaches.\nTrending: StripedFly Malware: A Five-Year Undetected Threat to Windows and Linux Systems Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-4-1-300x15[...]", "creation_timestamp": "2026-09-01T20:00:43.855322Z"}, {"uuid": "a59e0aec-914f-46d1-9962-3a5adea0e667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5089", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/191963", "content": "NASA \u2014 Hidden Login Page Bypass via auth\\_redirect + 403 Bypass (CVE-2023\u20135089)\n\nDefender Security versions prior to 4.1.0 fail to properly restrict access to the WordPress login page when the Hide Login Page feature is enabled. By abusing the auth_redirect function (CVE-2023\u20135089), an unauthenticated attacker can trigger a redirect to the login endpoint and bypass the initial HTTP 403 restriction via URL path manipulation, gaining access to the WordPress login page. This issue constitutes a Broken Access Control vulnerability, as unauthenticated users can bypass enforced access restrictions and interact with a fully restricted authentication endpoint, resulting in an implicit privilege escalation and enabling further attacks such as brute force, credential stuffing, and user enumeration.Trigger auth_redirect (CVE-2023\u20135089) The application triggers a redirect to the WordPress login endpoint via auth_redirect. Target:https://partnerships.gsfc.nasa.gov/?gf_page=randomstring The initial HTTP request is performed, which triggers an automatic redirection to a protected resource. The redirection is followed to the authentication endpoint, which is expected to display the login interface; however, due to the configured access restrictions, this resource should not be accessible or visible to unauthenticated users.Step 2 \u2014 Login Page Access Blocked (403) The identified condition is validated by reproducing it directly within a web browser. Redirected URL: https://partnerships.gsfc.nasa.gov/code102/?redirect_to=https%3A%2F%2Fpartnerships.gsfc.nasa.gov%2F%3Fgf_page%3Drandomstring&reauth=1 Result:403 restriction is bypassedWordPress login page becomes accessible By manipulating the URL through GET parameters, it is possible to access and display the WordPress login interface, effectively bypassing the previously configured access restrictions. Next, the same HTTP 403 (Forbidden) bypass technique is tested to validate authentication credentials. The HTTP request is captured in order to apply the required URL manipulation to bypass the 403 (Forbidden) response. Finally, the bypass is successful, as the application processes the credential validation mechanism even when the supplied credentials are not valid. The combination of:auth_redirect abuse (CVE-2023-5089)URL Path Manipulation allows an unauthenticated attacker to fully bypass the hidden login protection.https://medium.com/media/cc90accf29eb31c7a56f93cdffae7b06/href NASA \u2014 Hidden Login Page Bypass via auth_redirect + 403 Bypass (CVE-2023\u20135089) was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-02T01:00:26.729071Z"}, {"uuid": "7e8df113-edf9-437c-aa4a-256083495ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://t.me/hacking_Attack/125027", "content": "Black Hat Ethical Hacking\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\n\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\nPost Views: 0 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA trio of unpatched high-severity security vulnerabilities in the NGINX Ingress controller for Kubernetes has recently been disclosed, posing a substantial threat to Kubernetes clusters. These vulnerabilities could potentially be exploited by threat actors to steal sensitive credentials from the cluster.\n\nThe identified vulnerabilities are as follows:\n\n1. CVE-2022-4886 (CVSS score: 8.8) \u2013 This vulnerability allows the bypassing of Ingress-nginx path sanitization, potentially leading to the theft of credentials from the ingress-nginx controller.\n\n2. CVE-2023-5043 (CVSS score: 7.6) \u2013 An Ingress-nginx annotation injection flaw enables arbitrary command execution, putting the cluster\u2019s security at risk.\n\n3. CVE-2023-5044 (CVSS score: 7.6) \u2013 This vulnerability facilitates code injection through the nginx.ingress.kubernetes.io/permanent-redirect annotation.\nAccording to Ben Hirschberg, CTO and co-founder of Kubernetes security platform ARMO, these vulnerabilities offer an attacker who can control the configuration of the Ingress object the ability to steal secret credentials from the cluster, particularly with CVE-2023-5043 and CVE-2023-5044.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe successful exploitation of these vulnerabilities could result in an adversary injecting arbitrary code into the ingress controller process, potentially gaining unauthorized access to sensitive data.\n\nCVE-2022-4886 stems from a lack of validation in the \u201cspec.rules[].http.paths[].path\u201d field, allowing an attacker with access to the Ingress object to pilfer Kubernetes API credentials from the ingress controller. Mitigations\n\nTo mitigate these issues, the software maintainers have released specific steps, including enabling the \u201cstrict-validate-path-type\u201d option and setting the \u2013enable-annotation-validation flag to prevent the creation of Ingress objects with invalid characters and enforce additional restrictions.\nTrending: Jeff Foley \u2013 OWASP Amass Founder Trending: Recon Tool: CHOMTE.SH\nUpgrading NGINX to version 1.19, in addition to adding the \u201c\u2013enable-annotation-validation\u201d command-line configuration, is recommended by ARMO to address CVE-2023-5043 and CVE-2023-5044.\n\nHirschberg emphasized that all these vulnerabilities converge on the same underlying problem \u2013 the privileged nature of ingress controllers, which have access to TLS secrets and Kubernetes API. Being public-facing components, they are especially vulnerable to external traffic entering the cluster through them. This calls for heightened security measures to protect Kubernetes clusters from potential breaches.\nTrending: StripedFly Malware: A Five-Year Undetected Threat to Windows and Linux Systems Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-4-1-300x15[...]", "creation_timestamp": "2026-09-02T01:01:04.546945Z"}, {"uuid": "f14236cd-74cd-4f11-8211-407d72a7e5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "seen", "source": "https://t.me/hacking_Attack/125027", "content": "Black Hat Ethical Hacking\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\n\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\nPost Views: 0 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA trio of unpatched high-severity security vulnerabilities in the NGINX Ingress controller for Kubernetes has recently been disclosed, posing a substantial threat to Kubernetes clusters. These vulnerabilities could potentially be exploited by threat actors to steal sensitive credentials from the cluster.\n\nThe identified vulnerabilities are as follows:\n\n1. CVE-2022-4886 (CVSS score: 8.8) \u2013 This vulnerability allows the bypassing of Ingress-nginx path sanitization, potentially leading to the theft of credentials from the ingress-nginx controller.\n\n2. CVE-2023-5043 (CVSS score: 7.6) \u2013 An Ingress-nginx annotation injection flaw enables arbitrary command execution, putting the cluster\u2019s security at risk.\n\n3. CVE-2023-5044 (CVSS score: 7.6) \u2013 This vulnerability facilitates code injection through the nginx.ingress.kubernetes.io/permanent-redirect annotation.\nAccording to Ben Hirschberg, CTO and co-founder of Kubernetes security platform ARMO, these vulnerabilities offer an attacker who can control the configuration of the Ingress object the ability to steal secret credentials from the cluster, particularly with CVE-2023-5043 and CVE-2023-5044.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe successful exploitation of these vulnerabilities could result in an adversary injecting arbitrary code into the ingress controller process, potentially gaining unauthorized access to sensitive data.\n\nCVE-2022-4886 stems from a lack of validation in the \u201cspec.rules[].http.paths[].path\u201d field, allowing an attacker with access to the Ingress object to pilfer Kubernetes API credentials from the ingress controller. Mitigations\n\nTo mitigate these issues, the software maintainers have released specific steps, including enabling the \u201cstrict-validate-path-type\u201d option and setting the \u2013enable-annotation-validation flag to prevent the creation of Ingress objects with invalid characters and enforce additional restrictions.\nTrending: Jeff Foley \u2013 OWASP Amass Founder Trending: Recon Tool: CHOMTE.SH\nUpgrading NGINX to version 1.19, in addition to adding the \u201c\u2013enable-annotation-validation\u201d command-line configuration, is recommended by ARMO to address CVE-2023-5043 and CVE-2023-5044.\n\nHirschberg emphasized that all these vulnerabilities converge on the same underlying problem \u2013 the privileged nature of ingress controllers, which have access to TLS secrets and Kubernetes API. Being public-facing components, they are especially vulnerable to external traffic entering the cluster through them. This calls for heightened security measures to protect Kubernetes clusters from potential breaches.\nTrending: StripedFly Malware: A Five-Year Undetected Threat to Windows and Linux Systems Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-4-1-300x15[...]", "creation_timestamp": "2026-09-02T01:01:04.614047Z"}, {"uuid": "7c376fac-b89f-4743-acc0-7ebfc331f754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://t.me/Hackme_news/875", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432  ingress \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 NGINX \u0438 \u0438\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 Kubernetes (3 \u043c\u0438\u043d\u0443\u0442\u044b \u0447\u0442\u0435\u043d\u0438\u044f)                                                                                                                                                                        \u0422\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c NGINX ingress \u0432 Kubernetes (CVE-2023-5043, CVE-2023-5044 \u0438 CVE-2022-4886), \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b 27 \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Kubernetes API \u0441 \u043e\u0447\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.                                                                                                         \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\u2192 https://www.armosec.io/blog/cve-2023-5043-nginx-ingress/", "creation_timestamp": "2026-09-02T01:03:35.433486Z"}, {"uuid": "847787eb-d2e0-4a2f-b83c-117adaf9036f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "seen", "source": "https://t.me/Hackme_news/879", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ingress-nginx, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes\n\n\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Kubernetes ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c Kubernetes, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Kubernetes \u0438 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 kubernetes-ingress, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NGINX. https://www.nginx.com/blog/which-nginx-ingress-controllers-are-impacted-by-cve-2022-4886-cve-2023-5043-and-cve-2023-5044/", "creation_timestamp": "2026-09-02T01:03:35.275905Z"}, {"uuid": "f4f564fd-9db5-4a1a-b27d-9ead61d07cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://t.me/Hackme_news/879", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ingress-nginx, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes\n\n\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Kubernetes ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c Kubernetes, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Kubernetes \u0438 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 kubernetes-ingress, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NGINX. https://www.nginx.com/blog/which-nginx-ingress-controllers-are-impacted-by-cve-2022-4886-cve-2023-5043-and-cve-2023-5044/", "creation_timestamp": "2026-09-02T01:03:35.314574Z"}, {"uuid": "937b683c-363e-466f-bebb-e280f10dfdfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "seen", "source": "https://t.me/Hackme_news/875", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432  ingress \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 NGINX \u0438 \u0438\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 Kubernetes (3 \u043c\u0438\u043d\u0443\u0442\u044b \u0447\u0442\u0435\u043d\u0438\u044f)                                                                                                                                                                        \u0422\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c NGINX ingress \u0432 Kubernetes (CVE-2023-5043, CVE-2023-5044 \u0438 CVE-2022-4886), \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b 27 \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Kubernetes API \u0441 \u043e\u0447\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.                                                                                                         \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\u2192 https://www.armosec.io/blog/cve-2023-5043-nginx-ingress/", "creation_timestamp": "2026-09-02T01:03:35.390476Z"}, {"uuid": "fb7b9fd4-aa22-41c0-87f8-d84b871495cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "seen", "source": "https://t.me/cissp/7303", "content": "exploit\n1. Wyze Cam v3 RCE Exploit\nhttps://github.com/blasty/unwyze\n\n2. CVE-2023-5044:\nKubernetes ingress-nginx <1.9.0 - API command injection\nhttps://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044\nhttps://github.com/r0binak/CVE-2023-5044\n\n3. CVE-2023-46747:\nF5 BIG-IP unauthenticated RCE and authentication bypass\nhttps://github.com/AliBrTab/CVE-2023-46747-POC\n\n\n-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.08.09", "creation_timestamp": "2026-09-02T01:03:53.111930Z"}, {"uuid": "1477badc-30d2-40a6-9052-9dad59ff5a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5074", "type": "seen", "source": "https://t.me/cissp/7235", "content": "exploit\n1. CVE-2023-5074:\nD-Link D-View Authentication Bypass\nhttps://github.com/codeb0ss/CVE-2023-5074-PoC\n\n2. CVE-2023-38139:\nWindows Kernel Refcount Overflow/UaF\nhttps://packetstormsecurity.com/files/174849/Microsoft-Windows-Kernel-Refcount-Overflow-Use-After-Free.html\n\n\n\u2069-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.07.11", "creation_timestamp": "2026-09-02T01:03:55.938599Z"}, {"uuid": "121cdd3f-85c3-4892-9218-405d5d0fefbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "Telegram/WrRm1maBRq0wnWnqHcBRNKkL4Ujgx3aMjLBjm_7TvOwiqe0", "content": "", "creation_timestamp": "2026-09-03T00:00:36.933484Z"}, {"uuid": "65dc9394-d984-463e-98d2-b8b023e2d08a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://t.me/hacking_Attack/125027", "content": "Black Hat Ethical Hacking\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\n\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\nPost Views: 0 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA trio of unpatched high-severity security vulnerabilities in the NGINX Ingress controller for Kubernetes has recently been disclosed, posing a substantial threat to Kubernetes clusters. These vulnerabilities could potentially be exploited by threat actors to steal sensitive credentials from the cluster.\n\nThe identified vulnerabilities are as follows:\n\n1. CVE-2022-4886 (CVSS score: 8.8) \u2013 This vulnerability allows the bypassing of Ingress-nginx path sanitization, potentially leading to the theft of credentials from the ingress-nginx controller.\n\n2. CVE-2023-5043 (CVSS score: 7.6) \u2013 An Ingress-nginx annotation injection flaw enables arbitrary command execution, putting the cluster\u2019s security at risk.\n\n3. CVE-2023-5044 (CVSS score: 7.6) \u2013 This vulnerability facilitates code injection through the nginx.ingress.kubernetes.io/permanent-redirect annotation.\nAccording to Ben Hirschberg, CTO and co-founder of Kubernetes security platform ARMO, these vulnerabilities offer an attacker who can control the configuration of the Ingress object the ability to steal secret credentials from the cluster, particularly with CVE-2023-5043 and CVE-2023-5044.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe successful exploitation of these vulnerabilities could result in an adversary injecting arbitrary code into the ingress controller process, potentially gaining unauthorized access to sensitive data.\n\nCVE-2022-4886 stems from a lack of validation in the \u201cspec.rules[].http.paths[].path\u201d field, allowing an attacker with access to the Ingress object to pilfer Kubernetes API credentials from the ingress controller. Mitigations\n\nTo mitigate these issues, the software maintainers have released specific steps, including enabling the \u201cstrict-validate-path-type\u201d option and setting the \u2013enable-annotation-validation flag to prevent the creation of Ingress objects with invalid characters and enforce additional restrictions.\nTrending: Jeff Foley \u2013 OWASP Amass Founder Trending: Recon Tool: CHOMTE.SH\nUpgrading NGINX to version 1.19, in addition to adding the \u201c\u2013enable-annotation-validation\u201d command-line configuration, is recommended by ARMO to address CVE-2023-5043 and CVE-2023-5044.\n\nHirschberg emphasized that all these vulnerabilities converge on the same underlying problem \u2013 the privileged nature of ingress controllers, which have access to TLS secrets and Kubernetes API. Being public-facing components, they are especially vulnerable to external traffic entering the cluster through them. This calls for heightened security measures to protect Kubernetes clusters from potential breaches.\nTrending: StripedFly Malware: A Five-Year Undetected Threat to Windows and Linux Systems Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-4-1-300x15[...]", "creation_timestamp": "2026-09-04T02:00:05.516792Z"}, {"uuid": "8417743b-0325-423f-8248-d8d4ca4b2059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "seen", "source": "https://t.me/hacking_Attack/125027", "content": "Black Hat Ethical Hacking\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\n\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\nPost Views: 0 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA trio of unpatched high-severity security vulnerabilities in the NGINX Ingress controller for Kubernetes has recently been disclosed, posing a substantial threat to Kubernetes clusters. These vulnerabilities could potentially be exploited by threat actors to steal sensitive credentials from the cluster.\n\nThe identified vulnerabilities are as follows:\n\n1. CVE-2022-4886 (CVSS score: 8.8) \u2013 This vulnerability allows the bypassing of Ingress-nginx path sanitization, potentially leading to the theft of credentials from the ingress-nginx controller.\n\n2. CVE-2023-5043 (CVSS score: 7.6) \u2013 An Ingress-nginx annotation injection flaw enables arbitrary command execution, putting the cluster\u2019s security at risk.\n\n3. CVE-2023-5044 (CVSS score: 7.6) \u2013 This vulnerability facilitates code injection through the nginx.ingress.kubernetes.io/permanent-redirect annotation.\nAccording to Ben Hirschberg, CTO and co-founder of Kubernetes security platform ARMO, these vulnerabilities offer an attacker who can control the configuration of the Ingress object the ability to steal secret credentials from the cluster, particularly with CVE-2023-5043 and CVE-2023-5044.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe successful exploitation of these vulnerabilities could result in an adversary injecting arbitrary code into the ingress controller process, potentially gaining unauthorized access to sensitive data.\n\nCVE-2022-4886 stems from a lack of validation in the \u201cspec.rules[].http.paths[].path\u201d field, allowing an attacker with access to the Ingress object to pilfer Kubernetes API credentials from the ingress controller. Mitigations\n\nTo mitigate these issues, the software maintainers have released specific steps, including enabling the \u201cstrict-validate-path-type\u201d option and setting the \u2013enable-annotation-validation flag to prevent the creation of Ingress objects with invalid characters and enforce additional restrictions.\nTrending: Jeff Foley \u2013 OWASP Amass Founder Trending: Recon Tool: CHOMTE.SH\nUpgrading NGINX to version 1.19, in addition to adding the \u201c\u2013enable-annotation-validation\u201d command-line configuration, is recommended by ARMO to address CVE-2023-5043 and CVE-2023-5044.\n\nHirschberg emphasized that all these vulnerabilities converge on the same underlying problem \u2013 the privileged nature of ingress controllers, which have access to TLS secrets and Kubernetes API. Being public-facing components, they are especially vulnerable to external traffic entering the cluster through them. This calls for heightened security measures to protect Kubernetes clusters from potential breaches.\nTrending: StripedFly Malware: A Five-Year Undetected Threat to Windows and Linux Systems Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-4-1-300x15[...]", "creation_timestamp": "2026-09-04T02:00:05.565859Z"}, {"uuid": "c920f754-42c8-4ef3-9808-d8ca70970d17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://t.me/hacking_Attack/125027", "content": "Black Hat Ethical Hacking\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\n\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\nPost Views: 0 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA trio of unpatched high-severity security vulnerabilities in the NGINX Ingress controller for Kubernetes has recently been disclosed, posing a substantial threat to Kubernetes clusters. These vulnerabilities could potentially be exploited by threat actors to steal sensitive credentials from the cluster.\n\nThe identified vulnerabilities are as follows:\n\n1. CVE-2022-4886 (CVSS score: 8.8) \u2013 This vulnerability allows the bypassing of Ingress-nginx path sanitization, potentially leading to the theft of credentials from the ingress-nginx controller.\n\n2. CVE-2023-5043 (CVSS score: 7.6) \u2013 An Ingress-nginx annotation injection flaw enables arbitrary command execution, putting the cluster\u2019s security at risk.\n\n3. CVE-2023-5044 (CVSS score: 7.6) \u2013 This vulnerability facilitates code injection through the nginx.ingress.kubernetes.io/permanent-redirect annotation.\nAccording to Ben Hirschberg, CTO and co-founder of Kubernetes security platform ARMO, these vulnerabilities offer an attacker who can control the configuration of the Ingress object the ability to steal secret credentials from the cluster, particularly with CVE-2023-5043 and CVE-2023-5044.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe successful exploitation of these vulnerabilities could result in an adversary injecting arbitrary code into the ingress controller process, potentially gaining unauthorized access to sensitive data.\n\nCVE-2022-4886 stems from a lack of validation in the \u201cspec.rules[].http.paths[].path\u201d field, allowing an attacker with access to the Ingress object to pilfer Kubernetes API credentials from the ingress controller. Mitigations\n\nTo mitigate these issues, the software maintainers have released specific steps, including enabling the \u201cstrict-validate-path-type\u201d option and setting the \u2013enable-annotation-validation flag to prevent the creation of Ingress objects with invalid characters and enforce additional restrictions.\nTrending: Jeff Foley \u2013 OWASP Amass Founder Trending: Recon Tool: CHOMTE.SH\nUpgrading NGINX to version 1.19, in addition to adding the \u201c\u2013enable-annotation-validation\u201d command-line configuration, is recommended by ARMO to address CVE-2023-5043 and CVE-2023-5044.\n\nHirschberg emphasized that all these vulnerabilities converge on the same underlying problem \u2013 the privileged nature of ingress controllers, which have access to TLS secrets and Kubernetes API. Being public-facing components, they are especially vulnerable to external traffic entering the cluster through them. This calls for heightened security measures to protect Kubernetes clusters from potential breaches.\nTrending: StripedFly Malware: A Five-Year Undetected Threat to Windows and Linux Systems Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-4-1-300x15[...]", "creation_timestamp": "2026-09-05T01:00:44.359460Z"}, {"uuid": "2b17c66f-ec44-4d5b-b7bf-5d403ed409dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "seen", "source": "https://t.me/hacking_Attack/125027", "content": "Black Hat Ethical Hacking\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\n\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\nPost Views: 0 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA trio of unpatched high-severity security vulnerabilities in the NGINX Ingress controller for Kubernetes has recently been disclosed, posing a substantial threat to Kubernetes clusters. These vulnerabilities could potentially be exploited by threat actors to steal sensitive credentials from the cluster.\n\nThe identified vulnerabilities are as follows:\n\n1. CVE-2022-4886 (CVSS score: 8.8) \u2013 This vulnerability allows the bypassing of Ingress-nginx path sanitization, potentially leading to the theft of credentials from the ingress-nginx controller.\n\n2. CVE-2023-5043 (CVSS score: 7.6) \u2013 An Ingress-nginx annotation injection flaw enables arbitrary command execution, putting the cluster\u2019s security at risk.\n\n3. CVE-2023-5044 (CVSS score: 7.6) \u2013 This vulnerability facilitates code injection through the nginx.ingress.kubernetes.io/permanent-redirect annotation.\nAccording to Ben Hirschberg, CTO and co-founder of Kubernetes security platform ARMO, these vulnerabilities offer an attacker who can control the configuration of the Ingress object the ability to steal secret credentials from the cluster, particularly with CVE-2023-5043 and CVE-2023-5044.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe successful exploitation of these vulnerabilities could result in an adversary injecting arbitrary code into the ingress controller process, potentially gaining unauthorized access to sensitive data.\n\nCVE-2022-4886 stems from a lack of validation in the \u201cspec.rules[].http.paths[].path\u201d field, allowing an attacker with access to the Ingress object to pilfer Kubernetes API credentials from the ingress controller. Mitigations\n\nTo mitigate these issues, the software maintainers have released specific steps, including enabling the \u201cstrict-validate-path-type\u201d option and setting the \u2013enable-annotation-validation flag to prevent the creation of Ingress objects with invalid characters and enforce additional restrictions.\nTrending: Jeff Foley \u2013 OWASP Amass Founder Trending: Recon Tool: CHOMTE.SH\nUpgrading NGINX to version 1.19, in addition to adding the \u201c\u2013enable-annotation-validation\u201d command-line configuration, is recommended by ARMO to address CVE-2023-5043 and CVE-2023-5044.\n\nHirschberg emphasized that all these vulnerabilities converge on the same underlying problem \u2013 the privileged nature of ingress controllers, which have access to TLS secrets and Kubernetes API. Being public-facing components, they are especially vulnerable to external traffic entering the cluster through them. This calls for heightened security measures to protect Kubernetes clusters from potential breaches.\nTrending: StripedFly Malware: A Five-Year Undetected Threat to Windows and Linux Systems Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-4-1-300x15[...]", "creation_timestamp": "2026-09-05T01:00:44.393848Z"}, {"uuid": "ee76ff59-95c2-477b-97db-6ddf42964444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5070", "type": "published-proof-of-concept", "source": "Telegram/wtW6bpJN7eATls7OA2vLhVZp9FPDSfjpd85Ww_IzNKkpSTY", "content": "", "creation_timestamp": "2026-09-05T18:00:05.816724Z"}, {"uuid": "6bab9aab-4e62-488e-9956-5101cadd14b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5070", "type": "published-proof-of-concept", "source": "Telegram/wtW6bpJN7eATls7OA2vLhVZp9FPDSfjpd85Ww_IzNKkpSTY", "content": "", "creation_timestamp": "2026-09-06T00:00:39.191191Z"}, {"uuid": "4b4e68db-9e90-4501-9252-cf7d8be5a364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "Telegram/43D4qhGTDojIu_KxnHISZ4eUxiWEszw-obZ3Am-s-rJ4mag", "content": "", "creation_timestamp": "2026-09-06T15:00:03.571968Z"}, {"uuid": "f80d7290-74a3-4ed6-a1bd-3e7dbbccdc32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50164", "type": "published-proof-of-concept", "source": "Telegram/43D4qhGTDojIu_KxnHISZ4eUxiWEszw-obZ3Am-s-rJ4mag", "content": "", "creation_timestamp": "2026-09-07T01:00:11.673522Z"}, {"uuid": "04fa44bb-311b-4e76-835c-21ca878d11f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_solr_backup_restore.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"l3yx\", \"jheysel-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Apache Solr from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1 is affected by an Unrestricted Upload of File\\n          with Dangerous Type vulnerability which can result in remote code execution in the context of the user running\\n          Apache Solr. When Apache Solr creates a Collection, it will use a specific directory as the classpath and load\\n          some classes from it. The backup function of the Collection can export malicious class files uploaded by\\n          attackers to the directory, allowing Solr to load custom classes and create arbitrary Java code. Execution\\n          can further bypass the Java sandbox configured by Solr, ultimately causing arbitrary command execution.\", \"disclosure_date\": \"2024-02-24\", \"fullname\": \"exploit/linux/http/apache_solr_backup_restore\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"Apache Solr Backup/Restore APIs RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/apache_solr_backup_restore.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/apache_solr_backup_restore\", \"references\": [\"URL-https://xz.aliyun.com/t/13637?time__1311=mqmxnQ0QiQi%3DDtKDsD7md0%3DnxeqjghDMxTD\", \"URL-https://github.com/rapid7/metasploit-framework/issues/18919\", \"URL-https://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC\", \"CVE-2023-50386\"], \"rport\": 8983, \"session_types\": false, \"targets\": [\"Unix Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:22.186444Z"}, {"uuid": "cff01831-8287-4d3d-8b63-e38ccac0552d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50917", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/majordomo_cmd_inject_cve_2023_50917.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Valentin Lobstein\", \"smcintyre-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability in MajorDoMo\\n          versions before 0662e5e.\", \"disclosure_date\": \"2023-12-15\", \"fullname\": \"exploit/linux/http/majordomo_cmd_inject_cve_2023_50917\", \"is_install_path\": true, \"mod_time\": \"2023-12-22 00:04:54 +0000\", \"name\": \"MajorDoMo Command Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/majordomo_cmd_inject_cve_2023_50917.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/majordomo_cmd_inject_cve_2023_50917\", \"references\": [\"CVE-2023-50917\", \"URL-https://github.com/Chocapikk/CVE-2023-50917\", \"URL-https://chocapikk.com/posts/2023/cve-2023-50917\", \"URL-https://github.com/sergejey/majordomo\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:44.265392Z"}, {"uuid": "4af67592-1ccc-4d18-9d1a-64752ae1cb5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50445", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/glinet_unauth_rce_cve_2023_50445.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, mipsle, mipsbe, armle, aarch64\", \"author\": [\"h00die-gr3y \", \"Unknown\", \"DZONERZY\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"A command injection vulnerability exists in multiple GL.iNet network products, allowing an attacker\\n          to inject and execute arbitrary shell commands via JSON parameters at the `gl_system_log` and `gl_crash_log`\\n          interface in the `logread` module.\\n          This exploit requires post-authentication using the `Admin-Token` cookie/sessionID (`SID`), typically stolen\\n          by the attacker.\\n          However, by chaining this exploit with vulnerability CVE-2023-50919, one can bypass the Nginx authentication\\n          through a `Lua` string pattern matching and SQL injection vulnerability. The `Admin-Token` cookie/`SID` can be\\n          retrieved without knowing a valid username and password.\\n\\n          The following GL.iNet network products are vulnerable:\\n          - A1300, AX1800, AXT1800, MT3000, MT2500/MT2500A: v4.0.0 < v4.5.0;\\n          - MT6000: v4.5.0 - v4.5.3;\\n          - MT1300, MT300N-V2, AR750S, AR750, AR300M, AP1300, B1300: v4.3.7;\\n          - E750/E750V2, MV1000: v4.3.8;\\n          - X3000: v4.0.0 - v4.4.2;\\n          - XE3000: v4.0.0 - v4.4.3;\\n          - SFT1200: v4.3.6;\\n          - and potentially others (just try ;-)\\n\\n          NOTE: Staged Meterpreter payloads might core dump on the target, so use stage-less Meterpreter payloads\\n          when using the Linux Dropper target.\", \"disclosure_date\": \"2023-12-10\", \"fullname\": \"exploit/linux/http/glinet_unauth_rce_cve_2023_50445\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"GL.iNet Unauthenticated Remote Command Execution via the logread module.\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/glinet_unauth_rce_cve_2023_50445.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/glinet_unauth_rce_cve_2023_50445\", \"references\": [\"CVE-2023-50445\", \"CVE-2023-50919\", \"URL-https://attackerkb.com/topics/3LmJ0d7rzC/cve-2023-50445\", \"URL-https://attackerkb.com/topics/LdqSuqHKOj/cve-2023-50919\", \"URL-https://libdzonerzy.so/articles/from-zero-to-botnet-glinet.html\", \"URL-https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Using%20Shell%20Metacharacter%20Injection%20via%20API.md\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:36.124324Z"}, {"uuid": "1b3cf458-7f49-4d79-b967-64785db7a5e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50919", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/glinet_unauth_rce_cve_2023_50445.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, mipsle, mipsbe, armle, aarch64\", \"author\": [\"h00die-gr3y \", \"Unknown\", \"DZONERZY\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"A command injection vulnerability exists in multiple GL.iNet network products, allowing an attacker\\n          to inject and execute arbitrary shell commands via JSON parameters at the `gl_system_log` and `gl_crash_log`\\n          interface in the `logread` module.\\n          This exploit requires post-authentication using the `Admin-Token` cookie/sessionID (`SID`), typically stolen\\n          by the attacker.\\n          However, by chaining this exploit with vulnerability CVE-2023-50919, one can bypass the Nginx authentication\\n          through a `Lua` string pattern matching and SQL injection vulnerability. The `Admin-Token` cookie/`SID` can be\\n          retrieved without knowing a valid username and password.\\n\\n          The following GL.iNet network products are vulnerable:\\n          - A1300, AX1800, AXT1800, MT3000, MT2500/MT2500A: v4.0.0 < v4.5.0;\\n          - MT6000: v4.5.0 - v4.5.3;\\n          - MT1300, MT300N-V2, AR750S, AR750, AR300M, AP1300, B1300: v4.3.7;\\n          - E750/E750V2, MV1000: v4.3.8;\\n          - X3000: v4.0.0 - v4.4.2;\\n          - XE3000: v4.0.0 - v4.4.3;\\n          - SFT1200: v4.3.6;\\n          - and potentially others (just try ;-)\\n\\n          NOTE: Staged Meterpreter payloads might core dump on the target, so use stage-less Meterpreter payloads\\n          when using the Linux Dropper target.\", \"disclosure_date\": \"2023-12-10\", \"fullname\": \"exploit/linux/http/glinet_unauth_rce_cve_2023_50445\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"GL.iNet Unauthenticated Remote Command Execution via the logread module.\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/glinet_unauth_rce_cve_2023_50445.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/glinet_unauth_rce_cve_2023_50445\", \"references\": [\"CVE-2023-50445\", \"CVE-2023-50919\", \"URL-https://attackerkb.com/topics/3LmJ0d7rzC/cve-2023-50445\", \"URL-https://attackerkb.com/topics/LdqSuqHKOj/cve-2023-50919\", \"URL-https://libdzonerzy.so/articles/from-zero-to-botnet-glinet.html\", \"URL-https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Using%20Shell%20Metacharacter%20Injection%20via%20API.md\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:36.229268Z"}, {"uuid": "ea5b741e-f3f1-46a9-9d0d-f1bf10feef68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "published-proof-of-concept", "source": "https://t.me/Hackme_news/875", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432  ingress \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 NGINX \u0438 \u0438\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 Kubernetes (3 \u043c\u0438\u043d\u0443\u0442\u044b \u0447\u0442\u0435\u043d\u0438\u044f)                                                                                                                                                                        \u0422\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c NGINX ingress \u0432 Kubernetes (CVE-2023-5043, CVE-2023-5044 \u0438 CVE-2022-4886), \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b 27 \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Kubernetes API \u0441 \u043e\u0447\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.                                                                                                         \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\u2192 https://www.armosec.io/blog/cve-2023-5043-nginx-ingress/", "creation_timestamp": "2026-09-08T22:00:04.524093Z"}, {"uuid": "877534ad-b778-4060-89e9-342c48459a3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "published-proof-of-concept", "source": "https://t.me/Hackme_news/875", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432  ingress \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 NGINX \u0438 \u0438\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 Kubernetes (3 \u043c\u0438\u043d\u0443\u0442\u044b \u0447\u0442\u0435\u043d\u0438\u044f)                                                                                                                                                                        \u0422\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c NGINX ingress \u0432 Kubernetes (CVE-2023-5043, CVE-2023-5044 \u0438 CVE-2022-4886), \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b 27 \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Kubernetes API \u0441 \u043e\u0447\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.                                                                                                         \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\u2192 https://www.armosec.io/blog/cve-2023-5043-nginx-ingress/", "creation_timestamp": "2026-09-08T22:00:04.560228Z"}, {"uuid": "2e1928c1-f475-4d13-93d0-b8efc152975d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "seen", "source": "https://t.me/Hackme_news/879", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ingress-nginx, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes\n\n\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Kubernetes ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c Kubernetes, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Kubernetes \u0438 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 kubernetes-ingress, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NGINX. https://www.nginx.com/blog/which-nginx-ingress-controllers-are-impacted-by-cve-2022-4886-cve-2023-5043-and-cve-2023-5044/", "creation_timestamp": "2026-09-08T22:00:04.659646Z"}, {"uuid": "5698185f-cffa-435c-9407-6a5a800e3019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://t.me/Hackme_news/879", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ingress-nginx, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes\n\n\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Kubernetes ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c Kubernetes, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Kubernetes \u0438 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 kubernetes-ingress, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NGINX. https://www.nginx.com/blog/which-nginx-ingress-controllers-are-impacted-by-cve-2022-4886-cve-2023-5043-and-cve-2023-5044/", "creation_timestamp": "2026-09-08T22:00:04.687545Z"}, {"uuid": "f537b5ca-7f6f-4295-9e55-0773221fcc21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "seen", "source": "https://t.me/Hackme_news/879", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ingress-nginx, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes\n\n\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Kubernetes ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c Kubernetes, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Kubernetes \u0438 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 kubernetes-ingress, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NGINX. https://www.nginx.com/blog/which-nginx-ingress-controllers-are-impacted-by-cve-2022-4886-cve-2023-5043-and-cve-2023-5044/", "creation_timestamp": "2026-09-09T00:00:12.185996Z"}, {"uuid": "29fe3892-a82d-426c-9814-eaaaa5969e7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "seen", "source": "https://t.me/Hackme_news/879", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ingress-nginx, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes\n\n\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Kubernetes ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c Kubernetes, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Kubernetes \u0438 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 kubernetes-ingress, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NGINX. https://www.nginx.com/blog/which-nginx-ingress-controllers-are-impacted-by-cve-2022-4886-cve-2023-5043-and-cve-2023-5044/", "creation_timestamp": "2026-09-09T00:00:12.236455Z"}, {"uuid": "757333fd-b5b0-4fbc-a854-e3d43ee85e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "published-proof-of-concept", "source": "https://t.me/Hackme_news/875", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432  ingress \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 NGINX \u0438 \u0438\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 Kubernetes (3 \u043c\u0438\u043d\u0443\u0442\u044b \u0447\u0442\u0435\u043d\u0438\u044f)                                                                                                                                                                        \u0422\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c NGINX ingress \u0432 Kubernetes (CVE-2023-5043, CVE-2023-5044 \u0438 CVE-2022-4886), \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b 27 \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Kubernetes API \u0441 \u043e\u0447\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.                                                                                                         \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\u2192 https://www.armosec.io/blog/cve-2023-5043-nginx-ingress/", "creation_timestamp": "2026-09-09T00:00:12.019060Z"}, {"uuid": "6c1f5567-634e-4fad-9cfc-70f7fe94970b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5043", "type": "published-proof-of-concept", "source": "https://t.me/Hackme_news/875", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432  ingress \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 NGINX \u0438 \u0438\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 Kubernetes (3 \u043c\u0438\u043d\u0443\u0442\u044b \u0447\u0442\u0435\u043d\u0438\u044f)                                                                                                                                                                        \u0422\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c NGINX ingress \u0432 Kubernetes (CVE-2023-5043, CVE-2023-5044 \u0438 CVE-2022-4886), \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b 27 \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Kubernetes API \u0441 \u043e\u0447\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.                                                                                                         \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\u2192 https://www.armosec.io/blog/cve-2023-5043-nginx-ingress/", "creation_timestamp": "2026-09-09T00:00:12.062880Z"}, {"uuid": "f52a48ce-499c-48eb-98da-1ecfa088d7e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5074", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7235", "content": "exploit\n1. CVE-2023-5074:\nD-Link D-View Authentication Bypass\nhttps://github.com/codeb0ss/CVE-2023-5074-PoC\n\n2. CVE-2023-38139:\nWindows Kernel Refcount Overflow/UaF\nhttps://packetstormsecurity.com/files/174849/Microsoft-Windows-Kernel-Refcount-Overflow-Use-After-Free.html\n\n\n\u2069-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.07.11", "creation_timestamp": "2026-09-09T20:00:06.248899Z"}, {"uuid": "432a9219-caf7-46d8-a049-48911c3e4d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7303", "content": "exploit\n1. Wyze Cam v3 RCE Exploit\nhttps://github.com/blasty/unwyze\n\n2. CVE-2023-5044:\nKubernetes ingress-nginx <1.9.0 - API command injection\nhttps://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044\nhttps://github.com/r0binak/CVE-2023-5044\n\n3. CVE-2023-46747:\nF5 BIG-IP unauthenticated RCE and authentication bypass\nhttps://github.com/AliBrTab/CVE-2023-46747-POC\n\n\n-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.08.09", "creation_timestamp": "2026-09-09T20:00:07.599949Z"}, {"uuid": "ab5cb7b7-7ab3-4765-b32b-82fc839a2844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5074", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7235", "content": "exploit\n1. CVE-2023-5074:\nD-Link D-View Authentication Bypass\nhttps://github.com/codeb0ss/CVE-2023-5074-PoC\n\n2. CVE-2023-38139:\nWindows Kernel Refcount Overflow/UaF\nhttps://packetstormsecurity.com/files/174849/Microsoft-Windows-Kernel-Refcount-Overflow-Use-After-Free.html\n\n\n\u2069-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.07.11", "creation_timestamp": "2026-09-10T00:00:21.901005Z"}, {"uuid": "d01f125a-4448-4698-a696-ec5ee5f732bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7303", "content": "exploit\n1. Wyze Cam v3 RCE Exploit\nhttps://github.com/blasty/unwyze\n\n2. CVE-2023-5044:\nKubernetes ingress-nginx <1.9.0 - API command injection\nhttps://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044\nhttps://github.com/r0binak/CVE-2023-5044\n\n3. CVE-2023-46747:\nF5 BIG-IP unauthenticated RCE and authentication bypass\nhttps://github.com/AliBrTab/CVE-2023-46747-POC\n\n\n-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.08.09", "creation_timestamp": "2026-09-10T00:00:23.320839Z"}, {"uuid": "c51b0323-6388-4b06-a305-7ecb9f8eb351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50461", "type": "seen", "source": "https://gist.github.com/ichintu/6e4365e719efc73cff29fb6a2ec0065b", "content": "**September 14, 2026 Cyber Threat Intelligence Digest**\n\nThis briefing highlights critical vulnerabilities, AI-driven security shifts, and industry insights:\n\n\u2022 **Active Threats & Vulnerabilities:** A CVSS 9.9 OS command injection flaw (CVE-2026-90699) affects the D-Link DWR-M920 with public exploits. NCSC/CISA warn of active exploitation of a critical GitLab path traversal (CVE-2026-85706). ~2.6 million MikroTik routers expose public services, and an authenticated TYPO3 extension flaw (CVE-2023-50461, CVSS 8.8) enables arbitrary code execution. Separately, a malicious Twitch browser extension leaked OAuth tokens for ~31,000 users to a Russian bot service.\n\n\u2022 **AI & Patching Dynamics:** Microsoft\u2019s September update addresses ~972 vulnerabilities, largely uncovered by AI scanning. While AI accelerates detection, it also compresses patch windows as exploits are rapidly reverse-engineered from new releases.\n\n\u2022 **AI Governance & Leadership:** The 3M ChatGPT litigation case underscores that AI interaction logs are discoverable evidence, requiring risk-based retention, cross-functional accountability, and proactive legal compliance. On career development, transitioning from technical security roles to leadership (e.g., CISO) demands a shift toward business strategy, cross-functional communication, and continuous learning beyond pure cybersecurity.", "creation_timestamp": "2026-09-14T12:02:18.769543Z"}]}