{"vulnerability": "CVE-2019-1579", "sightings": [{"uuid": "5eb25307-40f6-41c4-82a6-f87c5c191466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "seen", "source": "MISP/5e5798d5-f4a4-4531-9953-98a402de0b81", "content": "", "creation_timestamp": "2020-02-27T11:10:08.000000Z"}, {"uuid": "b918f9e3-4113-41ff-9808-507112424994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "seen", "source": "MISP/0504bcd4-1800-4196-9321-83238dd24950", "content": "", "creation_timestamp": "2020-10-09T14:06:19.000000Z"}, {"uuid": "68b34a87-53cf-4864-99e1-b202c2b35f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "seen", "source": "MISP/63ddead6-4b82-414c-ad8e-c516b950b446", "content": "", "creation_timestamp": "2021-10-25T22:32:43.000000Z"}, {"uuid": "f97abfb0-edeb-403a-bd9c-04dba9cc530c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:04.000000Z"}, {"uuid": "43230976-b0ca-4456-83fa-0862eccb0c65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-15794", "type": "exploited", "source": "https://www.exploit-db.com/exploits/47692", "content": "", "creation_timestamp": "2019-11-20T00:00:00.000000Z"}, {"uuid": "09d5b8d8-cbee-4a38-b9a0-498e41d7769e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-15791", "type": "exploited", "source": "https://www.exploit-db.com/exploits/47693", "content": "", "creation_timestamp": "2019-11-20T00:00:00.000000Z"}, {"uuid": "eab5e891-db69-42e4-bfb4-d3b7b194411e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-15793", "type": "exploited", "source": "https://www.exploit-db.com/exploits/47693", "content": "", "creation_timestamp": "2019-11-20T00:00:00.000000Z"}, {"uuid": "4fbe30a4-1334-4682-a927-a0108abba84e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-15792", "type": "exploited", "source": "https://www.exploit-db.com/exploits/47693", "content": "", "creation_timestamp": "2019-11-20T00:00:00.000000Z"}, {"uuid": "d7b3cec4-0c25-4e5e-a91e-a1f995020254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971201", "content": "", "creation_timestamp": "2024-12-24T20:25:47.800733Z"}, {"uuid": "1e8e291e-e464-4944-99b9-365c40f96bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:24.000000Z"}, {"uuid": "7369a750-0bf2-4d65-b5f7-b4709920e5dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2019-15794", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "2262efa7-7fa1-442a-b449-9b02771e795c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2019-1579", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8ef90c3f-55d3-4db7-97bf-6b05a94d1ec1", "content": "", "creation_timestamp": "2026-02-02T12:28:29.746942Z"}, {"uuid": "f8e84220-bb48-4640-9109-1517c28402a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "seen", "source": "https://t.me/cKure/2079", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Contractor working for #Iran sells exploits to hackers.\n\nPulse Secure \"Connect\" enterprise VPNs (CVE-2019-11510)\n\nFortinet VPN servers running FortiOS (CVE-2018-13379)\n\nPalo Alto Networks \"Global Protect\" VPN servers (CVE-2019-1579)\n\nCitrix \"ADC\" servers and Citrix network gateways (CVE-2019-19781)\n\nF5 Networks BIG-IP load balancers (CVE-2020-5902)\n\nhttps://www.zdnet.com/google-amp/article/iranian-hackers-are-selling-access-to-compromised-companies-on-an-underground-forum/", "creation_timestamp": "2020-09-03T12:47:35.000000Z"}, {"uuid": "19e7bd74-82b9-4491-ad92-c550c3854e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "exploited", "source": "https://t.me/cKure/246", "content": "\u25a0\u25a1\u25a1\u25a1\u25a1 Information: Mass #scanning activity detected from 87.239.255.22 [#Israel] checking for #PaloAlto #SSL #VPN servers vulnerable to remote #CodeExecution (CVE-2019-1579).\n\nSource: Bad Packets", "creation_timestamp": "2020-04-12T17:53:17.000000Z"}, {"uuid": "3f250af2-8996-4082-bd4b-a820ee61be8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "published-proof-of-concept", "source": "https://t.me/antichat/6508", "content": "PreAuth RCE on Palo Alto GlobalProtect Part II (CVE-2019-1579)\nhttps://www.securifera.com/blog/2019/09/10/preauth-rce-on-palo-alto-globalprotect-part-ii-cve-2019-1579/", "creation_timestamp": "2019-09-12T08:39:42.000000Z"}, {"uuid": "e7dea34d-47fe-4c4b-b3ae-6a0b0d20f028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "seen", "source": "https://t.me/techteamwm/215", "content": "\u0645\u062c\u0645\u0648\u0639\u0629 \u0642\u0631\u0635\u0646\u0629 \u0625\u064a\u0631\u0627\u0646\u064a\u0629 \u062a\u062e\u062a\u0631\u0642 \u0648\u062a\u0628\u064a\u0639 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0639\u062a\u0645\u0627\u062f \u0634\u0628\u0643\u0627\u062a \u0634\u0631\u0643\u0627\u062a \u0639\u0631\u0628\u064a\u0629 \u0639\u0644\u0649 \u0627\u0644\u062f\u0627\u0631\u0643 \u0648\u064a\u0628\n\n\u0642\u0627\u0644\u062a \u0634\u0631\u0643\u0629 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a Crowdstrike \u0641\u064a \u062a\u0642\u0631\u064a\u0631 \u0625\u0646\u0647 \u062a\u0645 \u0631\u0635\u062f \u0645\u062c\u0645\u0648\u0639\u0629 \u0642\u0631\u0635\u0646\u0629 \u0625\u064a\u0631\u0627\u0646\u064a\u0629 \u0648\u0647\u064a \u062a\u0628\u064a\u0639 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0639\u062a\u0645\u0627\u062f \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0634\u0628\u0643\u0627\u062a \u0634\u0631\u0643\u0627\u062a \u0645\u0646 \u0639\u062f\u0629 \u062f\u0648\u0644 \u0639\u0631\u0628\u064a\u0629 \u0641\u064a \u0645\u0646\u062a\u062f\u0649 \u0642\u0631\u0635\u0646\u0629 \u0639\u0644\u0649 \u0627\u0644\u062f\u0627\u0631\u0643 \u0648\u064a\u0628.\n\n\u0648\u0642\u0627\u0644\u062a \u0627\u0644\u0634\u0631\u0643\u0629 \u0625\u0646 \u0627\u0644\u0623\u0645\u0631 \u064a\u062a\u0639\u0644\u0642 \u0628\u0645\u062c\u0645\u0648\u0639\u0629 \u0627\u0644\u0642\u0631\u0635\u0646\u0629 Pioneer Kitten \u060c \u0648\u0647\u064a \u062a\u0633\u0645\u064a\u0629 \u0628\u062f\u064a\u0644\u0629 \u0644\u0644\u0645\u062c\u0645\u0648\u0639\u0629 \u0627\u0644\u062a\u064a \u062a\u064f\u0639\u0631\u0641 \u0623\u064a\u0636\u064b\u0627 \u0628\u0627\u0633\u0645 Fox Kitten \u0648 Parisite.\n\n\u0623\u0645\u0636\u062a \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629 \u060c \u0627\u0644\u062a\u064a \u064a\u0639\u062a\u0642\u062f \u0623\u0646\u0647\u0627 \u0645\u0631\u062a\u0628\u0637\u0629 \u0628\u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0625\u064a\u0631\u0627\u0646\u064a\u060c \u0639\u0627\u0645\u064a 2019 \u0648 2020 \u0641\u064a \u0627\u062e\u062a\u0631\u0627\u0642 \u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0634\u0631\u0643\u0627\u062a \u0639\u0628\u0631 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0641\u064a \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629 \u0627\u0644\u062e\u0627\u0635\u0629 \u0648\u0645\u0639\u062f\u0627\u062a \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0639\u0628\u0631 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0627\u0644\u062a\u0627\u0644\u064a\u0629:\n\u0634\u0628\u0643\u0627\u062a VPN \u0627\u0644\u062e\u0627\u0635\u0629 \u0628\u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \"\u0627\u0644\u0627\u062a\u0635\u0627\u0644\" Pulse Secure \u0640 (CVE-2019-11510)\n\u062e\u0648\u0627\u062f\u0645 Fortinet VPN \u0627\u0644\u062a\u064a \u062a\u0639\u0645\u0644 \u0628\u0646\u0638\u0627\u0645 FortiOS \u0640 (CVE-2018-13379)\n\u062e\u0648\u0627\u062f\u0645 VPN \"Global Protect\" \u0645\u0646 Palo Alto Networks \u0640 (CVE-2019-1579)\n\u062e\u0648\u0627\u062f\u0645 Citrix \"ADC\" \u0648\u0628\u0648\u0627\u0628\u0627\u062a \u0634\u0628\u0643\u0629 Citrix \u0640 (CVE-2019-19781)\n\u0645\u0648\u0627\u0632\u0646 \u0627\u0644\u062a\u062d\u0645\u064a\u0644 F5 Networks BIG-IP \u0640 (CVE-2020-5902)\n\n\u0642\u0627\u0645\u062a \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629 \u0628\u0627\u062e\u062a\u0631\u0627\u0642 \u0623\u062c\u0647\u0632\u0629 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0627\u0644\u0645\u0630\u0643\u0648\u0631\u0629\u060c \u0644\u0641\u062a\u062d \u0623\u0628\u0648\u0627\u0628 \u062e\u0644\u0641\u064a\u0629\u060c \u0644\u062a\u0648\u0641\u064a\u0631 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0645\u062c\u0645\u0648\u0639\u0627\u062a \u0642\u0631\u0635\u0646\u0629 \u0625\u064a\u0631\u0627\u0646\u064a\u0629 \u0623\u062e\u0631\u0649\u060c \u0645\u062b\u0644 APT33 (Shamoon) \u0648 Oilrig (APT34) \u0648 Chafer \u060c \u0648\u0641\u0642\u064b\u0627 \u0644\u062a\u0642\u0627\u0631\u064a\u0631 \u0645\u0646 \u0634\u0631\u0643\u062a\u064a \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a ClearSky \u0648 Dragos.\n\n\u0633\u062a\u062f\u062e\u0644 \u0647\u0630\u0647 \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0627\u062a \u0627\u0644\u0623\u062e\u0631\u0649 \u0628\u0639\u062f \u0630\u0644\u0643 \u060c \u0644\u062a\u0648\u0633\u064a\u0639 \"\u0627\u0644\u0648\u0635\u0648\u0644 \u0627\u0644\u0623\u0648\u0644\u064a\" \u0627\u0644\u0630\u064a \u062a\u0645\u0643\u0646 \u0642\u0631\u0627\u0635\u0646\u0629 Pioneer Kitten \u0645\u0646 \u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u064a\u0647 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u062a\u062d\u0631\u0643 \u0639\u0628\u0631 \u0634\u0628\u0643\u0629 \u0627\u0644\u0634\u0631\u0643\u0627\u062a \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0628\u0631\u0627\u0645\u062c \u0636\u0627\u0631\u0629.\n\n\u0648\u0641\u064a \u0627\u0644\u062a\u0642\u0631\u064a\u0631 \u0627\u0644\u0630\u064a \u0635\u062f\u0631 \u062a\u0642\u0648\u0644 \u0634\u0631\u0643\u0629 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a Crowdstrike \u0625\u0646\u0647 \u062a\u0645 \u0631\u0635\u062f Pioneer Kitten \u0623\u064a\u0636\u064b\u0627 \u0648\u0647\u064a \u062a\u0628\u064a\u0639 \u0628\u064a\u0627\u0646\u0627\u062a \u0625\u0639\u062a\u0645\u0627\u062f \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0628\u0639\u0636 \u0647\u0630\u0647 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0645\u062e\u062a\u0631\u0642\u0629 \u0641\u064a \u0645\u0646\u062a\u062f\u064a\u0627\u062a \u0627\u0644\u0642\u0631\u0635\u0646\u0629 \u0639\u0644\u0649 \u0627\u0644\u062f\u0627\u0631\u0643 \u0648\u064a\u0628 \u0645\u0646\u0630 \u064a\u0648\u0644\u064a\u0648 2020 \u0639\u0644\u0649 \u0627\u0644\u0623\u0642\u0644.\n\n\u062a\u0639\u062a\u0642\u062f Crowdstrike \u0623\u0646 \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629 \u062a\u062d\u0627\u0648\u0644 \u0641\u0642\u0637 \u062a\u0646\u0648\u064a\u0639 \u0645\u0635\u0627\u062f\u0631 \u0625\u064a\u0631\u0627\u062f\u0627\u062a\u0647\u0627 \u0648\u0627\u0633\u062a\u062b\u0645\u0627\u0631 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u062a\u064a \u0644\u064a\u0633 \u0644\u0647\u0627 \u0642\u064a\u0645\u0629 \u0627\u0633\u062a\u062e\u0628\u0627\u0631\u064a\u0629 \u0644\u0623\u062c\u0647\u0632\u0629 \u0627\u0644\u0645\u062e\u0627\u0628\u0631\u0627\u062a \u0627\u0644\u0625\u064a\u0631\u0627\u0646\u064a\u0629.\n\n\u062a\u0634\u0645\u0644 \u0627\u0644\u0623\u0647\u062f\u0627\u0641 \u0627\u0644\u062a\u0642\u0644\u064a\u062f\u064a\u0629 \u0644\u0645\u062c\u0645\u0648\u0639\u0627\u062a \u0627\u0644\u0642\u0631\u0635\u0646\u0629 \u0627\u0644\u062a\u064a \u062a\u0631\u0639\u0627\u0647\u0627 \u0625\u064a\u0631\u0627\u0646 \u0634\u0631\u0643\u0627\u062a \u0648\u0645\u0624\u0633\u0633\u0627\u062a \u062d\u0643\u0648\u0645\u064a\u0629 \u0641\u064a \u0627\u0644\u0648\u0644\u0627\u064a\u0627\u062a \u0627\u0644\u0645\u062a\u062d\u062f\u0629 \u0648\u0627\u0644\u0643\u064a\u0627\u0646 \u0627\u0644\u0635\u0647\u064a\u0648\u0646\u064a \u0648\u0628\u0639\u0636 \u0627\u0644\u062f\u0648\u0644 \u0627\u0644\u0639\u0631\u0628\u064a\u0629\u060c \u0648\u062a\u0634\u0645\u0644 \u0627\u0644\u0642\u0637\u0627\u0639\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641\u0629 \u0639\u0627\u062f\u0629 \u0627\u0644\u062f\u0641\u0627\u0639 \u0648\u0627\u0644\u0631\u0639\u0627\u064a\u0629 \u0627\u0644\u0635\u062d\u064a\u0629 \u0648\u0627\u0644\u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0648\u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u062d\u0643\u0648\u0645\u064a\u0629\u060c \u0644\u0643\u0646 \u0641\u064a \u0627\u0644\u0623\u0648\u0646\u0629 \u0627\u0644\u0623\u062e\u064a\u0631\u0629 \u062a\u0648\u0633\u0639\u062a \u0627\u0644\u062d\u0645\u0644\u0629 \u0644\u062a\u0634\u0645\u0644 \u0645\u0624\u0633\u0633\u0627\u062a \u0628\u062f\u0648\u0644 \u0623\u062e\u0631\u0649 \u0623\u062e\u0631\u0649 \u0641\u064a \u0634\u0645\u0627\u0644 \u0625\u0641\u0631\u064a\u0642\u064a\u0627\u060c \u0648\u0645\u0646 \u0628\u064a\u0646\u0647\u0627 \u0645\u0624\u0633\u0633\u0627\u062a \u062c\u0632\u0627\u0626\u0631\u064a\u0629 \u0648\u0642\u062f \u0642\u0627\u0645\u062a \u0627\u0644\u0633\u0644\u0637\u0627\u062a \u0627\u0644\u062c\u0632\u0627\u0626\u0631\u064a\u0629 \u0628\u0645\u0631\u0627\u0633\u0644\u0629 \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641\u0629 \u0644\u0625\u062a\u062e\u0627\u0630 \u0627\u0644\u062a\u062f\u0627\u0628\u064a\u0631 \u0648\u062a\u0639\u0632\u064a\u0632 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0644\u0644\u0645\u0624\u0633\u0633\u0627\u062a\u060c.\n\n\u0641\u064a\u0645\u0627 \u0628\u0639\u0636 \u0627\u0644\u062f\u0648\u0644 \u0627\u0644\u0639\u0631\u0628\u064a\u0629 \u0631\u0628\u0645\u0627 \u0644\u0645 \u062a\u062a\u0641\u0637\u0646 \u0628\u0639\u062f \u0644\u0647\u0630\u0627 \u0627\u0644\u062e\u0631\u0642\u060c \u0644\u0630\u0644\u0643 \u064a\u062c\u0628 \u062a\u0646\u0628\u064a\u0647 \u0627\u0644\u0634\u0631\u0643\u0627\u062a \u0648\u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u0639\u0645\u0644 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0625\u0641\u062a\u0631\u0627\u0636\u064a\u0629 \u0648\u0627\u0644\u0645\u0639\u062f\u0627\u062a \u0627\u0644\u0645\u0630\u0643\u0648\u0631\u0629 \u0627\u0644\u062a\u064a \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0646\u0642\u0627\u0637 \u0636\u0639\u0641 \u0627\u0644\u062a\u0646\u0628\u0647 \u0644\u0645\u0631\u0627\u062c\u0639\u0629 \u0625\u062c\u0631\u0627\u0626\u0627\u062a\u0647\u0627.\n\n\u062a\u0639\u062a\u0645\u062f \u0645\u062c\u0645\u0648\u0639\u0629 \u0627\u0644\u0642\u0631\u0635\u0646\u0629 \u0627\u0644\u0625\u064a\u0631\u0627\u0646\u064a\u0629 \u0639\u0644\u0649 \u0646\u0641\u0642 SSH \u060c \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0623\u062f\u0648\u0627\u062a \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0645\u062b\u0644 Ngrok \u0648\u0623\u062f\u0627\u0629 \u0645\u062e\u0635\u0635\u0629 \u062a\u0633\u0645\u0649 SSHMinion. \u0648\u062a\u0633\u062a\u062e\u062f\u0645 \u0647\u0630\u0647 \u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0644\u0644\u062a\u0648\u0627\u0635\u0644 \u0639\u0628\u0631 \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 \u0633\u0637\u062d \u0627\u0644\u0645\u0643\u062a\u0628 \u0627\u0644\u0628\u0639\u064a\u062f RDP \u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0641\u064a \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629 VPN \u0648\u0623\u062c\u0647\u0632\u0629 \u0627\u0644\u0634\u0628\u0643\u0629.\n\n\u0648\u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u062a\u0645 \u0625\u0633\u062a\u063a\u0644\u0627\u0644 \u0646\u0642\u0627\u0637 \u0636\u0639\u0641 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629 \u0648\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0648\u0635\u0648\u0644 \u0644\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0644\u0632\u0631\u0639 \u0628\u0631\u0627\u0645\u062c \u0641\u062f\u064a\u0629 \u0628\u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u0625\u0633\u062a\u0631\u0627\u062a\u064a\u062c\u064a\u0629\u060c \u0648\u0647\u0648 \u0645\u0627 \u0633\u064a\u0643\u0628\u062f\u0647\u0627 \u062e\u0633\u0627\u0626\u0631 \u0643\u0628\u064a\u0631\u0629 \u0641\u064a \u0627\u0644\u0623\u0645\u0648\u0627\u0644 \u0623\u0648 \u0641\u064a \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0639\u0646\u062f \u0646\u0634\u0631\u0647\u0627 \u0623\u0648 \u062a\u0634\u0641\u064a\u0631\u0647\u0627.", "creation_timestamp": "2020-09-21T04:37:32.000000Z"}, {"uuid": "ca9df1b9-99e0-4827-982b-5ef4379827a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "seen", "source": "https://t.me/arpsyndicate/1217", "content": "#ExploitObserverAlert\n\nCVE-2019-1579\n\nDESCRIPTION: Exploit Observer has 11 entries related to CVE-2019-1579. Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.\n\nFIRST-EPSS: 0.746870000\nNVD-IS: 5.9\nNVD-ES: 2.2", "creation_timestamp": "2023-12-04T13:30:15.000000Z"}, {"uuid": "307f557c-7c3a-4635-a3ed-84d3eb737eca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "published-proof-of-concept", "source": "Telegram/Wi_zsv0__kJiLHn6RDzlVqBjgkdQQMjf-g6zrzHe3dZf", "content": "", "creation_timestamp": "2026-08-01T17:00:04.145414Z"}, {"uuid": "5beb9add-bf61-440a-b9ad-4b09f88cafc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "exploited", "source": "https://t.me/thehackernews/604", "content": "Iranian hackers are exploiting unpatched 1-day enterprise VPN vulnerabilities to compromise network of organizations worldwide and implant backdoors for cyber espionage.\n\n\u27a1\ufe0f Pulse Secure Connect: CVE-2019-11510\n\u27a1\ufe0f Palo Alto Networks: CVE-2019-1579\n\u27a1\ufe0f Fortinet FortiOS: CVE-2018-13379\n\u27a1\ufe0f Citrix: CVE-2019-19781\n\nRead: https://thehackernews.com/2020/02/iranian-hackers-vpn-vulnerabilities.html", "creation_timestamp": "2020-02-18T16:19:32.000000Z"}, {"uuid": "c5993f19-721d-4f89-b8e3-f3bd7474331e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "published-proof-of-concept", "source": "https://t.me/canyoupwnme/5882", "content": "PreAuth RCE on Palo Alto GlobalProtect Part II (CVE-2019-1579)\nhttps://www.securifera.com/blog/2019/09/10/preauth-rce-on-palo-alto-globalprotect-part-ii-cve-2019-1579/", "creation_timestamp": "2019-09-12T10:32:06.000000Z"}, {"uuid": "853f5908-17e2-44e8-b921-c3cc367cc554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/538", "content": "#exploit\n1. CVE-2019-16758:\nLexmark Services Monitor 2.27.x - Directory Traversal\nhttps://seclists.org/fulldisclosure/2019/Nov/17\n\n2. CVE-2019-1579:\nRCE in PAN-OS <=7.1.18, <=8.0.11-h1, <=8.1.2 with GlobalProtect Portal/Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code\nhttps://github.com/securifera/CVE-2019-1579\n\n3. CVE-2019-19697:\nTrend Micro Maximum Security is vulnerable to arbitrary code execution as it allows for creation of registry key to target a process running as SYSTEM\nhttps://seclists.org/fulldisclosure/2020/Jan/22", "creation_timestamp": "2024-10-14T22:12:13.000000Z"}, {"uuid": "bb91b9b0-5a7d-4a8c-96ca-32ee5234f9ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-15796", "type": "seen", "source": "https://t.me/cibsecurity/10752", "content": "ATENTION\u203c New - CVE-2019-15796\n\nPython-apt doesn't check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py or in `_fetch_archives()` of apt/cache.py in version 1.9.3ubuntu2 and earlier. This allows downloads from unsigned repositories which shouldn't be allowed and has been fixed in verisions 1.9.5, 1.9.0ubuntu1.2, 1.6.5ubuntu0.1, 1.1.0~beta1ubuntu0.16.04.7, 0.9.3.5ubuntu3+esm2, and 0.8.3ubuntu7.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-03-26T15:52:29.000000Z"}, {"uuid": "5b9a55f0-4f77-421e-bc28-924b451b8388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-15795", "type": "seen", "source": "https://t.me/cibsecurity/10758", "content": "ATENTION\u203c New - CVE-2019-15795\n\npython-apt only checks the MD5 sums of downloaded files in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py in version 1.9.0ubuntu1 and earlier. This allows a man-in-the-middle attack which could potentially be used to install altered packages and has been fixed in versions 1.9.0ubuntu1.2, 1.6.5ubuntu0.1, 1.1.0~beta1ubuntu0.16.04.7, 0.9.3.5ubuntu3+esm2, and 0.8.3ubuntu7.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-03-26T16:22:31.000000Z"}, {"uuid": "ea519e3f-6f2f-47bd-866b-b7f9d44b992a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "published-proof-of-concept", "source": "Telegram/Wi_zsv0__kJiLHn6RDzlVqBjgkdQQMjf-g6zrzHe3dZf", "content": "", "creation_timestamp": "2026-08-02T00:00:41.007047Z"}, {"uuid": "ea087282-d6d1-437c-87c2-196e6b5c7d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msul24hjqm2x", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2019-1579: Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with Global\u2026\nCVSS 8.1 \u00b7 EPSS 46.0% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2019-1579\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-12T07:08:13.774604Z"}, {"uuid": "0ab35c41-7f48-40a2-9353-de22b6a923c6", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/da4d7ee3-cf8b-4860-b378-fe2c34e36750", "content": "", "creation_timestamp": "2026-06-23T14:04:52.536226Z"}, {"uuid": "54fbb319-3ab0-480c-a43c-0aa71420ffce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "seen", "source": "https://infosec.exchange/users/greynoise/statuses/116886144753753051", "content": "This week a long-dormant Palo Alto flaw came back to life in GreyNoise data.\nGlobalProtect CVE-2019-1579 (unauth RCE, CISA KEV) drew only isolated activity through late June, then more than 120 malicious hosts probed it on 06 July, almost all from a single hosting network. Separately, two coordinated hosting fleets ran the week's highest-volume web exploitation, roughly 7.5M connection attempts.\nAccess our public preview At The Edge Clear: https://www.greynoise.io/resources/at-the-edge-clear-070626\nGreyNoise customers get the full weekly brief.", "creation_timestamp": "2026-07-08T20:03:48.171341Z"}, {"uuid": "427032a1-c958-4323-848c-54290e02eadf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "seen", "source": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3mq5w2tpgp7r2", "content": "This week a long-dormant Palo Alto flaw came back to life in GreyNoise data.\n\nGlobalProtect CVE-2019-1579 (unauth RCE, CISA KEV) drew only isolated activity through late June, then more than 120 malicious hosts probed it on 06 July, almost all from a single [\u2026] \n\n[Original post on infosec.exchange]", "creation_timestamp": "2026-07-08T20:04:03.763049Z"}, {"uuid": "b72b4ec9-0768-4d68-98ea-b6c0d3e30359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "seen", "source": "Telegram/Wi_zsv0__kJiLHn6RDzlVqBjgkdQQMjf-g6zrzHe3dZf", "content": "", "creation_timestamp": "2026-07-29T12:01:52.502449Z"}, {"uuid": "f5314ee9-b044-43b9-b098-d328c9faf3cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "seen", "source": "Telegram/Wi_zsv0__kJiLHn6RDzlVqBjgkdQQMjf-g6zrzHe3dZf", "content": "", "creation_timestamp": "2026-07-30T00:02:04.554579Z"}, {"uuid": "7792b4c4-8822-49d9-954a-5679fa13a8ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "seen", "source": "https://t.me/cissp/1754", "content": "With everyone working from home, VPN security is now paramount\n\n\u2022 How many concurrent users can login at the same time?\n \u2022 Will the VPN corporate policy be relaxed to accommodate the maximum of employees?\n \u2022 Who gets priority access if the appliance or service cannot support everyone?\n \u2022 How much bandwidth a typical user uses?\n \u2022 Do you split access time between users (i.e. each gets 2 hours)?\n \u2022 Number of VPN licenses or MFA tokens available?\n \u2022 Are users allowed to use the personal computer?\n \u2022 If personal computers are allowed: (1) What is their security posture (patches, AV update, etc.)? (2) Can they be trusted? (3) What files or shares are employees allowed to access?\n\n\u062d\u062a\u0645\u0627 \u0648\u0635\u0644\u0647 \u0647\u0627\u064a \u0645\u0631\u062a\u0628\u0637 \u0628\u0647 \u062a\u062c\u0647\u064a\u0632\u0627\u062a \u0632\u064a\u0631 \u0627\u06af\u0631 \u062f\u0631 \u0627\u064a\u0646 \u0627\u0633\u0643\u0648\u067e \u0647\u0633\u062a\u0646\u062f\u060c \u062d\u062a\u0645\u0627 \u0628\u0644\u0627\u062f\u0631\u0646\u06af \u0648\u0635\u0644\u0647 \u0634\u0648\u0646\u062f.\nPalo Alto Network Security Advisory PAN-SA-2019-0020, in relation to CVE-2019-1579;\n\u2022 FortiGuard Security Advisories FG-IR-18-389, in relation to CVE-2018-13382; FG-IR-18-388 in relation to CVE-2018-13383; FG-IR-18-384, in relation to CVE-2018-13379;\n\u2022 Pulse Secure Security Advisory SA44101, in relation to CVE-2019-11510, CVE-2019-11508, CVE-2019-11540, CVE-2019-11543, CVE-2019-11541, CVE-2019-11542, CVE-2019-11539, CVE-2019-11538, CVE-2019-11509, https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11507CVE-2019-11507.\n\u2022 Citrix Security Advisory CTX267027, in relation to CVE-2019-19781.\n\nhttps://www.zdnet.com/article/covid-19-with-everyone-working-from-home-vpn-security-has-now-become-paramount/", "creation_timestamp": "2026-09-01T17:01:10.189800Z"}, {"uuid": "2522022d-1156-4704-b03a-978ebd9b7a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1579", "type": "seen", "source": "https://t.me/cissp/1754", "content": "With everyone working from home, VPN security is now paramount\n\n\u2022 How many concurrent users can login at the same time?\n \u2022 Will the VPN corporate policy be relaxed to accommodate the maximum of employees?\n \u2022 Who gets priority access if the appliance or service cannot support everyone?\n \u2022 How much bandwidth a typical user uses?\n \u2022 Do you split access time between users (i.e. each gets 2 hours)?\n \u2022 Number of VPN licenses or MFA tokens available?\n \u2022 Are users allowed to use the personal computer?\n \u2022 If personal computers are allowed: (1) What is their security posture (patches, AV update, etc.)? (2) Can they be trusted? (3) What files or shares are employees allowed to access?\n\n\u062d\u062a\u0645\u0627 \u0648\u0635\u0644\u0647 \u0647\u0627\u064a \u0645\u0631\u062a\u0628\u0637 \u0628\u0647 \u062a\u062c\u0647\u064a\u0632\u0627\u062a \u0632\u064a\u0631 \u0627\u06af\u0631 \u062f\u0631 \u0627\u064a\u0646 \u0627\u0633\u0643\u0648\u067e \u0647\u0633\u062a\u0646\u062f\u060c \u062d\u062a\u0645\u0627 \u0628\u0644\u0627\u062f\u0631\u0646\u06af \u0648\u0635\u0644\u0647 \u0634\u0648\u0646\u062f.\nPalo Alto Network Security Advisory PAN-SA-2019-0020, in relation to CVE-2019-1579;\n\u2022 FortiGuard Security Advisories FG-IR-18-389, in relation to CVE-2018-13382; FG-IR-18-388 in relation to CVE-2018-13383; FG-IR-18-384, in relation to CVE-2018-13379;\n\u2022 Pulse Secure Security Advisory SA44101, in relation to CVE-2019-11510, CVE-2019-11508, CVE-2019-11540, CVE-2019-11543, CVE-2019-11541, CVE-2019-11542, CVE-2019-11539, CVE-2019-11538, CVE-2019-11509, https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11507CVE-2019-11507.\n\u2022 Citrix Security Advisory CTX267027, in relation to CVE-2019-19781.\n\nhttps://www.zdnet.com/article/covid-19-with-everyone-working-from-home-vpn-security-has-now-become-paramount/", "creation_timestamp": "2026-09-02T01:05:00.051234Z"}]}