{"vulnerability": "CVE-2020-14882", "sightings": [{"uuid": "63f8e0be-41d8-4473-ab38-3ffdc25b6199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/aeef081a-31b4-4de5-b985-3d516fb9820b", "content": "", "creation_timestamp": "2020-11-23T16:32:52.000000Z"}, {"uuid": "3c31bd5b-ebd8-4f80-9bcd-e059a31fe88a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/882c6b58-b6dc-4e0d-adb0-d79be8878736", "content": "", "creation_timestamp": "2020-11-10T00:52:11.000000Z"}, {"uuid": "10602430-5ed5-4ba5-9e14-8908a17ad6ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:19.000000Z"}, {"uuid": "e42955ba-1f0a-465b-8a1c-f4f310ffda1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "ae9ec8f9-58fd-48ea-8625-3fdd1ab947f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/933a8ed4-359e-43c9-b17d-2b112172a581", "content": "", "creation_timestamp": "2020-11-12T19:00:08.000000Z"}, {"uuid": "caeede3c-1104-4599-a391-b81c917d60b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/50398c3a-0744-45bd-860b-b682579f0f1d", "content": "", "creation_timestamp": "2020-11-13T23:13:27.000000Z"}, {"uuid": "77c2a516-76d1-4e4a-b849-0a9d926524c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/16b905de-36f5-4003-b965-a6f2fb32a01d", "content": "", "creation_timestamp": "2020-11-12T23:00:05.000000Z"}, {"uuid": "bd04b0f4-7baf-484b-bea3-c725f821fbb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/618f66f3-43f7-4171-a1e8-23c823e87694", "content": "", "creation_timestamp": "2020-11-13T23:00:06.000000Z"}, {"uuid": "e22d7089-d0df-4a56-b11a-4413fb4a7392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/1b150de0-5e34-404d-adb6-81425e876e20", "content": "", "creation_timestamp": "2020-11-13T23:07:11.000000Z"}, {"uuid": "942bc7a5-f36f-493c-afb7-78911ac8b80f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/48155bf7-590f-4f27-bbd3-a50b89a146e5", "content": "", "creation_timestamp": "2020-11-13T23:01:07.000000Z"}, {"uuid": "a8722aa6-3bdb-4948-bb23-968f6b0bb80d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/92804a20-6d9f-4168-bd3f-64dc54cb5ec4", "content": "", "creation_timestamp": "2020-11-13T23:12:25.000000Z"}, {"uuid": "bc999bab-5c1a-4d0c-ac04-98975d761ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/76542698-6ca5-4b11-9b39-29d4edea6a18", "content": "", "creation_timestamp": "2020-11-13T23:10:19.000000Z"}, {"uuid": "745caf59-18ce-4982-9663-b0308403afe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/f3006094-2597-4c6c-8ea4-ea356ff5fe8d", "content": "", "creation_timestamp": "2020-11-13T23:05:08.000000Z"}, {"uuid": "04cbc2df-3b4d-4c4d-97ef-e8456fd9cee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/8a011035-b27d-43ca-b008-5f895cf4547d", "content": "", "creation_timestamp": "2020-11-13T23:04:08.000000Z"}, {"uuid": "2c0c6927-f1e6-4af0-92a6-ed2cad0de3ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/8ee71921-aa20-4921-8ac4-db7fbdde4c38", "content": "", "creation_timestamp": "2020-11-23T19:00:13.000000Z"}, {"uuid": "15cdb706-4318-46b0-93e9-0455db77adc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/1a950cd0-9ba2-48fc-a8be-a59520acd0ff", "content": "", "creation_timestamp": "2020-11-13T23:09:16.000000Z"}, {"uuid": "3cf22255-4f80-4c9f-9c76-c5fdfe191b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/4de36144-65e3-4e39-9cee-73f8f1426fae", "content": "", "creation_timestamp": "2020-11-13T23:03:08.000000Z"}, {"uuid": "a84cdb16-a201-493f-a920-b0311e1c5753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/8fe1b256-caca-4680-88bb-d90868dc4d21", "content": "", "creation_timestamp": "2020-11-13T23:02:07.000000Z"}, {"uuid": "693dc29f-cfb9-4263-85f7-b193081d2365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/9b87af5a-aa36-48d8-b25f-8917cad5e84c", "content": "", "creation_timestamp": "2020-11-13T23:06:10.000000Z"}, {"uuid": "35633f9b-0915-4440-aa33-60f9fdc18b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/16cc62a2-d1f9-4d2d-a1b9-fa29e623c8c0", "content": "", "creation_timestamp": "2024-11-14T06:10:12.000000Z"}, {"uuid": "4b817ef9-8a55-453e-b55e-6028220bf620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2970959", "content": "", "creation_timestamp": "2024-12-24T20:22:19.351059Z"}, {"uuid": "18c300fb-f9f5-462b-a63c-7a9dabbb0780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2970958", "content": "", "creation_timestamp": "2024-12-24T20:22:18.522170Z"}, {"uuid": "17fd5e9d-643e-4e29-8844-346cc1f0a85b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-29)", "content": "", "creation_timestamp": "2024-12-29T00:00:00.000000Z"}, {"uuid": "93e1ae1a-e2e9-43ed-8135-73f5f4d92389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-02)", "content": "", "creation_timestamp": "2025-02-02T00:00:00.000000Z"}, {"uuid": "12ad2127-e0d3-44f8-a128-2fa9508394fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://bsky.app/profile/zxqa.bsky.social/post/3lgmbkwo53s2o", "content": "", "creation_timestamp": "2025-01-26T01:28:52.413635Z"}, {"uuid": "891c7340-b783-4006-936b-2c2311239485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://bsky.app/profile/zxqa.bsky.social/post/3lgmbkwokrc2o", "content": "", "creation_timestamp": "2025-01-26T01:28:52.915196Z"}, {"uuid": "7bd376eb-a176-4536-bd01-75342bb10fd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://bsky.app/profile/zxqa.bsky.social/post/3lgmbkwonp22o", "content": "", "creation_timestamp": "2025-01-26T01:28:53.406618Z"}, {"uuid": "61954c5a-c218-4431-8f42-0ecb40b68f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://bsky.app/profile/zxqa.bsky.social/post/3lgmbkwopnk2o", "content": "", "creation_timestamp": "2025-01-26T01:28:53.910901Z"}, {"uuid": "97cf2578-dd51-42fa-9e26-2953f2cafe37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "7dba3737-3090-4e01-b790-7aba5d15c181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-18)", "content": "", "creation_timestamp": "2024-12-18T00:00:00.000000Z"}, {"uuid": "46fe25ba-81f2-4d3b-a083-385b1279f3fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-07)", "content": "", "creation_timestamp": "2025-01-07T00:00:00.000000Z"}, {"uuid": "7893999d-2fab-4356-8e49-4c1b2a5feded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "62104e9f-9311-48af-a4a6-0fb5b670385a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:24.000000Z"}, {"uuid": "1f1c90cf-ae40-4b36-8c60-65cb5326bb0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-27)", "content": "", "creation_timestamp": "2025-02-27T00:00:00.000000Z"}, {"uuid": "7fad6eb2-66cb-4092-8ff5-9de3313b7246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-12)", "content": "", "creation_timestamp": "2025-02-12T00:00:00.000000Z"}, {"uuid": "e756fccd-e850-42ed-a73d-31127ba2b1db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-15)", "content": "", "creation_timestamp": "2025-02-15T00:00:00.000000Z"}, {"uuid": "52a7f533-a9b7-4d73-8d77-0bf3a717f609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-10)", "content": "", "creation_timestamp": "2025-03-10T00:00:00.000000Z"}, {"uuid": "79693144-b91a-45ab-bf0b-5d529c813486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:46.000000Z"}, {"uuid": "2fa26f9f-9359-4dac-a691-f23afa1d546b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-28)", "content": "", "creation_timestamp": "2025-05-28T00:00:00.000000Z"}, {"uuid": "00fae01e-2429-4a1e-93fc-32c6897d91ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-25)", "content": "", "creation_timestamp": "2025-06-25T00:00:00.000000Z"}, {"uuid": "b694af1c-635f-4156-8886-ac714427daa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-15)", "content": "", "creation_timestamp": "2025-06-15T00:00:00.000000Z"}, {"uuid": "3731fe28-4f5a-4acd-bff9-126aee57e72f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-08)", "content": "", "creation_timestamp": "2025-07-08T00:00:00.000000Z"}, {"uuid": "60b4ca2f-e12b-4343-90c0-6e0a065df9b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-20)", "content": "", "creation_timestamp": "2025-07-20T00:00:00.000000Z"}, {"uuid": "f3fffa17-0d36-40fe-b3fb-6836011f7d81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-05)", "content": "", "creation_timestamp": "2025-09-05T00:00:00.000000Z"}, {"uuid": "cb1d36a8-b260-4244-98c4-e847a66547f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-26)", "content": "", "creation_timestamp": "2025-07-26T00:00:00.000000Z"}, {"uuid": "9e734124-5a75-4d31-947a-9895edb1d156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-27)", "content": "", "creation_timestamp": "2025-07-27T00:00:00.000000Z"}, {"uuid": "45cd5f23-be50-4116-bc06-e0d8ba349d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-28)", "content": "", "creation_timestamp": "2025-07-28T00:00:00.000000Z"}, {"uuid": "9279d0b2-4250-4840-8779-4ec9cd24d3bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-05)", "content": "", "creation_timestamp": "2025-08-05T00:00:00.000000Z"}, {"uuid": "5e1472d9-e020-49fa-8462-35efbfaa5e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-28)", "content": "", "creation_timestamp": "2025-11-28T00:00:00.000000Z"}, {"uuid": "bd343fda-0d49-4c89-b4f1-89c384494f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-07)", "content": "", "creation_timestamp": "2025-09-07T00:00:00.000000Z"}, {"uuid": "aa0d0f4d-8db6-4792-b20f-f24371e63668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://sploitus.com/exploit?id=D7E0435A-B0DC-5738-9678-CCB2A1877CED", "content": "", "creation_timestamp": "2025-11-04T19:18:46.000000Z"}, {"uuid": "590d8cf1-6969-4a39-9e08-02c61de8cf5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-21)", "content": "", "creation_timestamp": "2025-08-21T00:00:00.000000Z"}, {"uuid": "1c07afed-137a-4de4-9104-687bde30069c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://sploitus.com/exploit?id=F60F47DE-0A09-59E0-B958-8DA532E06CA9", "content": "", "creation_timestamp": "2025-10-29T08:56:59.000000Z"}, {"uuid": "d2b7178c-9f41-4883-a37a-d80fa17e8374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-24)", "content": "", "creation_timestamp": "2025-11-24T00:00:00.000000Z"}, {"uuid": "d68daaf4-8bc6-44fb-ae83-870b5696c983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-26)", "content": "", "creation_timestamp": "2025-11-26T00:00:00.000000Z"}, {"uuid": "e7c605dd-4009-4972-9253-5de096e8769a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-26)", "content": "", "creation_timestamp": "2025-08-26T00:00:00.000000Z"}, {"uuid": "105692c0-0ed9-483f-94fe-864301d2f7b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:40.000000Z"}, {"uuid": "e6768fe6-d845-4106-9682-b6ef20b0274f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:00:51.000000Z"}, {"uuid": "824a2132-1e0c-4e99-95c3-c498621c2392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-30)", "content": "", "creation_timestamp": "2025-11-30T00:00:00.000000Z"}, {"uuid": "b35faee1-79c4-4f08-97f3-e717f6fb5a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-29)", "content": "", "creation_timestamp": "2025-11-29T00:00:00.000000Z"}, {"uuid": "c399d667-141a-43ce-82d0-3aa0a79745d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-30)", "content": "", "creation_timestamp": "2025-08-30T00:00:00.000000Z"}, {"uuid": "4fc76492-53af-4e6b-b2bd-e95415a130c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-01)", "content": "", "creation_timestamp": "2025-09-01T00:00:00.000000Z"}, {"uuid": "27e99bbf-1c2e-4341-a477-f6b47df7293a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-02)", "content": "", "creation_timestamp": "2025-09-02T00:00:00.000000Z"}, {"uuid": "f8613a15-2290-4c8e-b43a-3208fd9a1fb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/weblogic_admin_handle_rce.rb", "content": "", "creation_timestamp": "2020-11-18T21:46:12.000000Z"}, {"uuid": "76950807-2290-498a-a575-678d43613228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-19)", "content": "", "creation_timestamp": "2026-02-19T00:00:00.000000Z"}, {"uuid": "08165108-61a0-4fd8-884f-2ab77daadbec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-07)", "content": "", "creation_timestamp": "2025-12-07T00:00:00.000000Z"}, {"uuid": "022045d9-9a2c-47b6-a85d-9dfd993a58d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-02)", "content": "", "creation_timestamp": "2026-02-02T00:00:00.000000Z"}, {"uuid": "0a20e497-2540-41c9-be67-cd1643fcc691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-18)", "content": "", "creation_timestamp": "2026-02-18T00:00:00.000000Z"}, {"uuid": "ec4f114f-e107-47ac-9ac4-e6a82a6bbdb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-04)", "content": "", "creation_timestamp": "2026-01-04T00:00:00.000000Z"}, {"uuid": "c1fcfafb-d64f-47f9-a85d-1c8d5d6b4ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-22)", "content": "", "creation_timestamp": "2026-03-22T00:00:00.000000Z"}, {"uuid": "59c5d288-5655-409f-a26e-79b5e0a24d8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=521", "content": "", "creation_timestamp": "2020-10-21T04:00:00.000000Z"}, {"uuid": "3bfabbac-ef08-4fc8-9a4a-78d413a085c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/havaittu-aktiivista-oracle-weblogic-palvelimen-hyvaksikayttoa", "content": "", "creation_timestamp": "2020-10-29T08:58:33.000000Z"}, {"uuid": "ae6ee7c9-b298-4ea5-bf80-e09493cf749b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7b6fe835-de06-466c-81de-4a2b79b8cb00", "content": "", "creation_timestamp": "2026-02-02T12:28:59.503650Z"}, {"uuid": "123538d5-0356-4a67-8c6a-38b325b052ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/62327", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aPoC for testing if a target is vulnerable to RCE\nURL\uff1ahttps://github.com/b1g-b33f/CVE-2020-14882\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-12-10T01:02:52.000000Z"}, {"uuid": "9ac17dfe-1c44-459f-b5bc-229d18c409a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "Telegram/b0MrL-7YyNVMwlRE8cQmf3aSFWZZuNk0ErN3GEJH-SnDaRk", "content": "", "creation_timestamp": "2025-12-10T09:00:05.000000Z"}, {"uuid": "d46eaf9f-89f3-41c2-b0ae-4fb678ea5dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/cKure/2634", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 Weblogic RCE via GET request \u2014 CVE-2020-14882 Analysis.\n\nhttps://testbnull.medium.com/weblogic-rce-by-only-one-get-request-cve-2020-14882-analysis-6e4b09981dbf", "creation_timestamp": "2020-10-29T03:15:09.000000Z"}, {"uuid": "e7e73e7e-96ed-422a-a3e7-962ae194cf3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-07)", "content": "", "creation_timestamp": "2026-04-07T00:00:00.000000Z"}, {"uuid": "5fed7b39-b31c-4c76-8fd5-7c4d0d5f4c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/cKure/2742", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 PoC for vulnerabilities CVE-2020-14750 and cve-2020-14882.\n\nhttps://github.com/pprietosanchez/CVE-2020-14750", "creation_timestamp": "2020-11-09T07:18:55.000000Z"}, {"uuid": "9ea541d5-625f-4dd7-81ae-b31dc71ab193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://t.me/cKure/2784", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 CVE-2020\u201314882 Weblogic Unauthorized bypass RCE.\n\nhttps://github.com/jas502n/CVE-2020-14882", "creation_timestamp": "2020-11-12T09:41:33.000000Z"}, {"uuid": "fc71338a-d971-4351-a366-0fc6f9457d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/weblogic_cve_2020_14882", "content": "", "creation_timestamp": "2021-11-15T02:06:20.000000Z"}, {"uuid": "5db8434d-7aab-44fa-abcd-05edc669ff4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-20)", "content": "", "creation_timestamp": "2026-04-20T00:00:00.000000Z"}, {"uuid": "b12d3e76-d614-461f-a35b-1fd47fc64985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "Telegram/D5Tu51kSkXbo-9bxr-qOR_ZOPzuIV30YFNBGrLAWHGZFmmE", "content": "", "creation_timestamp": "2025-11-05T09:00:05.000000Z"}, {"uuid": "6488050c-e303-4441-b67c-e93c6c3fa2c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "Telegram/QfC4LAdZu33D3A3VK5OiGvSsYspyvT6PX4iARyhNVRZ9-WQ", "content": "", "creation_timestamp": "2025-10-29T11:00:10.000000Z"}, {"uuid": "c012b506-5a2d-497b-947b-bda100b95acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "Telegram/caij09sOPuuBeC304jRRvBvD9LlQUDPKfbno9eirkYzkJcU", "content": "", "creation_timestamp": "2025-11-04T23:00:11.000000Z"}, {"uuid": "76bdd278-50b7-4678-a3d4-344305e69f95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://t.me/itsec_news/1435", "content": "\u200b\ud83d\udcbb \u0421\u0442\u0430\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0434\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u0432 \u0440\u0443\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\ud83d\udcac \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Trend Micro \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Kinsing \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Oracle WebLogic Server, \u0447\u0442\u043e\u0431\u044b \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Linux, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Security-Enhanced Linux \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u043b\u0443\u0436\u0431\u044b.\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 RCE - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-14882, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u0432 2020 \u0433\u043e\u0434\u0443, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u043c Linux-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f:\n\n\u2014 \u0423\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0436\u0443\u0440\u043d\u0430\u043b\u0430 \u00ab/var/log/syslog\u00bb;\n\u2014 \u041e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u043b\u0443\u0436\u0431 \u043e\u0442 Alibaba \u0438 Tencent;\n\u2014 \u0423\u043d\u0438\u0447\u0442\u043e\u0436\u0435\u043d\u0438\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u0430.\n\n\u0417\u0430\u0442\u0435\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e Kinsing \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u00abcron\u00bb.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Trend Micro, \u043f\u043e\u0441\u043b\u0435 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f Kinsing \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u043e\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0434\u043e \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u043e\u0439.\n\n\u0420\u0430\u043d\u0435\u0435 \u0432 2022 \u0433\u043e\u0434\u0443 Kinsing \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Confluence Server \u0438 Confluence Data Center \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0425\u0430\u043a\u0435\u0440\u044b #\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2022-09-16T15:25:49.000000Z"}, {"uuid": "60e5b9d2-b76b-4aca-9825-605b8af27d07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://t.me/itsec_news/3872", "content": "\u200b\u26a1\ufe0f\u0413\u0440\u0443\u043f\u043f\u0430 8220 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0442\u0440\u0451\u0445 \u043a\u043e\u043d\u0442\u0438\u043d\u0435\u043d\u0442\u0430\u0445 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Oracle WebLogic\n\n\ud83d\udcac \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Imperva \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 8220, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 Oracle WebLogic Server \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e CVE-2020-14883 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 7.2), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (RCE), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u00ab\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0433\u0430\u0434\u0436\u0435\u0442\u043e\u0432 \u0438 \u0447\u0430\u0441\u0442\u043e \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441 CVE-2020-14882 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Oracle WebLogic Server) \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u0442\u0435\u0447\u0435\u043a, \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u0441\u043b\u0430\u0431\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 Imperva.\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 8220 \u0443\u0436\u0435 \u0438\u043c\u0435\u0435\u0442 \u043e\u043f\u044b\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0441 \u0446\u0435\u043b\u044c\u044e \u043a\u0440\u0438\u043f\u0442\u043e\u0434\u0436\u0435\u043a\u0438\u043d\u0433\u0430. \u0412 \u043c\u0430\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u0440\u0443\u0433\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Oracle WebLogic ( CVE-2017-3506 , \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 7.4) \u0434\u043b\u044f \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0431\u043e\u0442\u043d\u0435\u0442 \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u0438\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a, \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 Imperva, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 CVE-2020-14883 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 XML-\u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u0434\u0430, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b, \u0442\u0430\u043a\u043e\u0433\u043e \u043a\u0430\u043a Agent Tesla, rhajk \u0438 nasqa.\n\n\u00ab\u0421\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e\u0449\u0443\u0449\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0435\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e, \u0431\u0435\u0437 \u044f\u0432\u043d\u043e\u0439 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438 \u0432 \u0432\u044b\u0431\u043e\u0440\u0435 \u0441\u0442\u0440\u0430\u043d\u044b \u0438\u043b\u0438 \u043e\u0442\u0440\u0430\u0441\u043b\u0438\u00bb, \u2014 \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 Imperva \u0414\u0430\u043d\u0438\u044d\u043b\u044c \u0414\u0436\u043e\u043d\u0441\u0442\u043e\u043d.\n\n\u0426\u0435\u043b\u044f\u043c\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 8220 \u0443\u0436\u0435 \u0441\u0442\u0430\u043b\u0438 \u0441\u0435\u043a\u0442\u043e\u0440\u0430 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0432 \u0421\u0428\u0410, \u042e\u0436\u043d\u043e\u0439 \u0410\u0444\u0440\u0438\u043a\u0435, \u0418\u0441\u043f\u0430\u043d\u0438\u0438, \u041a\u043e\u043b\u0443\u043c\u0431\u0438\u0438 \u0438 \u041c\u0435\u043a\u0441\u0438\u043a\u0435.\n\n\u00ab\u0413\u0440\u0443\u043f\u043f\u0430 \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0441\u0442\u044b\u0435, \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00bb, \u2014 \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u0414\u0436\u043e\u043d\u0441\u0442\u043e\u043d. \u00ab\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u044b \u0441\u0447\u0438\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u044b\u043c\u0438, \u043e\u043d\u0438 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u044e\u0442 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0442\u0430\u043a\u0442\u0438\u043a\u0430\u0445 \u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0430\u0445, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u00bb.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-12-19T17:39:29.000000Z"}, {"uuid": "e1dd4ce5-056a-4b76-bdda-d346c68c08a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "Telegram/3SEzWsXdf8TByVUaB-OgVj6bLDcmIrVBMSBDXfTff8j0U4c", "content": "", "creation_timestamp": "2025-10-29T21:00:05.000000Z"}, {"uuid": "7b3f547b-6140-4a78-b261-b8f0159d6050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://t.me/tech_b0lt_Genona/2227", "content": "CVE-2020\u201314882 Weblogic Unauthorized bypass RCE \nhttps://github.com/jas502n/CVE-2020-14882", "creation_timestamp": "2020-11-04T11:09:03.000000Z"}, {"uuid": "35ddedcb-7339-4313-a685-ec6516691933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/tech_b0lt_Genona/2215", "content": "Explore through 3.3k of IP addresses exposed to CVE-2020-14882 (Vulnerability in the Oracle WebLogic Server). \ud83d\udd25\n\nEasy #BugBounty \ud83d\ude09\nhttps://twitter.com/SpyseHQ/status/1321551194549112832", "creation_timestamp": "2020-10-30T04:38:13.000000Z"}, {"uuid": "6e229c72-c38d-4322-af6c-85ec382efb68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://t.me/BleepingComputer/8658", "content": "Critical Oracle WebLogic flaw actively exploited by DarkIRC malware\n\nA botnet known as DarkIRC is actively targeting thousands of\u00a0exposed Oracle WebLogic servers in attacks designed to exploit the CVE-2020-14882 remote code execution (RCE) vulnerability fixed by Oracle two months ago. [...]\n\nhttps://www.bleepingcomputer.com/news/security/critical-oracle-weblogic-flaw-actively-exploited-by-darkirc-malware/", "creation_timestamp": "2020-12-01T17:12:04.000000Z"}, {"uuid": "56c43521-f75e-447e-a2d4-cab814a7578b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://t.me/BleepingComputer/8476", "content": "Critical bug actively used to deploy Cobalt Strike on Oracle servers\n\nThreat actors are actively exploiting vulnerable\u00a0Oracle WebLogic\u00a0servers\u00a0unpatched against\u00a0CVE-2020-14882 to deploy Cobalt Strike beacons to gain persistent remote access to compromised devices. [...]\n\nhttps://www.bleepingcomputer.com/news/security/critical-bug-actively-used-to-deploy-cobalt-strike-on-oracle-servers/", "creation_timestamp": "2020-11-05T18:11:43.000000Z"}, {"uuid": "2a4ba871-bf6e-40d1-883a-dd9a74a3e582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://t.me/CyberGovIL/904", "content": "Com1245 | \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05e9\u05e8\u05ea\u05d9 Oracle Weblogic\n\n1. \u05d7\u05d1\u05e8\u05ea \u05d0\u05d5\u05e8\u05e7\u05dc \u05e4\u05e8\u05e1\u05de\u05d4 \u05d0\u05ea\u05de\u05d5\u05dc \u05d4\u05ea\u05e8\u05e2\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05d3\u05d7\u05d5\u05e4\u05d4, \u05e9\u05dc\u05d0 \u05d1\u05de\u05e1\u05d2\u05e8\u05ea \u05d4\u05ea\u05e8\u05e2\u05d5\u05ea\u05d9\u05d4 \u05d4\u05ea\u05e7\u05d5\u05e4\u05ea\u05d9\u05d5\u05ea, \u05dc\u05d0\u05d7\u05e8 \u05e9\u05d4\u05ea\u05d2\u05dc\u05ea\u05d4 \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 (RCE), \u05d4\u05de\u05e9\u05e4\u05d9\u05e2\u05d4 \u05e2\u05dc \u05de\u05e1\u05e4\u05e8 \u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05e9\u05dc \u05e9\u05e8\u05ea WebLogic \u05de\u05ea\u05d5\u05e6\u05e8\u05ea\u05d4.\n\n2. \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d6\u05d5 \u05e7\u05e9\u05d5\u05e8\u05d4 \u05dc\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea CVE-2020-14882 \u05d0\u05e9\u05e8 \u05e4\u05d5\u05e8\u05e1\u05de\u05d4 \u05d1\u05de\u05e1\u05d2\u05e8\u05ea \u05d4\u05ea\u05e8\u05e2\u05ea \u05d4\u05d0\u05d1\u05d8\u05d7\u05d4 \u05d4\u05e8\u05d1\u05e2\u05d5\u05e0\u05d9\u05ea \u05d4\u05d0\u05d7\u05e8\u05d5\u05e0\u05d4 \u05e9\u05dc \u05d0\u05d5\u05e8\u05e7\u05dc.\n\n3. \u05dc\u05d0\u05d7\u05e8\u05d5\u05e0\u05d4 \u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05e2\u05d3\u05d5\u05d9\u05d5\u05ea \u05dc\u05db\u05da \u05e9\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05e2\u05d5\u05e8\u05db\u05d9\u05dd \u05e1\u05e8\u05d9\u05e7\u05d5\u05ea \u05d0\u05d7\u05e8 \u05e9\u05e8\u05ea\u05d9\u05dd \u05e9\u05de\u05d5\u05ea\u05e7\u05e0\u05d9\u05dd \u05d1\u05d4\u05dd \u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e9\u05dc WebLogic \u05d1\u05de\u05d8\u05e8\u05d4 \u05dc\u05e0\u05e6\u05dc \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d6\u05d0\u05ea \u05d5\u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea\u05d4 \u05dc\u05d4\u05e9\u05ea\u05dc\u05d8 \u05e2\u05dc \u05d4\u05e9\u05e8\u05ea \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05e9\u05dc\u05d9\u05d7\u05ea \u05d1\u05e7\u05e9\u05ea HTTP GET \u05d1\u05dc\u05d1\u05d3.", "creation_timestamp": "2020-11-03T16:19:41.000000Z"}, {"uuid": "22700c9c-91e9-487c-b153-5f7b0862ab59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1418", "content": "CVE-2020\u201314882 Weblogic Unauthorized bypass RCE\n\u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0442\u0447\u0430 CVE-2020-14882\n\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 Oracle WebLogic Server \u0438\u0437 \u0441\u043e\u0441\u0442\u0430\u0432\u0430 Oracle Fusion Middleware (\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442: Console). \u041b\u0435\u0433\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0447\u0435\u0440\u0435\u0437 HTTP \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c Oracle WebLogic Server. \u0423\u0441\u043f\u0435\u0448\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 Oracle WebLogic Server.\n\nhttps://github.com/jas502n/CVE-2020-14882\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-04-28T10:01:16.000000Z"}, {"uuid": "0119d532-feaf-4da7-809d-a00d375fc457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/infosec1z/47", "content": "\ud83d\udd30Top 10 vulnerabilities in 2020:\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n\ud83c\udfa5 CVE PoC videos\n\nhttps://youtu.be/-ppzdYDk-ZM\n\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb\n\n\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n\ud83c\udfa5 CVE PoC videos\n\nhttps://youtu.be/MUAAwijvAe8\n\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)\n\n\n\u2796\u2796 @infosec1z \u2796\u2796", "creation_timestamp": "2021-09-05T16:58:17.000000Z"}, {"uuid": "bc68847d-4578-4aed-ba98-382f31aa5796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/Teamx1945x/1044", "content": "\ud83d\udd30 \u0623\u0647\u0645 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641\u00a0 \u0645\u0639 POC\n\nCVE-2020-17530 |\u00a0 \u0623\u0628\u0627\u062a\u0634\u064a \u0627\u0644\u062f\u0639\u0627\u0645\u0627\u062a RCE\n\nhttps://youtu.be/MUAAwijvAe8\n\n\u0633\u0627\u0644\u062a\u0633\u062a\u0627\u0643 \u0622\u0631 \u0633\u064a \u0625\u064a |\u00a0 CVE-2020-16846\n\nhttps://youtu.be/5cV9wh2w-O8\n\n\u0623\u0628\u0627\u062a\u0634\u064a \u0623\u0648\u0646\u0648\u0645\u064a RCE |\u00a0 CVE-2020-13942\n\nhttps://youtu.be/iz6wjdGnpds\n\n\u0634\u0628\u062d \u0627\u0644\u0642\u0637 |\u00a0 CVE-2020-1938\n\nhttps://youtu.be/3TGIg1x4XwU\n\n\u0623\u0648\u0631\u0627\u0643\u0644 \u0648\u064a\u0628 \u0644\u0648\u062c\u064a\u0643 RCE |\u00a0 CVE-2020-14882\n\nhttps://youtu.be/t-sxvcZNFZo\n\n\u0623\u0628\u0627\u062a\u0634\u064a \u062a\u0648\u0645\u0643\u0627\u062a RCE |\u00a0 CVE-2020-9484\n\nhttps://youtu.be/nF8tfsY74ws\n\n\u0645\u0648\u062f\u0644 \u0622\u0631 \u0633\u064a \u0625\u064a |\u00a0 CVE-2020-14321\n\nhttps://youtu.be/BkEInFI4oIU\n\n\u0633\u064a\u0633\u0643\u0648 CVE-2020-3452 \u0635\n\nhttps://youtu.be/-UldKwwVgHE\n\n\u0627\u0644\u0628\u0631\u0646\u0627\u0645\u062c \u0627\u0644\u0645\u0633\u0627\u0639\u062f \u0644\u0642\u0627\u0639\u062f\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0648\u0648\u0631\u062f\u0628\u0631\u064a\u0633 |\u00a0 CVE-2020-7048\n\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 \u0639\u0646\u0648\u0627\u0646 IP \u0643\u0628\u064a\u0631\n\nhttps://youtu.be/-ppzdYDk-ZM\n\n\u0645\u0642\u0627\u0637\u0639 \u0641\u064a\u062f\u064a\u0648 \u0623\u062e\u0631\u0649 \u062d\u0648\u0644 CVE PoC\n\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb\n\n\u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0645\u062e\u062a\u0628\u0631 \u0645\u0643\u0627\u0641\u062d\u0629 \u0627\u0644\u062a\u0637\u0631\u0641 \u0627\u0644\u0639\u0646\u064a\u0641: https://www.vulnmachines.com", "creation_timestamp": "2024-03-29T18:27:13.000000Z"}, {"uuid": "94e1efaa-5e23-4f87-8999-f69e3e32fe17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "Telegram/k6hHUJVRmEVte2QfNLuU8-v67rBZSq4t8lJINPEEK3muAg", "content": "", "creation_timestamp": "2023-11-22T10:48:36.000000Z"}, {"uuid": "bfff789c-f677-43fe-a821-d58144de90b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "Telegram/SFbizCI1HR_3r7JtPdd678d16a-iSOkLNYQlXhHYNjQfZSw", "content": "", "creation_timestamp": "2025-01-17T16:00:09.000000Z"}, {"uuid": "2fc8b140-6acb-4729-8fe6-786e1af51c1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/v3n0mhack/301", "content": "https://github.com/sp4zcmd/WeblogicExploit-GUI\nWeblogic\u6f0f\u6d1e\u5229\u7528\u56fe\u5f62\u5316\u5de5\u5177\n\nCVE-2020-2551\nCVE-2020-2555\nCVE-2020-2883\nCVE-2016-3510\nCVE-2016-0638\nCVE-2017-10271\nJdk7u21\nCVE-2017-3248\uff08JRMP\uff09\nCVE-2018-2628\uff08JRMP\uff09\nCVE-2018-2893\uff08JRMP\uff09\nCVE-2018-3245\uff08JRMP\uff09\nCVE-2018-3181\uff08JNDI\uff09\nCVE-2020-14882\u672a\u6388\u6743\u8bbf\u95ee+CVE-2021-2109\uff08JNDI\uff09", "creation_timestamp": "2023-11-11T07:49:11.000000Z"}, {"uuid": "00715b84-9902-49fa-9fb1-d3958f3d2632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "Telegram/eKZtjcL8DJDaMHyGAjl_T18EJ4MioT9b265HGTxVckEH9w", "content": "", "creation_timestamp": "2021-01-07T21:15:24.000000Z"}, {"uuid": "36c64413-4d3e-4e0d-a732-81f87710183a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://t.me/information_security_channel/41520", "content": "Attackers are found to be exploiting Oracle WebLogic Servers via CVE-2020\u201314882 to install Cobalt Strike which will allow persistent remote access to the compromised devices. Testing the vulnerability The latter half of last week saw a flurry of scans against Oracle\u2019s WebLogic Server to check the vulnerability of CVE-2020-14882. It is important to note that [\u2026]\nThe post Hackers Attacking WebLogic Servers via CVE-2020\u201314882 Flaw to install Cobalt Strike Malware (https://gbhackers.com/weblogic-servers-flaw/) appeared first on GBHackers On Security (https://gbhackers.com/).", "creation_timestamp": "2020-11-09T06:34:16.000000Z"}, {"uuid": "18a86371-cf01-422e-831e-a2e9cc27c036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://t.me/information_security_channel/42040", "content": "Juniper Threat Labs researchers observed active attacks on Oracle WebLogic software using CVE-2020-14882. This vulnerability, if successfully exploited, allows unauthenticated remote code execution.\u00a0 Researchers found almost 3,109 open Oracle WebLogic servers using Shodan. As a minimum of five different variants of attacks/payload. One particular payload installs a bot called DarkIRC. This bot performs a unique [\u2026]\nThe post Critical Oracle WebLogic Vulnerability Flaw Actively Exploited by DarkIRC Malware (https://gbhackers.com/oracle-weblogic-vulnerability/) appeared first on GBHackers On Security (https://gbhackers.com/).", "creation_timestamp": "2020-12-03T15:09:45.000000Z"}, {"uuid": "2fb8d37d-3a8b-4384-b003-9273ac4e49fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/17157", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2020-14882*\nGithub: https://github.com/Danny-LLi/CVE-2020-14882", "creation_timestamp": "2026-07-31T00:00:42.947224Z"}, {"uuid": "6979434b-a775-47ab-ad5b-cb35ea353d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://t.me/xakep_ru/9934", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Oracle WebLogic \u0443\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u0430\u043c\u0438\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Oracle \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442: \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-14882, \u043d\u0430\u0431\u0440\u0430\u0432\u0448\u0430\u044f 9,8 \u0431\u0430\u043b\u043b\u043e\u0432 \u0438\u0437 10 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS, \u0443\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u0430\u043c\u0438.\n\nhttps://xakep.ru/2020/10/30/weblogic-attacks/", "creation_timestamp": "2020-10-30T17:45:11.000000Z"}, {"uuid": "e559f32a-650d-48f9-9c8d-64a6170baab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://t.me/xakep_ru/10093", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 Oracle WebLogic \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043c\u0430\u043b\u0432\u0430\u0440\u044c\u044e DarkIRC\n\n\u0411\u043e\u0442\u043d\u0435\u0442 DarckIRC \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Oracle WebLogic, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0435\u0440\u0435\u0434 RCE-\u0431\u0430\u0433\u043e\u043c CVE-2020-14882, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0434\u0432\u0430 \u043c\u0435\u0441\u044f\u0446\u0430 \u043d\u0430\u0437\u0430\u0434.\n\nhttps://xakep.ru/2020/12/02/weblogic-darkirc/", "creation_timestamp": "2020-12-02T20:40:11.000000Z"}, {"uuid": "2276cf2e-d810-4c6a-96a8-5131231f02cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/4841", "content": "Weblogic RCE by only one GET request \u2014 CVE-2020\u201314882 Analysis\n\nhttps://testbnull.medium.com/weblogic-rce-by-only-one-get-request-cve-2020-14882-analysis-6e4b09981dbf", "creation_timestamp": "2020-10-28T22:29:31.000000Z"}, {"uuid": "75a8924c-ff7b-4fd2-8e69-87d0c7ab9d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/4888", "content": "CVE-2020\u201314882 Weblogic Unauthorized bypass RCE\n\nhttps://github.com/jas502n/CVE-2020-14882", "creation_timestamp": "2020-11-12T10:39:46.000000Z"}, {"uuid": "bdef78f5-5e0e-4183-bfeb-30a7fa418611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/798", "content": "https://github.com/jas502n/CVE-2020-14882\n#github", "creation_timestamp": "2023-08-01T14:01:19.000000Z"}, {"uuid": "03e480e5-13c3-4815-ba4a-d75fbe969ddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1479", "content": "https://github.com/sp4zcmd/WeblogicExploit-GUI\nWeblogic\u6f0f\u6d1e\u5229\u7528\u56fe\u5f62\u5316\u5de5\u5177\n\nCVE-2020-2551\nCVE-2020-2555\nCVE-2020-2883\nCVE-2016-3510\nCVE-2016-0638\nCVE-2017-10271\nJdk7u21\nCVE-2017-3248\uff08JRMP\uff09\nCVE-2018-2628\uff08JRMP\uff09\nCVE-2018-2893\uff08JRMP\uff09\nCVE-2018-3245\uff08JRMP\uff09\nCVE-2018-3181\uff08JNDI\uff09\nCVE-2020-14882\u672a\u6388\u6743\u8bbf\u95ee+CVE-2021-2109\uff08JNDI\uff09\n\n#github #tools #exploit", "creation_timestamp": "2023-11-10T15:34:11.000000Z"}, {"uuid": "35efa3a0-c9fa-4804-9808-f08c6109d612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/2562", "content": "#Analytics\n10 most exploited vulnerabilities of the week (january 18-24)\nCVE-2020-14882/883:\nhttps://t.me/cybersecuritytechnologies/2004\nCVE-2021-2109:\nhttps://t.me/cybersecuritytechnologies/2540\nCVE-2020-6207:\nhttps://t.me/cybersecuritytechnologies/2506\nCVE-2021-3114/3115:\nArbitrary command execution in Go\nhttps://blog.golang.org/path-security\nCVE-2019-8791:\nhttps://t.me/cybersecuritytechnologies/2535\nCVE-2021-3129:\nhttps://t.me/cybersecuritytechnologies/2557\nCVE-2020-1033:\nhttps://t.me/cybersecuritytechnologies/2528\nCVE-2019-8792:\nhttps://t.me/cybersecuritytechnologies/2535", "creation_timestamp": "2021-01-24T14:36:01.000000Z"}, {"uuid": "2eb857eb-5955-44be-a2bf-b836ce3f2a7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2004", "content": "CVE-2020-14882/CVE-2020-14883:\nOracle Weblogic Server Unauthorized bypass RCE / Single GET Request \nhttps://paper.seebug.org/1411\nPoC:\nhttps://github.com//jas502n//CVE-2020-14882", "creation_timestamp": "2021-01-27T04:04:05.000000Z"}, {"uuid": "dc3bb0c2-7106-4da5-a550-701ba7e0c203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/cibsecurity/15466", "content": "\u203c CVE-2020-14882 \u203c\n\nVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-21T19:04:20.000000Z"}, {"uuid": "d95abd1b-063d-4910-bac4-902acaca8dc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/safebdv/587", "content": "\ud83d\udd24\ud83d\udd24\ud83d\udd24 \n\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\n\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 UNIT42 \u0432 2023 \u0433\u043e\u0434\u0443 5 \u0441\u0430\u043c\u044b\u0445 \u0447\u0430\u0441\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438:\n 1. CVE-2023-3519 (Citrix NetScaler ADC/Gateway)\n 2. CVE-2023-22952 (SugarCRM)\n 3. CVE-2021-44228 (Apache Log4j)\n 4. CVE-2023-34362 (MOVEit)\n 5. CVE-2020-14882 (Oracle WebLogic)\n\n\u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435, \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u043b\u0438 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443 \u0432\u0430\u0441?", "creation_timestamp": "2026-08-01T22:00:05.610972Z"}, {"uuid": "172cb6d3-dde5-4c1a-ac93-062c2442f489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://t.me/cibsecurity/15713", "content": "\u274c Oracle WebLogic Server RCE Flaw Under Active Attack \u274c\n\nThe flaw in the console component of the WebLogic Server, CVE-2020-14882, is under active attack, researchers warn.\n\n\ud83d\udcd6 Read\n\nvia \"Threat Post\".", "creation_timestamp": "2020-10-29T16:14:25.000000Z"}, {"uuid": "5ee141c1-d22b-4439-b0a7-102b62c41a69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://t.me/reverseame/638", "content": "Cryptominers Exploiting WebLogic RCE CVE-2020-14882 https://thedfirreport.com/2020/11/12/cryptominers-exploiting-weblogic-rce-cve-2020-14882/", "creation_timestamp": "2026-08-03T14:00:04.325252Z"}, {"uuid": "f0e482ad-2a13-46a1-950a-09d3fcd4eaf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/safebdv/587", "content": "\ud83d\udd24\ud83d\udd24\ud83d\udd24 \n\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\n\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 UNIT42 \u0432 2023 \u0433\u043e\u0434\u0443 5 \u0441\u0430\u043c\u044b\u0445 \u0447\u0430\u0441\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438:\n 1. CVE-2023-3519 (Citrix NetScaler ADC/Gateway)\n 2. CVE-2023-22952 (SugarCRM)\n 3. CVE-2021-44228 (Apache Log4j)\n 4. CVE-2023-34362 (MOVEit)\n 5. CVE-2020-14882 (Oracle WebLogic)\n\n\u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435, \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u043b\u0438 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443 \u0432\u0430\u0441?", "creation_timestamp": "2026-08-02T00:00:13.509530Z"}, {"uuid": "e5e05d2f-23f6-4edf-a60d-84e33fcce153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "Telegram/CcRo1gMZwWwNofZNwYOQ3d2hQNvA4xaZ28UNdx64Ma-ZFGg", "content": "", "creation_timestamp": "2026-08-29T23:00:16.769353Z"}, {"uuid": "c15991c7-d3e2-4f3b-8756-56ed4b774189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "Telegram/CcRo1gMZwWwNofZNwYOQ3d2hQNvA4xaZ28UNdx64Ma-ZFGg", "content": "", "creation_timestamp": "2026-08-30T00:00:25.383431Z"}, {"uuid": "3ac602a1-8acf-4bae-9d5f-50349a0c2e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://t.me/reverseame/638", "content": "Cryptominers Exploiting WebLogic RCE CVE-2020-14882 https://thedfirreport.com/2020/11/12/cryptominers-exploiting-weblogic-rce-cve-2020-14882/", "creation_timestamp": "2026-08-04T00:00:37.187845Z"}, {"uuid": "41cb3f3d-0a2e-4f75-8aef-316462adcd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "Telegram/VVXmVANzhCKJUMjjYRc32PhqPAacXLlYrVLdV1O2TgbC8lc", "content": "", "creation_timestamp": "2026-09-02T01:00:17.891892Z"}, {"uuid": "549b18e8-5f1d-4d40-b055-77e49f5605fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-15)", "content": "", "creation_timestamp": "2026-08-16T10:15:06.956897Z"}, {"uuid": "fb06272c-c545-441c-809d-ffa5ceba276f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-31)", "content": "", "creation_timestamp": "2026-05-31T00:00:00.000000Z"}, {"uuid": "69fef427-3e72-4c93-a7da-cc4ff4051ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-20)", "content": "", "creation_timestamp": "2026-08-21T10:15:09.101056Z"}, {"uuid": "12634513-2a5c-47ab-9032-96e3d8951f7f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/508374cc-c545-418d-9e07-cb07e1479665", "content": "", "creation_timestamp": "2026-06-19T12:48:02.255794Z"}, {"uuid": "fcb4e179-ab9e-4668-a228-2fa3b645c5cd", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/67341cfc-bd1f-4a66-9af6-82f2eb4f20c5", "content": "", "creation_timestamp": "2026-06-23T14:04:32.088987Z"}, {"uuid": "5727837c-cb77-4750-a19f-51524d85d854", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8f25e077-c910-479d-b351-92074fd7916c", "content": "", "creation_timestamp": "2026-06-30T09:22:59.878477Z"}, {"uuid": "e31338bd-7765-46c1-9d53-c2cc25872760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "Telegram/dEOxkW7Fjs9kyJNCqqh8nNQclw4OnMEUeVB0uRmPUXS8-vI", "content": "", "creation_timestamp": "2026-08-20T03:00:05.695991Z"}, {"uuid": "4dd8b617-c83d-4b60-a227-487cacef546a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "Telegram/dEOxkW7Fjs9kyJNCqqh8nNQclw4OnMEUeVB0uRmPUXS8-vI", "content": "", "creation_timestamp": "2026-08-21T00:00:10.771050Z"}, {"uuid": "aad52787-05ce-4cf7-b9f0-7705fb9488f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-28)", "content": "", "creation_timestamp": "2026-08-29T10:15:21.184941Z"}, {"uuid": "eabe50e0-22e7-4be7-b2e3-0b0c9e794efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "Telegram/2JgLAbMqM6fsfnUVedt_GGez95ruqiYt_7ssbkX2uKcldVA", "content": "", "creation_timestamp": "2026-08-27T12:00:06.789684Z"}, {"uuid": "2b642744-099c-4c11-bd29-a8559520f11e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/Unidentified_TM/890", "content": "\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc RCE \u062f\u0631 weblogic\n\u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\n\nCVE-2020\u201314882\n\nhttp://x.x.x.x:7001/console/images/%252E%252E%252Fconsole.portal\n\nPOST:\n\n_nfpb=true&_pageLabel=&handle=http://com.tangosol.coherence.mvel2.sh.ShellSession(%22java.lang.Runtime.getRuntime().exec(%27calc.exe%27);%22)\n\n\nhttps://testbnull.medium.com/weblogic-rce-by-only-one-get-request-cve-2020-14882-analysis-6e4b09981dbf\n\n#weblogic\n#rce\n#java\n\n\n@UNIDENTIFIED_TM \ud83c\udf39", "creation_timestamp": "2026-07-16T14:00:04.084604Z"}, {"uuid": "4e13a31c-3520-4968-ba2d-56bb77c64794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/Unidentified_TM/900", "content": "https://github.com/jas502n/CVE-2020-14882\n\n\nCVE-2020\u201314882\n\n\n#weblogic\n#rce\n#java\n\n\n@UNIDENTIFIED_TM", "creation_timestamp": "2026-07-16T14:00:04.280651Z"}, {"uuid": "90c12113-fc96-44cf-842e-d60567151c44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/Unidentified_TM/890", "content": "\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc RCE \u062f\u0631 weblogic\n\u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\n\nCVE-2020\u201314882\n\nhttp://x.x.x.x:7001/console/images/%252E%252E%252Fconsole.portal\n\nPOST:\n\n_nfpb=true&_pageLabel=&handle=http://com.tangosol.coherence.mvel2.sh.ShellSession(%22java.lang.Runtime.getRuntime().exec(%27calc.exe%27);%22)\n\n\nhttps://testbnull.medium.com/weblogic-rce-by-only-one-get-request-cve-2020-14882-analysis-6e4b09981dbf\n\n#weblogic\n#rce\n#java\n\n\n@UNIDENTIFIED_TM \ud83c\udf39", "creation_timestamp": "2026-07-17T00:00:52.336493Z"}, {"uuid": "93d98c47-4cc5-462b-8c2d-f12d99fac142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/Unidentified_TM/900", "content": "https://github.com/jas502n/CVE-2020-14882\n\n\nCVE-2020\u201314882\n\n\n#weblogic\n#rce\n#java\n\n\n@UNIDENTIFIED_TM", "creation_timestamp": "2026-07-17T00:00:52.462134Z"}, {"uuid": "6f47ee73-e93c-4621-8338-5e741182bd31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/GithubRedTeam/98639", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Weblogic #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2020-14882-WebLogic-Analysis\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a VelesSecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-18 15:55:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTechnical analysis and clean Java Thread Echo PoC for Oracle WebLogic Server vulnerability chain.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:06.430708Z"}, {"uuid": "6cb01aa6-b9a4-45c8-970e-1c37f2b8b332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "Telegram/CcRo1gMZwWwNofZNwYOQ3d2hQNvA4xaZ28UNdx64Ma-ZFGg", "content": "", "creation_timestamp": "2026-08-31T00:00:44.087793Z"}, {"uuid": "d5f68824-f40c-4e4c-8fdd-2c132524bfb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99963", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a weblogic\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hyderpwn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 13:04:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOracle WebLogic Console unauthenticated auth bypass + RCE exploit (CVE-2020-14882 / CVE-2020-14750)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-28T00:00:37.844539Z"}, {"uuid": "c954b15b-5700-462e-8787-c4cb705d0a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99960", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2020-14882-weblogic\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hyderpwn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 12:57:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOracle WebLogic Console unauthenticated auth bypass + RCE exploit (CVE-2020-14882 / CVE-2020-14750)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-28T00:00:37.941063Z"}, {"uuid": "b596ad93-a787-4134-9258-df2a239aaca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98639", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Weblogic #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2020-14882-WebLogic-Analysis\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a VelesSecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-18 15:55:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTechnical analysis and clean Java Thread Echo PoC for Oracle WebLogic Server vulnerability chain.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:11.456192Z"}, {"uuid": "f8d873c2-98e9-439a-a182-e6e7776f1f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/GithubRedTeam/99960", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2020-14882-weblogic\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hyderpwn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 12:57:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOracle WebLogic Console unauthenticated auth bypass + RCE exploit (CVE-2020-14882 / CVE-2020-14750)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T15:00:04.198482Z"}, {"uuid": "4e748062-c042-4ae9-89dc-d42e1443496a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/GithubRedTeam/99963", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a weblogic\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hyderpwn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 13:04:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOracle WebLogic Console unauthenticated auth bypass + RCE exploit (CVE-2020-14882 / CVE-2020-14750)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T15:00:04.308898Z"}, {"uuid": "2702f465-34ad-4bfa-a976-d4d856fb4164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "Telegram/2JgLAbMqM6fsfnUVedt_GGez95ruqiYt_7ssbkX2uKcldVA", "content": "", "creation_timestamp": "2026-08-28T00:00:50.378190Z"}, {"uuid": "e8c0ec08-1f46-4302-8ab2-696923c819c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/469a09e8-cdbb-405e-b1fa-87ee37a92c1b", "content": "", "creation_timestamp": "2026-07-25T06:15:03.693752Z"}, {"uuid": "834bb721-3282-4f38-92de-3b224b34284b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "MISP/469a09e8-cdbb-405e-b1fa-87ee37a92c1b", "content": "", "creation_timestamp": "2026-07-26T00:15:01.930834Z"}, {"uuid": "1b562314-1641-4c70-b652-3a77e5a1cffa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/EchelonEyes/3465", "content": "Rapid7 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u043e\u0439 \u0443\u0433\u0440\u043e\u0437, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b\u0438\u0441\u044c \u0432 2024 \u0433\u043e\u0434\u0443\n\n\u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Rapid7 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0435\u0442 \u043e \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437 \u0437\u0430 2024 \u0433\u043e\u0434.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438:\n\n1. \u0412 2024 \u0433\u043e\u0434\u0443 \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c 33 \u043d\u043e\u0432\u044b\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438, \u043e\u043f\u0435\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u043c\u0438-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u0430 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e 75 \u0442\u0430\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 Rapid \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c RansomHub, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043b\u044e\u0431\u044b\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430 \u0434\u043e\u043b\u044e \u043e\u0442 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 (\u043c\u043e\u0434\u0435\u043b\u044c Ransome-as-a-Service, Raas). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 RansomHub \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 573 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u0442\u0435\u0447\u043a\u0430\u0445, \u0447\u0442\u043e \u0432\u044b\u0432\u0435\u043b\u043e \u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c \u0432 \u0434\u0435\u0441\u044f\u0442\u043e\u043a \u0441\u0430\u043c\u044b\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445, \u043e\u043d\u0430 \u0443\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0442\u043e\u043b\u044c\u043a\u043e LockBit.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u0433\u043d\u0443\u0448\u0430\u044e\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 \u0441\u0444\u0435\u0440\u0443 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0434\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441\u0447\u0438\u0442\u0430\u0432\u0448\u0443\u044e\u0441\u044f \u043d\u0435\u043f\u0440\u0438\u0435\u043c\u043b\u0435\u043c\u043e\u0439 \u0446\u0435\u043b\u044c\u044e. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 Qilin \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0438 50 \u043c\u043b\u043d \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0443 \u043b\u043e\u043d\u0434\u043e\u043d\u0441\u043a\u0438\u0445 \u0431\u043e\u043b\u044c\u043d\u0438\u0446 \u0437\u0430 \u043d\u0435\u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044e \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n2. \u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0438\u0445 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u0431\u0435\u0433\u0430\u044e\u0442 \u043a \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438, \u043f\u0440\u0438\u0447\u0435\u043c \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u044d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u043d\u0430 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u0441\u043b\u0443\u0436\u0431 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438.\n\n3. \u0421\u0440\u0435\u0434\u0438 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c Rapid7 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442 SocGholish, GootLoader \u0438 AsyncRAT, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0411\u043e\u043b\u0435\u0435 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0438 (28%) \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Rapid7 \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u044d\u0442\u0438\u0445 \u0442\u0440\u0435\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c.\n\n4. \u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u2013 \u044d\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (17%) \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0431\u0435\u0437 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (56%). \u0427\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043b\u043e \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 MFA \u0432 \u0442\u0430\u043a\u0438\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445, \u043a\u0430\u043a VPN, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u043e\u043b\u043e\u0432 (VDI). \n\n\u0427\u0442\u043e \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u043e \u0441\u0430\u043c\u044b\u043c\u0438 \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0430\u043b\u0438:\n- CVE-2024-3400 \u0432 Palo Alto Networks PAN-OS;\n- CVE-2024-24919 \u0432 Check Point Security Gateways;\n- CVE-2024-1709 \u0432 ConnectWise ScreenConnect;\n- CVE-2023-48788 \u0432 Fortinet FortiClient;\n- CVE-2023-48365 \u0432 Qlik Sense Enterprise \u0434\u043b\u044f Windows;\n- CVE-2023-36025 \u0432 Windows SmartScreen;\n- CVE-2020-14882 \u0432 Oracle WebLogic Server (Oracle Fusion Middleware);\n- CVE-2018-15961 \u0432 Adobe ColdFusion.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Rapid7.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.rapid7.com/blog/post/2024/12/16/2024-threat-landscape-statistics-ransomware-activity-vulnerability-exploits-and-attack-trends/ \n\n#\u043e\u0442\u0447\u0435\u0442 #\u0418\u0411 #\u0442\u0440\u0435\u043d\u0434\u044b", "creation_timestamp": "2026-07-26T07:00:27.570669Z"}, {"uuid": "1d67c8b7-1c9f-400d-b862-86285f154752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/EchelonEyes/1053", "content": "\u041a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0432 \u0445\u043e\u0434\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 PostgreSQL\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Microsoft \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e Kinsing \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0435\u0442 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043e\u0431\u0440\u0430\u0437\u0430\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u0445 PostgreSQL. \u0425\u043e\u0442\u044f \u044d\u0442\u0430 \u0442\u0430\u043a\u0442\u0438\u043a\u0430 \u043d\u0435 \u043d\u043e\u0432\u0430, \u043a\u043e\u043c\u0430\u043d\u0434\u0430 Microsoft Defender for Cloud \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u0442\u043e \u0435\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0449\u0443\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438 \u0432\u0445\u043e\u0434\u0430.\n\nKinsing \u2014 \u044d\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f Linux, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b, \u0447\u0442\u043e\u0431\u044b \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0438\u043d\u0433 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Microsoft, \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Kinsing \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u0432\u0430 \u0441\u043f\u043e\u0441\u043e\u0431\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Linux. \u041f\u0435\u0440\u0432\u044b\u0439 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043e\u0431\u0440\u0430\u0437\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438: PHPUnit, Liferay, WebLogic, Wordpress. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 Oracle WebLogic, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2020-14882, CVE-2020-14750 \u0438 CVE-2020-14883.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u043c\u0435\u0442\u043e\u0434 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 PostgreSQL. \u0418\u043c\u0435\u043d\u043d\u043e \u0437\u0434\u0435\u0441\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u044e\u0442 \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438. \u041e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u00ab\u0434\u043e\u0432\u0435\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 PostgreSQL \u0441\u0447\u0438\u0442\u0430\u0442\u044c, \u0447\u0442\u043e \u00ab\u043b\u044e\u0431\u043e\u0439, \u043a\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0438\u043c\u0435\u0435\u0442 \u043f\u0440\u0430\u0432\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445\u00bb. \u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0438 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043b\u044e\u0431\u043e\u0439 IP-\u0430\u0434\u0440\u0435\u0441, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Microsoft \u0433\u043e\u0432\u043e\u0440\u044f\u0442, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f IP-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0441\u0442\u0440\u043e\u0433\u0430\u044f, Kubernetes \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u043f\u043e\u0434\u043c\u0435\u043d\u0435 ARP (\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0430\u0434\u0440\u0435\u0441\u043e\u0432), \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442\u0441\u044f \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432 \u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/initial-access-techniques-in-kubernetes-environments-used-by/ba-p/3697975 \n\n#Kubernetes #Kinsing", "creation_timestamp": "2026-07-26T02:02:34.131920Z"}, {"uuid": "27715682-7fe7-43ef-a96e-9b373198dab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/EchelonEyes/3465", "content": "Rapid7 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u043e\u0439 \u0443\u0433\u0440\u043e\u0437, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b\u0438\u0441\u044c \u0432 2024 \u0433\u043e\u0434\u0443\n\n\u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Rapid7 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0435\u0442 \u043e \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437 \u0437\u0430 2024 \u0433\u043e\u0434.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438:\n\n1. \u0412 2024 \u0433\u043e\u0434\u0443 \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c 33 \u043d\u043e\u0432\u044b\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438, \u043e\u043f\u0435\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u043c\u0438-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u0430 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e 75 \u0442\u0430\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 Rapid \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c RansomHub, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043b\u044e\u0431\u044b\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430 \u0434\u043e\u043b\u044e \u043e\u0442 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 (\u043c\u043e\u0434\u0435\u043b\u044c Ransome-as-a-Service, Raas). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 RansomHub \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 573 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u0442\u0435\u0447\u043a\u0430\u0445, \u0447\u0442\u043e \u0432\u044b\u0432\u0435\u043b\u043e \u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c \u0432 \u0434\u0435\u0441\u044f\u0442\u043e\u043a \u0441\u0430\u043c\u044b\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445, \u043e\u043d\u0430 \u0443\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0442\u043e\u043b\u044c\u043a\u043e LockBit.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u0433\u043d\u0443\u0448\u0430\u044e\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 \u0441\u0444\u0435\u0440\u0443 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0434\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441\u0447\u0438\u0442\u0430\u0432\u0448\u0443\u044e\u0441\u044f \u043d\u0435\u043f\u0440\u0438\u0435\u043c\u043b\u0435\u043c\u043e\u0439 \u0446\u0435\u043b\u044c\u044e. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 Qilin \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0438 50 \u043c\u043b\u043d \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0443 \u043b\u043e\u043d\u0434\u043e\u043d\u0441\u043a\u0438\u0445 \u0431\u043e\u043b\u044c\u043d\u0438\u0446 \u0437\u0430 \u043d\u0435\u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044e \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n2. \u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0438\u0445 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u0431\u0435\u0433\u0430\u044e\u0442 \u043a \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438, \u043f\u0440\u0438\u0447\u0435\u043c \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u044d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u043d\u0430 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u0441\u043b\u0443\u0436\u0431 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438.\n\n3. \u0421\u0440\u0435\u0434\u0438 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c Rapid7 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442 SocGholish, GootLoader \u0438 AsyncRAT, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0411\u043e\u043b\u0435\u0435 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0438 (28%) \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Rapid7 \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u044d\u0442\u0438\u0445 \u0442\u0440\u0435\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c.\n\n4. \u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u2013 \u044d\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (17%) \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0431\u0435\u0437 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (56%). \u0427\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043b\u043e \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 MFA \u0432 \u0442\u0430\u043a\u0438\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445, \u043a\u0430\u043a VPN, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u043e\u043b\u043e\u0432 (VDI). \n\n\u0427\u0442\u043e \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u043e \u0441\u0430\u043c\u044b\u043c\u0438 \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0430\u043b\u0438:\n- CVE-2024-3400 \u0432 Palo Alto Networks PAN-OS;\n- CVE-2024-24919 \u0432 Check Point Security Gateways;\n- CVE-2024-1709 \u0432 ConnectWise ScreenConnect;\n- CVE-2023-48788 \u0432 Fortinet FortiClient;\n- CVE-2023-48365 \u0432 Qlik Sense Enterprise \u0434\u043b\u044f Windows;\n- CVE-2023-36025 \u0432 Windows SmartScreen;\n- CVE-2020-14882 \u0432 Oracle WebLogic Server (Oracle Fusion Middleware);\n- CVE-2018-15961 \u0432 Adobe ColdFusion.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Rapid7.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.rapid7.com/blog/post/2024/12/16/2024-threat-landscape-statistics-ransomware-activity-vulnerability-exploits-and-attack-trends/ \n\n#\u043e\u0442\u0447\u0435\u0442 #\u0418\u0411 #\u0442\u0440\u0435\u043d\u0434\u044b", "creation_timestamp": "2026-07-27T00:00:39.945409Z"}, {"uuid": "b02984d3-b5b1-49a6-953c-865d9905d76f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/EchelonEyes/1053", "content": "\u041a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0432 \u0445\u043e\u0434\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 PostgreSQL\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Microsoft \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e Kinsing \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0435\u0442 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043e\u0431\u0440\u0430\u0437\u0430\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u0445 PostgreSQL. \u0425\u043e\u0442\u044f \u044d\u0442\u0430 \u0442\u0430\u043a\u0442\u0438\u043a\u0430 \u043d\u0435 \u043d\u043e\u0432\u0430, \u043a\u043e\u043c\u0430\u043d\u0434\u0430 Microsoft Defender for Cloud \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u0442\u043e \u0435\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0449\u0443\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438 \u0432\u0445\u043e\u0434\u0430.\n\nKinsing \u2014 \u044d\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f Linux, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b, \u0447\u0442\u043e\u0431\u044b \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0438\u043d\u0433 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Microsoft, \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Kinsing \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u0432\u0430 \u0441\u043f\u043e\u0441\u043e\u0431\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Linux. \u041f\u0435\u0440\u0432\u044b\u0439 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043e\u0431\u0440\u0430\u0437\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438: PHPUnit, Liferay, WebLogic, Wordpress. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 Oracle WebLogic, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2020-14882, CVE-2020-14750 \u0438 CVE-2020-14883.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u043c\u0435\u0442\u043e\u0434 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 PostgreSQL. \u0418\u043c\u0435\u043d\u043d\u043e \u0437\u0434\u0435\u0441\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u044e\u0442 \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438. \u041e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u00ab\u0434\u043e\u0432\u0435\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 PostgreSQL \u0441\u0447\u0438\u0442\u0430\u0442\u044c, \u0447\u0442\u043e \u00ab\u043b\u044e\u0431\u043e\u0439, \u043a\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0438\u043c\u0435\u0435\u0442 \u043f\u0440\u0430\u0432\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445\u00bb. \u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0438 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043b\u044e\u0431\u043e\u0439 IP-\u0430\u0434\u0440\u0435\u0441, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Microsoft \u0433\u043e\u0432\u043e\u0440\u044f\u0442, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f IP-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0441\u0442\u0440\u043e\u0433\u0430\u044f, Kubernetes \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u043f\u043e\u0434\u043c\u0435\u043d\u0435 ARP (\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0430\u0434\u0440\u0435\u0441\u043e\u0432), \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442\u0441\u044f \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432 \u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/initial-access-techniques-in-kubernetes-environments-used-by/ba-p/3697975 \n\n#Kubernetes #Kinsing", "creation_timestamp": "2026-07-27T00:01:10.134700Z"}, {"uuid": "47a58179-3c29-4a18-ab74-824169cec573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/EchelonEyes/3465", "content": "Rapid7 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u043e\u0439 \u0443\u0433\u0440\u043e\u0437, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b\u0438\u0441\u044c \u0432 2024 \u0433\u043e\u0434\u0443\n\n\u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Rapid7 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0435\u0442 \u043e \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437 \u0437\u0430 2024 \u0433\u043e\u0434.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438:\n\n1. \u0412 2024 \u0433\u043e\u0434\u0443 \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c 33 \u043d\u043e\u0432\u044b\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438, \u043e\u043f\u0435\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u043c\u0438-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u0430 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e 75 \u0442\u0430\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 Rapid \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c RansomHub, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043b\u044e\u0431\u044b\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430 \u0434\u043e\u043b\u044e \u043e\u0442 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 (\u043c\u043e\u0434\u0435\u043b\u044c Ransome-as-a-Service, Raas). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 RansomHub \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 573 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u0442\u0435\u0447\u043a\u0430\u0445, \u0447\u0442\u043e \u0432\u044b\u0432\u0435\u043b\u043e \u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c \u0432 \u0434\u0435\u0441\u044f\u0442\u043e\u043a \u0441\u0430\u043c\u044b\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445, \u043e\u043d\u0430 \u0443\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0442\u043e\u043b\u044c\u043a\u043e LockBit.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u0433\u043d\u0443\u0448\u0430\u044e\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 \u0441\u0444\u0435\u0440\u0443 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0434\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441\u0447\u0438\u0442\u0430\u0432\u0448\u0443\u044e\u0441\u044f \u043d\u0435\u043f\u0440\u0438\u0435\u043c\u043b\u0435\u043c\u043e\u0439 \u0446\u0435\u043b\u044c\u044e. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 Qilin \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0438 50 \u043c\u043b\u043d \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0443 \u043b\u043e\u043d\u0434\u043e\u043d\u0441\u043a\u0438\u0445 \u0431\u043e\u043b\u044c\u043d\u0438\u0446 \u0437\u0430 \u043d\u0435\u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044e \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n2. \u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0438\u0445 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u0431\u0435\u0433\u0430\u044e\u0442 \u043a \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438, \u043f\u0440\u0438\u0447\u0435\u043c \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u044d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u043d\u0430 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u0441\u043b\u0443\u0436\u0431 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438.\n\n3. \u0421\u0440\u0435\u0434\u0438 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c Rapid7 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442 SocGholish, GootLoader \u0438 AsyncRAT, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0411\u043e\u043b\u0435\u0435 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0438 (28%) \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Rapid7 \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u044d\u0442\u0438\u0445 \u0442\u0440\u0435\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c.\n\n4. \u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u2013 \u044d\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (17%) \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0431\u0435\u0437 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (56%). \u0427\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043b\u043e \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 MFA \u0432 \u0442\u0430\u043a\u0438\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445, \u043a\u0430\u043a VPN, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u043e\u043b\u043e\u0432 (VDI). \n\n\u0427\u0442\u043e \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u043e \u0441\u0430\u043c\u044b\u043c\u0438 \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0430\u043b\u0438:\n- CVE-2024-3400 \u0432 Palo Alto Networks PAN-OS;\n- CVE-2024-24919 \u0432 Check Point Security Gateways;\n- CVE-2024-1709 \u0432 ConnectWise ScreenConnect;\n- CVE-2023-48788 \u0432 Fortinet FortiClient;\n- CVE-2023-48365 \u0432 Qlik Sense Enterprise \u0434\u043b\u044f Windows;\n- CVE-2023-36025 \u0432 Windows SmartScreen;\n- CVE-2020-14882 \u0432 Oracle WebLogic Server (Oracle Fusion Middleware);\n- CVE-2018-15961 \u0432 Adobe ColdFusion.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Rapid7.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.rapid7.com/blog/post/2024/12/16/2024-threat-landscape-statistics-ransomware-activity-vulnerability-exploits-and-attack-trends/ \n\n#\u043e\u0442\u0447\u0435\u0442 #\u0418\u0411 #\u0442\u0440\u0435\u043d\u0434\u044b", "creation_timestamp": "2026-07-28T00:00:49.563656Z"}, {"uuid": "eaeefeb2-fce9-459a-a2cd-3c71533b04d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://t.me/EchelonEyes/1053", "content": "\u041a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0432 \u0445\u043e\u0434\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 PostgreSQL\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Microsoft \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e Kinsing \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0435\u0442 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043e\u0431\u0440\u0430\u0437\u0430\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u0445 PostgreSQL. \u0425\u043e\u0442\u044f \u044d\u0442\u0430 \u0442\u0430\u043a\u0442\u0438\u043a\u0430 \u043d\u0435 \u043d\u043e\u0432\u0430, \u043a\u043e\u043c\u0430\u043d\u0434\u0430 Microsoft Defender for Cloud \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u0442\u043e \u0435\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0449\u0443\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438 \u0432\u0445\u043e\u0434\u0430.\n\nKinsing \u2014 \u044d\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f Linux, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b, \u0447\u0442\u043e\u0431\u044b \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0438\u043d\u0433 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Microsoft, \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Kinsing \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u0432\u0430 \u0441\u043f\u043e\u0441\u043e\u0431\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Linux. \u041f\u0435\u0440\u0432\u044b\u0439 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043e\u0431\u0440\u0430\u0437\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438: PHPUnit, Liferay, WebLogic, Wordpress. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 Oracle WebLogic, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2020-14882, CVE-2020-14750 \u0438 CVE-2020-14883.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u043c\u0435\u0442\u043e\u0434 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 PostgreSQL. \u0418\u043c\u0435\u043d\u043d\u043e \u0437\u0434\u0435\u0441\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u044e\u0442 \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438. \u041e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u00ab\u0434\u043e\u0432\u0435\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 PostgreSQL \u0441\u0447\u0438\u0442\u0430\u0442\u044c, \u0447\u0442\u043e \u00ab\u043b\u044e\u0431\u043e\u0439, \u043a\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0438\u043c\u0435\u0435\u0442 \u043f\u0440\u0430\u0432\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445\u00bb. \u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0438 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043b\u044e\u0431\u043e\u0439 IP-\u0430\u0434\u0440\u0435\u0441, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Microsoft \u0433\u043e\u0432\u043e\u0440\u044f\u0442, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f IP-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0441\u0442\u0440\u043e\u0433\u0430\u044f, Kubernetes \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u043f\u043e\u0434\u043c\u0435\u043d\u0435 ARP (\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0430\u0434\u0440\u0435\u0441\u043e\u0432), \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442\u0441\u044f \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432 \u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/initial-access-techniques-in-kubernetes-environments-used-by/ba-p/3697975 \n\n#Kubernetes #Kinsing", "creation_timestamp": "2026-07-28T04:00:06.355648Z"}, {"uuid": "8a9161c3-283d-47a4-aa80-03e0c3027807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-24)", "content": "", "creation_timestamp": "2026-08-25T10:15:08.023808Z"}, {"uuid": "3e85c379-1577-4b76-b87a-f6abda37b4b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "Telegram/2JgLAbMqM6fsfnUVedt_GGez95ruqiYt_7ssbkX2uKcldVA", "content": "", "creation_timestamp": "2026-08-29T00:00:29.535238Z"}, {"uuid": "ab37eb21-0c35-444a-8816-4a80cee82771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "exploited", "source": "https://t.me/EchelonEyes/1053", "content": "\u041a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0432 \u0445\u043e\u0434\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 PostgreSQL\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Microsoft \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e Kinsing \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0435\u0442 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043e\u0431\u0440\u0430\u0437\u0430\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u0445 PostgreSQL. \u0425\u043e\u0442\u044f \u044d\u0442\u0430 \u0442\u0430\u043a\u0442\u0438\u043a\u0430 \u043d\u0435 \u043d\u043e\u0432\u0430, \u043a\u043e\u043c\u0430\u043d\u0434\u0430 Microsoft Defender for Cloud \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u0442\u043e \u0435\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0449\u0443\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438 \u0432\u0445\u043e\u0434\u0430.\n\nKinsing \u2014 \u044d\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f Linux, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b, \u0447\u0442\u043e\u0431\u044b \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0438\u043d\u0433 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Microsoft, \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Kinsing \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u0432\u0430 \u0441\u043f\u043e\u0441\u043e\u0431\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Linux. \u041f\u0435\u0440\u0432\u044b\u0439 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043e\u0431\u0440\u0430\u0437\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438: PHPUnit, Liferay, WebLogic, Wordpress. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 Oracle WebLogic, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2020-14882, CVE-2020-14750 \u0438 CVE-2020-14883.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u043c\u0435\u0442\u043e\u0434 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 PostgreSQL. \u0418\u043c\u0435\u043d\u043d\u043e \u0437\u0434\u0435\u0441\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u044e\u0442 \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438. \u041e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u00ab\u0434\u043e\u0432\u0435\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 PostgreSQL \u0441\u0447\u0438\u0442\u0430\u0442\u044c, \u0447\u0442\u043e \u00ab\u043b\u044e\u0431\u043e\u0439, \u043a\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0438\u043c\u0435\u0435\u0442 \u043f\u0440\u0430\u0432\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445\u00bb. \u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0438 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043b\u044e\u0431\u043e\u0439 IP-\u0430\u0434\u0440\u0435\u0441, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Microsoft \u0433\u043e\u0432\u043e\u0440\u044f\u0442, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f IP-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0441\u0442\u0440\u043e\u0433\u0430\u044f, Kubernetes \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u043f\u043e\u0434\u043c\u0435\u043d\u0435 ARP (\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0430\u0434\u0440\u0435\u0441\u043e\u0432), \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442\u0441\u044f \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432 \u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/initial-access-techniques-in-kubernetes-environments-used-by/ba-p/3697975 \n\n#Kubernetes #Kinsing", "creation_timestamp": "2026-07-29T00:00:49.578017Z"}, {"uuid": "d8538fff-efdc-41f9-b5b9-d366e7789112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/CVEhub/17157", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2020-14882*\nGithub: https://github.com/Danny-LLi/CVE-2020-14882", "creation_timestamp": "2026-07-29T12:00:15.166311Z"}, {"uuid": "463010e8-d635-443c-904b-2b83b39c66ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/safebdv/587", "content": "\ud83d\udd24\ud83d\udd24\ud83d\udd24 \n\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\n\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 UNIT42 \u0432 2023 \u0433\u043e\u0434\u0443 5 \u0441\u0430\u043c\u044b\u0445 \u0447\u0430\u0441\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438:\n 1. CVE-2023-3519 (Citrix NetScaler ADC/Gateway)\n 2. CVE-2023-22952 (SugarCRM)\n 3. CVE-2021-44228 (Apache Log4j)\n 4. CVE-2023-34362 (MOVEit)\n 5. CVE-2020-14882 (Oracle WebLogic)\n\n\u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435, \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u043b\u0438 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443 \u0432\u0430\u0441?", "creation_timestamp": "2026-07-29T12:01:59.065718Z"}, {"uuid": "5fcdfdd6-757d-4c48-a065-f81dc14e7754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/reverseame/638", "content": "Cryptominers Exploiting WebLogic RCE CVE-2020-14882 https://thedfirreport.com/2020/11/12/cryptominers-exploiting-weblogic-rce-cve-2020-14882/", "creation_timestamp": "2026-07-29T12:03:02.541589Z"}, {"uuid": "cb86e2d0-d018-42a9-b008-2aeddcfa8d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/CVEhub/17157", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2020-14882*\nGithub: https://github.com/Danny-LLi/CVE-2020-14882", "creation_timestamp": "2026-07-30T00:00:33.973268Z"}, {"uuid": "875118a5-9fff-4aef-9ef0-cc0e6caa6404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/safebdv/587", "content": "\ud83d\udd24\ud83d\udd24\ud83d\udd24 \n\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\n\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\ud83d\udd24\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 UNIT42 \u0432 2023 \u0433\u043e\u0434\u0443 5 \u0441\u0430\u043c\u044b\u0445 \u0447\u0430\u0441\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438:\n 1. CVE-2023-3519 (Citrix NetScaler ADC/Gateway)\n 2. CVE-2023-22952 (SugarCRM)\n 3. CVE-2021-44228 (Apache Log4j)\n 4. CVE-2023-34362 (MOVEit)\n 5. CVE-2020-14882 (Oracle WebLogic)\n\n\u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435, \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u043b\u0438 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443 \u0432\u0430\u0441?", "creation_timestamp": "2026-07-30T00:02:10.362663Z"}, {"uuid": "23b77a2a-54cd-4d18-8c82-d27650ea6f28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/reverseame/638", "content": "Cryptominers Exploiting WebLogic RCE CVE-2020-14882 https://thedfirreport.com/2020/11/12/cryptominers-exploiting-weblogic-rce-cve-2020-14882/", "creation_timestamp": "2026-07-30T00:02:50.860269Z"}, {"uuid": "f71d0943-96cb-42e0-a96f-a8e36e1a5ce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/cissp/3231", "content": "Top 10 vulnerabilities in 2020 \n\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)", "creation_timestamp": "2026-09-01T17:00:50.120964Z"}, {"uuid": "8ebe99d2-d9f5-4d87-a0b6-30a2d98a55e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/cissp/2541", "content": "Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb", "creation_timestamp": "2026-09-01T17:00:59.266748Z"}, {"uuid": "2f4d7066-a8a6-4a89-b766-11a0901605bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/cissp/2540", "content": "Top 10 vulnerabilities in 2020:\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)", "creation_timestamp": "2026-09-01T17:00:59.803672Z"}, {"uuid": "91186045-72bf-4502-a6e2-b10a11da0546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/hackersmeet0/2406", "content": "\ud83d\udd30 Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\n\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\n\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\n\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\n\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\n\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\n\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\n\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\n\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\n\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\n\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\n\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb\n\nCVE Lab Access : https://www.vulnmachines.com", "creation_timestamp": "2026-09-01T18:00:05.473385Z"}, {"uuid": "2479b195-4e9a-451c-8979-0089fb7b0ac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/hacking_Attack/55269", "content": "Kali Linux Tutorials\nMelody : A Transparent Internet Sensor Built For Threat Intelligence\n\nMelody is a transparent internet sensor built for threat intelligence and supported by a detection rule framework which allows you to tag packets of interest for further analysis and threat monitoring. FeaturesHere are some key features of Melody :\n\n* Transparent capture\n* Write detection rules and tag specific packets to analyze them at scale\n* Mock vulnerable websites using the builtin HTTP/S server\n* Supports the main internet protocols over IPv4 and IPv6\n* Handles log rotation for you : Melody is designed to run forever on the smallest VPS\n* Minimal configuration required\n* Standalone mode : configure Melody using only the CLI\n* Easily scalable :\n* Statically compiled binary\n* Up-to-date Docker image WishlistSince I have to focus on other projects right now, I can\u2019t put much time in Melody\u2019s development.\n\nThere is a lot of rom for improvement though, so here are some features that I\u2019d like to implement someday :\n\n* Dedicated helper program to create, test and manage rules\u00a0-> Check Meloctl in cmd/meloctl* Centralized rules management\n* Per port mock application Use casesInternet facing sensor* Extract trends and patterns from Internet\u2019s noise\n* Index malicious activity, exploitation attempts and targeted scanners\n* Monitor emerging threats exploitation\n* Keep an eye on specific threats Stream analysis* Build a background noise profile to make targeted attacks stand out\n* Replay captures to tag malicious packets in a suspicious stream QuickstartTL;DRReleaseGet the latest release at https://github.com/bonjourmalware/melody/releases.\n\nmake install # Set default outfacing interface\nmake cap # Set network capabilities to start Melody without elevated privileges\nmake certs # Make self signed certs for the HTTPS fileserver\nmake enable_all_rules # Enable the default rules\nmake service # Create a systemd service to restart the program automatically and launch it at startup\nsudo systemctl stop melody # Stop the service while we\u2019re configuring it\n\nUpdate the filter.bpffile to filter out unwanted packets\n\nsudo systemctl start melody # Start Melody\nsudo systemctl status melody # Check that Melody is running\n\nThe logs should start to pile up in /opt/melody/logs/melody.ndjson.\n\ntail -f /opt/melody/logs/melody.ndjson # | jq\n\nFrom source\n\ngit clone https://github.com/bonjourmalware/melody /opt/melody\ncd /opt/melody\nmake build\n\nThen continue with the steps from the\u00a0release\u00a0TL;DR. Dockermake certs # Make self signed certs for the HTTPS fileserver\nmake enable_all_rules # Enable the default rules\nmkdir -p /opt/melody/logs\ncd /opt/melody/\ndocker pull bonjourmalware/melody:latest\nMELODY_CLI=\u201d\u201d # Put your CLI options here. Example : export MELODY_CLI=\u201d-s -i \u2018lo\u2019 -F \u2018dst port 5555\u2019 -o \u2018server.http.port: 5555\u2032\u201d\ndocker run \\\n\u2013net=host \\\n-e \u201cMELODY_CLI=$MELODY_CLI\u201d \\\n\u2013mount type=bind,source=\u201d$(pwd)/filter.bpf\u201d,target=/app/filter.bpf,readonly \\\n\u2013mount type=bind,source=\u201d$(pwd)/config.yml\u201d,target=/app/config.yml,readonly \\\n\u2013mount type=bind,source=\u201d$(pwd)/var\u201d,target=/app/var,readonly \\\n\u2013mount type=bind,source=\u201d$(pwd)/rules\u201d,target=/app/rules,readonly \\\n\u2013mount type=bind,source=\u201d$(pwd)/logs\u201d,target=/app/logs/ \\\nbonjourmalware/melody RulesExampleCVE-2020-14882 Oracle Weblogic Server RCE:\nlayer: http\nmeta:\nid: 3e1d86d8-fba6-4e15-8c74-941c3375fd3e\nversion: 1.0\nauthor: BonjourMalware\nstatus: stable\ncreated: 2020/11/07\nmodified: 2020/20/07\ndescription: \u201cChecking or trying to exploit CVE-2020-14882\u201d\nreferences:\n\u2013 \u201chttps://nvd.nist.gov/vuln/detail/CVE-2020-14882\u201d\nmatch:\nhttp.uri:\nstartswith|any|nocase:\n\u2013 \u201c/console/css/\u201d\n\u2013 \u201c/console/images\u201d\ncontains|any|nocase:\n\u2013 \u201cconsole.portal\u201d\n\u2013 \u201cconsolejndi.portal?test_handle=\u201d\ntags:\ncve: \u201ccve-2020-14882\u201d\nvendor: \u201coracl[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:37.675906Z"}, {"uuid": "4f93affa-e22e-4a04-8eca-9dfe5252f5b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/hacking_Attack/49815", "content": "Quickstart  Quickstart details. (https://bonjourmalware.github.io/melody/installation)  TL;DR  Release  Get the latest release at https://github.com/bonjourmalware/melody/releases.  make install               # Set default outfacing interface\nmake cap                   # Set network capabilities to start Melody without elevated privileges\nmake certs                 # Make self signed certs for the HTTPS fileserver\nmake enable_all_rules      # Enable the default rules\nmake service               # Create a systemd service to restart the program automatically and launch it at startup \n\nsudo systemctl stop melody  # Stop the service while we're configuring it  Update the filter.bpf file to filter out unwanted packets.  sudo systemctl start melody     # Start Melody\nsudo systemctl status melody    # Check that Melody is running      The logs should start to pile up in /opt/melody/logs/melody.ndjson.  tail -f /opt/melody/logs/melody.ndjson # | jq  From source  git clone https://github.com/bonjourmalware/melody /opt/melody\ncd /opt/melody\nmake build  Then continue with the steps from the release (https://github.com/bonjourmalware/melody#release) TL;DR.  Docker  make certs                           # Make self signed certs for the HTTPS fileserver\nmake enable_all_rules                # Enable the default rules\nmkdir -p /opt/melody/logs\ncd /opt/melody/\n\ndocker pull bonjourmalware/melody:latest\n\nMELODY_CLI=\"\" # Put your CLI options here. Example : export MELODY_CLI=\"-s -i 'lo' -F 'dst port 5555' -o 'server.http.port: 5555'\"\n\ndocker run \\\n    --net=host \\\n    -e \"MELODY_CLI=$MELODY_CLI\" \\\n    --mount type=bind,source=\"$(pwd)/filter.bpf\",target=/app/filter.bpf,readonly \\\n    --mount type=bind,source=\"$(pwd)/config.yml\",target=/app/config.yml,readonly \\\n    --mount type=bind,source=\"$(pwd)/var\",target=/app/var,readonly \\\n    --mount type=bind,source=\"$(pwd)/rules\",target=/app/rules,readonly \\\n    --mount type=bind,source=\"$(pwd)/logs\",target=/app/logs/ \\\n    bonjourmalware/melody  The logs should start to pile up in /opt/melody/logs/melody.ndjson.  Rules  Rule syntax details. (https://bonjourmalware.github.io/melody/installation)  Example  CVE-2020-14882 Oracle Weblogic Server RCE:\n  layer: http\n  meta:\n    id: 3e1d86d8-fba6-4e15-8c74-941c3375fd3e\n    version: 1.0\n    author: BonjourMalware\n    status: stable\n    created: 2020/11/07\n    modified: 2020/20/07\n    description: \"Checking or trying to exploit CVE-2020-14882\"\n    references:\n      - \"https://nvd.nist.gov/vuln/detail/CVE-2020-14882\"\n  match:\n    http.uri:\n      startswith|any|nocase:\n        - \"/console/css/\"\n        - \"/console/images\"\n      contains|any|nocase:\n        - \"console.portal\"\n        - \"consolejndi.portal?test_handle=\"\n  tags:\n    cve: \"cve-2020-14882\"\n    vendor: \"oracle\"\n    product: \"weblogic\"\n    impact: \"rce\"  Logs  Logs content details. (https://bonjourmalware.github.io/melody/layers)  Example  Netcat TCP packet over IPv4 :  {\n  \"tcp\": {\n    \"window\": 512,\n    \"seq\": 1906765553,\n    \"ack\": 2514263732,\n    \"data_offset\": 8,\n    \"flags\": \"PA\",\n    \"urgent\": 0,\n    \"payload\": {\n      \"content\": \"I made a discovery today. I found a computer.\\n\",\n      \"base64\": \"SSBtYWRlIGEgZGlzY292ZXJ5IHRvZGF5LiAgSSBmb3VuZCBhIGNvbXB1dGVyLgo=\",\n      \"truncated\": false\n    }\n  },\n  \"ip\": {\n    \"version\": 4,\n    \"ihl\": 5,\n    \"tos\": 0,\n    \"length\": 99,\n    \"id\": 39114,\n    \"fragbits\": \"DF\",\n    \"frag_offset\": 0,\n    \"ttl\": 64,\n    \"protocol\": 6\n  },\n  \"timestamp\": \"2020-11-16T15:50:01.277828+01:00\",\n  \"session\": \"bup9368o4skolf20rt8g\",\n  \"type\": \"tcp\",\n  \"src_ip\": \"127.0.0.1\",\n  \"dst_port\": 1234,\n  \"matches\": {},\n  \"inline_matches\": [],\n  \"embedded\": {}\n}  \n\nDownload Melody (https://github.com/bonjourmalware/melody)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:45.915185Z"}, {"uuid": "1d82672c-9ddc-4d86-b856-30ad3d87f9c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/hacking_Attack/55269", "content": "Kali Linux Tutorials\nMelody : A Transparent Internet Sensor Built For Threat Intelligence\n\nMelody is a transparent internet sensor built for threat intelligence and supported by a detection rule framework which allows you to tag packets of interest for further analysis and threat monitoring. FeaturesHere are some key features of Melody :\n\n* Transparent capture\n* Write detection rules and tag specific packets to analyze them at scale\n* Mock vulnerable websites using the builtin HTTP/S server\n* Supports the main internet protocols over IPv4 and IPv6\n* Handles log rotation for you : Melody is designed to run forever on the smallest VPS\n* Minimal configuration required\n* Standalone mode : configure Melody using only the CLI\n* Easily scalable :\n* Statically compiled binary\n* Up-to-date Docker image WishlistSince I have to focus on other projects right now, I can\u2019t put much time in Melody\u2019s development.\n\nThere is a lot of rom for improvement though, so here are some features that I\u2019d like to implement someday :\n\n* Dedicated helper program to create, test and manage rules\u00a0-> Check Meloctl in cmd/meloctl* Centralized rules management\n* Per port mock application Use casesInternet facing sensor* Extract trends and patterns from Internet\u2019s noise\n* Index malicious activity, exploitation attempts and targeted scanners\n* Monitor emerging threats exploitation\n* Keep an eye on specific threats Stream analysis* Build a background noise profile to make targeted attacks stand out\n* Replay captures to tag malicious packets in a suspicious stream QuickstartTL;DRReleaseGet the latest release at https://github.com/bonjourmalware/melody/releases.\n\nmake install # Set default outfacing interface\nmake cap # Set network capabilities to start Melody without elevated privileges\nmake certs # Make self signed certs for the HTTPS fileserver\nmake enable_all_rules # Enable the default rules\nmake service # Create a systemd service to restart the program automatically and launch it at startup\nsudo systemctl stop melody # Stop the service while we\u2019re configuring it\n\nUpdate the filter.bpffile to filter out unwanted packets\n\nsudo systemctl start melody # Start Melody\nsudo systemctl status melody # Check that Melody is running\n\nThe logs should start to pile up in /opt/melody/logs/melody.ndjson.\n\ntail -f /opt/melody/logs/melody.ndjson # | jq\n\nFrom source\n\ngit clone https://github.com/bonjourmalware/melody /opt/melody\ncd /opt/melody\nmake build\n\nThen continue with the steps from the\u00a0release\u00a0TL;DR. Dockermake certs # Make self signed certs for the HTTPS fileserver\nmake enable_all_rules # Enable the default rules\nmkdir -p /opt/melody/logs\ncd /opt/melody/\ndocker pull bonjourmalware/melody:latest\nMELODY_CLI=\u201d\u201d # Put your CLI options here. Example : export MELODY_CLI=\u201d-s -i \u2018lo\u2019 -F \u2018dst port 5555\u2019 -o \u2018server.http.port: 5555\u2032\u201d\ndocker run \\\n\u2013net=host \\\n-e \u201cMELODY_CLI=$MELODY_CLI\u201d \\\n\u2013mount type=bind,source=\u201d$(pwd)/filter.bpf\u201d,target=/app/filter.bpf,readonly \\\n\u2013mount type=bind,source=\u201d$(pwd)/config.yml\u201d,target=/app/config.yml,readonly \\\n\u2013mount type=bind,source=\u201d$(pwd)/var\u201d,target=/app/var,readonly \\\n\u2013mount type=bind,source=\u201d$(pwd)/rules\u201d,target=/app/rules,readonly \\\n\u2013mount type=bind,source=\u201d$(pwd)/logs\u201d,target=/app/logs/ \\\nbonjourmalware/melody RulesExampleCVE-2020-14882 Oracle Weblogic Server RCE:\nlayer: http\nmeta:\nid: 3e1d86d8-fba6-4e15-8c74-941c3375fd3e\nversion: 1.0\nauthor: BonjourMalware\nstatus: stable\ncreated: 2020/11/07\nmodified: 2020/20/07\ndescription: \u201cChecking or trying to exploit CVE-2020-14882\u201d\nreferences:\n\u2013 \u201chttps://nvd.nist.gov/vuln/detail/CVE-2020-14882\u201d\nmatch:\nhttp.uri:\nstartswith|any|nocase:\n\u2013 \u201c/console/css/\u201d\n\u2013 \u201c/console/images\u201d\ncontains|any|nocase:\n\u2013 \u201cconsole.portal\u201d\n\u2013 \u201cconsolejndi.portal?test_handle=\u201d\ntags:\ncve: \u201ccve-2020-14882\u201d\nvendor: \u201coracl[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:48.184600Z"}, {"uuid": "6f0f16d3-28f4-49ef-bde4-88ac3047d328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/hacking_Attack/49815", "content": "Quickstart  Quickstart details. (https://bonjourmalware.github.io/melody/installation)  TL;DR  Release  Get the latest release at https://github.com/bonjourmalware/melody/releases.  make install               # Set default outfacing interface\nmake cap                   # Set network capabilities to start Melody without elevated privileges\nmake certs                 # Make self signed certs for the HTTPS fileserver\nmake enable_all_rules      # Enable the default rules\nmake service               # Create a systemd service to restart the program automatically and launch it at startup \n\nsudo systemctl stop melody  # Stop the service while we're configuring it  Update the filter.bpf file to filter out unwanted packets.  sudo systemctl start melody     # Start Melody\nsudo systemctl status melody    # Check that Melody is running      The logs should start to pile up in /opt/melody/logs/melody.ndjson.  tail -f /opt/melody/logs/melody.ndjson # | jq  From source  git clone https://github.com/bonjourmalware/melody /opt/melody\ncd /opt/melody\nmake build  Then continue with the steps from the release (https://github.com/bonjourmalware/melody#release) TL;DR.  Docker  make certs                           # Make self signed certs for the HTTPS fileserver\nmake enable_all_rules                # Enable the default rules\nmkdir -p /opt/melody/logs\ncd /opt/melody/\n\ndocker pull bonjourmalware/melody:latest\n\nMELODY_CLI=\"\" # Put your CLI options here. Example : export MELODY_CLI=\"-s -i 'lo' -F 'dst port 5555' -o 'server.http.port: 5555'\"\n\ndocker run \\\n    --net=host \\\n    -e \"MELODY_CLI=$MELODY_CLI\" \\\n    --mount type=bind,source=\"$(pwd)/filter.bpf\",target=/app/filter.bpf,readonly \\\n    --mount type=bind,source=\"$(pwd)/config.yml\",target=/app/config.yml,readonly \\\n    --mount type=bind,source=\"$(pwd)/var\",target=/app/var,readonly \\\n    --mount type=bind,source=\"$(pwd)/rules\",target=/app/rules,readonly \\\n    --mount type=bind,source=\"$(pwd)/logs\",target=/app/logs/ \\\n    bonjourmalware/melody  The logs should start to pile up in /opt/melody/logs/melody.ndjson.  Rules  Rule syntax details. (https://bonjourmalware.github.io/melody/installation)  Example  CVE-2020-14882 Oracle Weblogic Server RCE:\n  layer: http\n  meta:\n    id: 3e1d86d8-fba6-4e15-8c74-941c3375fd3e\n    version: 1.0\n    author: BonjourMalware\n    status: stable\n    created: 2020/11/07\n    modified: 2020/20/07\n    description: \"Checking or trying to exploit CVE-2020-14882\"\n    references:\n      - \"https://nvd.nist.gov/vuln/detail/CVE-2020-14882\"\n  match:\n    http.uri:\n      startswith|any|nocase:\n        - \"/console/css/\"\n        - \"/console/images\"\n      contains|any|nocase:\n        - \"console.portal\"\n        - \"consolejndi.portal?test_handle=\"\n  tags:\n    cve: \"cve-2020-14882\"\n    vendor: \"oracle\"\n    product: \"weblogic\"\n    impact: \"rce\"  Logs  Logs content details. (https://bonjourmalware.github.io/melody/layers)  Example  Netcat TCP packet over IPv4 :  {\n  \"tcp\": {\n    \"window\": 512,\n    \"seq\": 1906765553,\n    \"ack\": 2514263732,\n    \"data_offset\": 8,\n    \"flags\": \"PA\",\n    \"urgent\": 0,\n    \"payload\": {\n      \"content\": \"I made a discovery today. I found a computer.\\n\",\n      \"base64\": \"SSBtYWRlIGEgZGlzY292ZXJ5IHRvZGF5LiAgSSBmb3VuZCBhIGNvbXB1dGVyLgo=\",\n      \"truncated\": false\n    }\n  },\n  \"ip\": {\n    \"version\": 4,\n    \"ihl\": 5,\n    \"tos\": 0,\n    \"length\": 99,\n    \"id\": 39114,\n    \"fragbits\": \"DF\",\n    \"frag_offset\": 0,\n    \"ttl\": 64,\n    \"protocol\": 6\n  },\n  \"timestamp\": \"2020-11-16T15:50:01.277828+01:00\",\n  \"session\": \"bup9368o4skolf20rt8g\",\n  \"type\": \"tcp\",\n  \"src_ip\": \"127.0.0.1\",\n  \"dst_port\": 1234,\n  \"matches\": {},\n  \"inline_matches\": [],\n  \"embedded\": {}\n}  \n\nDownload Melody (https://github.com/bonjourmalware/melody)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:58.151931Z"}, {"uuid": "102c8193-d7bf-4ce9-a0d1-3208530a8602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/hackersmeet0/2406", "content": "\ud83d\udd30 Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\n\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\n\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\n\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\n\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\n\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\n\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\n\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\n\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\n\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\n\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\n\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb\n\nCVE Lab Access : https://www.vulnmachines.com", "creation_timestamp": "2026-09-02T01:03:30.957546Z"}, {"uuid": "78397ac3-8acc-4644-8179-8d3bed8c62e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/cissp/2540", "content": "Top 10 vulnerabilities in 2020:\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)", "creation_timestamp": "2026-09-02T01:04:50.607389Z"}, {"uuid": "2d801030-b4c7-43dd-9e5e-bd18f1db2c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/cissp/3231", "content": "Top 10 vulnerabilities in 2020 \n\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)", "creation_timestamp": "2026-09-02T01:04:38.738222Z"}, {"uuid": "b767c201-6866-4323-bff1-dbdebaa58686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/cissp/2541", "content": "Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb", "creation_timestamp": "2026-09-02T01:04:50.060959Z"}, {"uuid": "58edb528-d325-480d-bd7f-837d1369c6cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "Telegram/VVXmVANzhCKJUMjjYRc32PhqPAacXLlYrVLdV1O2TgbC8lc", "content": "", "creation_timestamp": "2026-09-03T00:00:37.554835Z"}, {"uuid": "d7c12ed9-7e8f-4f4b-afa3-c6c406c9c883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/55269", "content": "Kali Linux Tutorials\nMelody : A Transparent Internet Sensor Built For Threat Intelligence\n\nMelody is a transparent internet sensor built for threat intelligence and supported by a detection rule framework which allows you to tag packets of interest for further analysis and threat monitoring. FeaturesHere are some key features of Melody :\n\n* Transparent capture\n* Write detection rules and tag specific packets to analyze them at scale\n* Mock vulnerable websites using the builtin HTTP/S server\n* Supports the main internet protocols over IPv4 and IPv6\n* Handles log rotation for you : Melody is designed to run forever on the smallest VPS\n* Minimal configuration required\n* Standalone mode : configure Melody using only the CLI\n* Easily scalable :\n* Statically compiled binary\n* Up-to-date Docker image WishlistSince I have to focus on other projects right now, I can\u2019t put much time in Melody\u2019s development.\n\nThere is a lot of rom for improvement though, so here are some features that I\u2019d like to implement someday :\n\n* Dedicated helper program to create, test and manage rules\u00a0-> Check Meloctl in cmd/meloctl* Centralized rules management\n* Per port mock application Use casesInternet facing sensor* Extract trends and patterns from Internet\u2019s noise\n* Index malicious activity, exploitation attempts and targeted scanners\n* Monitor emerging threats exploitation\n* Keep an eye on specific threats Stream analysis* Build a background noise profile to make targeted attacks stand out\n* Replay captures to tag malicious packets in a suspicious stream QuickstartTL;DRReleaseGet the latest release at https://github.com/bonjourmalware/melody/releases.\n\nmake install # Set default outfacing interface\nmake cap # Set network capabilities to start Melody without elevated privileges\nmake certs # Make self signed certs for the HTTPS fileserver\nmake enable_all_rules # Enable the default rules\nmake service # Create a systemd service to restart the program automatically and launch it at startup\nsudo systemctl stop melody # Stop the service while we\u2019re configuring it\n\nUpdate the filter.bpffile to filter out unwanted packets\n\nsudo systemctl start melody # Start Melody\nsudo systemctl status melody # Check that Melody is running\n\nThe logs should start to pile up in /opt/melody/logs/melody.ndjson.\n\ntail -f /opt/melody/logs/melody.ndjson # | jq\n\nFrom source\n\ngit clone https://github.com/bonjourmalware/melody /opt/melody\ncd /opt/melody\nmake build\n\nThen continue with the steps from the\u00a0release\u00a0TL;DR. Dockermake certs # Make self signed certs for the HTTPS fileserver\nmake enable_all_rules # Enable the default rules\nmkdir -p /opt/melody/logs\ncd /opt/melody/\ndocker pull bonjourmalware/melody:latest\nMELODY_CLI=\u201d\u201d # Put your CLI options here. Example : export MELODY_CLI=\u201d-s -i \u2018lo\u2019 -F \u2018dst port 5555\u2019 -o \u2018server.http.port: 5555\u2032\u201d\ndocker run \\\n\u2013net=host \\\n-e \u201cMELODY_CLI=$MELODY_CLI\u201d \\\n\u2013mount type=bind,source=\u201d$(pwd)/filter.bpf\u201d,target=/app/filter.bpf,readonly \\\n\u2013mount type=bind,source=\u201d$(pwd)/config.yml\u201d,target=/app/config.yml,readonly \\\n\u2013mount type=bind,source=\u201d$(pwd)/var\u201d,target=/app/var,readonly \\\n\u2013mount type=bind,source=\u201d$(pwd)/rules\u201d,target=/app/rules,readonly \\\n\u2013mount type=bind,source=\u201d$(pwd)/logs\u201d,target=/app/logs/ \\\nbonjourmalware/melody RulesExampleCVE-2020-14882 Oracle Weblogic Server RCE:\nlayer: http\nmeta:\nid: 3e1d86d8-fba6-4e15-8c74-941c3375fd3e\nversion: 1.0\nauthor: BonjourMalware\nstatus: stable\ncreated: 2020/11/07\nmodified: 2020/20/07\ndescription: \u201cChecking or trying to exploit CVE-2020-14882\u201d\nreferences:\n\u2013 \u201chttps://nvd.nist.gov/vuln/detail/CVE-2020-14882\u201d\nmatch:\nhttp.uri:\nstartswith|any|nocase:\n\u2013 \u201c/console/css/\u201d\n\u2013 \u201c/console/images\u201d\ncontains|any|nocase:\n\u2013 \u201cconsole.portal\u201d\n\u2013 \u201cconsolejndi.portal?test_handle=\u201d\ntags:\ncve: \u201ccve-2020-14882\u201d\nvendor: \u201coracl[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T19:00:03.416860Z"}, {"uuid": "e2b40278-c90f-40af-8b73-d30d57d58965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/55269", "content": "Kali Linux Tutorials\nMelody : A Transparent Internet Sensor Built For Threat Intelligence\n\nMelody is a transparent internet sensor built for threat intelligence and supported by a detection rule framework which allows you to tag packets of interest for further analysis and threat monitoring. FeaturesHere are some key features of Melody :\n\n* Transparent capture\n* Write detection rules and tag specific packets to analyze them at scale\n* Mock vulnerable websites using the builtin HTTP/S server\n* Supports the main internet protocols over IPv4 and IPv6\n* Handles log rotation for you : Melody is designed to run forever on the smallest VPS\n* Minimal configuration required\n* Standalone mode : configure Melody using only the CLI\n* Easily scalable :\n* Statically compiled binary\n* Up-to-date Docker image WishlistSince I have to focus on other projects right now, I can\u2019t put much time in Melody\u2019s development.\n\nThere is a lot of rom for improvement though, so here are some features that I\u2019d like to implement someday :\n\n* Dedicated helper program to create, test and manage rules\u00a0-> Check Meloctl in cmd/meloctl* Centralized rules management\n* Per port mock application Use casesInternet facing sensor* Extract trends and patterns from Internet\u2019s noise\n* Index malicious activity, exploitation attempts and targeted scanners\n* Monitor emerging threats exploitation\n* Keep an eye on specific threats Stream analysis* Build a background noise profile to make targeted attacks stand out\n* Replay captures to tag malicious packets in a suspicious stream QuickstartTL;DRReleaseGet the latest release at https://github.com/bonjourmalware/melody/releases.\n\nmake install # Set default outfacing interface\nmake cap # Set network capabilities to start Melody without elevated privileges\nmake certs # Make self signed certs for the HTTPS fileserver\nmake enable_all_rules # Enable the default rules\nmake service # Create a systemd service to restart the program automatically and launch it at startup\nsudo systemctl stop melody # Stop the service while we\u2019re configuring it\n\nUpdate the filter.bpffile to filter out unwanted packets\n\nsudo systemctl start melody # Start Melody\nsudo systemctl status melody # Check that Melody is running\n\nThe logs should start to pile up in /opt/melody/logs/melody.ndjson.\n\ntail -f /opt/melody/logs/melody.ndjson # | jq\n\nFrom source\n\ngit clone https://github.com/bonjourmalware/melody /opt/melody\ncd /opt/melody\nmake build\n\nThen continue with the steps from the\u00a0release\u00a0TL;DR. Dockermake certs # Make self signed certs for the HTTPS fileserver\nmake enable_all_rules # Enable the default rules\nmkdir -p /opt/melody/logs\ncd /opt/melody/\ndocker pull bonjourmalware/melody:latest\nMELODY_CLI=\u201d\u201d # Put your CLI options here. Example : export MELODY_CLI=\u201d-s -i \u2018lo\u2019 -F \u2018dst port 5555\u2019 -o \u2018server.http.port: 5555\u2032\u201d\ndocker run \\\n\u2013net=host \\\n-e \u201cMELODY_CLI=$MELODY_CLI\u201d \\\n\u2013mount type=bind,source=\u201d$(pwd)/filter.bpf\u201d,target=/app/filter.bpf,readonly \\\n\u2013mount type=bind,source=\u201d$(pwd)/config.yml\u201d,target=/app/config.yml,readonly \\\n\u2013mount type=bind,source=\u201d$(pwd)/var\u201d,target=/app/var,readonly \\\n\u2013mount type=bind,source=\u201d$(pwd)/rules\u201d,target=/app/rules,readonly \\\n\u2013mount type=bind,source=\u201d$(pwd)/logs\u201d,target=/app/logs/ \\\nbonjourmalware/melody RulesExampleCVE-2020-14882 Oracle Weblogic Server RCE:\nlayer: http\nmeta:\nid: 3e1d86d8-fba6-4e15-8c74-941c3375fd3e\nversion: 1.0\nauthor: BonjourMalware\nstatus: stable\ncreated: 2020/11/07\nmodified: 2020/20/07\ndescription: \u201cChecking or trying to exploit CVE-2020-14882\u201d\nreferences:\n\u2013 \u201chttps://nvd.nist.gov/vuln/detail/CVE-2020-14882\u201d\nmatch:\nhttp.uri:\nstartswith|any|nocase:\n\u2013 \u201c/console/css/\u201d\n\u2013 \u201c/console/images\u201d\ncontains|any|nocase:\n\u2013 \u201cconsole.portal\u201d\n\u2013 \u201cconsolejndi.portal?test_handle=\u201d\ntags:\ncve: \u201ccve-2020-14882\u201d\nvendor: \u201coracl[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:38.214983Z"}, {"uuid": "86f13f72-e7e2-4870-9b1e-aff6e9418069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/49815", "content": "Quickstart  Quickstart details. (https://bonjourmalware.github.io/melody/installation)  TL;DR  Release  Get the latest release at https://github.com/bonjourmalware/melody/releases.  make install               # Set default outfacing interface\nmake cap                   # Set network capabilities to start Melody without elevated privileges\nmake certs                 # Make self signed certs for the HTTPS fileserver\nmake enable_all_rules      # Enable the default rules\nmake service               # Create a systemd service to restart the program automatically and launch it at startup \n\nsudo systemctl stop melody  # Stop the service while we're configuring it  Update the filter.bpf file to filter out unwanted packets.  sudo systemctl start melody     # Start Melody\nsudo systemctl status melody    # Check that Melody is running      The logs should start to pile up in /opt/melody/logs/melody.ndjson.  tail -f /opt/melody/logs/melody.ndjson # | jq  From source  git clone https://github.com/bonjourmalware/melody /opt/melody\ncd /opt/melody\nmake build  Then continue with the steps from the release (https://github.com/bonjourmalware/melody#release) TL;DR.  Docker  make certs                           # Make self signed certs for the HTTPS fileserver\nmake enable_all_rules                # Enable the default rules\nmkdir -p /opt/melody/logs\ncd /opt/melody/\n\ndocker pull bonjourmalware/melody:latest\n\nMELODY_CLI=\"\" # Put your CLI options here. Example : export MELODY_CLI=\"-s -i 'lo' -F 'dst port 5555' -o 'server.http.port: 5555'\"\n\ndocker run \\\n    --net=host \\\n    -e \"MELODY_CLI=$MELODY_CLI\" \\\n    --mount type=bind,source=\"$(pwd)/filter.bpf\",target=/app/filter.bpf,readonly \\\n    --mount type=bind,source=\"$(pwd)/config.yml\",target=/app/config.yml,readonly \\\n    --mount type=bind,source=\"$(pwd)/var\",target=/app/var,readonly \\\n    --mount type=bind,source=\"$(pwd)/rules\",target=/app/rules,readonly \\\n    --mount type=bind,source=\"$(pwd)/logs\",target=/app/logs/ \\\n    bonjourmalware/melody  The logs should start to pile up in /opt/melody/logs/melody.ndjson.  Rules  Rule syntax details. (https://bonjourmalware.github.io/melody/installation)  Example  CVE-2020-14882 Oracle Weblogic Server RCE:\n  layer: http\n  meta:\n    id: 3e1d86d8-fba6-4e15-8c74-941c3375fd3e\n    version: 1.0\n    author: BonjourMalware\n    status: stable\n    created: 2020/11/07\n    modified: 2020/20/07\n    description: \"Checking or trying to exploit CVE-2020-14882\"\n    references:\n      - \"https://nvd.nist.gov/vuln/detail/CVE-2020-14882\"\n  match:\n    http.uri:\n      startswith|any|nocase:\n        - \"/console/css/\"\n        - \"/console/images\"\n      contains|any|nocase:\n        - \"console.portal\"\n        - \"consolejndi.portal?test_handle=\"\n  tags:\n    cve: \"cve-2020-14882\"\n    vendor: \"oracle\"\n    product: \"weblogic\"\n    impact: \"rce\"  Logs  Logs content details. (https://bonjourmalware.github.io/melody/layers)  Example  Netcat TCP packet over IPv4 :  {\n  \"tcp\": {\n    \"window\": 512,\n    \"seq\": 1906765553,\n    \"ack\": 2514263732,\n    \"data_offset\": 8,\n    \"flags\": \"PA\",\n    \"urgent\": 0,\n    \"payload\": {\n      \"content\": \"I made a discovery today. I found a computer.\\n\",\n      \"base64\": \"SSBtYWRlIGEgZGlzY292ZXJ5IHRvZGF5LiAgSSBmb3VuZCBhIGNvbXB1dGVyLgo=\",\n      \"truncated\": false\n    }\n  },\n  \"ip\": {\n    \"version\": 4,\n    \"ihl\": 5,\n    \"tos\": 0,\n    \"length\": 99,\n    \"id\": 39114,\n    \"fragbits\": \"DF\",\n    \"frag_offset\": 0,\n    \"ttl\": 64,\n    \"protocol\": 6\n  },\n  \"timestamp\": \"2020-11-16T15:50:01.277828+01:00\",\n  \"session\": \"bup9368o4skolf20rt8g\",\n  \"type\": \"tcp\",\n  \"src_ip\": \"127.0.0.1\",\n  \"dst_port\": 1234,\n  \"matches\": {},\n  \"inline_matches\": [],\n  \"embedded\": {}\n}  \n\nDownload Melody (https://github.com/bonjourmalware/melody)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T01:00:04.729492Z"}, {"uuid": "1767bfac-307d-45b1-a419-bd819ad4d6bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/weblogic_admin_handle_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, x86, x64\", \"author\": [\"voidfyoo\", \"Jang\", \"wvu \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a path traversal and a Java class instantiation\\n          in the handle implementation of WebLogic's Administration Console to\\n          execute code as the WebLogic user.\\n\\n          Versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and\\n          14.1.1.0.0 are known to be affected.\\n\\n          Tested against 12.2.1.3.0 from Vulhub (Linux) and on Windows.\\n\\n          Warning! Multiple sessions may be created by exploiting this vuln.\", \"disclosure_date\": \"2020-10-20\", \"fullname\": \"exploit/multi/http/weblogic_admin_handle_rce\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"Oracle WebLogic Server Administration Console Handle RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/weblogic_admin_handle_rce.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/weblogic_admin_handle_rce\", \"references\": [\"CVE-2020-14882\", \"CVE-2020-14883\", \"CVE-2020-14750\", \"EDB-48971\", \"URL-https://www.oracle.com/security-alerts/cpuoct2020.html\", \"URL-https://testbnull.medium.com/weblogic-rce-by-only-one-get-request-cve-2020-14882-analysis-6e4b09981dbf\"], \"rport\": 7001, \"session_types\": false, \"targets\": [\"Unix Command\", \"Linux Dropper\", \"Windows Command\", \"Windows Dropper\", \"PowerShell Stager\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:19.741078Z"}, {"uuid": "302b514b-fdc1-4f7b-9496-f9ef0cb71338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/hackersmeet0/2406", "content": "\ud83d\udd30 Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\n\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\n\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\n\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\n\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\n\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\n\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\n\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\n\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\n\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\n\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\n\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb\n\nCVE Lab Access : https://www.vulnmachines.com", "creation_timestamp": "2026-09-08T21:00:03.794638Z"}, {"uuid": "06e3628a-9558-444d-8e33-67ea4e42a804", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/hackersmeet0/2406", "content": "\ud83d\udd30 Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\n\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\n\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\n\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\n\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\n\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\n\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\n\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\n\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\n\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\n\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\n\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb\n\nCVE Lab Access : https://www.vulnmachines.com", "creation_timestamp": "2026-09-09T00:00:13.656891Z"}, {"uuid": "a191bd68-ea54-4298-b889-42a2086fafac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/cissp/3231", "content": "Top 10 vulnerabilities in 2020 \n\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)", "creation_timestamp": "2026-09-11T06:00:05.753040Z"}, {"uuid": "26148206-095f-4fa5-9c3c-2e3404ac12f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/cissp/2540", "content": "Top 10 vulnerabilities in 2020:\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)", "creation_timestamp": "2026-09-11T16:00:05.297758Z"}, {"uuid": "98dfaee9-3b72-4c6b-ae32-8e6bb24cb01b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2541", "content": "Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb", "creation_timestamp": "2026-09-11T16:00:05.988726Z"}, {"uuid": "64c4d798-159d-4908-b7cf-28a9178e38e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/cissp/2540", "content": "Top 10 vulnerabilities in 2020:\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)", "creation_timestamp": "2026-09-12T00:00:36.798611Z"}, {"uuid": "178325d5-0563-4e50-b89a-c10848504b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2541", "content": "Top vulnerabilities 2020 with POC\n\nCVE-2020-17530 | Apache Struts RCE\nhttps://youtu.be/MUAAwijvAe8\n\nSaltstack RCE | CVE-2020-16846\nhttps://youtu.be/5cV9wh2w-O8\n\nApache Unomi RCE | CVE-2020-13942\nhttps://youtu.be/iz6wjdGnpds\n\nGhost Cat | CVE-2020-1938\nhttps://youtu.be/3TGIg1x4XwU\n\nOracle WebLogic RCE | CVE-2020-14882\nhttps://youtu.be/t-sxvcZNFZo\n\nApache Tomcat RCE | CVE-2020-9484\nhttps://youtu.be/nF8tfsY74ws\n\nMoodle RCE | CVE-2020-14321\nhttps://youtu.be/BkEInFI4oIU\n\nCisco CVE-2020-3452 poc\nhttps://youtu.be/-UldKwwVgHE\n\nWordpress database plugin | CVE-2020-7048\nhttps://youtu.be/nj_dqcvrwp4\n\nCVE-2020-5902 F5 big IP\nhttps://youtu.be/-ppzdYDk-ZM\n\nOther CVE PoC videos\nhttps://youtube.com/playlist?list=PLiVfOzljj-46iFcif16qMaPP84ZxCZ4Mb", "creation_timestamp": "2026-09-12T00:00:37.253500Z"}, {"uuid": "64132bf8-8f15-4ead-99aa-da6ec2a918fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/cissp/3231", "content": "Top 10 vulnerabilities in 2020 \n\n\n 1. CVE-2020-12720: vBulletin SQL Injection (OWASP 1: Injection)\n\n 2. CVE-2020-5902: F5 BIG IP RCE and LFI (OWASP 1: Injection)\n\n 3. CVE-2020-15506: MobileIron Core Authentication Bypass\n (OWASP 2: Broken Authentication)\n\n 4. CVE-2020-14882: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 5. CVE-2020-14750: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 6. CVE-2020-17530: Apache Struts 2 RCE (OWASP 1: Injection)\n\n 7. CVE-2020-2551: Oracle WebLogic RCE (OWASP 1: Injection)\n\n 8. CVE-2020-13379: Grafana SSRF\n (OWASP 3: Broken Access Control)\n\n 9. CVE-2020-1147: Microsoft SharePoint Server RCE\n (OWASP 1: Injection)\n\n 10. CVE-2020-8209: Citrix XenMobile Server Path Traversal\n (OWASP 3: Broken Access Control)", "creation_timestamp": "2026-09-12T00:00:50.820279Z"}]}