{"vulnerability": "CVE-2023-36584", "sightings": [{"uuid": "389eae96-2538-4c51-a66b-a08bfc29b320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36584", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-11-16T18:10:02.000000Z"}, {"uuid": "c0d99d3e-84d3-4758-89c0-61714fc0308d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36584", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971925", "content": "", "creation_timestamp": "2024-12-24T20:35:43.314082Z"}, {"uuid": "24b631ba-9dda-429d-9930-6d053515b6a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-36584", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b96d6726-238a-4f11-aa7f-3f9b939ee373", "content": "", "creation_timestamp": "2026-02-02T12:26:45.777675Z"}, {"uuid": "7a10256c-9bba-40e0-b0a5-fa0d46708301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36584", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:49.000000Z"}, {"uuid": "cd85e934-e377-4ac1-827d-351d4c54b0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36584", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/2790", "content": "\ud83d\udea8 CISA adds 3 security flaws to its KEV catalog due to active exploitation. \n \nCVE-2023-1671: Enables arbitrary code execution. \nCVE-2023-2551: Affects WebLogic Server. \nCVE-2023-36584: Associated with pro-Russian APT's spear-phishing. \n \nRead: https://thehackernews.com/2023/11/cisa-adds-three-security-flaws-with.html", "creation_timestamp": "2023-11-17T10:12:21.000000Z"}, {"uuid": "a3340e43-b81a-44c0-a318-a493eca493c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36584", "type": "seen", "source": "Telegram/Bw0hPsCfuz7Dlo6FsfoY-QgOhbVYq8J767WSGH93YfvkfA", "content": "", "creation_timestamp": "2023-11-17T07:43:49.000000Z"}, {"uuid": "e8984cce-ae61-466a-b2b8-92bd4a39adc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36584", "type": "seen", "source": "https://t.me/KomunitiSiber/1086", "content": "CISA Adds Three Security Flaws with Active Exploitation to KEV Catalog\nhttps://thehackernews.com/2023/11/cisa-adds-three-security-flaws-with.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog based on evidence of active exploitation in the wild.\nThe\u00a0vulnerabilities\u00a0are as follows -\n\nCVE-2023-36584\u00a0(CVSS score: 5.4) - Microsoft Windows Mark-of-the-Web (MotW) Security Feature Bypass Vulnerability\nCVE-2023-1671\u00a0(CVSS score: 9.8) -", "creation_timestamp": "2023-11-17T07:07:36.000000Z"}, {"uuid": "00b610ff-ed5c-41b2-bedc-b0ae4571b3bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36584", "type": "seen", "source": "https://t.me/cibsecurity/72011", "content": "\u203c CVE-2023-36584 \u203c\n\nWindows Mark of the Web Security Feature Bypass Vulnerability\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-10T22:22:53.000000Z"}, {"uuid": "3c3d9e9b-6867-4296-beef-4dc2686637ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36584", "type": "exploited", "source": "https://t.me/thehackernews/4162", "content": "\ud83d\udea8 CISA adds 3 security flaws to its KEV catalog due to active exploitation. \n \nCVE-2023-1671: Enables arbitrary code execution. \nCVE-2023-2551: Affects WebLogic Server. \nCVE-2023-36584: Associated with pro-Russian APT's spear-phishing. \n \nRead: https://thehackernews.com/2023/11/cisa-adds-three-security-flaws-with.html", "creation_timestamp": "2023-11-17T07:02:15.000000Z"}, {"uuid": "fd4e0402-dde6-4905-b5ce-eb68d6266e68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36584", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/229", "content": "\ud83d\udea8 CISA adds 3 security flaws to its KEV catalog due to active exploitation. \n \nCVE-2023-1671: Enables arbitrary code execution. \nCVE-2023-2551: Affects WebLogic Server. \nCVE-2023-36584: Associated with pro-Russian APT's spear-phishing. \n \nRead: https://thehackernews.com/2023/11/cisa-adds-three-security-flaws-with.html", "creation_timestamp": "2023-11-17T10:12:21.000000Z"}]}