{"vulnerability": "CVE-2024-4533", "sightings": [{"uuid": "78e14dad-6771-4c3d-8905-661a41249463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45337", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635719810666284", "content": "", "creation_timestamp": "2024-12-11T18:57:59.102064Z"}, {"uuid": "31fc9e01-a599-4c20-9c99-58f98bd1902b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45337", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635736576468884", "content": "", "creation_timestamp": "2024-12-11T19:02:15.818735Z"}, {"uuid": "b7590e0c-bb51-4377-b72b-236030b12df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45336", "type": "seen", "source": "https://bsky.app/profile/golang.org/post/3lfvfxdxeis2y", "content": "", "creation_timestamp": "2025-01-16T23:16:09.768971Z"}, {"uuid": "62f3f8ef-ec24-4f95-adfa-f20329042f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45331", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113837230331135599", "content": "", "creation_timestamp": "2025-01-16T09:04:45.625621Z"}, {"uuid": "93b53e37-dd84-4065-8dd7-a6c744372831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45331", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lftwxqs3yl2t", "content": "", "creation_timestamp": "2025-01-16T09:15:16.247736Z"}, {"uuid": "47841443-36b4-4835-aa53-3fa2f2092ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45331", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lftykcl7ip2q", "content": "", "creation_timestamp": "2025-01-16T09:43:32.882583Z"}, {"uuid": "4c82f4b8-f559-4306-8b61-1abfcdc87c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45336", "type": "seen", "source": "https://bsky.app/profile/golang.org/post/3lfvckap2p22o", "content": "", "creation_timestamp": "2025-01-16T22:15:09.295935Z"}, {"uuid": "162428fd-5d2f-459d-978f-86ac7c87ac95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45336", "type": "seen", "source": "https://bsky.app/profile/go-perf.bsky.social/post/3lfwslktikc2x", "content": "", "creation_timestamp": "2025-01-17T12:34:52.062421Z"}, {"uuid": "323e9758-5456-48ff-a5ff-7eeddc9ab7fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45336", "type": "seen", "source": "https://bsky.app/profile/Soli-0222.mi.soli0222.com.ap.brid.gy/post/3lfwuoxuttkw2", "content": "", "creation_timestamp": "2025-01-17T13:12:39.782191Z"}, {"uuid": "abf4816a-6d02-48da-84b5-ee998f217e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45339", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgrvbtgiku2y", "content": "", "creation_timestamp": "2025-01-28T07:05:01.017720Z"}, {"uuid": "6d695d8f-411f-47a1-af1c-d416d6867ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45336", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgrvbubeev2k", "content": "", "creation_timestamp": "2025-01-28T07:05:05.398003Z"}, {"uuid": "95364896-ac92-4608-99ea-1897df8d3585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45337", "type": "seen", "source": "https://gist.github.com/cwayne18/3da2b9bf101aefc5a7f783c55023b8af", "content": "", "creation_timestamp": "2025-01-28T13:36:28.000000Z"}, {"uuid": "ca8e30f8-aeac-4053-8927-156371f71ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45338", "type": "seen", "source": "https://gist.github.com/cwayne18/3da2b9bf101aefc5a7f783c55023b8af", "content": "", "creation_timestamp": "2025-01-28T13:36:28.000000Z"}, {"uuid": "c52e6a10-e5a1-45df-8011-2df927f6d5b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45336", "type": "seen", "source": "https://gist.github.com/EbonJaeger/8dc7a0dcf45925da6c94fbe07d16028e", "content": "", "creation_timestamp": "2025-01-24T19:44:59.000000Z"}, {"uuid": "fad8c39d-85dd-4974-9427-19f2ec6f5f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45336", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113903378617509511", "content": "", "creation_timestamp": "2025-01-28T01:27:08.339246Z"}, {"uuid": "bd148879-f9aa-48b8-8d4b-151d91f8c138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45339", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113903378632969158", "content": "", "creation_timestamp": "2025-01-28T01:27:08.857812Z"}, {"uuid": "a3d974c4-4e8d-4bd5-854c-eed7f24e10cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45336", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrf5citxa2r", "content": "", "creation_timestamp": "2025-01-28T02:16:07.162576Z"}, {"uuid": "4bdfa4d4-346a-47a5-bc5b-46423abc362c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45339", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrf5eromi2h", "content": "", "creation_timestamp": "2025-01-28T02:16:09.996715Z"}, {"uuid": "7fbad1c2-5b29-47a2-b728-e90181f9dc35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lppqvzt7ex2h", "content": "", "creation_timestamp": "2025-05-21T23:28:14.426304Z"}, {"uuid": "84f760e1-9325-495f-ae2b-b77aff3c3c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lpprkbwdax2u", "content": "", "creation_timestamp": "2025-05-21T23:39:32.956826Z"}, {"uuid": "c448634d-15df-433a-90a1-7d25b60b56c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-3f044bb2-bdd53a5bde569143", "content": "", "creation_timestamp": "2025-05-20T06:52:11.138638Z"}, {"uuid": "368a6662-c53e-4555-91de-e36c3d7c0a5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://bsky.app/profile/lance.boston/post/3lptjvihmbc2z", "content": "", "creation_timestamp": "2025-05-23T11:33:18.515628Z"}, {"uuid": "34c22485-f78c-43c6-97bd-4ed5cb353db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-45332", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lptmjbrntc2c", "content": "", "creation_timestamp": "2025-05-23T12:20:09.476840Z"}, {"uuid": "4f782904-08ae-478d-9d00-2c1fb2017ddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45337", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lqtgw6dhi22u", "content": "", "creation_timestamp": "2025-06-05T04:05:14.719436Z"}, {"uuid": "9be11474-7ce9-434d-9732-2fc34b594392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://bsky.app/profile/serghei.bsky.social/post/3lp2udyye422e", "content": "", "creation_timestamp": "2025-05-13T16:03:51.872636Z"}, {"uuid": "fb3094f5-0a8c-4a1b-b0d7-74fe6a751e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lp33klxo2i2g", "content": "", "creation_timestamp": "2025-05-13T18:12:46.386518Z"}, {"uuid": "ff6e0fee-68e8-4796-88b2-532d70b73541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lp34q3yaww2e", "content": "", "creation_timestamp": "2025-05-13T18:33:44.782754Z"}, {"uuid": "e898b9a4-d385-4d42-a7af-a887ef7d0acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/129", "content": "", "creation_timestamp": "2025-05-13T15:05:48.000000Z"}, {"uuid": "63dedb51-0407-47c0-b27f-63a3fa66ba3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45333", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp3hoivmpg42", "content": "", "creation_timestamp": "2025-05-13T22:08:57.980254Z"}, {"uuid": "a46b3762-76b8-4ce8-a6c1-569542c69204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp3hojrvgjr2", "content": "", "creation_timestamp": "2025-05-13T22:08:58.990205Z"}, {"uuid": "2b85666d-7564-4c54-a0ae-7fe14bb0a92c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://bsky.app/profile/hacker-news-jp.bsky.social/post/3lp3o2aawww2r", "content": "", "creation_timestamp": "2025-05-13T23:43:38.421736Z"}, {"uuid": "98b918f3-7b23-4678-964c-87d693eec992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lp4qm5kz2m2q", "content": "", "creation_timestamp": "2025-05-14T10:02:07.735158Z"}, {"uuid": "84f02512-f845-4610-95cc-b55f07d77858", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://bsky.app/profile/mrsyiswhy.bsky.social/post/3lp5anpzlfk2c", "content": "", "creation_timestamp": "2025-05-14T14:49:19.536193Z"}, {"uuid": "2044e6b0-0104-4e8a-b213-42eebdab5005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45337", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "a3adbdec-79c6-4f90-b401-566d12f6d59e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45338", "type": "seen", "source": "https://gist.github.com/mytreya-rh/da4aef61a7ab8816fa11198f9b064846", "content": "", "creation_timestamp": "2025-11-13T12:36:23.000000Z"}, {"uuid": "4cbef5d7-cf52-459e-ad23-3486ab3466dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45337", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:06.000000Z"}, {"uuid": "8d491eee-b9e6-415a-9236-438f173747db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45339", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:02.000000Z"}, {"uuid": "a6ce0c17-cfe2-4118-8040-b270b7640e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45337", "type": "seen", "source": "https://gist.github.com/sebrandon1/758455dc1ea03ac2d7e445037c445895", "content": "", "creation_timestamp": "2026-02-04T22:01:28.000000Z"}, {"uuid": "2b38f4ee-9720-4a65-be89-79c7b848e102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45337", "type": "seen", "source": "https://gist.github.com/sebrandon1/c199b003a46d397532dfba6a35744bd3", "content": "", "creation_timestamp": "2026-02-05T16:21:21.000000Z"}, {"uuid": "b874d40e-59e4-4ab2-ae04-6a1188cdba43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-45337", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "61d1cc0b-0352-4d81-a8be-a28f792555d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-45337", "type": "seen", "source": "https://gist.github.com/gmoigneu/e9982122600e5c6f6f995d754ca2529f", "content": "", "creation_timestamp": "2026-04-01T08:58:58.000000Z"}, {"uuid": "3e553244-db71-4136-aea9-550ce4fdedad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mitcx3z3pp2n", "content": "", "creation_timestamp": "2026-04-06T12:58:46.578388Z"}, {"uuid": "2f11515a-c0a9-467f-9dcc-68561170a2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45337", "type": "seen", "source": "https://gist.github.com/paulo-raca/8a16df3664952c9b185211298075c6ab", "content": "", "creation_timestamp": "2026-04-10T17:08:55.000000Z"}, {"uuid": "758b8ce6-8932-40d7-a758-81861eec414a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45337", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9474", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aAn example project that showcases golang code vulnerable to CVE-2024-45337\nURL\uff1ahttps://github.com/NHAS/VULNERABLE-CVE-2024-45337\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-17T22:24:40.000000Z"}, {"uuid": "c0d8a041-616b-4f88-956c-47326e4bea5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45337", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9473", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof of concept (POC) for CVE-2024-45337 \nURL\uff1ahttps://github.com/NHAS/CVE-2024-45337-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-17T22:12:06.000000Z"}, {"uuid": "3f3eb6ea-bf6b-4d08-aaca-19d3bd5a35d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45331", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1935", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-45331\n\ud83d\udd39 Description: A incorrect privilege assignment in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15, FortiManager versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15, FortiAnalyzer Cloud versions 7.4.1 through 7.4.2, 7.2.1 through 7.2.6, 7.0.1 through 7.0.13, 6.4.1 through 6.4.7 allows attacker to escalate privilege via specific shell commands\n\ud83d\udccf Published: 2025-01-16T08:59:23.201Z\n\ud83d\udccf Modified: 2025-01-16T08:59:23.201Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-127", "creation_timestamp": "2025-01-16T09:55:39.000000Z"}, {"uuid": "e9acf9f5-6158-4da7-907e-9a1b0339c9e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45336", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3218", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-45336\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subsequent same-domain redirect, however, the sensitive headers would be restored. For example, a chain of redirects from a.com/, to b.com/1, and finally to b.com/2 would incorrectly send the Authorization header to b.com/2.\n\ud83d\udccf Published: 2025-01-28T03:31:14Z\n\ud83d\udccf Modified: 2025-01-28T03:31:14Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-45336\n2. https://go.dev/cl/643100\n3. https://go.dev/issue/70530\n4. https://groups.google.com/g/golang-dev/c/CAWXhan3Jww/m/bk9LAa-lCgAJ\n5. https://groups.google.com/g/golang-dev/c/bG8cv1muIBM/m/G461hA6lCgAJ\n6. https://pkg.go.dev/vuln/GO-2025-3420", "creation_timestamp": "2025-01-28T04:09:18.000000Z"}, {"uuid": "5a82d35c-c1e8-488b-893d-1d0964fddbdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45336", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4945", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-45336\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subsequent same-domain redirect, however, the sensitive headers would be restored. For example, a chain of redirects from a.com/, to b.com/1, and finally to b.com/2 would incorrectly send the Authorization header to b.com/2.\n\ud83d\udccf Published: 2025-01-28T01:03:24.869Z\n\ud83d\udccf Modified: 2025-02-21T18:03:31.299Z\n\ud83d\udd17 References:\n1. https://go.dev/cl/643100\n2. https://go.dev/issue/70530\n3. https://groups.google.com/g/golang-dev/c/CAWXhan3Jww/m/bk9LAa-lCgAJ\n4. https://groups.google.com/g/golang-dev/c/bG8cv1muIBM/m/G461hA6lCgAJ\n5. https://pkg.go.dev/vuln/GO-2025-3420", "creation_timestamp": "2025-02-21T18:19:02.000000Z"}, {"uuid": "f736e3c3-3bd9-479d-8c22-d0460ee611ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45338", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4944", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-45338\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.\n\ud83d\udccf Published: 2024-12-18T20:38:22.660Z\n\ud83d\udccf Modified: 2025-02-21T18:03:32.301Z\n\ud83d\udd17 References:\n1. https://go.dev/cl/637536\n2. https://go.dev/issue/70906\n3. https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ\n4. https://pkg.go.dev/vuln/GO-2024-3333", "creation_timestamp": "2025-02-21T18:19:01.000000Z"}, {"uuid": "d71c2e3c-7ec9-41e7-b848-3e363a9ef91e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45334", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7438", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-45334\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Trend Micro Antivirus One versions 3.10.4 and below (Consumer) is vulnerable to an Arbitrary Configuration Update that could allow unauthorized access to product configurations and functions.\n\ud83d\udccf Published: 2024-10-22T18:27:10.686Z\n\ud83d\udccf Modified: 2025-03-13T16:20:53.780Z\n\ud83d\udd17 References:\n1. https://helpcenter.trendmicro.com/en-us/article/TMKA-14461", "creation_timestamp": "2025-03-13T16:45:38.000000Z"}, {"uuid": "3e3f290c-b14f-457c-9ecf-25b837e79626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4533", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8744", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4533\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The KKProgressbar2 Free  WordPress plugin through 1.1.4.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admin users to perform SQL injection attacks\n\ud83d\udccf Published: 2024-05-27T06:00:02.573Z\n\ud83d\udccf Modified: 2025-03-25T18:39:38.191Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c3406236-aaee-480a-8931-79c867252f11/", "creation_timestamp": "2025-03-25T19:24:59.000000Z"}, {"uuid": "d6c246a2-2d2a-48e0-9258-f45fc8e0fd49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45333", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16245", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-45333\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticated user to potentially enable denial of service via local access.\n\ud83d\udccf Published: 2025-05-13T21:03:13.722Z\n\ud83d\udccf Modified: 2025-05-13T21:03:13.722Z\n\ud83d\udd17 References:\n1. https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html", "creation_timestamp": "2025-05-13T21:31:05.000000Z"}, {"uuid": "b7022133-abc7-449e-9e1e-36b83fd10b99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16244", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-45332\n\ud83d\udd25 CVSS Score: 5.7 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.\n\ud83d\udccf Published: 2025-05-13T21:03:12.207Z\n\ud83d\udccf Modified: 2025-05-13T21:03:14.129Z\n\ud83d\udd17 References:\n1. https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html", "creation_timestamp": "2025-05-13T21:31:03.000000Z"}, {"uuid": "151e3ea8-94f6-4477-b0b4-51367afc6a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/491", "content": "Top Security News for Today\n\nDero miner zombies biting through Docker APIs to build a cryptojacking horde  \nhttps://securelist.com/dero-miner-infects-containers-through-docker-api/116546/\n\nEvilWorker: a new AiTM attack framework leveraging service workers \u2014 much more effective, autonomous, and adaptable than Evilginx2? \ud83c\udfa3  \nhttps://www.reddit.com/r/netsec/comments/1krtrht/evilworker_a_new_aitm_attack_framework_leveraging/\n\nHumans are Insecure Password Generators  \nhttps://www.reddit.com/r/netsec/comments/1krqom1/humans_are_insecure_password_generators/\n\nBadSuccessor: Abusing dMSA to Escalate Privileges in Active Directory  \nhttps://www.reddit.com/r/netsec/comments/1ks1i9g/badsuccessor_abusing_dmsa_to_escalate_privileges/\n\nLumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealer  \nhttps://www.microsoft.com/en-us/security/blog/2025/05/21/lumma-stealer-breaking-down-the-delivery-techniques-and-capabilities-of-a-prolific-infostealer/\n\nAI-Powered Malware \u2013 The Next Evolution in Cyber Threats  \nhttps://www.darknet.org.uk/2025/05/ai-powered-malware-the-next-evolution-in-cyber-threats/\n\nCVE-2024-45332 brings back branch target injection attacks on Intel  \nhttps://www.reddit.com/r/netsec/comments/1ksc31c/cve202445332_brings_back_branch_target_injection/\n\nZathuraDbg: Open-Source GUI tool for learning assembly  \nhttps://www.reddit.com/r/lowlevel/comments/1ks4em6/zathuradbg_opensource_gui_tool_for_learning/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2025-05-22T09:30:21.000000Z"}, {"uuid": "f73baee2-b8cc-4985-ac04-696667b1e60a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/5888", "content": "\u26a0\ufe0f \u041d\u043e\u0432\u044b\u0439 \u0434\u0435\u043d\u044c \u2014 \u043d\u043e\u0432\u0430\u044f \u0434\u044b\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u044f\u0434\u0440\u0430. \u0411\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u041f\u0440\u043e\u0441\u0442\u043e \u0438\u0437 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430.\n\n2025 \u0433\u043e\u0434, ETH Zurich. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043f\u043e\u043a\u043e\u0439\u043d\u043e \u0431\u0435\u0440\u0443\u0442 Ubuntu 24.04, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u2014 \u0438 \u0434\u043e\u0441\u0442\u0430\u044e\u0442 /etc/shadow \u043d\u0430 \u0447\u0443\u0436\u043e\u043c \u044f\u0434\u0440\u0435 \u0441 \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c\u044e 99,8%. \u0412\u0441\u0451 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0441\u0432\u0435\u0436\u0435\u0432\u0441\u043a\u0440\u044b\u0442\u043e\u043c\u0443 \u0431\u0430\u0433\u0443 \u0432 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u043e\u0432 \u0443 Intel. \u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435: Branch Privilege Injection (BPI). CVE-2024-45332. \u0414\u0430, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043a\u0440\u0435\u043c\u043d\u0438\u044f.\n\n\u0427\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442?\n\u041a\u043e\u0433\u0434\u0430 CPU \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442 \u043c\u0435\u0436\u0434\u0443 \u043e\u0431\u044b\u0447\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0438 \u044f\u0434\u0440\u043e\u043c \u2014 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u043c\u0438\u043a\u0440\u043e\u0441\u043a\u043e\u043f\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u201c\u043e\u043a\u043d\u043e\u201d (\u043d\u0430\u043d\u043e\u0441\u0435\u043a\u0443\u043d\u0434\u044b), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u0432\u0435\u0442\u0432\u043b\u0435\u043d\u0438\u0439 \u0442\u0435\u0440\u044f\u0435\u0442 \u0431\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0441\u0443\u043d\u0443\u0442\u044c \u0432\u0435\u0442\u043a\u0443 \u0441 \u043d\u0443\u0436\u043d\u044b\u043c \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435\u043c \u2014 \u0438 \u0437\u0430\u0433\u043b\u044f\u043d\u0443\u0442\u044c \u0442\u0443\u0434\u0430, \u043a\u0443\u0434\u0430 \u043f\u043e \u0438\u0434\u0435\u0435 \u043d\u0435 \u0434\u043e\u043b\u0436\u0435\u043d. \u0412 \u043a\u044d\u0448. \u0412 \u043f\u0430\u043c\u044f\u0442\u044c. \u0412 \u0445\u044d\u0448 \u0442\u0432\u043e\u0435\u0433\u043e \u043f\u0430\u0440\u043e\u043b\u044f. \u0412 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043b\u044e\u0447\u0438. \u0412 \u0447\u0443\u0436\u043e\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0418 \u044d\u0442\u043e \u043d\u0435 \u0433\u0438\u043f\u043e\u0442\u0435\u0437\u0430. \u042d\u0442\u043e \u0440\u0430\u0431\u043e\u0447\u0438\u0439 PoC \u043d\u0430 \u043e\u0431\u044b\u0447\u043d\u043e\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u2014 \u0441 Coffee Lake \u0434\u043e Raptor Lake.\n\n\u2757\ufe0f\u041f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0432\u0441\u0435 Intel-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u0441 9-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f.\nARM \u0438 AMD \u2014 \u043d\u0435\u0443\u044f\u0437\u0432\u0438\u043c\u044b. \u041f\u0440\u043e\u0441\u0442\u043e \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0443 \u043d\u0438\u0445 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u0438\u043d\u0430\u0447\u0435.\n\n\u0427\u0442\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0431\u043e\u043b\u044c\u043d\u043e:\n\u042d\u0442\u043e \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u0441\u043a\u0442\u043e\u043f\u043e\u0432. \u0412 \u0437\u043e\u043d\u0435 \u0440\u0438\u0441\u043a\u0430 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b, VPS-\u0445\u043e\u0441\u0442\u0438\u043d\u0433\u0438, CI/CD-\u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u044b. \u041b\u044e\u0431\u0430\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430, \u0433\u0434\u0435 \u0440\u0430\u0437\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0434\u0435\u043b\u044f\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440.\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:\n\ud83e\udd12 Intel \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438. \u041d\u043e \u043d\u0443\u0436\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c BIOS / UEFI + \u044f\u0434\u0440\u043e OS.\n\ud83e\udd12 \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u0437\u0430\u043f\u043b\u0430\u0442\u043a\u0438 \u2014 \u043e\u0442 1,6 \u0434\u043e 8,3% \u043f\u043e\u0442\u0435\u0440\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.\n\ud83e\udd12 \u041c\u0438\u043a\u0440\u043e\u043a\u043e\u0434 \u2014 \u201c\u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c\u201d ~2,7%. \u041d\u0443, \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0442\u043e\u0440\u043c\u043e\u0437\u0438\u0442. \u0417\u0430\u0442\u043e \u043d\u0435 \u0441\u043e\u043b\u044c\u0451\u0442 \u0442\u0432\u043e\u0438 \u0442\u043e\u043a\u0435\u043d\u044b.\n\n\u0425\u043e\u0440\u043e\u0448\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438:\n\u041f\u043e\u043a\u0430 \u043d\u0438 \u043e\u0434\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e. \u041f\u043b\u043e\u0445\u0438\u0435 \u2014 \u043e\u0431 \u044d\u0442\u043e\u043c \u0433\u043e\u0432\u043e\u0440\u0438\u043b\u0438 \u0438 \u0434\u043e Meltdown. \u0410 \u043f\u043e\u0442\u043e\u043c \u0441\u0442\u0430\u043b\u043e \u043f\u043e\u0437\u0434\u043d\u043e.\n\n\u25fc\ufe0f\u0415\u0441\u043b\u0438 \u0432\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442\u0435 \u0441 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438, \u043d\u0435 \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0439\u0442\u0435.\n\u25fc\ufe0f\u0415\u0441\u043b\u0438 \u0432\u044b \u0430\u0434\u043c\u0438\u043d \u043d\u0430 \u043e\u0431\u043b\u0430\u043a\u0435 \u2014 \u0441\u0435\u0439\u0447\u0430\u0441 \u0441\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u043a\u0430\u0437\u0430\u0442\u044c \u201c\u043c\u044b \u043e\u0431\u043d\u043e\u0432\u0438\u043c \u0432\u0441\u0451 \u0432 2:00 \u043d\u043e\u0447\u0438\u201d.\n\u25fc\ufe0f\u0415\u0441\u043b\u0438 \u0432\u044b \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u043a \u2014 \u043f\u043e\u0437\u0434\u0440\u0430\u0432\u043b\u044f\u0435\u043c, \u0432\u044b \u0441\u043d\u043e\u0432\u0430 \u0431\u044b\u043b\u0438 \u043f\u0440\u0430\u0432\u044b.\n\nBranch Privilege Injection. \u0422\u0435\u043f\u0435\u0440\u044c \u0432\u0430\u0448 CPU \u0442\u043e\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432\u0430\u0441.\n\nITsec NEWS", "creation_timestamp": "2025-05-16T10:50:11.000000Z"}, {"uuid": "a559f609-4a5a-48c3-bc4c-7ccb599dbd21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45337", "type": "seen", "source": "https://t.me/CyberBulletin/1758", "content": "\u26a1\ufe0fCVE-2024-45337: Golang Crypto Library Flawed, Risks Authorization Bypass.\n\n#CyberBulletin", "creation_timestamp": "2024-12-16T05:52:16.000000Z"}, {"uuid": "577e40cf-4014-4201-ae58-2f23011ec23d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45339", "type": "seen", "source": "https://t.me/cvedetector/16563", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45339 - Apache Glog Symbolic Link File Overwrite Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-45339 \nPublished : Jan. 28, 2025, 2:15 a.m. | 53\u00a0minutes ago \nDescription : When logs are written to a widely-writable directory (the default), an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that sensitive file. To fix that, glog now causes the program to exit (with status code 2) when it finds that the configured log file already exists. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T04:34:41.000000Z"}, {"uuid": "e1d8ef8c-c4d5-49a9-96b3-f634511df829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45336", "type": "seen", "source": "https://t.me/cvedetector/16562", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45336 - Apache HTTP Server Cross-Domain Header Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-45336 \nPublished : Jan. 28, 2025, 2:15 a.m. | 53\u00a0minutes ago \nDescription : The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subsequent same-domain redirect, however, the sensitive headers would be restored. For example, a chain of redirects from a.com/, to b.com/1, and finally to b.com/2 would incorrectly send the Authorization header to b.com/2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T04:34:37.000000Z"}, {"uuid": "cece202f-42e5-40cb-88d5-b93ad5b8c2b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45331", "type": "seen", "source": "https://t.me/cvedetector/15572", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45331 - Fortinet FortiAnalyzer/FortiManager/FortiAnalyzer Cloud Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-45331 \nPublished : Jan. 16, 2025, 9:15 a.m. | 39\u00a0minutes ago \nDescription : A incorrect privilege assignment in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15, FortiManager versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15, FortiAnalyzer Cloud versions 7.4.1 through 7.4.2, 7.2.1 through 7.2.6, 7.0.1 through 7.0.13, 6.4.1 through 6.4.7 allows attacker to escalate privilege via specific shell commands \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T11:13:00.000000Z"}, {"uuid": "6270adce-517a-4423-82b2-652b4bc7c60e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45337", "type": "seen", "source": "Telegram/Em7oM8Jgoht_cZoj5EbMpOyv93IgOzhfADyqoMeelJcGVgwJ", "content": "", "creation_timestamp": "2025-02-18T23:42:23.000000Z"}, {"uuid": "8610df68-60cd-4875-a430-19f4a24090f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45338", "type": "seen", "source": "https://t.me/cvedetector/13253", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45338 - Cisco IoVASP Parser Slow Parse Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-45338 \nPublished : Dec. 18, 2024, 9:15 p.m. | 35\u00a0minutes ago \nDescription : An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T22:54:12.000000Z"}, {"uuid": "e63a5cbc-896a-4f61-a98b-09ce31209133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45334", "type": "seen", "source": "https://t.me/cvedetector/8643", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45334 - Trend Micro Antivirus Arbitrary Configuration Update Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-45334 \nPublished : Oct. 22, 2024, 7:15 p.m. | 36\u00a0minutes ago \nDescription : Trend Micro Antivirus One versions 3.10.4 and below (Consumer) is vulnerable to an Arbitrary Configuration Update that could allow unauthorized access to product configurations and functions. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T22:09:04.000000Z"}, {"uuid": "cbba0549-58de-4afc-b7e5-a8d33ebddbdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45335", "type": "seen", "source": "https://t.me/cvedetector/8641", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45335 - Trend Micro Antivirus One Virus Evasion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-45335 \nPublished : Oct. 22, 2024, 7:15 p.m. | 36\u00a0minutes ago \nDescription : Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to use a specifically crafted virus to allow itself to bypass and evade a virus scan detection. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T22:09:02.000000Z"}, {"uuid": "a5962663-dc69-4fd7-8e43-1b89fab59dc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45330", "type": "seen", "source": "https://t.me/cvedetector/7364", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45330 - Fortinet FortiAnalyzer Format String Exploitation\", \n  \"Content\": \"CVE ID : CVE-2024-45330 \nPublished : Oct. 8, 2024, 3:15 p.m. | 31\u00a0minutes ago \nDescription : A use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.5 allows attacker to escalate its privileges via specially crafted requests. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T17:53:16.000000Z"}, {"uuid": "7f093f36-aae7-4617-bed5-1da535e96403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45339", "type": "seen", "source": "Telegram/mDozMj_IO-G08Yu0yhT1hmIn0tJs6KxL447cF11oJbIOLt1-", "content": "", "creation_timestamp": "2025-02-17T15:38:32.000000Z"}, {"uuid": "160b9e2b-ce35-47d0-8ee4-1202c9772c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45331", "type": "seen", "source": "Telegram/sTIgxdxOb1J_1je03nGXspOszgGFICIIfkDsLQRvjTkzE79Y", "content": "", "creation_timestamp": "2025-02-06T02:40:19.000000Z"}, {"uuid": "b82cc416-3084-431b-b8b3-1f632727b181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45337", "type": "published-proof-of-concept", "source": "Telegram/sU-jNaPMtLGhQJIUlK_Y1eVeodJiHQnKe9p9PX30oKjDADc", "content": "", "creation_timestamp": "2025-01-29T12:30:50.000000Z"}, {"uuid": "8c214c8b-b22b-454f-b4df-f566cae1195a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45337", "type": "published-proof-of-concept", "source": "Telegram/WihYjZpKNIYylc-ChTuYB_T11QPQd1rZGQXBp3o0NaE4LfU", "content": "", "creation_timestamp": "2025-01-24T22:00:05.000000Z"}, {"uuid": "a8bce574-dd4b-47a4-b952-038cc7fd6e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://t.me/true_secator/7036", "content": "Intel, AMD \u0438 Arm \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Patch Tuesday, \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u0443\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u0442\u0430\u043a\u0438\u0445 \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043d\u0430 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0448\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 ETH Zurich, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432\u0435\u0442\u0432\u043b\u0435\u043d\u0438\u044f (CVE-2024-45332), \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0432\u0441\u044e \u043c\u043e\u0449\u044c \u0430\u0442\u0430\u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0435\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u0438 (Spectre-BTI) \u043d\u0430 Intel.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e, \u0445\u043e\u0442\u044f \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b\u00a0Spectre-BTI\u00a0(\u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043a\u0430\u043a Spectre v2) \u043e\u0442 Intel \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043f\u043e\u0447\u0442\u0438 \u0448\u0435\u0441\u0442\u044c \u043b\u0435\u0442, \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043d\u0430\u0439\u0442\u0438 \u0441\u043f\u043e\u0441\u043e\u0431 \u0438\u0445 \u043e\u0431\u0445\u043e\u0434\u0430 \u0438\u0445 \u0438\u0437-\u0437\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0433\u043e\u043d\u043a\u0438, \u0432\u043b\u0438\u044f\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel.\n\n\u0410\u0442\u0430\u043a\u0438 \u0442\u0438\u043f\u0430 Spectre \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0446\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u0430\u0440\u043e\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u00a0Intel \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-45332, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u043d\u0430 \u043e\u0442\u043d\u0435\u0441\u043b\u0430 \u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\nAMD \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e, \u043a\u0430\u043a \u0437\u0430\u044f\u0432\u0438\u043b\u0438 \u0441\u0430\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0435\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b.\n\n\u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u0426\u041f \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043d\u0430 \u044d\u0442\u043e\u0439 \u0436\u0435 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437 \u0433\u043e\u043b\u043b\u0430\u043d\u0434\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 VU Amsterdam, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 \u0435\u0435 Training Solo, \u043e\u0442\u043a\u0440\u044b\u0432 \u0442\u0440\u0438 \u043d\u043e\u0432\u044b\u0445 \u043a\u043b\u0430\u0441\u0441\u0430 \u0441\u0430\u043c\u043e\u043e\u0431\u0443\u0447\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a Spectre v2, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u044e\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u0434\u043e\u043c\u0435\u043d\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0434\u0432\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u0441\u043e \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c\u044e \u0434\u043e 17 \u041a\u0431\u0438\u0442/\u0441, \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-28956\u00a0\u0438\u00a0CVE-2025-24495), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0430\u0440\u0443\u0448\u0430\u044e\u0442 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0432\u043d\u043e\u0432\u044c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043f\u0440\u043e\u0441\u0442\u043e\u0440 \u0434\u043b\u044f \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a Spectre-v2 \u00ab\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u00bb, \u00ab\u0433\u043e\u0441\u0442\u044c-\u0433\u043e\u0441\u0442\u044c\u00bb \u0438 \u0434\u0430\u0436\u0435 \u00ab\u0433\u043e\u0441\u0442\u044c-\u0445\u043e\u0441\u0442\u00bb.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Intel \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430 \u0438 \u043f\u0440\u0435\u0434\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\u00a0\n\nAMD \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u0435\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0435, \u0447\u0435\u0433\u043e \u043d\u0435 \u0441\u043a\u0430\u0436\u0435\u0448\u044c \u043f\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Arm.\n\n\u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0447\u0438\u043f\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u043d\u043e\u0432\u0430\u044f, \u043d\u043e \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u0441\u0435 \u0436\u0435 \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043e, \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u0442\u043a\u043e \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0430\u044f \u0440\u0438\u0441\u043a\u0438.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, Intel \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 25 \u043d\u043e\u0432\u044b\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439, \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u0435\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u00a0\n\n\u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, DoS \u0438\u043b\u0438 EoP \u0432 Tiber Edge Platform, Graphics and Graphics Driver, Server Board, PROSet/Wireless, Gaudi, Xeon, Ethernet Network Adapter, Slim Bootloader \u0438 Simics Package Manager.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 Intel RealSense, Ethernet Network Adapter, Ethernet Connections Boot Utility, oneAPI Level Zero, OpenVINO, Advisor, Endurance Gaming Mode, Arc GPU, Core \u0438 Xeon CPU, oneAPI DPC++/C++ Compiler \u0438 QuickAssist Technology.\n\nAMD\u00a0\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0430\u043a\u0436\u0435 \u0435\u0449\u0435 \u0442\u0440\u0438 \u043d\u043e\u0432\u044b\u0445 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f. \u041e\u0434\u0438\u043d \u0438\u0437 \u043d\u0438\u0445 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 AMD Manageability Tools - \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a EoP \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c\u0443 RCE.\n\n\u0412 \u0434\u0440\u0443\u0433\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 AMD Optimizing CPU Libraries (AOCL), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f EoP \u0438, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, RCE.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c - \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 uProf, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432.", "creation_timestamp": "2025-05-15T18:00:07.000000Z"}, {"uuid": "d523db3f-e05a-483e-a6e2-6c6c5d1307f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://t.me/CyberBulletin/3316", "content": "\u26a1\ufe0fCVE-2024-45332 brings back branch target injection attacks on Intel.\n\n#CyberBulletin", "creation_timestamp": "2025-05-23T01:05:20.000000Z"}, {"uuid": "382602e7-6cdc-4563-8f3d-f309b34c1d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://t.me/thehackernews/6848", "content": "\ud83d\udcbb Spectre Isn\u2019t Dead. It\u2019s Mutating! New CPU flaw hits ALL modern Intel chips.\n\n\ud83d\udee0 Researchers at ETH Zurich and VUSec uncovered Spectre-style Intel CPU flaws (CVE-2024-45332, CVE-2024-28956, CVE-2025-24495) that leak memory across users, guests, and hosts\u2014at rates up to 17KB/sec.\n\nRead details \u2192 https://thehackernews.com/2025/05/researchers-expose-new-intel-cpu-flaws.html\n\nPatches are out. But is this just another Band-Aid?", "creation_timestamp": "2025-05-16T11:14:42.000000Z"}, {"uuid": "d87587bc-bc5c-497f-bb05-9b42fece22b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://t.me/anti_malware/20419", "content": "\u0413\u043b\u0430\u0432\u043d\u043e\u0435 \u0437\u0430 14 \u043c\u0430\u044f\n\n\ud83d\udee1 46% \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u2014 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0413\u041a \u00ab\u0421\u043e\u043b\u0430\u0440\u00bb \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e: \u043f\u043e\u0447\u0442\u0438 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0412 \u0444\u0438\u043d\u0441\u0435\u043a\u0442\u043e\u0440\u0435 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (78% \u0441\u0438\u0441\u0442\u0435\u043c). \u0410 \u0441 \u043a\u043e\u043d\u0446\u0430 \u043c\u0430\u044f \u0437\u0430 \u0443\u0442\u0435\u0447\u043a\u0438 \u041f\u0414\u043d \u0433\u0440\u043e\u0437\u044f\u0442 \u0448\u0442\u0440\u0430\u0444\u044b \u0434\u043e 3% \u043e\u0442 \u0432\u044b\u0440\u0443\u0447\u043a\u0438.\n\n\ud83d\udce6 \u041c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u0443\u0440\u044c\u0435\u0440\u0430\u043c\u0438\nSTCrypt: \u0437\u0432\u043e\u043d\u044f\u0442 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043c\u0430\u0440\u043a\u0435\u0442\u043f\u043b\u0435\u0439\u0441\u0430, \u0432\u044b\u043c\u0430\u043d\u0438\u0432\u0430\u044e\u0442 \u0418\u041d\u041d, \u0421\u041d\u0418\u041b\u0421, \u043a\u043e\u0434\u044b. \u041f\u043e\u0442\u043e\u043c \u2014 \u00ab\u0437\u0432\u043e\u043d\u043e\u043a \u043e\u0442 \u043f\u043e\u043b\u0438\u0446\u0438\u0438\u00bb \u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0430 \u043d\u0430 \u00ab\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0441\u0447\u0451\u0442\u00bb. \u041a\u043b\u0430\u0441\u0441\u0438\u043a\u0430 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438.\n\n\ud83c\udf10 XSS \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043b\u0438\u0434\u0435\u0440\u043e\u043c \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0430\u0439\u0442\u044b\n\u00ab\u0412\u0435\u0431\u043c\u043e\u043d\u0438\u0442\u043e\u0440\u044d\u043a\u0441\u00bb \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b: 40% \u0430\u0442\u0430\u043a \u2014 XSS \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. API-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u2014 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0440\u0438\u0441\u043a\u0430.\n\n\ud83d\udce8 \u0424\u0438\u0448\u0438\u043d\u0433 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b CRM: \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u0438 25 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u00ab\u0415\u0421\u0410 \u041f\u0420\u041e\u00bb, \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u0434 CRM-\u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f, \u043a\u0440\u0430\u0434\u0443\u0442 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u0426\u0435\u043b\u044c \u2014 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0438 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n\ud83d\udd10 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Intel: \u043c\u043e\u0436\u043d\u043e \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u044f\u0434\u0440\u0430\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 ETH Zurich: \u043d\u043e\u0432\u044b\u0439 \u0431\u0430\u0433 CVE-2024-45332 \u0432 Intel CPU \u2014 \u0434\u0430\u0436\u0435 \u0441 \u0437\u0430\u0449\u0438\u0442\u0430\u043c\u0438 \u043e\u0442 Spectre. \u0423\u0442\u0435\u0447\u043a\u0430 \u0434\u043e 5,6 \u041a\u0411/\u0441. Intel \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438.\n\n\ud83e\ude79 Microsoft \u0437\u0430\u043a\u0440\u044b\u043b\u0430 72 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 5 0-day\n\u041f\u0430\u0442\u0447-\u0432\u0442\u043e\u0440\u043d\u0438\u043a \u043f\u0440\u0438\u043d\u0435\u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f: RCE, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0431\u0430\u0433\u0438 \u0432 WinSock, Scripting Engine, Visual Studio. \u0410\u0442\u0430\u043a\u0438 \u0443\u0436\u0435 \u0438\u0434\u0443\u0442 \u2014 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435\u0441\u044c.\n\n \u0411\u043e\u043b\u044c\u0448\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439 \u2014 \u043d\u0430 anti-malware.ru/news", "creation_timestamp": "2025-05-14T18:21:42.000000Z"}, {"uuid": "6e10a797-4373-4784-a258-a38f00c31f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45337", "type": "seen", "source": "https://t.me/CyberBulletin/26820", "content": "\u26a1\ufe0fCVE-2024-45337: Golang Crypto Library Flawed, Risks Authorization Bypass.\n\n#CyberBulletin", "creation_timestamp": "2024-12-16T05:52:16.000000Z"}, {"uuid": "f1ff73f7-7ea7-48ce-a38f-77bb19a26b15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45337", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmgc4lusjl2k", "content": "CVE-2026-46595 - Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh\nCVE ID : CVE-2026-46595\n \n Published : May 22, 2026, 4:16 a.m. | 1\u00a0hour, 34\u00a0minutes ago\n \n Description : Previously, CVE-2024-45337 fixed an authorization bypass for mis...", "creation_timestamp": "2026-05-22T06:20:07.366089Z"}, {"uuid": "aa8314bc-9d13-4a84-873c-562b03d3f688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://t.me/purp_sec/634", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u0435\u0449\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-45332 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 Spectre v2 (BTI), \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a eIBRS \u0438 IBPB, \u0437\u0430 \u0441\u0447\u0435\u0442 \u0433\u043e\u043d\u043e\u043a \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0439 \u0432 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-31644 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 F5 BIG-IP, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 Appliance. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b bash \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 save, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 file, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u0441\u043a\u0440\u0438\u043f\u0442\u0430\u0445 Perl \u0438\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u0430\u0445. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0440\u0435\u0436\u0438\u043c\u0430 Appliance, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 bash.\n\n\ud83d\udd35 CVE-2023-21563 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c BitLocker, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u0438\u0441\u043a\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Windows \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0434\u0432\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438, \u0435\u0441\u043b\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u043d\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u0430 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, PIN-\u043a\u043e\u0434 \u0438\u043b\u0438 USB-\u043a\u043b\u044e\u0447).\n\n\ud83d\udd35 CVE-2025-26864, CVE-2025-26795, CVE-2024-24780 \u2014 \u0442\u0440\u0438 \u0431\u0430\u0433\u0430 \u0432 Apache IoTDB, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35 CVE-2025-23166 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Node.js, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u044b\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u0445. \u041c\u0435\u0442\u043e\u0434 SignTraits::DeriveBits() \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430 \u0432 \u0444\u043e\u043d\u043e\u0432\u043e\u043c \u043f\u043e\u0442\u043e\u043a\u0435, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0441\u0431\u043e\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 Node.js. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0431\u0430\u0433, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:15.528746Z"}, {"uuid": "66de0e7d-16e5-4688-972e-57373bb463fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://t.me/purp_sec/634", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u0435\u0449\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-45332 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 Spectre v2 (BTI), \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a eIBRS \u0438 IBPB, \u0437\u0430 \u0441\u0447\u0435\u0442 \u0433\u043e\u043d\u043e\u043a \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0439 \u0432 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-31644 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 F5 BIG-IP, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 Appliance. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b bash \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 save, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 file, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u0441\u043a\u0440\u0438\u043f\u0442\u0430\u0445 Perl \u0438\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u0430\u0445. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0440\u0435\u0436\u0438\u043c\u0430 Appliance, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 bash.\n\n\ud83d\udd35 CVE-2023-21563 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c BitLocker, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u0438\u0441\u043a\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Windows \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0434\u0432\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438, \u0435\u0441\u043b\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u043d\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u0430 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, PIN-\u043a\u043e\u0434 \u0438\u043b\u0438 USB-\u043a\u043b\u044e\u0447).\n\n\ud83d\udd35 CVE-2025-26864, CVE-2025-26795, CVE-2024-24780 \u2014 \u0442\u0440\u0438 \u0431\u0430\u0433\u0430 \u0432 Apache IoTDB, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35 CVE-2025-23166 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Node.js, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u044b\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u0445. \u041c\u0435\u0442\u043e\u0434 SignTraits::DeriveBits() \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430 \u0432 \u0444\u043e\u043d\u043e\u0432\u043e\u043c \u043f\u043e\u0442\u043e\u043a\u0435, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0441\u0431\u043e\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 Node.js. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0431\u0430\u0433, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:07.572055Z"}, {"uuid": "5c85a46d-e224-45be-aea6-d05759654c1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45335", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqs6ywqvrk2t", "content": "\ud83d\udccc CVE-2024-45335 - Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to use a specifically crafted virus to allow... https://www.cyberhub.blog/cves/CVE-2024-45335", "creation_timestamp": "2026-07-16T21:37:06.636982Z"}, {"uuid": "1eef6107-ab73-4576-ab3f-7d07b16a88dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "seen", "source": "https://t.me/ZerodayAlert/504", "content": "\ud83d\udcc9 \u041f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0434\u043e\u0433\u0430\u0434\u043a\u0435: \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u043e\u0448\u0438\u0431\u0430\u044e\u0442\u0441\u044f, \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u0435\u043a\u0430\u044e\u0442\n\n\u0421\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u0434\u0430\u0432\u043d\u043e \u0441\u0442\u0430\u043b\u0438 \u0441\u0430\u043c\u044b\u043c\u0438 \u0441\u043b\u043e\u0436\u043d\u044b\u043c\u0438 \u00ab\u0447\u0451\u0440\u043d\u044b\u043c\u0438 \u044f\u0449\u0438\u043a\u0430\u043c\u0438\u00bb \u0432 \u043d\u0430\u0448\u0435\u043c \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0435. \u041d\u043e \u0447\u0442\u043e, \u0435\u0441\u043b\u0438 \u0434\u0430\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u044d\u0442\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043c\u0430\u043d\u0443\u0442\u044c \u2014 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u044f\u0434\u0440\u0430? \u0418\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-45332 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f ETH Zurich.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u043e\u0439 \u0433\u043e\u043d\u043a\u0435 \u043c\u0435\u0436\u0434\u0443 \u043b\u043e\u0433\u0438\u043a\u043e\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 \u0438 \u0431\u043b\u043e\u043a\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u043e\u0432. \u0415\u0441\u043b\u0438 \u0443\u0433\u0430\u0434\u0430\u0442\u044c \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0440\u0435\u0436\u0438\u043c\u0430 \u2014 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u0430\u0434\u0440\u0435\u0441 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u0438 \u0432\u044b\u0442\u0430\u0449\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u044f\u043c\u043e \u0438\u0437 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u0412 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043b\u044e\u0447\u0438, \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u044f\u0434\u0440\u0430 \u2014 \u0432\u0441\u0451, \u0447\u0442\u043e \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0432\u0438\u0434\u043d\u043e.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043d\u0435 \u043e \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0430\u0441\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u044f\u0445: \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u043c\u0443 \u0444\u0430\u0439\u043b\u0430 /etc/shadow \u043d\u0430 Linux \u0441 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0441\u0435\u0434\u0430\u0435\u0442 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430, \u043d\u043e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0430 \u0445\u0443\u0436\u0435 \u2014 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0439 \u0431\u0430\u0433 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0432\u0441\u0435\u0445 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0438\u043f\u043e\u0432 Intel, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 9-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f.\n\n#intel #cpu #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:13.580436Z"}, {"uuid": "5d470e62-f25c-41af-bf77-6b175b5408af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45332", "type": "exploited", "source": "https://t.me/ZerodayAlert/504", "content": "\ud83d\udcc9 \u041f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0434\u043e\u0433\u0430\u0434\u043a\u0435: \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u043e\u0448\u0438\u0431\u0430\u044e\u0442\u0441\u044f, \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u0435\u043a\u0430\u044e\u0442\n\n\u0421\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u0434\u0430\u0432\u043d\u043e \u0441\u0442\u0430\u043b\u0438 \u0441\u0430\u043c\u044b\u043c\u0438 \u0441\u043b\u043e\u0436\u043d\u044b\u043c\u0438 \u00ab\u0447\u0451\u0440\u043d\u044b\u043c\u0438 \u044f\u0449\u0438\u043a\u0430\u043c\u0438\u00bb \u0432 \u043d\u0430\u0448\u0435\u043c \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0435. \u041d\u043e \u0447\u0442\u043e, \u0435\u0441\u043b\u0438 \u0434\u0430\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u044d\u0442\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043c\u0430\u043d\u0443\u0442\u044c \u2014 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u044f\u0434\u0440\u0430? \u0418\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-45332 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f ETH Zurich.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u043e\u0439 \u0433\u043e\u043d\u043a\u0435 \u043c\u0435\u0436\u0434\u0443 \u043b\u043e\u0433\u0438\u043a\u043e\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 \u0438 \u0431\u043b\u043e\u043a\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u043e\u0432. \u0415\u0441\u043b\u0438 \u0443\u0433\u0430\u0434\u0430\u0442\u044c \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0440\u0435\u0436\u0438\u043c\u0430 \u2014 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u0430\u0434\u0440\u0435\u0441 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u0438 \u0432\u044b\u0442\u0430\u0449\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u044f\u043c\u043e \u0438\u0437 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u0412 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043b\u044e\u0447\u0438, \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u044f\u0434\u0440\u0430 \u2014 \u0432\u0441\u0451, \u0447\u0442\u043e \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0432\u0438\u0434\u043d\u043e.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043d\u0435 \u043e \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0430\u0441\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u044f\u0445: \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u043c\u0443 \u0444\u0430\u0439\u043b\u0430 /etc/shadow \u043d\u0430 Linux \u0441 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0441\u0435\u0434\u0430\u0435\u0442 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430, \u043d\u043e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0430 \u0445\u0443\u0436\u0435 \u2014 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0439 \u0431\u0430\u0433 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0432\u0441\u0435\u0445 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0438\u043f\u043e\u0432 Intel, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 9-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f.\n\n#intel #cpu #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:29.444133Z"}]}