{"vulnerability": "CVE-2024-9680", "sightings": [{"uuid": "d57c7709-03df-4a2c-ba1e-79fbdb5cdbf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-10-15T21:10:02.000000Z"}, {"uuid": "63e896c8-31a8-4130-a524-037802e8ab3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113549899147709492", "content": "", "creation_timestamp": "2024-11-26T15:12:39.935357Z"}, {"uuid": "c3b95cbf-49ee-4f00-b528-562aed6bbf1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113549897945107388", "content": "", "creation_timestamp": "2024-11-26T15:12:21.764744Z"}, {"uuid": "9f05c6cd-55b1-4720-88f2-3f9e2c819f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-9680", "type": "seen", "source": "https://infosec.exchange/users/zeljkazorz/statuses/113548752231541707", "content": "", "creation_timestamp": "2024-11-26T10:21:00.489448Z"}, {"uuid": "6ee4633c-5b17-4449-957e-faaaf7f2b29e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:00.000000Z"}, {"uuid": "84ffbef4-d697-4ff8-a76f-fe42bb95bbd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-9680", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/7f9c32a0-243a-4d38-a7f2-bd0e8349fe94", "content": "", "creation_timestamp": "2024-10-10T10:02:19.380682Z"}, {"uuid": "10f95dc1-36cf-466b-836b-a0bea3382086", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "seen", "source": "https://bsky.app/profile/solidot.bsky.social/post/3lo2xaiyuwd2g", "content": "", "creation_timestamp": "2025-04-30T23:30:21.103094Z"}, {"uuid": "198cd13f-3bf4-40d9-87f3-b3207b55d58e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lw6vaq4ds22v", "content": "", "creation_timestamp": "2025-08-12T08:27:09.575141Z"}, {"uuid": "50da7ac4-5c60-4834-8624-d3c180438467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwavijsimk2b", "content": "", "creation_timestamp": "2025-08-13T03:36:44.526244Z"}, {"uuid": "1dca2d20-9456-4de1-a4c5-8cf7e689c681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-9680", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1392", "content": "", "creation_timestamp": "2024-10-10T04:00:00.000000Z"}, {"uuid": "e7efa0f1-3f04-4c16-b484-c0f5fe66f826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9691", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA vulnerability scanner for Firefox and Thunderbird that checks if your versions are out of date and susceptible to CVE-2024-9680.\nURL\uff1ahttps://github.com/PraiseImafidon/Version_Vulnerability_Scanner\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2025-01-02T12:29:37.000000Z"}, {"uuid": "22986f39-73cf-4576-9a79-8f390293f2f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-9680", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fb309fb7-793a-4ef2-82c1-7d90e3278c31", "content": "", "creation_timestamp": "2026-02-02T12:26:26.087562Z"}, {"uuid": "b4df93c5-d907-4219-81d1-5f88bac9eda0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "exploited", "source": "https://t.me/DarkWebInformer_CVEAlerts/3883", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-9680\n\ud83c\udfe2 Vendor: Mozilla\n\ud83d\udda5\ufe0f Product: Firefox\n\ud83d\udd39 Description: Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.\n\ud83d\udccf Published: 2024-10-09T00:00:00Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json\n2. https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit\n3. https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/\n4. https://blog.mozilla.org/security/2024/10/11/behind-the-scenes-fixing-an-in-the-wild-firefox-exploit/\n5. https://www.eset.com/int/about/newsroom/press-releases/research/eset-research-discovers-mozilla-and-windows-zero-day-zero-click-vulnerabilities-exploited-by-russia-aligned-romcom-apt-group/\n6. https://www.welivesecurity.com/en/eset-research/romcom-exploits-firefox-and-windows-zero-days-in-the-wild/\n7. https://45734016.fs1.hubspotusercontent-na1.net/hubfs/45734016/GLOBAL%20CYBER%20THREAT%20REPORT%202024%20.pdf\n8. https://www.cyfirma.com/research/apt-quarterly-highlights-q4-2024/", "creation_timestamp": "2025-02-08T23:20:28.000000Z"}, {"uuid": "eb0f83a2-0499-4740-9e1f-5e4ece5188cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "exploited", "source": "https://t.me/EthicalSecure/211", "content": "\u26a1\ufe0f Firefox 131.0.2 va Tor brauzeri 13.5.7 yangilanishlari muhim zaifliklarni tuzatdi\n\nFirefox 131.0.2 , Firefox ESR 115.16.1 , Firefox ESR 128.3.1 va Tor brauzerining 13.5.7 tuzatuvchi versiyalari chop etildi, ular muhim zaiflikni (CVE-2024-9680) bartaraf etadi.\n\nUshbu zaiflik zararli kodni maxsus yaratilgan veb-sahifalarga tashrif buyurishda kontent jarayoni darajasida bajarishga imkon beradi.\n\nMuammo veb-sahifalardagi animatsiyalarni sinxronlashtirish va boshqarish uchun ishlatiladigan AnimationTimeline API-ni amalga oshirishda noto'g'ri foydalanishdan keyin bo'sh xotira bilan bog'liq.\n\nAyniqsa, xavflisi shundaki, ESET ushbu zaiflikdan haqiqiy hujumlarda foydalanish holatlarini yangilanish chiqarilishidan oldin ham aniqlagan (0 kun). Zaiflik haqida tafsilotlar hozircha oshkor etilmagan.\n\nX11/Xorg-ga asoslangan muhitda brauzerni kompozit serversiz ishga tushirishda UI elementlarining tartibsiz ko'rsatilishiga olib keladigan Firefox 131- dagi muammolar ham e'tiborga loyiqdir.", "creation_timestamp": "2025-06-24T06:30:27.000000Z"}, {"uuid": "18136dbd-54ae-4108-af99-2344c8dc29de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "exploited", "source": "https://t.me/tech_b0lt_Genona/4719", "content": "CVE-2024-9680: Use-after-free in Animation timeline\nhttps://www.mozilla.org/en-US/security/advisories/mfsa2024-51/\n\n> Security researcher Damien Schaeffer from Slovakian company ESET has been credited with discovering and reporting the vulnerability.\n\nhttps://thehackernews.com/2024/10/mozilla-warns-of-active-exploitation-in.html\n\n\u0415\u0441\u043b\u0438 \u043a\u0440\u0430\u0442\u043a\u043e, \u0442\u043e animation-timeline \u044d\u0442\u043e CSS-\u0444\u0443\u043d\u043a\u0446\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u0435\u043b\u0430\u0435\u0442 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0437\u0438\u0446\u0438\u0438 \u0432 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0435 \u043f\u0440\u043e\u043a\u0440\u0443\u0442\u043a\u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u043d\u0442\u044b \u043f\u0440\u043e\u0433\u0440\u0435\u0441\u0441\u0430.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0442\u0443\u0442\nhttps://developer.mozilla.org/en-US/docs/Web/CSS/animation-timeline\n\n\u041f\u043e \u044d\u0442\u043e\u0439 \u0436\u0435 \u0441\u0441\u044b\u043b\u043a\u0435 \u043f\u0440\u044f\u043c\u044b\u043c \u0442\u0435\u043a\u0441\u0442\u043e\u043c \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e\n> Experimental: This is an experimental technology\n\n\u041d\u0430 \u0425\u0430\u0431\u0440\u0435 \u0435\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0435\u0442, \u0447\u0442\u043e \u0434\u0430 \u043a\u0430\u043a \u0442\u0430\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u043a\u0440\u043e\u043b\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b\nhttps://habr.com/ru/articles/749794/\n\n\u041e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438\nA case study on scroll-driven animations performance \nhttps://developer.chrome.com/blog/scroll-animation-performance-case-study\n\n\u041f\u043e\u043a\u0430 \u0441\u0441\u044b\u043b\u043a\u0438 \u0447\u0438\u0442\u0430\u043b-\u0441\u043c\u043e\u0442\u0440\u0435\u043b \u043d\u0430\u0442\u043a\u043d\u0443\u043b\u0441\u044f \u043d\u0430 \u0442\u0430\u043a\u043e\u0439 \u0432\u043e\u043f\u0440\u043e\u0441 \u043d\u0430 Mozilla Connect\n\nWhy doesn't firefox support the css animation-timeline?\nhttps://connect.mozilla.org/t5/discussions/why-doesn-t-firefox-support-the-css-animation-timeline/td-p/60742\n\n\u0422\u0430\u043c \u043e\u0442\u0432\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u0436\u0435 Firefox \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0438 \u0432\u0441\u0451 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435. \u0412\u043e\u0442 \u0443\u0436 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u043b\u0443\u0447\u0448\u0435 \u0431\u044b \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u043b, \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u0442\u0442\u0435\u0441\u0442\u0438\u0440\u0443\u044e\u0442 \u0445\u043e\u0440\u043e\u0448\u043e \ud83c\udf1d\n\n\u0417\u042b \n\n\ud83d\udc85\ud83d\udc85\ud83d\udc85 \u041e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c \u0441\u0432\u043e\u0438 \u0424\u0430\u0435\u0440\u0444\u043e\u043a\u0441\u044b", "creation_timestamp": "2024-10-10T21:18:28.000000Z"}, {"uuid": "5500ff63-7f93-4cc5-8b0e-27fc1fc0e50d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "exploited", "source": "https://t.me/itsec_news/4848", "content": "\u200b\u26a1\ufe0fAPT-\u0430\u0442\u0430\u043a\u0430 \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u0443\u0435\u0442 Zero-day \u0438 Zero-click \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 Firefox \u0438 Tor\n\n\ud83d\udcac \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 ESET \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Mozilla, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u042d\u0442\u043e \u0443\u0436\u0435 \u0432\u0442\u043e\u0440\u043e\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432: \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-36884 \u0432 Microsoft Word \u0431\u044b\u043b\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a.\n\n\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-9680 \u0438 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9.8, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox, Thunderbird \u0438 Tor Browser. \u0421\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0435 \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432 Windows (CVE-2024-49039, CVSS 8.8) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u043e\u0441\u0435\u0442\u0438\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e 8 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430. \u0410\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Mozilla \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0442\u0438\u043f\u0430 use-after-free \u0432 \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434. \u0423\u0436\u0435 9 \u043e\u043a\u0442\u044f\u0431\u0440\u044f Mozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432\u0448\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0431\u044b\u043b \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0431\u0430\u0433 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Windows Task Scheduler, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 12 \u043d\u043e\u044f\u0431\u0440\u044f.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0436\u0435\u0440\u0442\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c\u0438. \u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0430, \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435-\u043d\u043e\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0415\u0432\u0440\u043e\u043f\u0435 \u0438 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-9680, \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 Firefox \u0438 Tor, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 Thunderbird. \u041f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0430 \u044d\u0442\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u0432\u0430\u043b\u0430\u0441\u044c \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows.\n\n\u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Mozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u0412\u0435\u0440\u0441\u0438\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 Firefox 131.0.2, Thunderbird 115.16 \u0438 Tor Browser 13.5.7.\n\n\u0410\u0442\u0430\u043a\u0430 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044e \u0434\u0432\u0443\u0445 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b. \u0411\u044b\u0441\u0442\u0440\u043e\u0442\u0430 \u0440\u0435\u0430\u043a\u0446\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0438 \u0432\u044b\u043f\u0443\u0441\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0432 \u043a\u0440\u0430\u0442\u0447\u0430\u0439\u0448\u0438\u0435 \u0441\u0440\u043e\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0444\u0430\u043a\u0442\u043e\u0440\u043e\u043c \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0443\u0433\u0440\u043e\u0437\u044b.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-11-28T10:58:49.000000Z"}, {"uuid": "7f7b9793-bfc4-4163-8264-35bc2f7a68c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "published-proof-of-concept", "source": "https://t.me/cKure/13909", "content": "\ud83d\udcf1 Firefox Animation CVE-2024-9680.\n\nhttps://dimitrifourny.github.io/2024/11/14/firefox-animation-cve-2024-9680.html", "creation_timestamp": "2024-11-15T08:11:10.000000Z"}, {"uuid": "3268c8ca-d37d-4aba-abdd-993544739c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "seen", "source": "https://t.me/itsec_news/5646", "content": "\u200b\u26a1\ufe0f\u041f\u043e\u0447\u0435\u043c\u0443 Firefox \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 \u2014 \u0438 \u043f\u0440\u0438 \u0447\u0451\u043c \u0442\u0443\u0442 \u0432\u0437\u043b\u043e\u043c Chrome\n\n\ud83d\udcacMozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Firefox, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c , \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0443\u044e \u0442\u043e\u0439, \u0447\u0442\u043e \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 Chrome. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-2857 \u0438 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Firefox \u0434\u043b\u044f Windows. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Mozilla, \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\n\u0418\u043d\u0436\u0435\u043d\u0435\u0440\u044b Firefox \u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Google \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0444\u0430\u043a\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0433\u043e \u0431\u0430\u0433\u0430 \u0432 Chrome \u2014 CVE-2025-2783 \u2014 \u0434\u043b\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u0437\u0430\u0449\u0438\u0442\u043d\u043e\u0433\u043e \u0440\u0435\u0436\u0438\u043c\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \u0412 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u043c \u043e\u0442\u0447\u0451\u0442\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0441\u044f \u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u043c\u0435\u0434\u0438\u0430 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u2014 \u0445\u0430\u043a\u0435\u0440\u044b \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0430\u043a\u043a\u0443\u0440\u0430\u0442\u043d\u043e, \u043e\u0431\u0445\u043e\u0434\u044f \u0437\u0430\u0449\u0438\u0442\u0443 Chrome \u0442\u0430\u043a, \u043a\u0430\u043a \u0431\u0443\u0434\u0442\u043e \u0435\u0451 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u0432\u043e\u0432\u0441\u0435.\n\n\u041f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0430 \u2014 \u044d\u0442\u043e \u0432\u0430\u0436\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043e\u0442 \u0434\u0440\u0443\u0433\u0438\u0445 \u0447\u0430\u0441\u0442\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0412 \u0434\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0431\u0435\u0441\u0441\u0438\u043b\u044c\u043d\u0430. \u0421\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c, \u0447\u0442\u043e \u0437\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u0441\u0442\u043e\u044f\u0442 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0445\u043e\u0442\u044f \u043f\u0440\u044f\u043c\u043e\u0439 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 \u043a \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0441\u0442\u0440\u0430\u043d\u0435 \u0441\u0434\u0435\u043b\u0430\u043d\u043e \u043d\u0435 \u0431\u044b\u043b\u043e.\n\n\u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0435 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0443\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e CVE-2025-2783 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u0432, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u0447\u0430\u0441\u0442\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043d\u0435\u0441\u0443\u0442 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440.\n\n\u042d\u0442\u043e \u0443\u0436\u0435 \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0433\u043e \u0440\u043e\u0434\u0430 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f. \u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 Mozilla \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u2014 CVE-2024-9680. \u0422\u043e\u0433\u0434\u0430 \u0431\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u044f\u043c\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0432\u0435\u0431-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430, \u043f\u0440\u0438\u0447\u0451\u043c \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0441\u0438\u043b\u0438\u044f\u043c\u0438 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-03-29T06:07:38.000000Z"}, {"uuid": "95ab2e8c-283b-42d4-8bd1-02664aafbc0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "seen", "source": "https://t.me/hackyourmom/9319", "content": "\ud83d\udcf1 \u0411\u0440\u0430\u0443\u0437\u0435\u0440 Firefox \u043f\u0456\u0434\u0434\u0430\u0432\u0441\u044f \u0430\u0442\u0430\u0446\u0456 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0431\u0435\u0437\u043f\u0435\u0447\u043d\u0443 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c CVE-2024-9680, \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0437\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u043e\u043c\u043f'\u044e\u0442\u0435\u0440\u0430\u043c\u0438 \u0436\u0435\u0440\u0442\u0432. Mozilla \u0432\u0438\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0442\u0435\u0440\u043c\u0456\u043d\u043e\u0432\u0435 \u043f\u043e\u043f\u0435\u0440\u0435\u0434\u0436\u0435\u043d\u043d\u044f, \u0437\u0430\u043a\u043b\u0438\u043a\u0430\u044e\u0447\u0438 \u043a\u043e\u0440\u0438\u0441\u0442\u0443\u0432\u0430\u0447\u0456\u0432 \u043d\u0435\u0433\u0430\u0439\u043d\u043e \u043e\u043d\u043e\u0432\u0438\u0442\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0438 \u0434\u043e \u043e\u0441\u0442\u0430\u043d\u043d\u0456\u0445 \u0432\u0435\u0440\u0441\u0456\u0439  \ud83c\udf10 #cybernews", "creation_timestamp": "2024-10-10T11:20:11.000000Z"}, {"uuid": "efa6a597-a1d2-458a-bb8d-cbaf566cc030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "exploited", "source": "https://t.me/ton618cyber/5636", "content": "Mozilla Warns of Active Exploitation in Firefox, Urges Users to Update Immediately\n\nMozilla urges users to update Firefox after critical CVE-2024-9680 vulnerability is actively exploited.\n\nthehackernews.com \u2022 Oct 10, 2024", "creation_timestamp": "2024-10-14T13:00:24.000000Z"}, {"uuid": "436a4758-439c-4231-a4ee-c3ea0e2e9ed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "seen", "source": "https://t.me/kasperskyb2b/1450", "content": "\ud83e\udd13 \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043b\u0438\u0447\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438\n\n1\ufe0f\u20e3 \u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0435 \u0442\u0430\u043a \u0443\u0436 \u043d\u0430\u0434\u0451\u0436\u043d\u044b. \u041e\u0431\u0448\u0438\u0440\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0441\u043e \u0441\u043a\u0432\u043e\u0437\u043d\u044b\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0430\u043b\u043e \u043d\u0435\u0443\u0442\u0435\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b: Sync, pCloud, Seafile, Icedrive, Tresorit \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u043f\u0430\u043f\u043a\u0438, \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u0438\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043b\u044e\u0447\u0430\u043c\u0438 \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435. \n\n2\ufe0f\u20e3 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Firefox 131 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0437\u0438\u0440\u043e\u0434\u0435\u0439 (CVE-2024-9680), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u043f\u0440\u0438 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 Tor browser. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0442\u043e\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0441\u044f.\n\n3\ufe0f\u20e3 Google \u0432\u044b\u0442\u0435\u0441\u043d\u044f\u0435\u0442 \u0430\u0434\u0431\u043b\u043e\u043a\u0435\u0440\u044b: \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043a\u0430\u0445 uBlock Origin \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 Chrome Web Store \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 Manifest v2 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u044b.\n\n4\ufe0f\u20e3 \u0422\u0435\u043c, \u043a\u0442\u043e \u0445\u043e\u0442\u0435\u043b \u0441\u043a\u0440\u044b\u0442\u044c\u0441\u044f \u043e\u0442 \u0437\u0430\u0431\u043e\u0442\u044b Google \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u043e\u043c \u043d\u0430 Edge, Microsoft \u043f\u0440\u0438\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0430 \u0441\u044e\u0440\u043f\u0440\u0438\u0437: \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044e \u0433\u0443\u0433\u043b\u043e\u0432\u0441\u043a\u043e\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 Ad selection API.\n\n5\ufe0f\u20e3 \u041d\u043e \u0435\u0441\u0442\u044c \u0443 Microsoft \u0438 \u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438: \u0432 Passkeys API \u0434\u043b\u044f Windows \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 passkeys.\n\n6\ufe0f\u20e3 \u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0439 \u0441\u0443\u0434 Epic \u0438 Google \u0437\u0430\u043a\u043e\u043d\u0447\u0438\u043b\u0441\u044f \u043f\u0440\u043e\u0438\u0433\u0440\u044b\u0448\u0435\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u2014 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u043e\u0431\u044f\u0437\u0430\u043b\u0438 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 Google Play \u0438 \u0437\u0430\u043f\u0440\u0435\u0442\u0438\u043b\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0432 \u043f\u0440\u0438\u0451\u043c\u0430\u0445 \u043f\u043b\u0430\u0442\u0435\u0436\u0435\u0439.  \n\n7\ufe0f\u20e3 \u041d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0418 \u0434\u043b\u044f \u0444\u0430\u043d\u0430\u0442\u043e\u0432 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u043e\u0432 Ecovacs: \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u043b\u0430 \u0441\u0435\u0431\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0432\u0438\u0434\u0435\u043e, \u0437\u0432\u0443\u043a\u043e\u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u044b\u043b\u0435\u043b\u0441\u043e\u0441\u043e\u0432, \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u044f \u0438\u0445 \u0434\u043b\u044f \u0442\u0440\u0435\u043d\u0438\u0440\u043e\u0432\u043a\u0438 \u0418\u0418. \u0412\u0435\u0440\u043d\u0435\u0435, \u043e\u043d\u0430 \u0438\u0445 \u0438 \u0442\u0430\u043a \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442, \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u0440\u0430\u0437\u0438\u043b\u0430 \u044d\u0442\u043e \u0432 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0435. \u0423\u0434\u0430\u043b\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u043b\u044c\u0437\u044f.\n\n8\ufe0f\u20e3 \u0422\u0430\u043a\u0436\u0435 \u0444\u043b\u0430\u0433\u043c\u0430\u043d\u0441\u043a\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u044c Ecovacs \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u043c, \u0445\u0443\u043b\u0438\u0433\u0430\u043d\u044b \u043f\u043e\u0434\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u0447\u0435\u0440\u0435\u0437 \u043a\u0430\u043c\u0435\u0440\u0443 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0430 \u0438 \u0432\u044b\u043a\u0440\u0438\u043a\u0438\u0432\u0430\u044e\u0442 \u043e\u0441\u043a\u043e\u0440\u0431\u043b\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 \u0435\u0433\u043e \u0434\u0438\u043d\u0430\u043c\u0438\u043a. \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0444\u0438\u0440\u043c\u0443 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0438 \u0435\u0449\u0451 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \ud83d\ude2d\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 @\u041f2\u0422", "creation_timestamp": "2024-10-16T10:20:46.000000Z"}, {"uuid": "c7917207-5368-49c7-b3e4-e241157ac52b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "exploited", "source": "https://t.me/cvedetector/7462", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-9680 - \"Firefox Animation Timeline Use-after-Free Code Execution\"\", \n  \"Content\": \"CVE ID : CVE-2024-9680 \nPublished : Oct. 9, 2024, 1:15 p.m. | 16\u00a0minutes ago \nDescription : An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, and Firefox ESR < 115.16.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T15:38:49.000000Z"}, {"uuid": "3830180a-8675-4b9d-82d6-9caa5f84eaaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "exploited", "source": "https://t.me/ton618cyber/1977", "content": "Mozilla Warns of Active Exploitation in Firefox, Urges Users to Update Immediately\n\nMozilla urges users to update Firefox after critical CVE-2024-9680 vulnerability is actively exploited.\n\nthehackernews.com \u2022 Oct 10, 2024", "creation_timestamp": "2024-10-14T13:00:26.000000Z"}, {"uuid": "5b390f55-a9ef-4836-aa33-26efc972194a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "exploited", "source": "https://t.me/AnonymousChittagong/63", "content": "Windows \u0986\u09aa\u09a1\u09c7\u099f \u09b9\u09b2\u09c7 \u098f\u0996\u09a8 Firefox \u0993 \u0986\u09aa\u09a1\u09c7\u099f \u0995\u09b0\u09c1\u09a8 \ud83d\ude05\u0964\u00a0 \u0995\u09bf \u0986\u09b0 \u0995\u09b0\u09be \u09ac\u09b2\u09c1\u09a8, \u0995\u09b0\u09c7 \u09ab\u09c7\u09b2\u09c1\u09a8 \u09a6\u09cd\u09b0\u09c1\u09a4 \n\nMozilla \u09b8\u09ae\u09cd\u09aa\u09cd\u09b0\u09a4\u09bf Firefox \u098f\u09ac\u0982 Firefox Extended Support Release (ESR)-\u098f\u09b0 \u099c\u09a8\u09cd\u09af \u098f\u0995\u099f\u09bf \u0997\u09c1\u09b0\u09c1\u09a4\u09cd\u09ac\u09aa\u09c2\u09b0\u09cd\u09a3 \u09b8\u09bf\u0995\u09bf\u0989\u09b0\u09bf\u099f\u09bf \u09a4\u09cd\u09b0\u09c1\u099f\u09bf \u09b8\u09ae\u09cd\u09aa\u09b0\u09cd\u0995\u09c7 \u0998\u09cb\u09b7\u09a3\u09be \u0995\u09b0\u09c7\u099b\u09c7, \u09af\u09be \u0987\u09a4\u09bf\u09ae\u09a7\u09cd\u09af\u09c7\u0987 \u0986\u0995\u09cd\u09b0\u09ae\u09a3\u09c7\u09b0 \u09b6\u09bf\u0995\u09be\u09b0 \u09b9\u099a\u09cd\u099b\u09c7\u0964 \u098f\u0987 \u09a4\u09cd\u09b0\u09c1\u099f\u09bf\u099f\u09bf CVE-2024-9680 \u09a8\u09be\u09ae\u09c7 \u09aa\u09b0\u09bf\u099a\u09bf\u09a4 \u098f\u09ac\u0982 \u098f\u09b0 CVSS \u09b8\u09cd\u0995\u09cb\u09b0 9.8, \u09af\u09be \u098f\u099f\u09bf \u0985\u09a4\u09cd\u09af\u09a8\u09cd\u09a4 \u0997\u09c1\u09b0\u09c1\u09a4\u09b0 \u0995\u09b0\u09c7 \u09a4\u09c1\u09b2\u09c7\u099b\u09c7\u0964\n\n\u098f\u099f\u09bf \"use-after-free\" \u09ac\u09be\u0997, \u09af\u09be Animation timeline \u0995\u09ae\u09cd\u09aa\u09cb\u09a8\u09c7\u09a8\u09cd\u099f\u09c7\u09b0 \u09ae\u09a7\u09cd\u09af\u09c7 \u09aa\u09be\u0993\u09af\u09bc\u09be \u0997\u09c7\u099b\u09c7\u0964 \u098f\u0987 \u09a4\u09cd\u09b0\u09c1\u099f\u09bf\u09b0 \u0995\u09be\u09b0\u09a3\u09c7 \u0986\u0995\u09cd\u09b0\u09ae\u09a3\u0995\u09be\u09b0\u09c0\u09b0\u09be \u0995\u09cb\u09a1 \u098f\u0995\u09cd\u09b8\u09bf\u0995\u09bf\u0989\u09b6\u09a8 \u0985\u09b0\u09cd\u099c\u09a8 \u0995\u09b0\u09a4\u09c7 \u09b8\u0995\u09cd\u09b7\u09ae \u09b9\u09af\u09bc\u09c7\u099b\u09c7, \u09af\u09be\u09b0 \u09ab\u09b2\u09c7 \u0995\u09cd\u09b7\u09a4\u09bf\u0997\u09cd\u09b0\u09b8\u09cd\u09a4 \u09ac\u09cd\u09b0\u09be\u0989\u099c\u09be\u09b0\u09c7\u09b0 \u09ae\u09be\u09a7\u09cd\u09af\u09ae\u09c7 \u09ae\u09cd\u09af\u09be\u09b2\u0993\u09af\u09bc\u09cd\u09af\u09be\u09b0 \u0987\u09a8\u099c\u09c7\u0995\u09b6\u09a8 \u098f\u09ac\u0982 \u0985\u09a8\u09cd\u09af\u09be\u09a8\u09cd\u09af \u0995\u09cd\u09b7\u09a4\u09bf\u0995\u09b0 \u0995\u09be\u09b0\u09cd\u09af\u0995\u09b2\u09be\u09aa \u0998\u099f\u09be\u09a8\u09cb \u09b8\u09ae\u09cd\u09ad\u09ac \u09b9\u09af\u09bc\u09c7\u099b\u09c7\u0964\n\n\u09af\u09c7\u09b9\u09c7\u09a4\u09c1 \u0986\u0995\u09cd\u09b0\u09ae\u09a3\u0995\u09be\u09b0\u09c0\u09b0\u09be \u098f\u0987 \u09a4\u09cd\u09b0\u09c1\u099f\u09bf\u09b0 \u09ae\u09be\u09a7\u09cd\u09af\u09ae\u09c7 \u09b0\u09bf\u09ae\u09cb\u099f \u0995\u09cb\u09a1 \u098f\u0995\u09cd\u09b8\u09bf\u0995\u09bf\u0989\u09b6\u09a8 \u0995\u09b0\u09a4\u09c7 \u09aa\u09be\u09b0\u09c7, \u09ac\u09cd\u09af\u09ac\u09b9\u09be\u09b0\u0995\u09be\u09b0\u09c0\u09a6\u09c7\u09b0 \u09a6\u09cd\u09b0\u09c1\u09a4 \u09a4\u09be\u09a6\u09c7\u09b0 \u09ac\u09cd\u09b0\u09be\u0989\u099c\u09be\u09b0 \u0986\u09aa\u09a1\u09c7\u099f \u0995\u09b0\u09be\u09b0 \u09aa\u09b0\u09be\u09ae\u09b0\u09cd\u09b6 \u09a6\u09c7\u0993\u09af\u09bc\u09be \u09b9\u099a\u09cd\u099b\u09c7\u0964 \u098f\u09b0 \u09ae\u09be\u09a7\u09cd\u09af\u09ae\u09c7 \u0986\u0995\u09cd\u09b0\u09ae\u09a3\u09c7\u09b0 \u099d\u09c1\u0981\u0995\u09bf \u09b9\u09cd\u09b0\u09be\u09b8 \u0995\u09b0\u09be \u09af\u09be\u09ac\u09c7\u0964\n\n\u0986\u09aa\u09a1\u09c7\u099f \u09a8\u09be \u0995\u09b0\u09b2\u09c7 \u098f\u0987 \u09a4\u09cd\u09b0\u09c1\u099f\u09bf \u09a6\u09c2\u09b0\u09ac\u09b0\u09cd\u09a4\u09c0 \u0986\u0995\u09cd\u09b0\u09ae\u09a3\u09c7 \u09af\u09c7\u09ae\u09a8 \u0993\u09df\u09be\u099f\u09be\u09b0\u09bf\u0982 \u09b9\u09cb\u09b2 \u0985\u09cd\u09af\u09be\u099f\u09be\u0995 \u09ac\u09be \u09a1\u09cd\u09b0\u09be\u0987\u09ad-\u09ac\u09be\u0987 \u09a1\u09be\u0989\u09a8\u09b2\u09cb\u09a1 \u0995\u09cd\u09af\u09be\u09ae\u09cd\u09aa\u09c7\u0987\u09a8\u09c7\u09b0 \u09ae\u09be\u09a7\u09cd\u09af\u09ae\u09c7 \u0985\u09b8\u09cd\u09a4\u09cd\u09b0 \u09b9\u09bf\u09b8\u09c7\u09ac\u09c7 \u09ac\u09cd\u09af\u09ac\u09b9\u09c3\u09a4 \u09b9\u09a4\u09c7 \u09aa\u09be\u09b0\u09c7, \u09af\u09be \u09ac\u09cd\u09af\u09ac\u09b9\u09be\u09b0\u0995\u09be\u09b0\u09c0\u09a6\u09c7\u09b0 \u0995\u09cd\u09b7\u09a4\u09bf\u0997\u09cd\u09b0\u09b8\u09cd\u09a4 \u0993\u09af\u09bc\u09c7\u09ac\u09b8\u09be\u0987\u099f\u09c7 \u09aa\u09cd\u09b0\u09ac\u09c7\u09b6 \u0995\u09b0\u09a4\u09c7 \u09b8\u09b9\u09af\u09cb\u0997\u09bf\u09a4\u09be \u0995\u09b0\u09ac\u09c7", "creation_timestamp": "2024-10-31T06:33:07.000000Z"}, {"uuid": "da2f984d-a6b0-4907-8fa9-a008ecae66fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "published-proof-of-concept", "source": "https://t.me/Ripp3rID/83", "content": "\ud83d\udee1Weekly schedule\n\ud83d\udca5https://dimitrifourny.github.io/2024/11/14/firefox-animation-cve-2024-9680.html\n\ud83d\udca5https://github.com/watchtowrlabs/Citrix-Virtual-Apps-XEN-Exploit\n\ud83d\udca5https://github.com/rapid7/metasploit-framework/pull/19648\n\ud83d\udee1F . PrivateShizo\n\ud83e\udde8@Leak_DBMS", "creation_timestamp": "2024-11-24T20:44:32.000000Z"}, {"uuid": "2972ecce-188c-4b7d-af52-ed50df1be7e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "exploited", "source": "https://t.me/DirectActionBangladesh/358", "content": "Windows \u0986\u09aa\u09a1\u09c7\u099f \u09b9\u09b2\u09c7 \u098f\u0996\u09a8 Firefox \u0993 \u0986\u09aa\u09a1\u09c7\u099f \u0995\u09b0\u09c1\u09a8 \ud83d\ude05\u0964\u00a0 \u0995\u09bf \u0986\u09b0 \u0995\u09b0\u09be \u09ac\u09b2\u09c1\u09a8, \u0995\u09b0\u09c7 \u09ab\u09c7\u09b2\u09c1\u09a8 \u09a6\u09cd\u09b0\u09c1\u09a4 \n\nMozilla \u09b8\u09ae\u09cd\u09aa\u09cd\u09b0\u09a4\u09bf Firefox \u098f\u09ac\u0982 Firefox Extended Support Release (ESR)-\u098f\u09b0 \u099c\u09a8\u09cd\u09af \u098f\u0995\u099f\u09bf \u0997\u09c1\u09b0\u09c1\u09a4\u09cd\u09ac\u09aa\u09c2\u09b0\u09cd\u09a3 \u09b8\u09bf\u0995\u09bf\u0989\u09b0\u09bf\u099f\u09bf \u09a4\u09cd\u09b0\u09c1\u099f\u09bf \u09b8\u09ae\u09cd\u09aa\u09b0\u09cd\u0995\u09c7 \u0998\u09cb\u09b7\u09a3\u09be \u0995\u09b0\u09c7\u099b\u09c7, \u09af\u09be \u0987\u09a4\u09bf\u09ae\u09a7\u09cd\u09af\u09c7\u0987 \u0986\u0995\u09cd\u09b0\u09ae\u09a3\u09c7\u09b0 \u09b6\u09bf\u0995\u09be\u09b0 \u09b9\u099a\u09cd\u099b\u09c7\u0964 \u098f\u0987 \u09a4\u09cd\u09b0\u09c1\u099f\u09bf\u099f\u09bf CVE-2024-9680 \u09a8\u09be\u09ae\u09c7 \u09aa\u09b0\u09bf\u099a\u09bf\u09a4 \u098f\u09ac\u0982 \u098f\u09b0 CVSS \u09b8\u09cd\u0995\u09cb\u09b0 9.8, \u09af\u09be \u098f\u099f\u09bf \u0985\u09a4\u09cd\u09af\u09a8\u09cd\u09a4 \u0997\u09c1\u09b0\u09c1\u09a4\u09b0 \u0995\u09b0\u09c7 \u09a4\u09c1\u09b2\u09c7\u099b\u09c7\u0964\n\n\u098f\u099f\u09bf \"use-after-free\" \u09ac\u09be\u0997, \u09af\u09be Animation timeline \u0995\u09ae\u09cd\u09aa\u09cb\u09a8\u09c7\u09a8\u09cd\u099f\u09c7\u09b0 \u09ae\u09a7\u09cd\u09af\u09c7 \u09aa\u09be\u0993\u09af\u09bc\u09be \u0997\u09c7\u099b\u09c7\u0964 \u098f\u0987 \u09a4\u09cd\u09b0\u09c1\u099f\u09bf\u09b0 \u0995\u09be\u09b0\u09a3\u09c7 \u0986\u0995\u09cd\u09b0\u09ae\u09a3\u0995\u09be\u09b0\u09c0\u09b0\u09be \u0995\u09cb\u09a1 \u098f\u0995\u09cd\u09b8\u09bf\u0995\u09bf\u0989\u09b6\u09a8 \u0985\u09b0\u09cd\u099c\u09a8 \u0995\u09b0\u09a4\u09c7 \u09b8\u0995\u09cd\u09b7\u09ae \u09b9\u09af\u09bc\u09c7\u099b\u09c7, \u09af\u09be\u09b0 \u09ab\u09b2\u09c7 \u0995\u09cd\u09b7\u09a4\u09bf\u0997\u09cd\u09b0\u09b8\u09cd\u09a4 \u09ac\u09cd\u09b0\u09be\u0989\u099c\u09be\u09b0\u09c7\u09b0 \u09ae\u09be\u09a7\u09cd\u09af\u09ae\u09c7 \u09ae\u09cd\u09af\u09be\u09b2\u0993\u09af\u09bc\u09cd\u09af\u09be\u09b0 \u0987\u09a8\u099c\u09c7\u0995\u09b6\u09a8 \u098f\u09ac\u0982 \u0985\u09a8\u09cd\u09af\u09be\u09a8\u09cd\u09af \u0995\u09cd\u09b7\u09a4\u09bf\u0995\u09b0 \u0995\u09be\u09b0\u09cd\u09af\u0995\u09b2\u09be\u09aa \u0998\u099f\u09be\u09a8\u09cb \u09b8\u09ae\u09cd\u09ad\u09ac \u09b9\u09af\u09bc\u09c7\u099b\u09c7\u0964\n\n\u09af\u09c7\u09b9\u09c7\u09a4\u09c1 \u0986\u0995\u09cd\u09b0\u09ae\u09a3\u0995\u09be\u09b0\u09c0\u09b0\u09be \u098f\u0987 \u09a4\u09cd\u09b0\u09c1\u099f\u09bf\u09b0 \u09ae\u09be\u09a7\u09cd\u09af\u09ae\u09c7 \u09b0\u09bf\u09ae\u09cb\u099f \u0995\u09cb\u09a1 \u098f\u0995\u09cd\u09b8\u09bf\u0995\u09bf\u0989\u09b6\u09a8 \u0995\u09b0\u09a4\u09c7 \u09aa\u09be\u09b0\u09c7, \u09ac\u09cd\u09af\u09ac\u09b9\u09be\u09b0\u0995\u09be\u09b0\u09c0\u09a6\u09c7\u09b0 \u09a6\u09cd\u09b0\u09c1\u09a4 \u09a4\u09be\u09a6\u09c7\u09b0 \u09ac\u09cd\u09b0\u09be\u0989\u099c\u09be\u09b0 \u0986\u09aa\u09a1\u09c7\u099f \u0995\u09b0\u09be\u09b0 \u09aa\u09b0\u09be\u09ae\u09b0\u09cd\u09b6 \u09a6\u09c7\u0993\u09af\u09bc\u09be \u09b9\u099a\u09cd\u099b\u09c7\u0964 \u098f\u09b0 \u09ae\u09be\u09a7\u09cd\u09af\u09ae\u09c7 \u0986\u0995\u09cd\u09b0\u09ae\u09a3\u09c7\u09b0 \u099d\u09c1\u0981\u0995\u09bf \u09b9\u09cd\u09b0\u09be\u09b8 \u0995\u09b0\u09be \u09af\u09be\u09ac\u09c7\u0964\n\n\u0986\u09aa\u09a1\u09c7\u099f \u09a8\u09be \u0995\u09b0\u09b2\u09c7 \u098f\u0987 \u09a4\u09cd\u09b0\u09c1\u099f\u09bf \u09a6\u09c2\u09b0\u09ac\u09b0\u09cd\u09a4\u09c0 \u0986\u0995\u09cd\u09b0\u09ae\u09a3\u09c7 \u09af\u09c7\u09ae\u09a8 \u0993\u09df\u09be\u099f\u09be\u09b0\u09bf\u0982 \u09b9\u09cb\u09b2 \u0985\u09cd\u09af\u09be\u099f\u09be\u0995 \u09ac\u09be \u09a1\u09cd\u09b0\u09be\u0987\u09ad-\u09ac\u09be\u0987 \u09a1\u09be\u0989\u09a8\u09b2\u09cb\u09a1 \u0995\u09cd\u09af\u09be\u09ae\u09cd\u09aa\u09c7\u0987\u09a8\u09c7\u09b0 \u09ae\u09be\u09a7\u09cd\u09af\u09ae\u09c7 \u0985\u09b8\u09cd\u09a4\u09cd\u09b0 \u09b9\u09bf\u09b8\u09c7\u09ac\u09c7 \u09ac\u09cd\u09af\u09ac\u09b9\u09c3\u09a4 \u09b9\u09a4\u09c7 \u09aa\u09be\u09b0\u09c7, \u09af\u09be \u09ac\u09cd\u09af\u09ac\u09b9\u09be\u09b0\u0995\u09be\u09b0\u09c0\u09a6\u09c7\u09b0 \u0995\u09cd\u09b7\u09a4\u09bf\u0997\u09cd\u09b0\u09b8\u09cd\u09a4 \u0993\u09af\u09bc\u09c7\u09ac\u09b8\u09be\u0987\u099f\u09c7 \u09aa\u09cd\u09b0\u09ac\u09c7\u09b6 \u0995\u09b0\u09a4\u09c7 \u09b8\u09b9\u09af\u09cb\u0997\u09bf\u09a4\u09be \u0995\u09b0\u09ac\u09c7", "creation_timestamp": "2024-10-30T19:14:07.000000Z"}, {"uuid": "608de736-5a77-4155-88d8-6f982fcc04e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "exploited", "source": "https://t.me/DirectActionBangladesh/30121", "content": "Windows \u0986\u09aa\u09a1\u09c7\u099f \u09b9\u09b2\u09c7 \u098f\u0996\u09a8 Firefox \u0993 \u0986\u09aa\u09a1\u09c7\u099f \u0995\u09b0\u09c1\u09a8 \ud83d\ude05\u0964\u00a0 \u0995\u09bf \u0986\u09b0 \u0995\u09b0\u09be \u09ac\u09b2\u09c1\u09a8, \u0995\u09b0\u09c7 \u09ab\u09c7\u09b2\u09c1\u09a8 \u09a6\u09cd\u09b0\u09c1\u09a4 \n\nMozilla \u09b8\u09ae\u09cd\u09aa\u09cd\u09b0\u09a4\u09bf Firefox \u098f\u09ac\u0982 Firefox Extended Support Release (ESR)-\u098f\u09b0 \u099c\u09a8\u09cd\u09af \u098f\u0995\u099f\u09bf \u0997\u09c1\u09b0\u09c1\u09a4\u09cd\u09ac\u09aa\u09c2\u09b0\u09cd\u09a3 \u09b8\u09bf\u0995\u09bf\u0989\u09b0\u09bf\u099f\u09bf \u09a4\u09cd\u09b0\u09c1\u099f\u09bf \u09b8\u09ae\u09cd\u09aa\u09b0\u09cd\u0995\u09c7 \u0998\u09cb\u09b7\u09a3\u09be \u0995\u09b0\u09c7\u099b\u09c7, \u09af\u09be \u0987\u09a4\u09bf\u09ae\u09a7\u09cd\u09af\u09c7\u0987 \u0986\u0995\u09cd\u09b0\u09ae\u09a3\u09c7\u09b0 \u09b6\u09bf\u0995\u09be\u09b0 \u09b9\u099a\u09cd\u099b\u09c7\u0964 \u098f\u0987 \u09a4\u09cd\u09b0\u09c1\u099f\u09bf\u099f\u09bf CVE-2024-9680 \u09a8\u09be\u09ae\u09c7 \u09aa\u09b0\u09bf\u099a\u09bf\u09a4 \u098f\u09ac\u0982 \u098f\u09b0 CVSS \u09b8\u09cd\u0995\u09cb\u09b0 9.8, \u09af\u09be \u098f\u099f\u09bf \u0985\u09a4\u09cd\u09af\u09a8\u09cd\u09a4 \u0997\u09c1\u09b0\u09c1\u09a4\u09b0 \u0995\u09b0\u09c7 \u09a4\u09c1\u09b2\u09c7\u099b\u09c7\u0964\n\n\u098f\u099f\u09bf \"use-after-free\" \u09ac\u09be\u0997, \u09af\u09be Animation timeline \u0995\u09ae\u09cd\u09aa\u09cb\u09a8\u09c7\u09a8\u09cd\u099f\u09c7\u09b0 \u09ae\u09a7\u09cd\u09af\u09c7 \u09aa\u09be\u0993\u09af\u09bc\u09be \u0997\u09c7\u099b\u09c7\u0964 \u098f\u0987 \u09a4\u09cd\u09b0\u09c1\u099f\u09bf\u09b0 \u0995\u09be\u09b0\u09a3\u09c7 \u0986\u0995\u09cd\u09b0\u09ae\u09a3\u0995\u09be\u09b0\u09c0\u09b0\u09be \u0995\u09cb\u09a1 \u098f\u0995\u09cd\u09b8\u09bf\u0995\u09bf\u0989\u09b6\u09a8 \u0985\u09b0\u09cd\u099c\u09a8 \u0995\u09b0\u09a4\u09c7 \u09b8\u0995\u09cd\u09b7\u09ae \u09b9\u09af\u09bc\u09c7\u099b\u09c7, \u09af\u09be\u09b0 \u09ab\u09b2\u09c7 \u0995\u09cd\u09b7\u09a4\u09bf\u0997\u09cd\u09b0\u09b8\u09cd\u09a4 \u09ac\u09cd\u09b0\u09be\u0989\u099c\u09be\u09b0\u09c7\u09b0 \u09ae\u09be\u09a7\u09cd\u09af\u09ae\u09c7 \u09ae\u09cd\u09af\u09be\u09b2\u0993\u09af\u09bc\u09cd\u09af\u09be\u09b0 \u0987\u09a8\u099c\u09c7\u0995\u09b6\u09a8 \u098f\u09ac\u0982 \u0985\u09a8\u09cd\u09af\u09be\u09a8\u09cd\u09af \u0995\u09cd\u09b7\u09a4\u09bf\u0995\u09b0 \u0995\u09be\u09b0\u09cd\u09af\u0995\u09b2\u09be\u09aa \u0998\u099f\u09be\u09a8\u09cb \u09b8\u09ae\u09cd\u09ad\u09ac \u09b9\u09af\u09bc\u09c7\u099b\u09c7\u0964\n\n\u09af\u09c7\u09b9\u09c7\u09a4\u09c1 \u0986\u0995\u09cd\u09b0\u09ae\u09a3\u0995\u09be\u09b0\u09c0\u09b0\u09be \u098f\u0987 \u09a4\u09cd\u09b0\u09c1\u099f\u09bf\u09b0 \u09ae\u09be\u09a7\u09cd\u09af\u09ae\u09c7 \u09b0\u09bf\u09ae\u09cb\u099f \u0995\u09cb\u09a1 \u098f\u0995\u09cd\u09b8\u09bf\u0995\u09bf\u0989\u09b6\u09a8 \u0995\u09b0\u09a4\u09c7 \u09aa\u09be\u09b0\u09c7, \u09ac\u09cd\u09af\u09ac\u09b9\u09be\u09b0\u0995\u09be\u09b0\u09c0\u09a6\u09c7\u09b0 \u09a6\u09cd\u09b0\u09c1\u09a4 \u09a4\u09be\u09a6\u09c7\u09b0 \u09ac\u09cd\u09b0\u09be\u0989\u099c\u09be\u09b0 \u0986\u09aa\u09a1\u09c7\u099f \u0995\u09b0\u09be\u09b0 \u09aa\u09b0\u09be\u09ae\u09b0\u09cd\u09b6 \u09a6\u09c7\u0993\u09af\u09bc\u09be \u09b9\u099a\u09cd\u099b\u09c7\u0964 \u098f\u09b0 \u09ae\u09be\u09a7\u09cd\u09af\u09ae\u09c7 \u0986\u0995\u09cd\u09b0\u09ae\u09a3\u09c7\u09b0 \u099d\u09c1\u0981\u0995\u09bf \u09b9\u09cd\u09b0\u09be\u09b8 \u0995\u09b0\u09be \u09af\u09be\u09ac\u09c7\u0964\n\n\u0986\u09aa\u09a1\u09c7\u099f \u09a8\u09be \u0995\u09b0\u09b2\u09c7 \u098f\u0987 \u09a4\u09cd\u09b0\u09c1\u099f\u09bf \u09a6\u09c2\u09b0\u09ac\u09b0\u09cd\u09a4\u09c0 \u0986\u0995\u09cd\u09b0\u09ae\u09a3\u09c7 \u09af\u09c7\u09ae\u09a8 \u0993\u09df\u09be\u099f\u09be\u09b0\u09bf\u0982 \u09b9\u09cb\u09b2 \u0985\u09cd\u09af\u09be\u099f\u09be\u0995 \u09ac\u09be \u09a1\u09cd\u09b0\u09be\u0987\u09ad-\u09ac\u09be\u0987 \u09a1\u09be\u0989\u09a8\u09b2\u09cb\u09a1 \u0995\u09cd\u09af\u09be\u09ae\u09cd\u09aa\u09c7\u0987\u09a8\u09c7\u09b0 \u09ae\u09be\u09a7\u09cd\u09af\u09ae\u09c7 \u0985\u09b8\u09cd\u09a4\u09cd\u09b0 \u09b9\u09bf\u09b8\u09c7\u09ac\u09c7 \u09ac\u09cd\u09af\u09ac\u09b9\u09c3\u09a4 \u09b9\u09a4\u09c7 \u09aa\u09be\u09b0\u09c7, \u09af\u09be \u09ac\u09cd\u09af\u09ac\u09b9\u09be\u09b0\u0995\u09be\u09b0\u09c0\u09a6\u09c7\u09b0 \u0995\u09cd\u09b7\u09a4\u09bf\u0997\u09cd\u09b0\u09b8\u09cd\u09a4 \u0993\u09af\u09bc\u09c7\u09ac\u09b8\u09be\u0987\u099f\u09c7 \u09aa\u09cd\u09b0\u09ac\u09c7\u09b6 \u0995\u09b0\u09a4\u09c7 \u09b8\u09b9\u09af\u09cb\u0997\u09bf\u09a4\u09be \u0995\u09b0\u09ac\u09c7", "creation_timestamp": "2024-10-30T19:14:08.000000Z"}, {"uuid": "c1e26a62-88f3-4c78-9043-859b316e697f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "exploited", "source": "Telegram/PyEmdoAFDljUbp79BDsRiARc3W5JhS-s-GbqA7R2VaV4qQ", "content": "", "creation_timestamp": "2024-10-10T10:23:33.000000Z"}, {"uuid": "0a8214b1-3f46-4d6f-97b9-9a5c40bd8f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "exploited", "source": "https://t.me/KomunitiSiber/2700", "content": "Firefox Zero-Day Under Attack: Update Your Browser Immediately\nhttps://thehackernews.com/2024/10/mozilla-warns-of-active-exploitation-in.html\n\nMozilla has revealed that a critical security flaw impacting Firefox and Firefox Extended Support Release (ESR) has come under active exploitation in the wild.\nThe vulnerability, tracked as CVE-2024-9680 (CVSS score: 9.8), has been described as a use-after-free bug in the Animation timeline component.\n\"An attacker was able to achieve code execution in the content process by exploiting a", "creation_timestamp": "2024-10-10T16:27:26.000000Z"}, {"uuid": "d100c478-5d45-4193-a4ab-4d77f5d7ebb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/23295", "content": "The Hacker News\nFirefox Zero-Day Under Attack: Update Your Browser Immediately\n\nMozilla has revealed that a critical security flaw impacting Firefox and Firefox Extended Support Release (ESR) has come under active exploitation in the wild.\nThe vulnerability, tracked as CVE-2024-9680, has been described as a use-after-free bug in the Animation timeline component.\n\"An attacker was able to achieve code execution in the content process by exploiting a use-after-free in", "creation_timestamp": "2024-10-10T10:23:30.000000Z"}, {"uuid": "727520a7-3033-4903-8010-e9a453d24d78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "exploited", "source": "Telegram/uHDyx6HJgWcVY5hZzd8NRZkbmcJhwAo-7EEdpMFX6kF57A", "content": "", "creation_timestamp": "2024-10-10T07:06:23.000000Z"}, {"uuid": "9d561f9a-4247-4a43-aa4e-6207b113a3f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/5063", "content": "The Hacker News\nFirefox Zero-Day Under Attack: Update Your Browser Immediately\n\nMozilla has revealed that a critical security flaw impacting Firefox and Firefox Extended Support Release (ESR) has come under active exploitation in the wild.\nThe vulnerability, tracked as CVE-2024-9680, has been described as a use-after-free bug in the Animation timeline component.\n\"An attacker was able to achieve code execution in the content process by exploiting a use-after-free in", "creation_timestamp": "2024-10-10T10:23:30.000000Z"}, {"uuid": "ec07b6f3-fc1f-4fb4-b487-c989da8919d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "published-proof-of-concept", "source": "https://t.me/Leak_DBMS/1510", "content": "\ud83d\udee1Weekly schedule\n\ud83d\udca5https://dimitrifourny.github.io/2024/11/14/firefox-animation-cve-2024-9680.html\n\ud83d\udca5https://github.com/watchtowrlabs/Citrix-Virtual-Apps-XEN-Exploit\n\ud83d\udca5https://github.com/rapid7/metasploit-framework/pull/19648\n\ud83d\udee1F . PrivateShizo\n\ud83e\udde8@Leak_DBMS", "creation_timestamp": "2024-11-19T10:22:23.000000Z"}, {"uuid": "ff5436ba-370e-4f98-a2a3-20a07bb3a9b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "seen", "source": "https://t.me/Russian_OSINT/4685", "content": "\ud83e\uddca Mozilla \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \"0-day\" \u0434\u043b\u044f Firefox\n\nMozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 use-after-free, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-9680 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 ESET \u0414\u0430\u043c\u044c\u0435\u043d\u043e\u043c \u0428\u0430\u0444\u0444\u0435\u0440\u043e\u043c. \u0412 \u0434\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0442\u0430\u0439\u043c\u043b\u0430\u0439\u043d\u043e\u0432 \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u0438 \u0432 API Web Animations, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u044e \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u0439 \u043d\u0430 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445.\n\n\u0418\u0437 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Mozilla: \u00ab\u041d\u0430\u043c \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445\u00bb.\n\n\u0412 \u0437\u043e\u043d\u0435 \u0440\u0438\u0441\u043a\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043a\u0430\u043a \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox, \u0442\u0430\u043a \u0438 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 ESR. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430:\n\n\ud83d\udee1 Firefox 131.0.2\n\ud83d\udee1 Firefox ESR 115.16.1\n\ud83d\udee1 Firefox ESR 128.3.1\n\n\u2699\ufe0f\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u043d\u044e \u00ab\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 -> \u041f\u043e\u043c\u043e\u0449\u044c -> \u041e Firefox\u00bb, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0434\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439.\n\n\ud83e\udd14\u042d\u0442\u043e \u0443\u0436\u0435 \u0432\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u0430\u044f Mozilla \u0432 2024 \u0433\u043e\u0434\u0443. \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043c\u0430\u0440\u0442\u0435 2024 \u0433\u043e\u0434\u0430. \u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e CVE-2024-29943 \u0438 CVE-2024-29944, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0430 Pwn2Own \u0432 \u0412\u0430\u043d\u043a\u0443\u0432\u0435\u0440\u0435. \n\n\u270b @Russian_OSINT", "creation_timestamp": "2024-10-10T09:41:11.000000Z"}, {"uuid": "9576332e-63c0-448b-84b6-49bdb7357e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "seen", "source": "https://t.me/true_secator/6305", "content": "\u041f\u043e\u0434\u043a\u0430\u0442\u0438\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 GitLab: 17.4.2, 17.3.5, 17.2.9 \u0434\u043b\u044f GitLab Community Edition (CE) \u0438 Enterprise Edition (EE).\n\n\u0412 \u043e\u0431\u0449\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0432\u043e\u0441\u044c\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f, \u0447\u0435\u0442\u044b\u0440\u0435 - \u0432\u044b\u0441\u043e\u043a\u043e\u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435, \u0434\u0432\u0435 - \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0438 \u043e\u0434\u043d\u0430 - \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\nCVSS 9.6 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430 CVE-2024-9164 \u0432 GitLab EE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 12.5 \u0434\u043e 17.2.9, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 17.3, \u0434\u043e 17.3.5 \u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 17.4 \u0434\u043e 17.4.2, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u044b \u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0442\u0432\u044f\u0445.\n\n\u0421\u0440\u0435\u0434\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 - CVE-2024-8970 (CVSS 8.2), CVE-2024-8977 (CVSS 8.2) \u0438 CVE-2024-9631 (CVSS 7.5), CVE-2024-6530 (CVSS 7.3), \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 - CVE-2024-9623 (CVSS 4.9) \u0438 CVE-2024-9623 (CVSS 4.3), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0438\u0437\u043a\u043e\u0439 - CVE-2024-9596 (CVSS 3.7).\n\n\u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437 \u043e\u0448\u0438\u0431\u043e\u043a \u0434\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u043b\u043e.\n\n\u0427\u0435\u0433\u043e \u043d\u0435 \u0441\u043a\u0430\u0436\u0435\u0448\u044c \u043f\u0440\u043e 0-day \u0432 Mozilla Firefox, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c, Mozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. CVE-2024-9680 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 ESET \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u0448\u043a\u0430\u043b\u0435 \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0435\u0442 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u0439, \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0445 \u043a \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0443 \u0438\u043b\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0430\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u0432\u0435\u0440\u0441\u0438\u044e Firefox (\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a) \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 (ESR).\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Firefox 131.0.2, Firefox ESR 115.16.1 \u0438 Firefox ESR 128.3.1.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0441\u0442\u0430\u0442\u0443\u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2024-9680 \u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0442\u043e\u043c, \u043d\u0430 \u043a\u043e\u0433\u043e \u043e\u043d\u0430 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0432 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u043e\u0437\u0430\u0431\u043e\u0442\u0438\u0442\u044c\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c.", "creation_timestamp": "2024-10-10T15:20:05.000000Z"}, {"uuid": "72f707a0-4d1e-4e67-84ea-ee91dd1cde6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "published-proof-of-concept", "source": "https://t.me/androidMalware/2388", "content": "Firefox Animation CVE-2024-9680\nhttps://dimitrifourny.github.io/2024/11/14/firefox-animation-cve-2024-9680.html", "creation_timestamp": "2024-11-14T11:30:30.000000Z"}, {"uuid": "06fa0bcd-9c77-4f8f-9f7c-45d8e7b06620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "exploited", "source": "https://t.me/thehackernews/5712", "content": "\ud83d\udea8 Warning: A critical #vulnerability (CVE-2024-9680) in Firefox is being actively exploited. \n \nDon\u2019t wait\u2014ensure your browsers are updated now to protect against potential remote code execution. \n \nLearn more: https://thehackernews.com/2024/10/mozilla-warns-of-active-exploitation-in.html", "creation_timestamp": "2024-10-10T06:27:41.000000Z"}, {"uuid": "362deb01-ab1b-4c2d-b680-7c2c0de24a27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "seen", "source": "https://t.me/xakep_ru/16545", "content": "\u0421\u0432\u0435\u0436\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Firefox \u043c\u043e\u0433\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Tor\n\n\u0421\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0432 Firefox \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-9680 \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u043f\u0440\u043e\u0442\u0438\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Tor.\n\nhttps://xakep.ru/2024/10/15/cve-2024-9680/", "creation_timestamp": "2024-10-15T12:33:49.000000Z"}, {"uuid": "0f232b3f-e8a8-4d18-97b3-4f29f109bc61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "seen", "source": "https://t.me/CybNux/7187", "content": "\u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0641\u064a Firefox \u0645\u0645\u0643\u0646 \u062a\u062a\u0633\u062a\u063a\u0644 \u0643\u0645\u0627\u0646 \u0641\u064a Tor \ud83d\udcac\n\n\u0645\u0624\u062e\u0631\u064b\u0627 \u0646\u0632\u0644 \u062a\u062d\u062f\u064a\u062b \u0644\u0640 Firefox \u0627\u0644\u0644\u064a \u0623\u0635\u0644\u062d \u062b\u063a\u0631\u0629 (CVE-2024-9680) \u0641\u064a \u0627\u0644\u0645\u062a\u0635\u0641\u062d \u0643\u0627\u0646\u062a \u0628\u062a\u0633\u0645\u062d \u0628\u062a\u0646\u0641\u064a\u0630 \u0623\u0643\u0648\u0627\u062f \u0639\u0634\u0648\u0627\u0626\u064a\u0629 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0631\u0633\u0648\u0645 \u0627\u0644\u0645\u062a\u062d\u0631\u0643\u0629.\n\n\u0645\u0637\u0648\u0631\u064a\u0646 Tor \u0623\u0643\u062f\u0648\u0627 \u0625\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u0645\u0645\u0643\u0646 \u062a\u0623\u062b\u0631 \u0639\u0644\u0649 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0628\u062a\u0648\u0639\u0647\u0645\u060c \u0628\u0633 \"\u0645\u0627 \u0644\u0642\u0648\u0634 \u062f\u0644\u064a\u0644 \u0639\u0644\u0649 \u0647\u062c\u0645\u0627\u062a \u0645\u0633\u062a\u0647\u062f\u0641\u0629\". \ud83d\ude0f\n\n\u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0627\u062a\u062d\u0644\u062a \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u0623\u062e\u064a\u0631\u0629 \u0645\u0646 \u0645\u062a\u0635\u0641\u062d Tor.\n#\u0623\u062e\u0628\u0627\u0631", "creation_timestamp": "2024-10-15T18:21:34.000000Z"}, {"uuid": "4996f2f6-bf6b-427b-bf62-b95ee7bb291c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11440", "content": "#exploit\n1. CVE-2024-9680:\nUaF in Firefox Animation timeline\nhttps://dimitrifourny.github.io/2024/11/14/firefox-animation-cve-2024-9680.html\n\n2. CVE-2023-7261:\nGoogle Chrome Updater DosDevices LPE\nhttps://github.com/zerozenxlabs/CVE-2023-7261\n\n3. CVE-2024-9796:\nWP Advanced-Search <=3.3.9 - Unauth SQLI\nhttps://github.com/issamiso/CVE-2024-9796", "creation_timestamp": "2024-11-16T16:34:12.000000Z"}, {"uuid": "af51a97f-421b-4b91-a324-e7cfd9dbfd3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9680", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/5122", "content": "#exploit\n1. CVE-2024-9680:\nUaF in Firefox Animation timeline\nhttps://dimitrifourny.github.io/2024/11/14/firefox-animation-cve-2024-9680.html\n\n2. CVE-2023-7261:\nGoogle Chrome Updater DosDevices LPE\nhttps://github.com/zerozenxlabs/CVE-2023-7261\n\n3. CVE-2024-9796:\nWP Advanced-Search <=3.3.9 - Unauth SQLI\nhttps://github.com/issamiso/CVE-2024-9796", "creation_timestamp": "2024-11-20T11:20:03.000000Z"}]}