{"vulnerability": "cve-2020-0688", "sightings": [{"uuid": "8d10558e-c102-4507-ae44-cb04e0b2fab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/42d04e94-bf5b-427d-acc8-f5d740675941", "content": "", "creation_timestamp": "2020-10-20T15:57:21.000000Z"}, {"uuid": "950e5889-6cfd-44c2-b611-147fdeb5c3fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/5f850411-c103-491f-abff-9421425403cf", "content": "", "creation_timestamp": "2020-10-21T08:33:50.000000Z"}, {"uuid": "7e58130a-ec39-4879-9cfe-cc7f710f04bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/23e6786e-b796-48cc-8bb6-0e1ddb595c8a", "content": "", "creation_timestamp": "2020-10-16T06:26:20.000000Z"}, {"uuid": "85f40a2c-1b0c-4aaf-861e-9928123677ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/b426aa9c-dc22-4a91-8213-f8d513405423", "content": "", "creation_timestamp": "2020-12-09T07:18:56.000000Z"}, {"uuid": "1417b411-6830-4d0b-999d-fe23d55ef897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/1a52c709-c427-4575-a466-9655fb23df52", "content": "", "creation_timestamp": "2020-09-16T08:37:28.000000Z"}, {"uuid": "463e3dae-93b5-4b1b-bba8-85c85447c90f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/d11a348d-a113-494f-bb63-24caad723c86", "content": "", "creation_timestamp": "2021-07-02T06:58:55.000000Z"}, {"uuid": "1502cac7-b7bf-48fd-95d9-c567c2fd73da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "7fcc2524-450b-48eb-ab10-982a39e5d0cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:18.000000Z"}, {"uuid": "b1062bfa-4120-4dce-a6a4-af815f2c02de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/8d121e04-9fcc-48d9-be88-3af090913786", "content": "", "creation_timestamp": "2020-10-22T19:44:03.000000Z"}, {"uuid": "26b2c139-1151-4bc1-ba79-54ed8d584fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/6cc64859-dc9d-472e-9702-c3061488e995", "content": "", "creation_timestamp": "2020-10-09T13:24:11.000000Z"}, {"uuid": "5f3ac0ab-c6de-4aeb-a136-570be922fc12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/f3a6ce68-c792-4551-b363-d4bdf4361ea6", "content": "", "creation_timestamp": "2020-11-06T15:50:03.000000Z"}, {"uuid": "f46ba7f9-8b45-42ce-8e54-12be27e65625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/d925a2ee-e7cf-46f6-bec1-ad8e19122730", "content": "", "creation_timestamp": "2020-10-20T15:58:04.000000Z"}, {"uuid": "67f7199d-6a07-4198-885b-a25ec67e1949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/53d4062f-0578-4f43-a001-4ec62b36396e", "content": "", "creation_timestamp": "2020-11-06T19:00:04.000000Z"}, {"uuid": "e5db9ddf-a381-4815-a56a-a1efcd3572a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/5362d288-c25b-43e5-9311-2ddedfe84549", "content": "", "creation_timestamp": "2020-10-22T19:51:03.000000Z"}, {"uuid": "7272cc27-4136-40ad-ad6f-38050034d4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/c7d9eed5-d71b-4433-8433-3db121149d72", "content": "", "creation_timestamp": "2020-11-21T03:00:05.000000Z"}, {"uuid": "f7502f84-cbf4-4de9-a019-e7a4e03e8b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://www.exploit-db.com/exploits/48168", "content": "", "creation_timestamp": "2020-03-05T00:00:00.000000Z"}, {"uuid": "6d24a2f4-a0e3-4bd3-8b20-98d38d7b7456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971023", "content": "", "creation_timestamp": "2024-12-24T20:23:11.098049Z"}, {"uuid": "86605600-9bb1-4c9a-ad51-f35626cbc397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "a98170bd-c27f-44b2-83d1-60dc4e48f8f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:20.000000Z"}, {"uuid": "8ee7482c-6c62-41f4-ae44-b815d5bd1f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:44.000000Z"}, {"uuid": "ef3a17d5-b835-4970-a3be-990a7da3221b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/23e6786e-b796-48cc-8bb6-0e1ddb595c8a", "content": "", "creation_timestamp": "2025-04-10T17:09:39.000000Z"}, {"uuid": "d1971854-fbcb-4c72-af00-879b3b307678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-33a5b322-edec4ab2ec03d1b2", "content": "", "creation_timestamp": "2025-07-17T12:42:48.641504Z"}, {"uuid": "fb258209-d05d-4fd0-900f-e6a32bc44834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lu7lgfexds2w", "content": "", "creation_timestamp": "2025-07-18T04:13:25.501613Z"}, {"uuid": "4b736e49-b690-4e05-8e6e-6340e49ed7b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://threatintel.cc/2025/07/18/ghostcontainer-backdoor-targets-microsoft-exchange.html", "content": "", "creation_timestamp": "2025-07-18T11:06:52.000000Z"}, {"uuid": "0c12149c-1d6e-4f36-83af-7fc83323671d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/exchange_ecp_viewstate.rb", "content": "", "creation_timestamp": "2020-03-03T23:32:10.000000Z"}, {"uuid": "3d453fd1-e744-4932-a26e-b6412aea3ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3luo33ab6h4w2", "content": "", "creation_timestamp": "2025-07-23T22:30:55.286725Z"}, {"uuid": "6f1ae586-d2db-4fb9-a90f-12c49c90db5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:04.000000Z"}, {"uuid": "59d45a35-4bde-4f18-8564-14f7efcf9725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=458", "content": "", "creation_timestamp": "2020-03-11T04:00:00.000000Z"}, {"uuid": "5fab587f-0ca6-4cad-bf0d-3868a27169f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2bd9190a-6af7-48ef-a3d4-0c4d9255f199", "content": "", "creation_timestamp": "2026-02-02T12:28:51.196316Z"}, {"uuid": "9893fe98-d7fd-4dbb-95f8-e811ffcc5fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "published-proof-of-concept", "source": "https://t.me/cyberbannews_ir/1082", "content": "\ud83d\udce2 \u0628\u0627\u0632\u062a\u0627\u0628\n\n\n\ud83d\udd39\u0647\u06a9\u0631 \u0631\u0648\u0633 \u062f\u0631\u0627\u067e \u0628\u0627\u06a9\u0633 \u0645\u062d\u06a9\u0648\u0645 \u0634\u062f/\n\u06cc\u06a9 \u0647\u06a9\u0631 \u0631\u0648\u0633 \u0628\u0647 \u062c\u0631\u0645 \u062d\u0645\u0644\u0647 \u0633\u0627\u06cc\u0628\u0631\u06cc \u0628\u0647 \u0633\u0627\u06cc\u062a \u0647\u0627\u06cc \u0645\u0634\u0647\u0648\u0631\u06cc \u0647\u0645\u0686\u0648\u0646 \u062f\u0631\u0627\u067e \u0628\u0627\u06a9\u0633\u060c \u0644\u06cc\u0646\u06a9\u062f \u0627\u06cc\u0646 \u0648 \u0641\u0648\u0631\u0645 \u0627\u0633\u067e\u0631\u06cc\u0646\u06af \u0645\u062d\u06a9\u0648\u0645 \u0634\u062f. \u0648\u06cc \u0642\u0631\u0627\u0631 \u0627\u0633\u062a \u0627\u0632 \u0634\u0647\u0631\u06cc\u0648\u0631 \u0645\u0627\u0647 \u062f\u0648\u0631\u0647 \u0645\u062d\u06a9\u0648\u0645\u06cc\u062a \u062e\u0648\u062f \u0631\u0627 \u0637\u06cc \u06a9\u0646\u062f.\n\n\ud83d\udd39\u062a\u062e\u0631\u06cc\u0628 \u0641\u06cc\u0628\u0631 \u0646\u0648\u0631\u06cc \u0634\u0647\u0631\u062f\u0627\u0631\u06cc \u0648 \u0642\u0637\u0639 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0628\u0631\u062e\u06cc \u0633\u0627\u06cc\u062a \u0647\u0627\u06cc \u0627\u06cc\u0631\u0627\u0646\u06cc/\n\u0633\u0627\u0632\u0645\u0627\u0646 \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0634\u0647\u0631\u062f\u0627\u0631\u06cc \u062a\u0647\u0631\u0627\u0646\u060c \u0633\u0631\u0642\u062a \u0648 \u062a\u062e\u0631\u06cc\u0628 \u0628\u062e\u0634\u06cc \u0627\u0632 \u0634\u0628\u06a9\u0647 \u0641\u06cc\u0628\u0631 \u0646\u0648\u0631\u06cc \u0634\u0647\u0631\u062f\u0627\u0631\u06cc \u0631\u0627 \u062f\u0644\u06cc\u0644 \u0642\u0637\u0639 \u062f\u0633\u062a\u0631\u0633\u06cc \u0634\u0628 \u06af\u0630\u0634\u062a\u0647 \u0628\u0647 \u0628\u0631\u062e\u06cc \u0633\u0627\u06cc\u062a\u200c\u0647\u0627\u06cc \u0627\u06cc\u0631\u0627\u0646\u06cc \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f.\n\n\ud83d\udd39\u067e\u0631\u062a\u0627\u0628 \u0645\u0627\u0647\u0648\u0627\u0631\u0647 \u0647\u0627\u06cc \u0627\u0633\u062a\u0627\u0631\u0644\u06cc\u0646\u06a9 \u0628\u0631\u0627\u06cc \u0633\u0648\u0645\u06cc\u0646 \u0628\u0627\u0631 \u0644\u063a\u0648 \u0634\u062f/\n\u0631\u0648\u0632 \u06af\u0630\u0634\u062a\u0647 \u0633\u0648\u0645\u06cc\u0646 \u0639\u0645\u0644\u06cc\u0627\u062a \u067e\u0631\u062a\u0627\u0628 \u062f\u0647\u0645\u06cc\u0646 \u0645\u062d\u0645\u0648\u0644\u0647 \u0645\u0627\u0647\u0648\u0627\u0631\u0647 \u0647\u0627\u06cc \u0627\u06cc\u0646\u062a\u0631\u0646\u062a\u06cc \u0627\u0633\u062a\u0627\u0631\u0644\u06cc\u0646\u06a9 \u0644\u063a\u0648 \u0634\u062f.\n\n\ud83d\udd39\u0633\u0631\u0648\u06cc\u0633 \u0631\u0648\u0645\u06cc\u0646\u06af \u0628\u062f\u0648\u0646 \u0627\u0637\u0644\u0627\u0639 \u0645\u0634\u062a\u0631\u06a9\u0627\u0646 \u0641\u0639\u0627\u0644 \u0646\u0645\u06cc\u200c\u0634\u0648\u062f/\n\u0645\u062f\u06cc\u0631\u0639\u0627\u0645\u0644 \u0634\u0631\u06a9\u062a \u0645\u062e\u0627\u0628\u0631\u0627\u062a \u0627\u0646\u062a\u0634\u0627\u0631 \u0628\u0631\u062e\u06cc \u0627\u062e\u0628\u0627\u0631 \u062f\u0631 \u0645\u0648\u0631\u062f \u0641\u0639\u0627\u0644\u200c\u0633\u0627\u0632\u06cc \u0633\u0631\u0648\u06cc\u0633 \u0631\u0648\u0645\u06cc\u0646\u06af \u062a\u0648\u0633\u0637 \u0627\u067e\u0631\u0627\u062a\u0648\u0631\u0647\u0627 \u0628\u062f\u0648\u0646 \u0627\u0637\u0644\u0627\u0639 \u0645\u0634\u062a\u0631\u06a9\u0627\u0646 \u0631\u0627 \u062a\u06a9\u0630\u06cc\u0628 \u06a9\u0631\u062f \u0648 \u06af\u0641\u062a: \u062a\u0639\u0631\u0641\u0647\u200c\u0647\u0627\u06cc \u0631\u0648\u0645\u06cc\u0646\u06af \u062a\u0646\u0647\u0627 \u062f\u0631 \u0635\u0648\u0631\u062a \u062e\u0631\u0648\u062c \u0627\u0632 \u06a9\u0634\u0648\u0631 \u0645\u062d\u0627\u0633\u0628\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.\n\n\ud83d\udd39\u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc \u0633\u0631\u0637\u0627\u0646 \u0631\u0627 \u062a\u0634\u062e\u06cc\u0635 \u0645\u06cc\u200c\u062f\u0647\u062f/\n\u06cc\u06a9 \u062a\u06cc\u0645 \u062a\u062d\u0642\u06cc\u0642\u0627\u062a\u06cc \u0628\u06cc\u0646\u200c\u0627\u0644\u0645\u0644\u0644\u06cc \u0628\u0647 \u0633\u0631\u067e\u0631\u0633\u062a\u06cc \u062f\u0627\u0646\u0634\u0645\u0646\u062f\u0627\u0646 \u0686\u06cc\u0646\u06cc\u060c \u06cc\u06a9 \u0645\u062f\u0644 \u063a\u0631\u0628\u0627\u0644\u06af\u0631\u06cc \u0633\u0631\u06cc\u0639 \u0648 \u062f\u0642\u06cc\u0642 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u063a\u062f\u062f \u0644\u0646\u0641\u0627\u0648\u06cc \u062a\u0647\u06cc\u0647\u200c\u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u067e\u0632\u0634\u06a9\u0627\u0646 \u062f\u0631 \u0645\u0639\u0627\u0644\u062c\u0647 \u0633\u0631\u0637\u0627\u0646 \u06a9\u0645\u06a9 \u06a9\u0646\u062f.\n\n\ud83d\udd39\u0627\u0646\u062a\u0634\u0627\u0631 \u0627\u0628\u0632\u0627\u0631 \u0622\u0634\u06a9\u0627\u0631\u0633\u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-\u06f2\u06f0\u06f2\u06f0-\u06f0\u06f6\u06f8\u06f8\n\u0645\u0631\u06a9\u0632 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0641\u062a\u0627 \u0628\u0627 \u0647\u0645\u06a9\u0627\u0631\u06cc \u0634\u0631\u06a9\u062a \u0631\u0647\u0627 \u0627\u0642\u062f\u0627\u0645 \u0628\u0647 \u062a\u0648\u0644\u06cc\u062f \u06cc\u06a9 \u0627\u0628\u0632\u0627\u0631 \u0622\u0634\u06a9\u0627\u0631\u0633\u0627\u0632 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0634\u0646\u0627\u0633\u0647 CVE-\u06f2\u06f0\u06f2\u06f0-\u06f0\u06f6\u06f8\u06f8 \u0648 \u062a\u0634\u062e\u06cc\u0635 \u0634\u0648\u0627\u0647\u062f \u0646\u0641\u0648\u0630 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0622\u0646\u060c \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udd39\u0628\u0632\u0631\u06af\u200c\u062a\u0631\u06cc\u0646 \u067e\u0631\u0648\u0698\u0647 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u06cc \u0628\u0627\u0646\u06a9\u06cc \u06a9\u0634\u0648\u0631 \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u0627\u0646\u062c\u0627\u0645 \u0634\u062f/\n\u06cc\u06a9\u06cc \u0627\u0632 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u067e\u06cc\u0686\u06cc\u062f\u0647 \u0648 \u0628\u0632\u0631\u06af \u0635\u0646\u0639\u062a \u0628\u0627\u0646\u06a9\u06cc \u06a9\u0634\u0648\u0631 \u062f\u0631 \u0628\u0627\u0646\u06a9 \u0633\u067e\u0647 \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u0627\u0646\u062c\u0627\u0645 \u0634\u062f.\n\n\ud83d\udd39\u06af\u0648\u06af\u0644 \u0631\u0648\u06cc \u0627\u0633\u067e\u06cc\u06a9\u0631 \u0647\u0648\u0634\u0645\u0646\u062f \u062c\u062f\u06cc\u062f Nest \u06a9\u0627\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f/\n\u062f\u0631\u062d\u0627\u0644\u06cc\u200c\u06a9\u0647 \u0628\u0631\u062e\u06cc \u0634\u0627\u06cc\u0639\u0627\u062a \u0627\u0632 \u0627\u062d\u062a\u0645\u0627\u0644 \u0633\u0627\u062e\u062a \u0627\u0633\u067e\u06cc\u06a9\u0631 \u062c\u062f\u06cc\u062f \u062e\u0627\u0646\u0648\u0627\u062f\u0647\u200c\u06cc Nest \u06af\u0648\u06af\u0644 \u062e\u0628\u0631 \u0645\u06cc\u200c\u062f\u0627\u062f\u0646\u062f\u060c \u0627\u0647\u0627\u0644\u06cc \u0645\u0627\u0646\u062a\u06cc\u0646\u200c\u0648\u06cc\u0648 \u0631\u0633\u0645\u0627\u064b \u0645\u0647\u0631 \u062a\u0623\u06cc\u06cc\u062f\u06cc \u0628\u0631 \u0634\u0627\u06cc\u0639\u0627\u062a \u0632\u062f\u0646\u062f.\n\n\ud83d\udd39\u0627\u062d\u062a\u0645\u0627\u0644 \u062a\u0639\u0648\u06cc\u0642 \u0627\u062a\u0631\u06cc\u0648\u0645 \u06f2.\u06f0 \u062a\u0627 \u0633\u0627\u0644 \u06f2\u06f0\u06f2\u06f1\u061b \u0648\u06cc\u062a\u0627\u0644\u06cc\u06a9 \u0645\u0648\u0627\u0641\u0642 \u0646\u06cc\u0633\u062a/\n\u0628\u0631\u0627\u0633\u0627\u0633 \u0627\u0638\u0647\u0627\u0631\u0627\u062a \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646\u06cc \u06a9\u0647 \u0631\u0648\u06cc \u0646\u0633\u062e\u0647 \u062f\u0648\u0645 \u0627\u062a\u0631\u06cc\u0648\u0645 \u06a9\u0627\u0631 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0641\u0627\u0632 \u06f0 \u0627\u06cc\u0646 \u0646\u0633\u062e\u0647 \u062a\u0627 \u0627\u0648\u0627\u06cc\u0644 \u0633\u0627\u0644 \u06f2\u06f0\u06f2\u06f1 \u0628\u0647 \u062a\u0639\u0648\u06cc\u0642 \u0628\u06cc\u0641\u062a\u062f.\n\n\ud83d\udd39\u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc \u0628\u0647 \u06cc\u0627\u0641\u062a\u0646 \u0645\u0648\u0642\u0639\u06cc\u062a \u062c\u0631\u0627\u062d\u06cc \u06a9\u0645\u06a9 \u0645\u06cc \u06a9\u0646\u062f/\n\u062f\u0631 \u062a\u0627\u0632\u0647\u200c\u062a\u0631\u06cc\u0646 \u062a\u062d\u0642\u06cc\u0642\u0627\u062a \u0635\u0648\u0631\u062a \u06af\u0631\u0641\u062a\u0647\u060c \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc \u0628\u0647 \u067e\u0632\u0634\u06a9\u0627\u0646 \u0627\u0631\u062a\u0648\u067e\u062f\u06cc \u0628\u0631\u0627\u06cc \u06cc\u0627\u0641\u062a\u0646 \u0645\u0648\u0642\u0639\u06cc\u062a \u062c\u0631\u0627\u062d\u06cc \u06a9\u0645\u06a9 \u0645\u06cc \u06a9\u0646\u062f.\n\n\ud83d\udd39\u06a9\u0648\u06cc\u0646 \u0628\u06cc\u0633 \u0628\u0647 \u062f\u0646\u0628\u0627\u0644 \u0639\u0631\u0636\u0647 \u0639\u0645\u0648\u0645\u06cc \u0633\u0647\u0627\u0645 \u062e\u0648\u062f/\n\u0627\u0633\u062a\u0627\u0631\u062a\u0627\u067e \u062d\u0648\u0632\u0647 \u062a\u062d\u0644\u06cc\u0644 \u062f\u0627\u062f\u0647\u060c \u067e\u0627\u0644\u0627\u0646\u062a\u06cc\u0631 \u060c\u06a9\u0647 \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062e\u0648\u062f \u0631\u0627 \u062f\u0631 \u062e\u0641\u0627 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u062f\u0647\u062f\u060c \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u0628\u0648\u062f \u06a9\u0647 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u062e\u0635\u0648\u0635\u06cc \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0639\u0631\u0636\u0647 \u0627\u0648\u0644\u06cc\u0647 \u0633\u0647\u0627\u0645 \u0631\u0627 \u062b\u0628\u062a \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udd39\u0634\u06cc\u0648\u0647\u200c\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0627\u0631\u0632\u0647\u0627\u06cc \u062f\u06cc\u062c\u06cc\u062a\u0627\u0644 \u062a\u062f\u0648\u06cc\u0646 \u0645\u06cc\u200c\u0634\u0648\u062f/\n\u0631\u06cc\u06cc\u0633 \u0633\u062a\u0627\u062f \u0645\u0628\u0627\u0631\u0632\u0647 \u0628\u0627 \u0642\u0627\u0686\u0627\u0642 \u06a9\u0627\u0644\u0627 \u0648 \u0627\u0631\u0632 \u06af\u0641\u062a: \u0634\u06cc\u0648\u0647\u200c\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0631\u0645\u0632\u0627\u0631\u0632\u0647\u0627 \u0628\u0647\u200c\u0645\u0646\u0638\u0648\u0631 \u0635\u06cc\u0627\u0646\u062a \u0627\u0632 \u0633\u0631\u0645\u0627\u06cc\u0647\u200c\u0647\u0627\u06cc \u06a9\u0634\u0648\u0631 \u062a\u0646\u0638\u06cc\u0645 \u0648 \u062a\u062f\u0648\u06cc\u0646 \u0645\u06cc\u200c\u0634\u0648\u062f.\n\n\n#\u0641\u0646\u0627\u0648\u0631\u06cc\n#\u0647\u0648\u0634_\u0645\u0635\u0646\u0648\u0639\u06cc\n#\u0627\u0645\u0646\u06cc\u062a_\u0634\u0628\u06a9\u0647\n#\u062c\u0631\u0645_\u0633\u0627\u06cc\u0628\u0631\u06cc\n#\u0634\u0628\u06a9\u0647_\u0627\u062c\u062a\u0645\u0627\u0639\u06cc\n#\u062c\u0646\u06af_\u0633\u0627\u06cc\u0628\u0631\u06cc \n#\u06a9\u0631\u0648\u0646\u0627\n#\u0627\u0645\u0646\u06cc\u062a\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc\n#\u0627\u0628\u0632\u0627\u0631_\u0647\u0648\u0634\u0645\u0646\u062f \n#\u06cc\u0648\u062a\u06cc\u0648\u0628\n#\u0641\u06cc\u0633_\u0628\u0648\u06a9 \n#\u062a\u0648\u0626\u06cc\u062a\u0631 \n\n\n\u2705\u0628\u0631\u0627\u06cc \u062e\u0648\u0627\u0646\u062f\u0646 \u0645\u062a\u0646 \u06a9\u0627\u0645\u0644 \u0627\u062e\u0628\u0627\u0631 \u0628\u0647 \u0633\u0627\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u0628\u0627\u0646 \u0645\u0631\u0627\u062c\u0639\u0647 \u0646\u0645\u0627\u0626\u06cc\u062f:\nhttps://Www.cyberbannews.com/\n\n@cyberbannews_ir", "creation_timestamp": "2020-07-13T03:48:37.000000Z"}, {"uuid": "ad7f703b-c021-4f9a-b07e-57d4583345c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/true_secator/7246", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 IR \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 Microsoft Exchange \u0432 \u0410\u0437\u0438\u0438 \u0441 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0433\u043e \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 GhostContainer.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u044b\u043b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u0438\u0437-\u0437\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 N-day.\n\n\u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043c\u043e\u0433\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f RCE-\u043e\u0448\u0438\u0431\u043a\u0430 \u0432 Exchange Server (CVE-2020-0688 \u0441 CVSS: 8,8).\n\n\u0423\u0433\u043b\u0443\u0431\u043b\u0435\u043d\u043d\u043e\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u043b\u043e\u0436\u043d\u043e\u0433\u043e \u043c\u043d\u043e\u0433\u043e\u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0442\u044c, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439.\u00a0\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0443\u043a\u043b\u043e\u043d\u0435\u043d\u0438\u044f \u0438 \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0432\u044b\u0434\u0435\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u0430 \u0444\u043e\u043d\u0435 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432.\u00a0\n\n\u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 GhostContainer \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Exchange, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0440\u044f\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0448\u0435\u043b\u043b-\u043a\u043e\u0434, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0447\u0438\u0442\u0430\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0438\u0445, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0431\u0430\u0439\u0442-\u043a\u043e\u0434 .NET. \n\n\u0424\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u043c\u043e\u0434\u0443\u043b\u044c \u0432\u0435\u0431-\u043f\u0440\u043e\u043a\u0441\u0438 \u0438 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u0411\u044d\u043a\u0434\u043e\u0440 GhostContainer \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u04212 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439.\n\n\u0412\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0438\u0437\u0432\u043d\u0435, \u0430 \u0435\u0433\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u0432\u0435\u0431-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445 Exchange.\n\n\u041e\u0431\u0440\u0430\u0437\u0435\u0446, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 \u044d\u0442\u043e\u0439 APT-\u0430\u0442\u0430\u043a\u0435, \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u043e\u0433\u043e \u0441\u0445\u043e\u0434\u0441\u0442\u0432\u0430 \u0441 \u043a\u0430\u043a\u0438\u043c-\u043b\u0438\u0431\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e, \u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0438 \u0441\u0432\u043e\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0433\u0440\u043e\u0437\u0443 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c, \u043d\u043e \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0430\u043a\u0442\u043e\u0440 \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u043a\u0432\u0430\u043b\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u043c\u0443 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044e Microsoft Exchange Server \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430.\n\n\u0422\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u044f \u041b\u041a \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0447\u0430\u0441\u0442\u044c\u044e APT-\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0433\u043e\u0441\u0441\u0435\u043a\u0442\u043e\u0440 \u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432 \u0410\u0437\u0438\u0438.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440 \u0443\u0433\u0440\u043e\u0437.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0440\u0430\u0437\u0446\u0430 GhostContainer (App_Web_Container_1.dll) - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2025-07-18T11:50:11.000000Z"}, {"uuid": "8b74fe94-f273-40b2-a6f9-4beef31a36c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5127", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1awebshell\n\u63cf\u8ff0\uff1acve-2020-0688 UNIVERSAL Python implementation utilizing ASPX webshell for command output\nURL\uff1ahttps://github.com/w4fz5uck5/cve-2020-0688-webshell-upload-technique\n\n\u6807\u7b7e\uff1a#webshell", "creation_timestamp": "2023-09-12T13:14:11.000000Z"}, {"uuid": "de6d1966-363e-4df8-be5b-f5436cf8475b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/tech_b0lt_Genona/1925", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Rapid7 \u0441\u043f\u0443\u0441\u0442\u044f \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0441\u0432\u043e\u0439 web-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 Project Sonar, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0432\u0441\u0435 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Exchange \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435. \u0418 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u044b\u043c\u0438.\n\n\u0418\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c, \u0447\u0442\u043e \u043f\u043e \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u043c\u0435\u0440\u0435 357 629 (82,5%) \u0438\u0437 433 464 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Exchange \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043e\u0442\u043a\u0440\u044b\u0442\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-0688.\n\n\u0421\u0432\u044b\u0448\u0435 350 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043f\u0435\u0440\u0435\u0434 CVE-2020-0688 \nhttps://habr.com/ru/company/cloud4y/blog/512952/", "creation_timestamp": "2020-07-30T23:22:56.000000Z"}, {"uuid": "155e6057-3f29-4850-83d8-cfb46fe68748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://t.me/BleepingComputer/7111", "content": "80% of all exposed Exchange servers still unpatched for critical flaw\n\nMore than 350,000 of all Microsoft Exchange servers currently exposed on the Internet haven't yet been patched against the\u00a0CVE-2020-0688\u00a0post-auth remote code execution vulnerability affecting\u00a0all supported Microsoft Exchange Server versions. [...]\n\nhttps://www.bleepingcomputer.com/news/security/80-percent-of-all-exposed-exchange-servers-still-unpatched-for-critical-flaw/", "creation_timestamp": "2020-04-06T22:07:55.000000Z"}, {"uuid": "eef30ec8-f6bb-4804-bb5e-c956c7e0f91b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/BleepingComputer/6860", "content": "Hackers Scanning for Vulnerable Microsoft Exchange Servers, Patch Now!\n\nAttackers are actively scanning the Internet for Microsoft Exchange Servers vulnerable to the CVE-2020-0688 remote code execution vulnerability patched by Microsoft two weeks ago. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-scanning-for-vulnerable-microsoft-exchange-servers-patch-now/", "creation_timestamp": "2020-02-26T21:36:00.000000Z"}, {"uuid": "23bf12fe-6aa7-4644-9f6b-ccfced9b4f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/BleepingComputer/8225", "content": "Over 247K Exchange servers unpatched for actively exploited flaw\n\nMore than 247,000 Microsoft Exchange servers\u00a0are to be\u00a0patched\u00a0against the\u00a0CVE-2020-0688\u00a0post-auth remote code execution (RCE) vulnerability impacting all Exchange Server versions under support. [...]\n\nhttps://www.bleepingcomputer.com/news/security/over-247k-exchange-servers-unpatched-for-actively-exploited-flaw/", "creation_timestamp": "2020-09-29T20:44:30.000000Z"}, {"uuid": "ed4b937f-b7ad-4e03-927a-f04ea48b708b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/CyberGovIL/666", "content": "\u05e2\u05d3\u05db\u05d5\u05df \u05d4\u05d0\u05d1\u05d8\u05d7\u05d4 \u05d4\u05d7\u05d5\u05d3\u05e9\u05d9 \u05e9\u05dc \u05de\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 - \u05de\u05e8\u05e5 2020\n\n\u05d1-10 \u05dc\u05d7\u05d5\u05d3\u05e9 \u05e4\u05e8\u05e1\u05de\u05d4 \u05de\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05db-115 \u05e2\u05d3\u05db\u05d5\u05e0\u05d9 \u05d0\u05d1\u05d8\u05d7\u05d4 \u05dc\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05ea\u05d5\u05db\u05e0\u05d5\u05ea \u05e0\u05ea\u05de\u05db\u05d5\u05ea. 26 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05de\u05e1\u05d5\u05d5\u05d2\u05d5\u05ea \u05db\u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea.\n\n\u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d4\u05d7\u05de\u05d5\u05e8\u05d5\u05ea \u05d1\u05d9\u05d5\u05ea\u05e8 \u05e2\u05dc\u05d5\u05dc\u05d5\u05ea \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05d4\u05e4\u05e2\u05dc\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 (RCE).\n\n\u05ea\u05d6\u05db\u05d5\u05e8\u05ea - \u05d1\u05d7\u05d5\u05d3\u05e9 \u05e4\u05d1\u05e8\u05d5\u05d0\u05e8, \u05e4\u05e8\u05e1\u05de\u05d4 \u05de\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05e2\u05d3\u05db\u05d5\u05df \u05d0\u05d1\u05d8\u05d7\u05d4 \u05dc\u05e9\u05e8\u05ea\u05d9 Exchange, \u05d4\u05de\u05e1\u05d5\u05de\u05df CVE-2020-0688.\n\n\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d6\u05d5 \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7, \u05d5\u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\u05dc \u05d9\u05d3\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05d1\u05e2\u05d5\u05dc\u05dd.\n\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05e4\u05e2\u05d5\u05dc \u05dc\u05d1\u05d7\u05d9\u05e0\u05ea \u05d5\u05d4\u05ea\u05e7\u05e0\u05ea \u05e2\u05d3\u05db\u05d5\u05df \u05d6\u05d4 \u05d1\u05d4\u05e7\u05d3\u05dd \u05d4\u05d0\u05e4\u05e9\u05e8\u05d9.\n\n\u05d1\u05e2\u05d3\u05db\u05d5\u05df \u05d7\u05d5\u05d3\u05e9 \u05de\u05e8\u05e5, \u05e4\u05e8\u05e1\u05de\u05d4 \u05de\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05de\u05d9\u05d3\u05e2 (\u05dc\u05dc\u05d0 \u05e2\u05d3\u05db\u05d5\u05df \u05d0\u05d1\u05d8\u05d7\u05d4) \u05dc\u05d2\u05d1\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d1\u05de\u05d9\u05de\u05d5\u05e9 \u05e4\u05e8\u05d5\u05d8\u05d5\u05e7\u05d5\u05dc SMBv3.\n\n\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d6\u05d5 \u05e0\u05d9\u05ea\u05e0\u05ea \u05dc\u05de\u05d9\u05de\u05d5\u05e9 \u05db\u05ea\u05d5\u05dc\u05e2\u05ea. \u05d9\u05e6\u05d5\u05d9\u05df \u05db\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d1\u05e4\u05e8\u05d5\u05d8\u05d5\u05e7\u05d5\u05dc SMB \u05d0\u05e4\u05e9\u05e8\u05d4 \u05d0\u05ea \u05de\u05d9\u05de\u05d5\u05e9 \u05d4\u05ea\u05d5\u05dc\u05e2\u05d9\u05dd WannaCry \u05d5- NotPetya \u05d1\u05e9\u05e0\u05ea 2017.\n\n\u05e8\u05d0\u05d5 \u05e4\u05e8\u05d8\u05d9\u05dd \u05d1\u05e1\u05e2\u05d9\u05e3 \"\u05d3\u05e8\u05db\u05d9 \u05d4\u05ea\u05de\u05d5\u05d3\u05d3\u05d5\u05ea\" \u05dc\u05d4\u05dc\u05df.\n\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d4\u05e2\u05d3\u05db\u05d5\u05e0\u05d9\u05dd \u05d1\u05e1\u05d1\u05d9\u05d1\u05ea \u05e0\u05d9\u05e1\u05d5\u05d9, \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05e0\u05dd \u05d1\u05d4\u05e7\u05d3\u05dd \u05d4\u05d0\u05e4\u05e9\u05e8\u05d9.", "creation_timestamp": "2020-03-11T12:32:55.000000Z"}, {"uuid": "50accbb9-498a-4d86-8b1d-f87d0b744776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "published-proof-of-concept", "source": "Telegram/C3dLOex4qKF8CrF74Ro2jk8I9HmXrLWpS6IVMSsoWA8-ZJQ", "content": "", "creation_timestamp": "2025-08-04T21:00:05.000000Z"}, {"uuid": "39553793-0973-47db-889b-8d719971e631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/standardhacker/108", "content": "\u05d0\u05d4\u05d1\u05ea\u05d9 \u05d0\u05ea \u05d4\u05de\u05e7\u05d5\u05e8 \u05d4\u05d6\u05d4: https://www.trustedsec.com/blog/detecting-cve-20200688-remote-code-execution-vulnerability-on-microsoft-exchange-server/\n\u05d9\u05e9 \u05e4\u05d4 \u05e4\u05d9\u05e8\u05d5\u05d8 \u05de\u05de\u05e9 \u05d8\u05d5\u05d1 \u05e2\u05dc \u05d0\u05d9\u05da \u05dc\u05d6\u05d4\u05d5\u05ea CVE-2020-0688. \u05dc\u05de\u05d9 \u05e9\u05dc\u05d0 \u05de\u05db\u05d9\u05e8, \u05de\u05d3\u05d5\u05d1\u05e8 \u05d1Exploit \u05dcOWA (\u05e9\u05e8\u05ea \u05d4\u05de\u05d9\u05d9\u05dc\u05d9\u05dd \u05e9\u05dc \u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8) \u05d4\u05de\u05e7\u05e0\u05d4 \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7. \n\u05d9\u05e9 \u05d2\u05dd \u05dc\u05d9\u05e0\u05e7 \u05dc\u05e8\u05e4\u05d5\u05d6\u05d9\u05d8\u05d5\u05e8\u05d9 \u05d1-Github \u05e2\u05dd \u05d4-PoC. \u05dc\u05de\u05d9 \u05e9\u05e8\u05d5\u05e6\u05d4 \u05d9\u05d5\u05ea\u05e8 \u05d5\u05d9\u05d6\u05d5\u05d0\u05dc\u05d9 - \u05d9\u05e9 \u05d2\u05dd \u05e1\u05e8\u05d8\u05d5\u05e0\u05d9\u05dd \u05d1\u05d9\u05d5\u05d8\u05d9\u05d5\u05d1. \n\u05dc\u05de\u05d4 \u05db\u05d3\u05d0\u05d9 \u05dc\u05dc\u05de\u05d5\u05d3 \u05e2\u05dc \u05d4\u05d0\u05e7\u05e1\u05e4\u05dc\u05d5\u05d9\u05d8 \u05d4\u05d6\u05d4? \n\u05d4\u05d5\u05d0 \u05e0\u05de\u05e6\u05d0 \u05d1\u05e9\u05d9\u05de\u05d5\u05e9 \u05e8\u05d7\u05d1 \u05e2\"\u05d9 \u05dc\u05d0 \u05de\u05e2\u05d8 \u05e7\u05d1\u05d5\u05e6\u05d5\u05ea \u05ea\u05e7\u05d9\u05e4\u05d4. \u05d1\u05e2\u05d9\u05e7\u05e8 \u05de\u05e9\u05de\u05e9 \u05dc\u05d4\u05e8\u05e6\u05d4 \u05e9\u05dc webshell \u05d0\u05d5 reverse shell \u05db\u05d3\u05d9 \u05dc\u05d4\u05e9\u05ea\u05dc\u05d8 \u05e2\u05dc \u05d4\u05e9\u05e8\u05ea \u05d5\u05dc\u05d4\u05de\u05e9\u05d9\u05da \u05dc\u05ea\u05d6\u05d5\u05d6\u05d4 \u05d1\u05e8\u05e9\u05ea (lateral movement). \n\u05e9\u05d1\u05ea \u05e9\u05e7\u05d8\u05d4 \u05d7\u05d1\u05e8\u05d9\u05dd (:", "creation_timestamp": "2020-12-11T18:22:01.000000Z"}, {"uuid": "ceb32a91-b77a-4b36-9685-32b68bc52040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "published-proof-of-concept", "source": "https://t.me/S_E_Reborn/5767", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 IR \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 Microsoft Exchange \u0432 \u0410\u0437\u0438\u0438 \u0441 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0433\u043e \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 GhostContainer.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u044b\u043b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u0438\u0437-\u0437\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 N-day.\n\n\u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043c\u043e\u0433\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f RCE-\u043e\u0448\u0438\u0431\u043a\u0430 \u0432 Exchange Server (CVE-2020-0688 \u0441 CVSS: 8,8).\n\n\u0423\u0433\u043b\u0443\u0431\u043b\u0435\u043d\u043d\u043e\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u043b\u043e\u0436\u043d\u043e\u0433\u043e \u043c\u043d\u043e\u0433\u043e\u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0442\u044c, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439.\u00a0\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0443\u043a\u043b\u043e\u043d\u0435\u043d\u0438\u044f \u0438 \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0432\u044b\u0434\u0435\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u0430 \u0444\u043e\u043d\u0435 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432.\u00a0\n\n\u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 GhostContainer \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Exchange, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0440\u044f\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0448\u0435\u043b\u043b-\u043a\u043e\u0434, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0447\u0438\u0442\u0430\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0438\u0445, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0431\u0430\u0439\u0442-\u043a\u043e\u0434 .NET. \n\n\u0424\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u043c\u043e\u0434\u0443\u043b\u044c \u0432\u0435\u0431-\u043f\u0440\u043e\u043a\u0441\u0438 \u0438 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u0411\u044d\u043a\u0434\u043e\u0440 GhostContainer \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u04212 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439.\n\n\u0412\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0438\u0437\u0432\u043d\u0435, \u0430 \u0435\u0433\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u0432\u0435\u0431-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445 Exchange.\n\n\u041e\u0431\u0440\u0430\u0437\u0435\u0446, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 \u044d\u0442\u043e\u0439 APT-\u0430\u0442\u0430\u043a\u0435, \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u043e\u0433\u043e \u0441\u0445\u043e\u0434\u0441\u0442\u0432\u0430 \u0441 \u043a\u0430\u043a\u0438\u043c-\u043b\u0438\u0431\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e, \u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0438 \u0441\u0432\u043e\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0433\u0440\u043e\u0437\u0443 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c, \u043d\u043e \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0430\u043a\u0442\u043e\u0440 \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u043a\u0432\u0430\u043b\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u043c\u0443 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044e Microsoft Exchange Server \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430.\n\n\u0422\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u044f \u041b\u041a \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0447\u0430\u0441\u0442\u044c\u044e APT-\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0433\u043e\u0441\u0441\u0435\u043a\u0442\u043e\u0440 \u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432 \u0410\u0437\u0438\u0438.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440 \u0443\u0433\u0440\u043e\u0437.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0440\u0430\u0437\u0446\u0430 GhostContainer (App_Web_Container_1.dll) - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2025-07-18T17:29:56.000000Z"}, {"uuid": "114ece1f-296a-401c-9c9d-bb9bf9062ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://t.me/is_n3ws/36", "content": "\u0410\u041d\u0411 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u0430\u0442\u0430\u043a\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0432\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u043e\u0442\u0447\u0435\u0442. Top-20 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\nhttps://media.defense.gov/2020/Oct/20/2002519884/-1/-1/0/CSA_CHINESE_EXPLOIT_VULNERABILITIES_UOO179811.PDF\n\nGaining Remote Access: \n-----------------------------\nCVE-2019-11510: Arbitrary file read/Pulse Secure VPN\nCVE-2019-19781: RCE/Citrix ADC\nCVE-2020-8195/3/6: Unauthenticated access\nCVE-2019-0708: RCE on RDP server\nCVE-2020-5902: RCE in F5 BIG-IP\n\nAD:\n----\nCVE-2020-1472: #ZeroLogon\nCVE-2019-1040: NTLM relay bypass\n\nMDM: \n------\nCVE-2020-15505: MobileIron device management\n\nExploiting Public Facing Services:\n---------------- \nCVE-2020-1350: RCE/ DNS Servers #SigRed\nCVE-2018-6789: RCE/ Exim mail transfer\nCVE-2018-4939: RCE/ Adobe's Cold Fusion\n\nWorkstation Local Privilege Escalation:\n-------------------------\nCVE-2020-0601: ECC spoofing #CurveBall\nCVE-2019-0803: Win32k Elevation of Privilege\n\nInternal Applications:\n--------------------\nCVE-2020-0688: RCE/MS Exchange\nCVE-2020-2555: RCE/Oracle Weblogic\nCVE-2019-11580: RCE/Atlassian Crowd\nCVE-2019-18935: RCE/ASP.Net\nCVE-2015-4852: RCE/Apache\nCVE-2019-3396: Unauthorized Access/Confluence\nCVE-2020-10189: RCE/Desktop Central", "creation_timestamp": "2020-11-06T22:00:17.000000Z"}, {"uuid": "8aad141c-c66e-4516-8d9b-de9e797cfce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "published-proof-of-concept", "source": "https://t.me/hybgl/39", "content": "#cve #exchange  #rce\n\n[\u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 Exchange CVE-2020-0688]\n\nhttps://www.thezdi.com/blog/2020/2/24/cve-2020-0688-remote-code-execution-on-microsoft-exchange-server-through-fixed-cryptographic-keys", "creation_timestamp": "2020-02-26T12:03:25.000000Z"}, {"uuid": "5222f92c-ca48-44b0-9754-367f3ca627aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "published-proof-of-concept", "source": "https://t.me/hybgl/157", "content": "#cve #exchange #rce\n\n[ \u0435\u0449\u0435 \u043e\u0434\u0438\u043d \"\u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0445\u043e\u0440\u043e\u0448\u043e\" \u043d\u0430 CVE-2020-0688 ]\n\nhttps://github.com/zcgonvh/CVE-2020-0688", "creation_timestamp": "2020-04-15T19:28:16.000000Z"}, {"uuid": "57419a07-a218-4004-9f73-db895c5972b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/bizone_channel/213", "content": "\u041f\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u0437\u043d\u0430\u043d\u0438\u0439 \u0434\u043b\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Cyber Polygon\n\n\ud83d\udce9\u041c\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0446\u0438\u043a\u043b, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434\u0430\u043c \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 Microsoft Exchange.\n\n\u0412 \u043d\u043e\u0432\u043e\u043c \u0433\u0430\u0439\u0434\u0435 \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043b\u0438 \u043e \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043d\u0430\u0448\u0443\u043c\u0435\u0432\u0448\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 MS Exchange, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e CVE-2020-0688, CVE-2020-16875 \u0438 CVE-2021-24085.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e \u0447\u0442\u043e \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0442\u0430\u043a\u0438\u0435 \u0441\u0432\u0435\u0436\u0438\u0435, \u043a\u0430\u043a ProxyLogon, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0410 \u0435\u0441\u043b\u0438 \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c \u0438\u0445 \u0432\u043e\u0432\u0440\u0435\u043c\u044f, \u043c\u043e\u0436\u043d\u043e \u0441\u0432\u0435\u0441\u0442\u0438 \u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c\u0443 \u043d\u0435\u0433\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0430\u0442\u0430\u043a\u0438 \u2014 \u0438\u043b\u0438 \u0432\u043e\u0432\u0441\u0435 \u0438\u0445 \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c. \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u043a\u0430\u043a \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0442\u0438\u043b\u0438\u0442 \u0438 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 Exchange \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u044b \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c.\n\n\u0415\u0449\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u0437\u043d\u0430\u043d\u0438\u0439 \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0430\u0432\u044b\u043a\u043e\u0432 \u2014 \u043d\u0430 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u043e\u043c \u0442\u0440\u0435\u043d\u0438\u043d\u0433\u0435 Cyber Polygon 9 \u0438\u044e\u043b\u044f. \n\u0412\u0430\u0441 \u0436\u0434\u0443\u0442 \u0432\u044b\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044f \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u043c\u0438\u0440\u043e\u0432\u044b\u0445 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0442\u0440\u0435\u043d\u0438\u043d\u0433 \u0434\u043b\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0432\u0438\u0434\u0435\u043e\u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b.\n\n\ud83d\udc49\u0417\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443\n\n#msexchange", "creation_timestamp": "2021-06-23T13:27:52.000000Z"}, {"uuid": "2cec1cf0-4411-4a97-b00f-d4829e09f8e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/techteamwm/105", "content": "\u0647\u0627\u0643\u0631\u0632 \u064a\u062e\u062a\u0631\u0642\u0648\u0646 \u062e\u0648\u0627\u062f\u0645 Microsoft Exchange\n\n\u0627\u0633\u062a\u063a\u0644\u062a \u0645\u062c\u0645\u0648\u0639\u0627\u062a \u0627\u062e\u062a\u0631\u0627\u0642 \u0645\u062a\u0639\u062f\u062f\u0629 \u062a\u062f\u0639\u0645\u0647\u0627 \u062d\u0643\u0648\u0645\u0627\u062a \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0635\u062d\u062d\u062a\u0647\u0627 \u0634\u0631\u0643\u0629 \u0645\u0627\u064a\u0643\u0631\u0648\u0633\u0648\u0641\u062a \u062e\u0644\u0627\u0644 \u0627\u0644\u0634\u0647\u0631 \u0627\u0644\u0645\u0627\u0636\u064a \u0641\u064a \u062e\u0648\u0627\u062f\u0645 \u0628\u0631\u064a\u062f Microsoft Exchange\u060c \u062d\u064a\u062b \u062c\u0631\u0649 \u0631\u0635\u062f \u0645\u062d\u0627\u0648\u0644\u0627\u062a \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u0623\u0648\u0644 \u0645\u0631\u0629 \u0628\u0648\u0627\u0633\u0637\u0629 \u0634\u0631\u0643\u0629 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0627\u0644\u0628\u0631\u064a\u0637\u0627\u0646\u064a\u0629 Volexity.\n\n\u0648\u0628\u062d\u0633\u0628 \u062a\u0642\u0627\u0631\u064a\u0631\u060c \u0641\u0642\u062f \u0631\u0641\u0636\u062a \u0634\u0631\u0643\u0629 \"Volexity\" \u0630\u0643\u0631 \u0623\u0633\u0645\u0627\u0621 \u0645\u062c\u0645\u0648\u0639\u0627\u062a \u0627\u0644\u0642\u0631\u0635\u0646\u0629 \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u063a\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \"CVE-2020-0688\" \u0641\u064a \"Microsoft Exchange\"\u060c \u0628\u064a\u0646\u0645\u0627 \u0648\u0635\u0641 \u0645\u0635\u062f\u0631 \u0645\u0646 \u0648\u0632\u0627\u0631\u0629 \u0627\u0644\u062f\u0641\u0627\u0639 \u0627\u0644\u0623\u0645\u0631\u064a\u0643\u064a\u0629\u060c \u0645\u062c\u0645\u0648\u0639\u0627\u062a \u0627\u0644\u0647\u0627\u0643\u0631\u0632 \u0628\u0623\u0646\u0647\u0627 \u062a\u0636\u0645 \u062c\u0645\u064a\u0639 \u0627\u0644\u0644\u0627\u0639\u0628\u064a\u0646 \u0627\u0644\u0643\u0628\u0627\u0631\u060c \u0631\u0627\u0641\u0636\u064b\u0627 \u062a\u0633\u0645\u064a\u0629 \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0627\u062a \u0623\u0648 \u0627\u0644\u0628\u0644\u062f\u0627\u0646.\n\n\u0648\u0643\u0627\u0646\u062a \u0634\u0631\u0643\u0629 \u0645\u0627\u064a\u0643\u0631\u0648\u0633\u0648\u0641\u062a \u0642\u062f \u0623\u0635\u062f\u0631\u062a \u062a\u0635\u062d\u064a\u062d\u064b\u0627 \u0644\u0644\u062e\u0637\u0623 \u0641\u064a 11 \u0641\u0628\u0631\u0627\u064a\u0631 \u0627\u0644\u0645\u0627\u0636\u0649\u060c \u0648\u062d\u0630\u0631\u062a \u0645\u0633\u0624\u0648\u0644\u064a \u0627\u0644\u0646\u0638\u0627\u0645 \u0645\u0646 \u0647\u0630\u0647 \u0627\u0644\u0645\u0634\u0643\u0644\u0629\u060c \u0643\u0645\u0627 \u0637\u0627\u0644\u0628\u062a \u0628\u062a\u062b\u0628\u064a\u062a \u0627\u0644\u062a\u0635\u062d\u064a\u062d \u0641\u064a \u0623\u0642\u0631\u0628 \u0648\u0642\u062a \u0645\u0645\u0643\u0646\u060c \u0648\u0630\u0644\u0643 \u0641\u064a \u0638\u0644 \u062a\u0648\u0642\u0639\u0647\u0627 \u062d\u062f\u0648\u062b \u0647\u062c\u0645\u0627\u062a \u0641\u064a \u0627\u0644\u0645\u0633\u062a\u0642\u0628\u0644\u060c \u062d\u064a\u062b \u062a\u0635\u0627\u0639\u062f\u062a \u0627\u0644\u0623\u0645\u0648\u0631 \u0628\u062d\u0644\u0648\u0644 \u0646\u0647\u0627\u064a\u0629 \u0641\u0628\u0631\u0627\u064a\u0631 \u0639\u0646\u062f\u0645\u0627 \u0646\u0634\u0631\u062a \u0645\u0628\u0627\u062f\u0631\u0629 \"Zero Day\" \u062a\u0642\u0631\u064a\u0631 \u062a\u0642\u0646\u0649 \u064a\u0634\u0631\u062d \u0627\u0644\u062e\u0637\u0623 \u0628\u0627\u0644\u062a\u0641\u0635\u064a\u0644 \u0648\u0643\u064a\u0641\u064a\u0629 \u0639\u0645\u0644\u0647.\n\n\u062d\u064a\u062b \u0643\u0627\u0646 \u0647\u0630\u0627 \u0627\u0644\u062a\u0642\u0631\u064a\u0631 \u0628\u0645\u062b\u0627\u0628\u0629 \u062a\u062d\u0630\u064a\u0631 \u0644\u0644\u0628\u0627\u062d\u062b\u064a\u0646 \u0641\u064a \u0645\u062c\u0627\u0644 \u0627\u0644\u0623\u0645\u0646\u060c \u0627\u0644\u0630\u064a\u0646 \u0627\u0633\u062a\u062e\u062f\u0645\u0648\u0627 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u0648\u0627\u0631\u062f\u0629 \u0636\u0645\u0646 \u0627\u0644\u062a\u0642\u0631\u064a\u0631 \u062d\u062a\u0649 \u064a\u062a\u0645\u0643\u0646\u0648\u0627 \u0645\u0646 \u0627\u062e\u062a\u0628\u0627\u0631 \u062e\u0648\u0627\u062f\u0645\u0647\u0645\u060c \u0648\u0643\u0645\u0627 \u0647\u0648 \u0627\u0644\u062d\u0627\u0644 \u0641\u064a \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u062d\u0627\u0644\u0627\u062a \u0627\u0644\u0623\u062e\u0631\u0649 \u0645\u0646 \u0642\u0628\u0644\u060c \u0625\u0630 \u0628\u0645\u062c\u0631\u062f \u0623\u0646 \u0623\u0635\u0628\u062d\u062a \u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644 \u0627\u0644\u062a\u0642\u0646\u064a\u0629 \u0639\u0627\u0645\u0629\u060c \u0628\u062f\u0623 \u0627\u0644\u0645\u062a\u0633\u0644\u0644\u0648\u0646 \u0623\u064a\u0636\u064b\u0627 \u0628\u0627\u0644\u062a\u062d\u0631\u0643.\n\n\u0648\u0628\u062d\u0633\u0628 \u0634\u0631\u0643\u0629 \"Volexity\"\u060c \u0641\u0642\u062f \u062a\u062d\u0648\u0644\u062a \u0639\u0645\u0644\u064a\u0627\u062a \u062a\u0641\u062d\u0635 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0628\u062d\u062b\u064b\u0627 \u0639\u0646 \u062e\u0648\u0627\u062f\u0645 \"Microsoft Exchange\" \u0625\u0644\u0649 \u0647\u062c\u0645\u0627\u062a \u0641\u0639\u0644\u064a\u0629 \u0645\u0646 \u0642\u0628\u0644 \"APT\" \u0623\u0648 \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u0645\u0631\u0629 \u0627\u0644\u0645\u062a\u0642\u062f\u0645\u0629\u060c \u0648\u0647\u0648 \u0645\u0635\u0637\u0644\u062d \u064a\u0633\u062a\u062e\u062f\u0645 \u0644\u0648\u0635\u0641 \u0645\u062c\u0645\u0648\u0639\u0627\u062a \u0627\u0644\u0642\u0631\u0635\u0646\u0629 \u0627\u0644\u062a\u064a \u062a\u0631\u0639\u0627\u0647\u0627 \u0627\u0644\u062f\u0648\u0644\u0629\u060c \u0648\u0645\u0646 \u0627\u0644\u0645\u062a\u0648\u0642\u0639 \u0623\u064a\u0636\u064b\u0627 \u0623\u0646 \u062a\u062d\u0630\u0648 \u062d\u0630\u0648\u0647\u0627 \u0645\u062c\u0645\u0648\u0639\u0627\u062a \u0623\u062e\u0631\u0649.", "creation_timestamp": "2020-03-09T19:45:47.000000Z"}, {"uuid": "3f59c84c-5be6-4d02-9e0d-9f79e801613e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://t.me/TheMalware_Team/2559", "content": "\u0647\u0627\u0643\u0631\u0632 \u064a\u062d\u0635\u0644\u0648\u0646 \u0639\u0644\u0649 \u0645\u0639\u0644\u0648\u0645\u0627\u062a \u062d\u0633\u0627\u0633\u0629 \u062d\u0648\u0644 \u062a\u0637\u0648\u064a\u0631 \u0627\u0644\u0623\u0633\u0644\u062d\u0629 \u0627\u0644\u0623\u0645\u0631\u064a\u0643\u064a\u0629\n\n\u0627\u062e\u062a\u0631\u0642 \u0647\u0627\u0643\u0631\u0632 \u0631\u0648\u0633 \u0634\u0631\u0643\u0627\u062a \u062f\u0641\u0627\u0639\u064a\u0629 \u0623\u0645\u0631\u064a\u0643\u064a\u0629 \u0645\u062a\u0639\u0627\u0642\u062f\u0629 \u0645\u0639 \u0648\u0632\u0627\u0631\u0629 \u0627\u0644\u062f\u0641\u0627\u0639 \u0627\u0644\u0623\u0645\u0631\u064a\u0643\u064a\u0629 \u0648\u062d\u0635\u0644\u0648\u0627 \u0639\u0644\u0649 \u0645\u0639\u0644\u0648\u0645\u0627\u062a \u062d\u0633\u0627\u0633\u0629 \u062d\u0648\u0644 \u062a\u0637\u0648\u064a\u0631 \u0648\u0646\u0634\u0631 \u0627\u0644\u0623\u0633\u0644\u062d\u0629 \u0627\u0644\u0623\u0645\u064a\u0631\u0643\u064a\u0629.\n\n\u0648\u0623\u0648\u0636\u062d \u0645\u0643\u062a\u0628 \u0627\u0644\u062a\u062d\u0642\u064a\u0642\u0627\u062a \u0627\u0644\u0641\u064a\u062f\u0631\u0627\u0644\u064a \u0648\u0648\u0643\u0627\u0644\u0629 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0642\u0648\u0645\u064a \u0648\u0648\u0643\u0627\u0644\u0629 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0641\u064a \u0628\u064a\u0627\u0646 \u0645\u0634\u062a\u0631\u0643 \u0623\u0646 \u0627\u0644\u062c\u0647\u0627\u062a \u0627\u0644\u0641\u0627\u0639\u0644\u0629 \u062a\u0645\u0643\u0646\u062a \u0645\u0646 \u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0645\u0639\u0644\u0648\u0645\u0627\u062a \u062d\u0633\u0627\u0633\u0629 \"\u062a\u0648\u0641\u0631 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0645 \u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u064a\u0647\u0627 \u0646\u0638\u0631\u0629 \u0634\u062f\u064a\u062f\u0629 \u0627\u0644\u0623\u0647\u0645\u064a\u0629 \u0639\u0644\u0649 \u062a\u0637\u0648\u064a\u0631 \u0645\u0646\u0635\u0627\u062a \u0627\u0644\u0623\u0633\u0644\u062d\u0629 \u0627\u0644\u0623\u0645\u0631\u064a\u0643\u064a\u0629 \u0648\u0627\u0644\u062c\u062f\u0627\u0648\u0644 \u0627\u0644\u0632\u0645\u0646\u064a\u0629 \u0644\u0644\u0646\u0634\u0631 \u060c \u0648\u0645\u0648\u0627\u0635\u0641\u0627\u062a \u0627\u0644\u0645\u0631\u0643\u0628\u0627\u062a \u060c \u0648\u062e\u0637\u0637 \u0627\u0644\u0628\u0646\u064a\u0629 \u0627\u0644\u062a\u062d\u062a\u064a\u0629 \u0644\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0648\u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a.\"\n\n\u062a\u0634\u0645\u0644 \u0627\u0644\u0643\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0639\u0631\u0636\u062a \u0644\u0644\u062e\u0631\u0642 \u0627\u0644\u0634\u0631\u0643\u0627\u062a \u0627\u0644\u0645\u0634\u0627\u0631\u0643\u0629 \u0641\u064a \u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0642\u064a\u0627\u062f\u0629 \u0648\u0627\u0644\u0633\u064a\u0637\u0631\u0629 \u0648\u0627\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0648\u0627\u0644\u0642\u062a\u0627\u0644 \u060c \u0627\u0644\u0645\u0631\u0627\u0642\u0628\u0629 \u0648\u0627\u0644\u0627\u0633\u062a\u0637\u0644\u0627\u0639 \u060c \u062a\u0637\u0648\u064a\u0631 \u0627\u0644\u0623\u0633\u0644\u062d\u0629 \u0648\u0627\u0644\u0635\u0648\u0627\u0631\u064a\u062e \u060c \u062a\u0635\u0645\u064a\u0645 \u0627\u0644\u0645\u0631\u0643\u0628\u0627\u062a \u0648\u0627\u0644\u0637\u0627\u0626\u0631\u0627\u062a \u060c \u0648\u062a\u0637\u0648\u064a\u0631 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0648\u062a\u062d\u0644\u064a\u0644\u0627\u062a \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0648\u0627\u0644\u062f\u0639\u0645 \u0627\u0644\u0644\u0648\u062c\u064a\u0633\u062a\u064a.\n\n\u0623\u0648\u0636\u062d \u0627\u0644\u0628\u064a\u0627\u0646 \u0627\u0644\u0645\u0634\u062a\u0631\u0643 \u0623\u0646 \u062d\u0645\u0644\u0629 \u0627\u0644\u062a\u062c\u0633\u0633 \u0642\u062f \u0628\u062f\u0623\u062a \u0645\u0646\u0630 \u0639\u0627\u0645\u064a\u0646 \u0639\u0644\u0649 \u0627\u0644\u0623\u0642\u0644 \u0627\u0639\u062a\u0628\u0627\u0631\u064b\u0627 \u0645\u0646 \u064a\u0646\u0627\u064a\u0631 2020 \u060c \u0648\u0634\u0645\u0644\u062a \u0643\u0644 \u0627\u0644\u0641\u0631\u0648\u0639 \u0627\u0644\u0639\u0633\u0643\u0631\u064a\u0629 \u0627\u0644\u0623\u0645\u064a\u0631\u0643\u064a\u0629 \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0627\u0644\u0642\u0648\u0627\u062a \u0627\u0644\u062c\u0648\u064a\u0629 \u0648\u0627\u0644\u062c\u064a\u0634 \u0648\u0627\u0644\u0628\u062d\u0631\u064a\u0629 \u0648\u0627\u0644\u0641\u0636\u0627\u0621.\n\n\u0641\u064a\u0645\u0627 \u064a\u0644\u064a \u0628\u0639\u0636 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0627\u0644\u063a\u064a\u0631 \u0645\u0635\u062d\u062d\u0629 \u0644\u062f\u0649 \u0645\u0642\u0627\u0648\u0644\u064a \u0627\u0644\u062f\u0641\u0627\u0639 \u0627\u0644\u0623\u0645\u0631\u064a\u0643\u064a\u064a\u0646 \u0627\u0644\u062a\u064a \u0627\u0633\u062a\u062e\u062f\u0645\u0647\u0627 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0644\u0644\u0648\u0635\u0648\u0644 \u0627\u0644\u0623\u0648\u0644\u064a \u0648\u0631\u0641\u0639 \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a:\nCVE-2018-13379 \nCVE-2020-0688 \nCVE-2020-17144", "creation_timestamp": "2023-02-16T17:16:41.000000Z"}, {"uuid": "0d81230d-77f6-45a3-97c9-e59c270b81dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "Telegram/gML51QAekWIiB278on55PmNfqHz9xdWxpfzRSLLQ4gz7EDWn", "content": "", "creation_timestamp": "2025-02-06T02:42:29.000000Z"}, {"uuid": "a6a1269a-bd42-486c-a39c-dc5618b85208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://t.me/arpsyndicate/999", "content": "#ExploitObserverAlert\n\nCVE-2020-0688\n\nDESCRIPTION: Exploit Observer has 150 entries related to CVE-2020-0688. A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.\n\nFIRST-EPSS: 0.972010000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-03T18:25:50.000000Z"}, {"uuid": "adb8366f-d9ad-49f6-8399-9dfd752003ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://t.me/arpsyndicate/605", "content": "#ExploitObserverAlert\n\nCVE-2020-0688\n\nDESCRIPTION: Exploit Observer has 150 entries related to CVE-2020-0688. A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.\n\nFIRST-EPSS: 0.972010000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-11-27T22:52:02.000000Z"}, {"uuid": "984e7fa6-cc67-4cc1-ae52-061a1c6cd9bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/2885", "content": "Tools - Hackers Factory\n\n\u200b\u200bEF/CF\n\nthe Extremely Fast (ethereum smart) Contract Fuzzer\n\nhttps://github.com/uni-due-syssec/efcf-framework\n\n#cybersecurity #infosec\n\n\u200b\u200bPatchlessInlineExecute-Assembly\n\nPorting of InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.\n\nhttps://github.com/VoldeSec/PatchlessInlineExecute-Assembly\n\n#infosec #pentesting #redteam\n\n\u200b\u200bpdnscollect\n\nBrowser extension and local listener PoC for collecting your own DNS data while browsing\n\nhttps://github.com/olihough86/pdnscollect\n\n#cybersecurity #infosec\n\n\u200b\u200btheHarvester\n\nA simple to use, yet powerful tool designed to be used during the reconnaissance stage of a red team assessment or penetration test. It performs open source intelligence (OSINT) gathering to help determine a domain's external threat landscape. The tool gathers names, emails, IPs, subdomains, and URLs by using multiple public resources that include:\n\nhttps://github.com/laramies/theHarvester\n\n#best #infosec #pentesting #redteam\n\n\u200b\u200bPowerMayhem\n\nhttps://github.com/jungawagat/powermayhem\n\n#infosec #pentesting #redteam\n\nRoboDroid\n\nA cutting-edge software tool designed to simplify the process of managing (and very soon also deploying) Android machines for usage in Cyber Range environments. With RoboDroid, users can easily set up and customize pre-defined behaviors for their Android machines, allowing them to create complex cyber attack scenarios and test their defenses against a wide range of threats.\n\nhttps://github.com/cybersecsi/robodroid\n\n#cybersecurity #infosec #android\n\n\u200b\u200bDynamicFinder\n\nA DLL sideloading utility. DynamicFinder will search every running process for DLL sideloading opportunities.\n\nhttps://github.com/SecurityAndStuff/DynamicFinder\n\n#infosec #pentesting #redteam\n\n\u200b\u200bcve-2020-0688\n\nhttps://github.com/Ridter/cve-2020-0688\n\n#infosec #pentesting\n\nGVision\n\nA reverse image search app that use Google Cloud Vision API to detect landmarks and web entities from images, helping you gather valuable information quickly and easily.\n\nhttps://github.com/GONZOsint/gvision\n\n#OSINT #infosec #infosecurity\n\n\u200b\u200bExegol\n\nCommunity-driven hacking environment, powerful and yet simple enough to be used by anyone in day to day engagements. Exegol is the best solution to deploy powerful hacking environments securely, easily, professionally. \n\nExegol fits pentesters, CTF players, bug bounty hunters, researchers, beginners and advanced users, defenders, from stylish macOS users and corporate Windows pros to UNIX-like power users.\n\nhttps://github.com/ThePorgs/Exegol\n\n#infosec #pentesting #redteam\n\n\u200b\u200bDiscover\n\nCustom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.\n\nhttps://github.com/leebaird/discover\n\n#infosec #pentesting #redteam\n\n#cybersecurity #Infosec #cybersec #dilagrafie #activism #cyber\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "creation_timestamp": "2023-04-17T12:47:56.000000Z"}, {"uuid": "821a2250-4e25-425e-bcbb-265a2ca3e8d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/reconshell/289", "content": "CVE-2020-0688 Microsoft Exchange Remote Code Execution With POC\n\n#CVE-2020-0688 #RCE #RemoteCodeExecution #Vulnerability #YSoSerial\n\nhttps://reconshell.com/cve-2020-0688-microsoft-exchange-remote-code-execution-with-poc/", "creation_timestamp": "2021-01-12T21:02:02.000000Z"}, {"uuid": "182e7a9d-f906-440a-b9b6-2ea1f71a8bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://t.me/true_secator/1053", "content": "Clearsky \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u043e \u043d\u043e\u0432\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 QuickSand \u0437\u0430 \u0430\u0432\u0442\u043e\u0440\u0441\u0442\u0432\u043e\u043c \u0438\u0440\u0430\u043d\u0441\u043a\u043e\u0439 APT MuddyWater, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0433\u043e\u0432\u043e\u0440\u044f\u0442 \u043f\u0440\u044f\u043c\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u041a\u0421\u0418\u0420 (\u041a\u043e\u0440\u043f\u0443\u0441 \u0441\u0442\u0440\u0430\u0436\u0435\u0439 \u0438\u0441\u043b\u0430\u043c\u0441\u043a\u043e\u0439 \u0440\u0435\u0432\u043e\u043b\u044e\u0446\u0438\u0438). \u0418 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0438 \u0432 \u043d\u0435\u043c \u0442\u0430\u043a\u0443\u044e \u0442\u0435\u043e\u0440\u0438\u044e \u0437\u0430\u0433\u043e\u0432\u043e\u0440\u043e\u0432, \u0447\u0442\u043e \u0434\u0438\u0432\u0443 \u0434\u0430\u0435\u0448\u044c\u0441\u044f.\n\nQuickSand \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u0432\u0430 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a\u0438 - \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0444\u0438\u0448\u0438\u043d\u0433 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2020-0688, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a RCE \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Microsoft Exchange, \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n \n\u0412 \u043e\u0431\u043e\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a PowGoop.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 TTPs, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u0441\u0445\u043e\u0434\u0441\u0442\u0432\u0430 \u0432 \u043a\u043e\u0434\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043e\u0432, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u043f\u0440\u0438\u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u044c MuddyWater \u043a \u0430\u0442\u0430\u043a\u0435 QuickSand. \u0412 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441\u0445\u043e\u0434\u0441\u0442\u0432\u043e \u043a\u043e\u0434\u0430 \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0432 PowGoop \u0438 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c\u043e\u043c \u0438\u0440\u0430\u043d\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0435 MoriAgent (\u0442\u0443\u0442 \u0442\u043e\u0436\u0435 \u0435\u0441\u0442\u044c \u0442\u043e\u043d\u043a\u043e\u0441\u0442\u0438, \u043d\u043e \u043e\u0431 \u044d\u0442\u043e\u043c \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0437\u0436\u0435). \n\n\u0418 \u0432\u043e\u0442 \u0434\u0430\u043b\u044c\u0448\u0435 \u0432 \u043f\u0440\u0438\u043b\u0438\u0447\u043d\u043e\u043c \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0431\u0440\u0438\u0442\u0430\u043d\u0446\u0435\u0432 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0442\u0440\u0435\u0448 \u0438 \u0441\u043e\u0434\u043e\u043c\u0438\u044f.\n\n\u0417\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a PowGoop \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043b\u0441\u044f Palo Alto Networks \u043a\u0430\u043a \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439\u0441\u044f \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0441\u0435\u0442\u044c ransomware  Thanos. \u042d\u0442\u043e \u0442\u043e\u0442 \u0441\u0430\u043c\u044b\u0439 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u043d\u044f\u0442\u044c MBR \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043e \u0432\u044b\u043f\u043b\u0430\u0442\u0435 \u0432\u044b\u043a\u0443\u043f\u0430, \u043d\u043e \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043a\u043e\u0434\u0435 \u043d\u0435 \u0441\u043c\u043e\u0433, - \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043f\u0440\u043e \u044d\u0442\u043e \u0437\u0434\u0435\u0441\u044c.\n\n\u0412\u044b\u0432\u043e\u0434 \u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 PowGoop \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 Thanos \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u0438\u0437 Palo Alto \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u0432 \u0441\u0438\u043b\u0443 \"\u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0441\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430\" - \u0441\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u044f \u0432 \u0438\u043c\u0435\u043d\u0438 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u043c LogicalDuckBill, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 Thanos.\n\n\u0418 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043b\u0438\u0448\u044c \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f Palo Alto, \u0447\u0442\u043e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e PowGoop \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c\u0441\u044f ransomware Thanos, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0441\u0442\u0438\u0440\u0430\u0442\u044c MBR (\u0430 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u043d\u0435 \u0441\u0442\u0438\u0440\u0430\u0435\u0442), \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u0438\u0437 ClearSky \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0438 \u0446\u0435\u043b\u044b\u0439 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u043e\u043c\u0430\u043d \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u0437\u043b\u044b\u0435 \u0438\u0440\u0430\u043d\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0445\u043e\u0442\u044f\u0442 \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u0443\u0449\u0435\u0440\u0431\u0430 \u0441\u0432\u043e\u0438\u043c \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u043c \u0432\u0438\u0437\u0430\u0432\u0438 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0430\u044f \u0438\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b. \u0420\u0430\u0437\u0443\u043c\u0435\u0435\u0442\u0441\u044f, \u043d\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u044f \u0441\u043b\u043e\u0432\u0430 \"\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\" \u0432 \u0447\u0430\u0441\u0442\u0438 \u0441\u0432\u044f\u0437\u0438 PowGoop \u0438 Thanos \u0432 \u0438\u0445 \u043e\u0442\u0447\u0435\u0442\u0435 \u043d\u0435\u0442, \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u0430\u044f \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0430\u0446\u0438\u044f \u0444\u0430\u043a\u0442\u0430.\n\n\u041f\u0440\u0438\u0447\u0430\u0441\u0442\u043d\u044b \u043b\u0438 \u043a \u0430\u0442\u0430\u043a\u0435 \u0438\u0440\u0430\u043d\u0446\u044b? \u0421 \u043e\u0447\u0435\u043d\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c\u044e - \u0434\u0430. \u041f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0438\u0442 \u043b\u0438 \u0438\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a PowGoop? \u041e\u043f\u044f\u0442\u044c \u0436\u0435, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e - \u0434\u0430. \u0422\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438\u0447\u0435\u043c \u0442\u0443\u0442 Thanos \u0438 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0435\u043d\u0438\u0435 MBR?\n\n\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e ClearSky \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u043a\u0430\u043a\u0438\u043c\u0438-\u0442\u043e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438, \u043d\u043e \u0442\u043e\u0433\u0434\u0430 \u0438\u0445 \u043d\u0430\u0434\u043e \u0432\u044b\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u0432 \u043f\u0430\u0431\u043b\u0438\u043a. \u0410 \u043f\u043e\u043a\u0430 \u043c\u044b \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u0441\u043f\u0440\u043e\u0441\u0438\u043c - \u0433\u0434\u0435 TTPs?", "creation_timestamp": "2020-10-16T13:21:33.000000Z"}, {"uuid": "f315f7b8-41b6-40a8-96cc-9032ea38fd66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/157", "content": "CVE-2020-0688 \u5fae\u8edfEXCHANGE\u670d\u52d9\u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2020-0688_%E5%BE%AE%E8%BB%9FEXCHANGE%E6%9C%8D%E5%8B%99%E9%81%A0%E7%A8%8B%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-09-21T06:42:48.000000Z"}, {"uuid": "607dafc1-7150-477b-8556-1c64f588c479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "Telegram/0sD_EyHySREvSWLaWKL-XHqTqDduPkHhIy1vEKF4pCPQbv8", "content": "", "creation_timestamp": "2020-10-28T02:58:38.000000Z"}, {"uuid": "3be884ef-a7e5-40fb-af60-871144870971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "Telegram/7Oi6-OFNuLHRtv45OKiuPrjAGnQe8YHKQ_-IV-jvjPr3hA", "content": "", "creation_timestamp": "2026-08-03T02:05:52.470082Z"}, {"uuid": "d1173ee2-f0b6-4950-a038-e2f27735f5c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/haccking/71103", "content": "\u200b\u200b#\u041d\u043e\u0432\u043e\u0441\u0442\u0438\n\n1. \u0411\u0430\u0433\u0438 \u0432 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c HP Support Assistant \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u043c\u0430\u0448\u0438\u043d\u0430\u043c \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows.\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435...\n\n2. \u0422\u044b\u0441\u044f\u0447\u0438 Android-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043c\u0430\u0441\u0442\u0435\u0440-\u043f\u0430\u0440\u043e\u043b\u0438, \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435...\n\n3. Facebook \u043f\u044b\u0442\u0430\u043b\u0430\u0441\u044c \u043a\u0443\u043f\u0438\u0442\u044c \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e \u0443 NSO Group.\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435...\n\n4. 82,5% \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a CVE-2020-0688.\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435...", "creation_timestamp": "2020-04-08T06:00:28.000000Z"}, {"uuid": "354f7480-15c5-4748-a00f-92820913eb5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "published-proof-of-concept", "source": "https://t.me/HackerOne/2735", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 #Microsoft #Exchange server Remote #CodeExecution [#RCE] reported via anonymous researcher.\n\nhttps://www.thezdi.com/blog/2020/2/24/cve-2020-0688-remote-code-execution-on-microsoft-exchange-server-through-fixed-cryptographic-keys", "creation_timestamp": "2020-09-16T17:28:31.000000Z"}, {"uuid": "2f52937b-9696-4d1c-8f8d-587084b82453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/information_security_channel/35748", "content": "Multiple APT actors attempting to exploit recently patched remote code execution bug in exchange email servers. The vulnerability can be tracked as CVE-2020-0688. It affects all versions of the exchange server. The bug resides in the Exchange Control Panel (ECP) component, which can be used to manage mailboxes, Distribution Groups, Contacts at the mailbox level [\u2026]\nThe post Multiple APT Actors Exploiting Microsoft Exchange Email Servers Vulnerability to Take Over the Server (https://gbhackers.com/apt-exchange-email-servers/) appeared first on GBHackers On Security (https://gbhackers.com/).", "creation_timestamp": "2020-03-10T07:19:50.000000Z"}, {"uuid": "b66ad1f4-239e-4211-b49f-815409fda1b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/xakep_ru/8778", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0441\u0435\u0442\u044c \u0432 \u043f\u043e\u0438\u0441\u043a\u0430\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0449\u0443\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Microsoft Exchange, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043f\u0435\u0440\u0435\u0434 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 CVE-2020-0688, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434.\n\nhttps://xakep.ru/2020/02/28/cve-2020-0688/", "creation_timestamp": "2020-02-28T13:35:07.000000Z"}, {"uuid": "676f4f9d-a0b6-47d0-affa-8ad5ade2d420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/xakep_ru/8969", "content": "\u0411\u043e\u043b\u0435\u0435 350 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange \u0432\u0441\u0435 \u0435\u0449\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043f\u0435\u0440\u0435\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0431\u0430\u0433\u043e\u043c\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 CVE-2020-0688 \u0435\u0449\u0435 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u0440\u0442\u0430 2020 \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u0431\u043e\u043b\u0435\u0435 80% \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0431\u0435\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\nhttps://xakep.ru/2020/04/08/exchange-rce/", "creation_timestamp": "2020-04-08T21:35:07.000000Z"}, {"uuid": "151de24f-9977-4bb0-97c9-d6328f25321d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/SecLabNews/8900", "content": "\u0411\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 247 \u0442\u044b\u0441. \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (CVE-2020-0688).      \n247 \u0442\u044b\u0441. \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u0430\u0442\u0430\u043a\u0430\u043c", "creation_timestamp": "2020-09-30T19:41:53.000000Z"}, {"uuid": "8491cc11-bf2e-47c8-b1f2-bcfcbd6c3ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "published-proof-of-concept", "source": "https://t.me/canyoupwnme/6305", "content": "CVE-2020-0688: REMOTE CODE EXECUTION ON MICROSOFT EXCHANGE SERVER THROUGH FIXED CRYPTOGRAPHIC KEYS\nhttps://www.thezdi.com/blog/2020/2/24/cve-2020-0688-remote-code-execution-on-microsoft-exchange-server-through-fixed-cryptographic-keys", "creation_timestamp": "2020-02-27T09:20:02.000000Z"}, {"uuid": "aef17b26-b9c2-42dc-823f-815e20eb6063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/haccking/4802", "content": "\u200b\u200b#\u041d\u043e\u0432\u043e\u0441\u0442\u0438\n\n1. \u0411\u0430\u0433\u0438 \u0432 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c HP Support Assistant \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u043c\u0430\u0448\u0438\u043d\u0430\u043c \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows.\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435...\n\n2. \u0422\u044b\u0441\u044f\u0447\u0438 Android-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043c\u0430\u0441\u0442\u0435\u0440-\u043f\u0430\u0440\u043e\u043b\u0438, \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435...\n\n3. Facebook \u043f\u044b\u0442\u0430\u043b\u0430\u0441\u044c \u043a\u0443\u043f\u0438\u0442\u044c \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e \u0443 NSO Group.\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435...\n\n4. 82,5% \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a CVE-2020-0688.\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435...", "creation_timestamp": "2020-04-08T08:00:25.000000Z"}, {"uuid": "e4a0e160-d313-44f4-b50c-23836a2bd94d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/SecLabNews/6972", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0421\u0435\u0442\u044c \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-0688. \u0415\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 SYSTEM \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e.    \n\u041f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0421\u0435\u0442\u044c \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange", "creation_timestamp": "2020-02-27T13:20:02.000000Z"}, {"uuid": "440f1b39-ffcd-4acb-a973-9ddd34ccc536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/SecLabNews/7294", "content": "\u0411\u043e\u043b\u0435\u0435 35 \u0442\u044b\u0441. \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2020-0688.    \n82,5% \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a CVE-2020-0688", "creation_timestamp": "2020-04-07T10:00:19.000000Z"}, {"uuid": "24de70a4-ecca-4062-9453-4123d01fee4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://t.me/Russian_OSINT/875", "content": "\u200b\u200b\ud83d\ude94 \u0424\u0411\u0420 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u043f\u0438\u0441\u043e\u043a 30 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 2 \u0433\u043e\u0434\u0430\n\nCVE-2021-26855: It is a Microsoft Exchange Server Remote Code Execution\nCVE-2021-26857: It is a Microsoft Exchange Server Remote Code Execution\nCVE-2021-26858: It is a Microsoft Exchange Server Remote Code Execution\nCVE-2021-27065: It is a Microsoft Exchange Server Remote Code Execution\nCVE-2021-22893: It is an Improper Authentication vulnerability that is marked as critical\nCVE-2021-22894: It is a buffer overflow vulnerability that enables an attacker to execute arbitrary code\nCVE-2021-22899: It is a command injection vulnerability that enables an attacker to execute remote code\nCVE-2021-22900: It is an Improper Control of Generation of Code vulnerability\nCVE-2021-27101: It is an Improper Neutralization of Special Elements used in an SQL Command\nCVE-2021-27102: It is an Improper Neutralization of Special Elements used in an OS Command\nCVE-2021-27103: It is a Server-Side Request Forgery (SSRF) vulnerability\nCVE-2021-27104: It is an Improper Neutralization of Special Elements used in an OS Command vulnerability\nCVE-2021-21985: It is an Improper Input Validation vulnerability\nCVE-2018-13379: It is an Improper Limitation of a Pathname to a Restricted Directory (\u2018Path Traversal\u2019)\nCVE-2020-12812: It is an Improper Authentication vulnerability\nCVE-2019-5591: It is a Missing Authentication for Critical Function vulnerability\nCVE-2019-19781: It is an Improper Limitation of a Pathname to a Restricted Directory \nCVE 2019-11510: It is an Improper Limitation of a Pathname to a Restricted Directory\nCVE 2018-13379: It is an Improper Limitation of a Pathname to a Restricted Directory \nCVE 2020-5902: It is an Inclusion of Functionality from Untrusted Control Sphere and Improper Limitation of a Pathname to a Restricted Directory vulnerability \nCVE 2020-15505: It is an Insufficient Information vulnerability\nCVE-2017-11882: It is a Microsoft Office Memory Corruption vulnerability that enables an attacker to execute arbitrary code.\nCVE-2019-11580: It is an Insufficient Information vulnerability\nCVE-2018-7600: It is an Improper Input Validation vulnerability\nCVE 2019-18935: It is a Deserialization of Untrusted Data vulnerability\nCVE-2019-0604: It is a Microsoft SharePoint Remote Code Execution Vulnerability\nCVE-2020-0787: It is a Windows Background Intelligent Transfer Service Elevation of Privilege vulnerability\nCVE-2020-1472: It is a Netlogon Elevation of Privilege vulnerability \nCVE-2020-15505: It is an Insufficient Information vulnerability\nCVE-2020-0688: It is a Use of Hard-coded Credentials vulnerability", "creation_timestamp": "2021-07-29T17:59:02.000000Z"}, {"uuid": "2cbdf2be-a1d5-4ed7-8d4e-d075b59ba343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/699", "content": "#exploit \nCVE-2020-0688: \nRCE on MS Exchange Server Through Fixed Cryptographic Keys\nhttps://www.zerodayinitiative.com/blog/2020/2/24/cve-2020-0688-remote-code-execution-on-microsoft-exchange-server-through-fixed-cryptographic-keys", "creation_timestamp": "2024-10-08T20:59:48.000000Z"}, {"uuid": "20ec27fe-ef81-440c-948b-81b365335124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/CyberSecurityTechnologies/716", "content": "#info                                                                                                                                                 Multiple Exploits now out for CVE-2020-0688 - the Microsoft Exchange deserialization vuln\n\nMicrosoft:\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688\nZDI:\nhttps://www.thezdi.com/blog/2020/2/24/cve-2020-0688-remote-code-execution-on-microsoft-exchange-server-through-fixed-cryptographic-keys\nSigma Rules:\nhttps://github.com/NVISO-BE/sigma-public/blob/web_exchange_cve_2020_0688_exploit/rules/web/web_exchange_cve_2020_0688_exploit.yml\nOther Detection:\nhttps://www.trustedsec.com/blog/detecting-cve-20200688-remote-code-execution-vulnerability-on-microsoft-exchange-server/\nExploits:\nhttps://github.com/Ridter/cve-2020-0688\nhttps://github.com/random-robbie/cve-2020-0688\nhttps://github.com/Jumbo-WJB/CVE-2020-0688\nhttps://github.com/Yt1g3r/CVE-2020-0688_EXP\nOther:\nCERT-FR (French) alert - https://www.cert.ssi.gouv.fr/alerte/CERTFR-2020-ALE-007/", "creation_timestamp": "2024-10-09T23:26:30.000000Z"}, {"uuid": "d61c206f-0642-430e-9709-829e20f3a2e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1902", "content": "#Analytics\nTop-10 exploited vulnerabilities in January-July 2020:\n1. MVPower DVR Remote Code Execution*\n2. Dasan GPON Router Authentication Bypass (CVE-2018-10561)*\n3. OpenSSL TLS DTLS Heartbeat Information Disclosure (CVE-2014-0160; CVE-2014-0346)\u00a0\n4. HTTP Headers Remote Code Execution (CVE-2020-13756)*\n5. Arbitrary code execution vulnerability in Citrix VPN (CVE-2019-19781)*\n6. Draytek Vigor Command Injection (CVE-2020-8515)*\n7. Command Injection Over HTTP Payload\n8. SQL Injection (several techniques)\n9. RCE on MS Exchange Server (CVE-2020-0688)*\n10. Web Server Exposed Git Repository Information Disclosure\n\n* - Description/PoC available on Cybersecurity Technologies channel ...", "creation_timestamp": "2020-12-18T17:23:40.000000Z"}, {"uuid": "a42a9b7e-c983-4aa3-a659-2aafc3927426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "Telegram/7Oi6-OFNuLHRtv45OKiuPrjAGnQe8YHKQ_-IV-jvjPr3hA", "content": "", "creation_timestamp": "2026-08-02T14:40:52.706465Z"}, {"uuid": "4a5024ab-3602-4e8e-87ae-ba776e82b0a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://t.me/timcore_hacking/807", "content": "#news@hacker_timcore\n\n\u041e\u0431\u0437\u043e\u0440 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 24 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043f\u043e 2 \u043c\u0430\u0440\u0442\u0430\n\n\u041a\u043e\u0440\u043e\u0442\u043a\u043e \u043e \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u0445 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0438.\n\n\u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 ESET \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0431\u043e\u043b\u0435\u0435 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b, \u043f\u043b\u0430\u043d\u0448\u0435\u0442\u044b, \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0438, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u0438 IoT-\u0433\u0430\u0434\u0436\u0435\u0442\u044b. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Kr00k, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c Wi-Fi-\u0447\u0438\u043f\u043e\u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430 Broadcom \u0438 Cypress. \u0415\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0434\u0435\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u0440\u0438\u0441\u043a\u0443 \u0430\u0442\u0430\u043a \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Amazon (Echo, Kindle), Apple (iPhone, iPad, MacBook), Google (Nexus), Samsung (Galaxy), Raspberry (Pi 3), Xiaomi (RedMi), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043e\u0442 Asus \u0438 Huawei.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0421\u0435\u0442\u044c \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-0688, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0414\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0443\u0436\u043d\u043e \u043b\u0438\u0448\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0432 \u0421\u0435\u0442\u0438, \u043d\u0430\u0439\u0442\u0438 \u0430\u0434\u0440\u0435\u0441\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u044b\u0442\u044c \u0447\u0435\u0440\u0435\u0437 URL-\u0430\u0434\u0440\u0435\u0441 web-\u043a\u043b\u0438\u0435\u043d\u0442\u0430 Outlook Web Access (OWA) \u0438\u043b\u0438 \u0437\u0430\u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0443\u0442\u0435\u0447\u0435\u043a.\n\n\u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Clearview AI, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u044f \u043b\u0438\u0446, \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u0442\u0435\u0447\u043a\u0435 \u0441\u043f\u0438\u0441\u043a\u0430 \u0435\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0432 \u0447\u0438\u0441\u043b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u044e\u0442 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0424\u0411\u0420. \u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0430\u0441\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u043e\u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043c\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439. \u041a\u0430\u043a \u0443\u0432\u0435\u0440\u044f\u044e\u0442 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0431\u0430\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0430\u044f 3 \u043c\u043b\u043d \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u043d\u0435 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u0430. \u041a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430 \u0443\u0442\u0435\u0447\u043a\u0430, \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438.\n\n\u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c. \u0422\u0430\u043a, \u043f\u0440\u043e\u043a\u0443\u0440\u0430\u0442\u0443\u0440\u0435 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0448\u0442\u0430\u0442\u0430 \u0424\u043b\u043e\u0440\u0438\u0434\u0430 \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u043e\u0442\u043e\u0437\u0432\u0430\u0442\u044c 11 \u0434\u0435\u043b \u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435 \u0438 \u0442\u043e\u0440\u0433\u043e\u0432\u043b\u0435 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043d\u044b\u043c\u0438 \u0432\u0435\u0449\u0435\u0441\u0442\u0432\u0430\u043c\u0438, \u0432\u043e\u0437\u0431\u0443\u0436\u0434\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u0438\u0432 \u0448\u0435\u0441\u0442\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u0435\u043c\u044b\u0445, \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0432\u0441\u044f \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0431\u0430\u0437\u0430 \u0431\u044b\u043b\u0430 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0435\u043d\u0430 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c \u041f\u041e Ryuk. \u0417\u0430 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0438 $300 \u0442\u044b\u0441., \u043d\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f \u0433\u043e\u0440\u043e\u0434\u0430 \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u043f\u043b\u0430\u0442\u0438\u0442\u044c. \u0425\u043e\u0442\u044f \u043f\u043e\u043b\u0438\u0446\u0435\u0439\u0441\u043a\u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439, \u0444\u043e\u0442\u043e- \u0438 \u0432\u0438\u0434\u0435\u043e\u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0432 11 \u0434\u0435\u043b\u0430\u0445 \u043e \u0441\u0431\u044b\u0442\u0435 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0449\u0435\u0441\u0442\u0432 \u0431\u044b\u043b\u0438 \u0443\u0442\u0435\u0440\u044f\u043d\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u0432\u0440\u0430\u0442\u043d\u043e.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.securitylab.ru/news/505484.php", "creation_timestamp": "2026-08-05T05:00:07.851823Z"}, {"uuid": "cb2a5a44-cd83-43ca-a5ed-78dfe000be7e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c53d0413-e180-4f8e-97cb-7666529ef8b8", "content": "", "creation_timestamp": "2026-06-19T12:47:50.404024Z"}, {"uuid": "7bd6452e-14b7-409d-811d-3b24230ff681", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a9c0cd84-41ea-4ebd-b4c1-fa3179192a0f", "content": "", "creation_timestamp": "2026-06-23T14:04:38.509839Z"}, {"uuid": "5af8ea7a-2689-4fec-b6d3-2b11312c57de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://t.me/pleyades_it/5935", "content": "La NSA advierte sobre la vulnerabilidad CVE-2020-0688 en Microsoft Exchange la cual permitir\u00eda a un atacante ejecutar comandos de forma remota en servidores vulnerables de Microsoft Exchange usando credenciales de correo electr\u00f3nico. Por este motivo instan a los usuarios a parchear esa vulnerabilidad de tipo RCE (Remote Code Execution): Microsoft ya public\u00f3 una correcci\u00f3n incluida en las actualizaciones del segundo martes del mes de febrero de 2020.\nhttp://pygy.co/CKy\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\nM\u00e1s sobre la vulnerabilidad CVE-2020-0688: http://pygy.co/CKz\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796", "creation_timestamp": "2026-07-12T22:00:18.441281Z"}, {"uuid": "afc869ac-8e4d-4c94-8168-29f14ea0bf21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://t.me/EchelonEyes/232", "content": "\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410, \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u041a\u0430\u043d\u0430\u0434\u044b, \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0438 \u0438 \u041d\u043e\u0432\u043e\u0439 \u0417\u0435\u043b\u0430\u043d\u0434\u0438\u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0441\u0430\u043c\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0432 2021-\u043c \u0433\u043e\u0434\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0421\u0428\u0410 (CISA). \u041e\u043d \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430c\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 (CISA, \u0410\u041d\u0411, \u0424\u0411\u0420), \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0438 (\u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0439\u0441\u043a\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 - ACSC), \u041a\u0430\u043d\u0430\u0434\u044b (\u041a\u0430\u043d\u0430\u0434\u0441\u043a\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 - CCCS), \u041d\u043e\u0432\u043e\u0439 \u0417\u0435\u043b\u0430\u043d\u0434\u0438\u0438 (\u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041d\u043e\u0432\u043e\u0439 \u0417\u0435\u043b\u0430\u043d\u0434\u0438\u0438 - NZ NCSC) \u0438 \u0421\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u041a\u043e\u0440\u043e\u043b\u0435\u0432\u0441\u0442\u0432\u0430 (\u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u041a\u043e\u0440\u043e\u043b\u0435\u0432\u0441\u0442\u0432\u0430 - NCSC-UK).\n\n\u0414\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0434\u0432\u0430 \u0441\u043f\u0438\u0441\u043a\u0430: \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439, \u0432 \u043a\u0430\u0436\u0434\u043e\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e 15 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n1. CVE-2021-44228, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u043a\u0430\u043a Log4Shell. \u041f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Apache Log4j. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n2. CVE-2021-40539, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Zoho ManageEngine AD SelfService Plus. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n3 \u2013 5. CVE-2021-34523, CVE-2021-34473, CVE-2021-31207, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043a\u0430\u043a ProxyShell. \u041f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 Microsoft Exchange Server \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n6 \u2013 9. CVE-2021-27065, CVE-2021-26858, CVE-2021-26857, CVE-2021-26855, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043a\u0430\u043a ProxyLogon. \u041f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 Microsoft Exchange Server. \u041f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n10. CVE-2021-26084, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Atlassian Confluence Server and Data Center. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n11. CVE-2021-21972, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 VMware vSphere Client. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n12. CVE-2020-1472, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Microsoft Netlogon Remote Protocol (MS-NRPC). \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n13. CVE-2020-0688, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Microsoft Exchange Server. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n14. CVE-2019-11510, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Pulse Secure Pulse Connect Secure. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432.\n15. CVE-2018-13379, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Fortinet FortiOS and FortiProxy. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u0415\u0449\u0435 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u043f\u0438\u0441\u043a\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Sitecore XP, ForgeRock OpenAM server, Accellion FTA, SonicWall Secure Mobile Access (SMA), VMware vCenter Server, Checkbox Survey, QNAP QTS and QuTS hero, Cisco IOS Software and IOS XE Software, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u044f\u0434\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0438 \u0441\u043b\u0443\u0436\u0431 Microsoft Windows. \n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0443\u0434\u0435\u043b\u044f\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u0438\u043c\u0435\u043d\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043f\u0438\u0441\u043a\u0430\u0445. \u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.cisa.gov/uscert/ncas/alerts/aa22-117a", "creation_timestamp": "2026-07-17T05:00:05.616133Z"}, {"uuid": "d2f4c71d-a745-4b73-8c3a-352174fbfed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://t.me/bin_z0ne/393", "content": "\u041e\u0445\u043e\u0442\u0430 \u043d\u0430 \u0430\u0442\u0430\u043a\u0438 MS Exchange. \u0427\u0430\u0441\u0442\u044c 2\n\n\u041d\u0430\u0448\u0430 \u043f\u0440\u043e\u0448\u043b\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u0431\u044b\u043b\u0430 \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u043c\u0435\u0442\u043e\u0434\u0430\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 ProxyLogon. \u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043c\u044b \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u043c\u0435\u0442\u043e\u0434\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 MS Exchange, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e CVE-2020-0688, CVE-2020-16875 \u0438 CVE-2021-24085.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e \u0447\u0442\u043e \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0442\u0430\u043a\u0438\u0435 \u0441\u0432\u0435\u0436\u0438\u0435, \u043a\u0430\u043a ProxyLogon, \u043c\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0441\u043b\u0435\u0434\u044b \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 (\u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0435) \u0443 \u043d\u0430\u0448\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u0420\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043a\u0438\u043d\u0443\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438\u0437 \u0441\u0435\u0442\u0438 \u0438 \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0443\u0449\u0435\u0440\u0431 \u043e\u0442 \u0430\u0442\u0430\u043a\u0438.\n\n\u041c\u044b \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u043a\u0430\u043a \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u0439 MS Exchange \u043c\u043e\u0436\u043d\u043e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u044b \u0430\u0442\u0430\u043a \u0432 \u0445\u043e\u0434\u0435 \u0440\u0435\u0442\u0440\u043e\u0441\u043f\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430.\n\n#msexchange", "creation_timestamp": "2026-07-25T03:00:03.788238Z"}, {"uuid": "bb5590b4-d2b5-4356-b321-cdf356364fff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://t.me/CVEhub/18266", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2020-0688-Exchange2010*\nGithub: https://github.com/chudamax/CVE-2020-0688-Exchange2010", "creation_timestamp": "2026-07-29T12:00:10.332687Z"}, {"uuid": "7c054868-1039-43f7-a097-3b3a79e362c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://t.me/safebdv/1435", "content": "\u041a\u0430\u043a\u0438\u0435 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u0430\u0442\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 (\u0441 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u043e\u0439 \u043a MITRE ATT&CK) \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b \u0438\u0441\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0432\u043b\u0430\u0441\u0442\u0438 \u0420\u043e\u0441\u0441\u0438\u0438\n\n\u0412\u044b \u0443\u0436\u0435 \u0437\u043d\u0430\u043a\u043e\u043c\u044b \u0441 \u0432\u0437\u0433\u043b\u044f\u0434\u043e\u043c \u0414\u043c\u0438\u0442\u0440\u0438\u044f \u0413\u0430\u0434\u0430\u0440\u044f \u043d\u0430 \u0442\u043e, \u043d\u0430 \u043a\u0430\u043a\u0438\u0445 \u044d\u0442\u0430\u043f\u0430\u0445 kill chain \u0431\u043e\u043b\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c \u0431\u0430\u043d\u043a\u0438.\n\n\u0410 \u0432\u043e\u0442 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043d\u0430 \u0433\u043e\u0441\u0441\u0435\u043a\u0442\u043e\u0440, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0442\u0447\u0435\u0442\u0443 Solar JSOC:\n\n1\ufe0f\u20e3\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f (Initial Access)\n\n\u2022 \u0424\u0438\u0448\u0438\u043d\u0433 (T1566) \u2013 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0441 \u043c\u0430\u043a\u0440\u043e\u0441\u0430\u043c\u0438 (COVID-19, \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u044f\u044f \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432).\n\u2022 \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (T1190) \u2013 Tomcat, PHP, MS Exchange (CVE-2020-0688).\n\u2022 Trusted Relationship (T1199) \u2013 \u0430\u0442\u0430\u043a\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u044f\u0434\u0447\u0438\u043a\u043e\u0432, \u0447\u044c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u043e\u0439\u0442\u0438 \u00ab\u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u00bb.\n\n2\ufe0f\u20e3\u0417\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 (Execution, Persistence, Lateral Movement)\n\n\u2022 \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 PowerShell (T1059.001), CMD (T1059.003), WMI (T1047).\n\u2022 \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 schtasks (T1053.005) \u0438 BITS-\u0437\u0430\u0434\u0430\u0447 (T1197).\n\u2022 Web Shells (T1505.003) \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\u2022 \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0430\u043b\u0438\u0434\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 (T1078) \u2013 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0438 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0435.\n\u2022 \u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 RDP, SMB (T1021).\n\n3\ufe0f\u20e3\u042d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0441\u043a\u0440\u044b\u0442\u043d\u043e\u0441\u0442\u044c (Privilege Escalation, Defense Evasion)\n\n\u2022 Zerologon (CVE-2020-1472) (T1212).\n\u2022 \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 Mimikatz / LSASS Dump (T1003.001), \u0434\u0430\u043c\u043f NTDS (T1003.003).\n\u2022 Golden Ticket (T1558.001).\n\u2022 \u041e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (T1562.002) \u2013 wevtutil, net stop eventlog, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432.\n\u2022 \u041f\u0435\u0440\u0435\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0442\u0438\u043b\u0438\u0442 (T1036.003) \u2013 \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u0430 PsExec \u0438 WinRAR.\n\u2022 rundll32 (T1218.010) \u0434\u043b\u044f \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\n4\ufe0f\u20e3\u0421\u0431\u043e\u0440 \u0438 \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 (Collection, Exfiltration)\n\n\u2022 \u0421\u0431\u043e\u0440 \u043f\u043e\u0447\u0442\u044b (T1114), \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 (T1005, T1039).\n\u2022 \u0410\u0440\u0445\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 WinRAR (T1560.001).\n\u2022 \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 Mail-O \u0438 Webdav-O \u2013 \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u043e\u0435 \u0412\u041f\u041e \u0434\u043b\u044f \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u042f\u043d\u0434\u0435\u043a\u0441.\u0414\u0438\u0441\u043a \u0438 Mail.ru Cloud.\n\u2022 \u041a\u0430\u043d\u0430\u043b\u044b \u0441\u0432\u044f\u0437\u0438 \u0438\u043c\u0438\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u044b Disk-O \u0438 Yandex.Disk.\n\u2022 \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u043a\u0441\u0438 (T1090.001).\n\n\n#\u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 #\u0430\u0442\u0430\u043a\u0438 #SOC #\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u0430\u043c #MITRE #KillChain", "creation_timestamp": "2026-07-29T12:01:58.033054Z"}, {"uuid": "3b4290ed-34b9-46c6-8dc3-f65ac93a6f17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/18266", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2020-0688-Exchange2010*\nGithub: https://github.com/chudamax/CVE-2020-0688-Exchange2010", "creation_timestamp": "2026-07-30T00:00:21.887942Z"}, {"uuid": "abd3195e-acfc-4715-b39f-1bd01a0d9d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "Telegram/H1cZoBEwIxRuGLLQI2TsowWL7FDXgkk_jbRWEUQrFo-NoE8", "content": "", "creation_timestamp": "2026-09-02T01:00:06.923788Z"}, {"uuid": "5625f8a0-d567-46c2-865a-ba9171499756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "published-proof-of-concept", "source": "Telegram/H1cZoBEwIxRuGLLQI2TsowWL7FDXgkk_jbRWEUQrFo-NoE8", "content": "", "creation_timestamp": "2026-09-03T00:00:58.738409Z"}, {"uuid": "a66a6db4-a616-455a-a5b0-612d7b295fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-a7c95ba8-1db3484f507dd4fe", "content": "NightEagle targets Russian companies\nOver the past year, our Global Emergency Response Team (GERT) has investigated several incidents involving the NightEagle group (APT-Q-95). This group has been active since at least 2023 and originally focused on organizations in Asia, as we reported previously. We have now identified attacks by the group targeting businesses in Russia. This post examines both known and new tools NightEagle used in its latest campaign.\nInitial access\nIn most incidents, the attackers used compromised valid credentials to gain access to corporate VPNs. VPN connections originated from IP addresses in the Russian segment linked to Cloudflare WARP tunnels, as well as from IP addresses associated with European virtual infrastructure providers.\nGhostContainer on Microsoft Exchange\nBoth during the initial access stage and as the attack progressed, the attackers deployed the GhostContainer backdoor on Microsoft Exchange servers. It incorporates components from several open-source projects, including the Neo-reGeorg tunnel, an exploit for the CVE-2020-0688 vulnerability, and the GhostWebShell class from the ysoserial utility. All of these components are publicly available on GitHub.\nWe were unable to determine the exact method the attackers used to deliver the backdoor to Microsoft Exchange servers. We believe with a high degree of confidence that they applied a technique already familiar to us: extracting the cryptographic keys used by Microsoft Exchange from the ASP.NET configuration, overwriting the VIEWSTATE framework parameter, and injecting a payload into it, which then launched the GhostContainer backdoor in memory.\nThe backdoor is a .NET assembly containing three classes that implement its core functionality:\n\nStub: processes C2 commands delivered to the infected system through the x-owa-urlpostdata headers and evades detection by the Antimalware Scan Interface (AMSI) and Windows Event Log mechanisms by overwriting addresses in amsi.dll and ntdll.dll.\nApp_Web_843e75cf5b63: accepts the fakePath and fakePageName parameters and creates virtual paths that redirect requests to the App_Web_8c9b251fb5b3 class.\nApp_Web_8c9b251fb5b3: implements network traffic redirection (proxying) and socket forwarding functionality.\nKaspersky products detect the GhostContainer backdoor as Trojan.MSIL.GhostContainer.gen.\nGhostContainer samples identified by the Similarity technology from Kaspersky Threat Analysis\nTraffic redirection\nOnce the attackers gain sufficient privileges during an attack, they leverage RDP to move laterally within the internal network segment. To do this, they download and run tools for tunneling and redirecting network traffic.\nThe attackers used GitHub repositories to host their archived tools. The names of the repositories and archives were disguised to look legitimate:\n\nhttps://github[.]com/mirror-js/mirror-js/refs/heads/main/js/js-webpack.zip\nhttps://github[.]com/mirror-js/mirror-js/refs/heads/main/js/jsonp-pack.zip\nhttps://github[.]com/browserthemes/resourcepack/releases/download/main/resource-pack.zip\nOne of the repositories used for storing network tools\nThe files contained within the archives were also given names mimicking known legitimate software, though unrelated to the archive names:\n\nadobe_32.exe;\nAdobeSync.exe;\ntrueconf.exe;\n1cbroker.exe;\n1c-office-plugin.exe;\ntrueconf-broker.exe.\nAcross the incidents we investigated, we found two tools that the attackers combined for traffic tunneling.\n\nMicrosoft dev tunnelsThis is a legitimate Microsoft mechanism that allows local web services to be published for internet access on *.*.devtunnels.ms domains. The attackers used this tunneling capability to expose port 3389 (RDP) on the compromised system.\nExecution graph of adobe_32.exe in Kaspersky Research Sandbox\nrdp2tcpThis is a publicly available tool for tunneling TCP traffic over an established RDP connection. It includes a server component that runs on the target system and a client component that runs on the attacker\u2019s side.When virtual channels are opened and closed, corresponding events with IDs 132 (channel opened) and 148 (channel closed) are logged in the Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational.evtx Windows log. These events contain the names of the channels (such as XPSRD, cliprdr, Microsoft::Windows::RDS::DisplayControl, and others) used by the RemoteFX module, which extends the capabilities of the RDP protocol.\nWhen the rdp2tcp tool is used, events with IDs 132 and 148 will contain the channel name rdp2tcp or other random alphanumeric combinations chosen by the attackers.\nCreation event for a channel named rdp2tcp (server component startup)\nThe combination of Microsoft dev tunnels and rdp2tcp allows the attackers to maintain network access by using legitimate services without opening additional suspicious ports.\nThe attackers also used the atexec utility from the Impacket toolkit to create scheduled tasks on target systems. These tasks enabled network port forwarding through standard Windows functionality:netsh interface portproxy add v4tov4 listenport=443 connectaddress=10.0.12.101 connectport=445\nLateral movement\nTo obtain elevated privileges and move laterally through the network, NightEagle exploited various vulnerabilities in Active Directory. The attackers used previously established tunnels to connect to internal infrastructure systems.\nIn one incident, they exploited a well-known RDP implementation vulnerability, CVE-2019-0708 (BlueKeep). They used the vulnerable mechanism to create a local account on the system and add it to the Administrators and Remote Desktop Users groups.\nContents of a system memory dump showing artifacts of the CVE-2019-0708 exploit\nThe attackers also requested Kerberos tickets with a non-standard combination of flags (Forwardable, Proxiable, Renewable) and attempted to replicate the Domain-Password object from the Active Directory database to impersonate the domain controller (a technique known as DCSync) after obtaining an account with sufficient privileges.\nThrough these methods, the attackers establish persistence in the infrastructure, obtain password hashes for domain accounts, use long-lived Kerberos tickets to gain legitimate access to target resources, and ultimately compromise domain controllers and the victim\u2019s entire Active Directory infrastructure.\nTakeaways\nTo expand the geographic scope of its targets, NightEagle is updating its methods and adopting new techniques for persistence and lateral movement. Despite the group\u2019s efforts to stay hidden, timely detection of anomalies combined with a comprehensive approach to infrastructure protection can significantly hinder the attackers from achieving their goals. Since the attackers rely on known legitimate tools and infrastructure vulnerabilities, well-configured monitoring can help detect NightEagle\u2019s presence on the network.\nDetection by Kaspersky solutions\nKaspersky solutions reliably identify the malicious activity described above at various stages of the attack. We showed examples above of how Kaspersky Threat Analysis detects samples of the GhostContainer backdoor and the tunneling utility. This toolkit also includes the analytical solution Kaspersky Threat Attribution Engine (KTAE), which helps SOC analysts and incident responders determine which APT groups malware can be attributed to. The solution uses a proprietary comparison method that measures the similarity between analyzed samples of suspicious files and known malicious samples in Kaspersky\u2019s collection.\nThe backdoor we discovered showed similarity to previously analyzed GhostContainer samples and a connection to the NightEagle APT group:\nBackdoor analysis with KTAE\nHowever, detection scenarios for this kind of attacks are not limited to file analysis. Deploying a backdoor on a target host produces numerous characteristic artifacts, which allow Kaspersky Endpoint Detection and Response Expert to alert users to anomalies in the infrastructure in a timely manner.\nThis malicious activity is detected by the following rules, available in the repository:\n\nInitial detection of the malicious signature occurs through the generic_ransomware_related_detection rule, based on EPP module events\nDetection of a malicious DLL\u2019s .NET assembly being loaded via PowerShell: suspicious_assembly_loading_into_powershell_via_reflection\nActivity of tunneling and traffic redirection tools: detection_of_access_to_tunnel_domains_dns\nUse of tools from the Impacket toolkit, such as atexec:\n\nimpacket_possible_activity\nattempt_to_download_hacktool_or_risktool_by_non_browser\ncredentials_dumping_tools_file_artifacts_creation\n\nAttempts to replicate an Active Directory database object to impersonate a domain controller: potential_dcsync_via_startupparameters\nProcess tree in KEDR Expert\nKaspersky Anti Targeted Attack (KATA) detects this malicious activity in network traffic. For example, the Exploit.CVE-2019-0708.TCP.C&C signature allows detecting attempts to exploit the CVE-2019-0708 (BlueKeep) vulnerability.\nAlert card for the BlueKeep vulnerability exploitation\nBeyond this activity, KATA also detects other NightEagle actions in network traffic, such as the following:\n\nTraffic redirection and tunneling variations\nAttacks on Active Directory (DCSync, attempts to compromise AD CS, and others)\nLateral movement across the network\n\nIndicators of compromise1dcafb7f8448683281106b06dd22409aAdobeSync.exe1f3034b706c78b35d8e34044e68c693aadobe_32.exe3ecd1cd627d0340c92901a478a7caad8631fb131a56caf4ca0f287ed73e876abApp_Web_Container_1.dll4aa9fb1bf9223dfcdac920759bc7a3c71c-office-plugin.exe, 1cbroker.exe, trueconf.exehttps://github[.]com/mirror-js/mirror-jshttps://github[.]com/browserthemes/resourcepack \nsecurelist.com/tr/nighteagle-a\u2026", "creation_timestamp": "2026-09-16T10:19:40.415502Z"}, {"uuid": "56db2321-5d94-4f1d-85ab-82b4eb9bd1ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "https://t.me/true_secator/8617", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043d\u0430\u0449\u0443\u043f\u0430\u043b\u0438 NightEagle \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u0417\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0433\u043e\u0434 \u041b\u041a \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0430 \u0440\u044f\u0434 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 NightEagle (APT-Q-95), \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0441 2023 \u0438 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0410\u0437\u0438\u0438.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0420\u043e\u0441\u0441\u0438\u0438.\n\n\u0412 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 VPN, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438. \n\nVPN-\u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0441 IP \u0438\u0437 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0442\u0443\u043d\u043d\u0435\u043b\u044f\u043c\u0438 Cloudflare WARP, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441 IP, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0438\u043c\u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430\u043c\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\u041a\u0430\u043a \u043d\u0430 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435, \u0442\u0430\u043a \u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u043b\u0438 \u0431\u044d\u043a\u0434\u043e\u0440 GhostContainer \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Microsoft Exchange, \u043a\u043e\u0442\u043e\u0440\u044b\u0439  \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0443\u043d\u043d\u0435\u043b\u044c Neo-reGeorg, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2020-0688 \u0438 \u043a\u043b\u0430\u0441\u0441\u00a0GhostWebShell\u00a0\u0443\u0442\u0438\u043b\u0438\u0442\u044b ysoserial. \u0412\u0441\u0435 \u043e\u043d\u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043d\u0430 GitHub.\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0442\u043e\u0447\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Microsoft Exchange \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c. \u0421 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u043b\u0435\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443.\n\n\u041e\u043d\u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u043b\u0438 \u0438\u0437 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 ASP.NET \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043b\u044e\u0447\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 Microsoft Exchange, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u043b\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 VIEWSTATE\u00a0\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u043b\u0438 \u0432 \u043d\u0435\u0433\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0431\u044d\u043a\u0434\u043e\u0440 GhostContainer.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0430\u0442\u0430\u043a\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u044e\u0442 \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 RDP. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043e\u043d\u0438 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0434\u043b\u044f \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430.\n\n\u0414\u043b\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0430\u0440\u0445\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043d\u0430 GitHub. \u0418\u043c\u0435\u043d\u0430 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0438 \u0430\u0440\u0445\u0438\u0432\u043e\u0432 \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0434 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u041f\u041e, \u043a\u0430\u043a \u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0430\u0440\u0445\u0438\u0432\u043e\u0432.\n\n\u0412 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445 \u041b\u041a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0432\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0434\u043b\u044f \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430.\n\n\u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, dev tunnels, \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c Microsoft, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0435\u0431-\u0441\u043b\u0443\u0436\u0431\u044b \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u043d\u0430 \u0434\u043e\u043c\u0435\u043d\u0430\u0445 \u0441 \u043c\u0430\u0441\u043a\u043e\u0439\u00a0*.*.devtunnels.ms. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0442\u0443\u043d\u043d\u0435\u043b\u044c \u0434\u043b\u044f \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u0440\u0442\u0430 3389 (RDP) \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0422\u0430\u043a\u0436\u0435 rdp2tcp, \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f TCP-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0447\u0435\u0440\u0435\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 RDP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435. \u0412\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0443\u044e \u0447\u0430\u0441\u0442\u044c, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u0443\u044e \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0443\u044e, \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u044e\u0449\u0443\u044e \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445.\n\n\u0421\u0432\u044f\u0437\u043a\u0430 Microsoft Dev Tunnels \u0438 rdp2tcp \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0431\u0435\u0437 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432.\n\n\u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u044b atexec \u0438\u0437 \u043d\u0430\u0431\u043e\u0440\u0430 Impacket \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u0434\u0430\u0447\u0438, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u0440\u043e\u0441\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 Windows.\n\n\u0414\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0442\u0438 NightEagle \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Active Directory. \u0414\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0440\u0430\u043d\u0435\u0435 \u0442\u0443\u043d\u043d\u0435\u043b\u0438.\n\n\u0412 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0445\u043e\u0440\u043e\u0448\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 RDP-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c, CVE-2019-0708 (BlueKeep).\u00a0\n\n\u0422\u0430\u043a\u0436\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0431\u0438\u043b\u0435\u0442\u043e\u0432 Kerberos \u0441 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c \u043d\u0430\u0431\u043e\u0440\u043e\u043c \u0444\u043b\u0430\u0433\u043e\u0432 (Forwardable,\u00a0Proxiable,\u00a0Renewable) \u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u043b\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0440\u0435\u043f\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u00a0Domain-Password\u00a0\u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 Active Directory \u0434\u043b\u044f \u043c\u0438\u043c\u0438\u043a\u0440\u0438\u0438 \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0434\u043e\u043c\u0435\u043d\u0430 (\u0430\u0442\u0430\u043a\u0430 DCSync) \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u0432 \u041b\u041a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0433\u0435\u043e\u0433\u0440\u0430\u0444\u0438\u0438 \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0445 \u0436\u0435\u0440\u0442\u0432 \u0441 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0441\u0432\u043e\u0438\u0445 TTPs \u0432 \u0447\u0430\u0441\u0442\u0438 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435.\n\n\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u043f\u043e\u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 NightEagle \u0432 \u0441\u0435\u0442\u0438. \u0412\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u041b\u041a - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2026-09-18T10:00:06.610736Z"}, {"uuid": "b5ed5b9a-19b9-425d-86e2-af0418d3186f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "Telegram/nE-Tt86X94JHVaQmxTW8vPMI5fuk094fBkhLBJLJGKVVB4Y", "content": "", "creation_timestamp": "2026-09-22T12:00:04.928377Z"}, {"uuid": "7bcdeb24-2e4d-4dfd-b28c-ee60d0cf1238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "exploited", "source": "Telegram/nE-Tt86X94JHVaQmxTW8vPMI5fuk094fBkhLBJLJGKVVB4Y", "content": "", "creation_timestamp": "2026-09-23T00:00:10.271920Z"}, {"uuid": "cd294790-7b21-4a2f-8d82-b602eeab9284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0688", "type": "seen", "source": "Telegram/o4iSgnpCIm0kpWdgDYInsARTqs5RXMAbqQ60Ju7euvtObwg", "content": "", "creation_timestamp": "2026-09-25T09:21:33.000000Z"}]}