{"vulnerability": "cve-2024-26229", "sightings": [{"uuid": "c536d02f-7473-46cf-aa92-1b15c2e40214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "seen", "source": "https://gist.github.com/grass341/2e260ed3ffa0eaba00ae2ce3e7c4f087", "content": "", "creation_timestamp": "2025-04-19T11:42:20.000000Z"}, {"uuid": "9fddbbe2-4eaf-438a-bd77-0b342d7a648c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7624", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aDRive a poc backdoor exploiting CVE-2024-26229 for privilege escalation and persistence\nURL\uff1ahttps://github.com/0XJ175/DRive\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-12T12:40:45.000000Z"}, {"uuid": "7a40ec11-9888-4f59-97f8-5094da4d3e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7622", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aBOF implementations of CVE-2024-26229 for Cobalt Strike and Brute Ratel\nURL\uff1ahttps://github.com/Cerbersec/CVE-2024-26229-BOF\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-12T10:10:58.000000Z"}, {"uuid": "e9befc84-8ea2-476a-b89e-4165bbd98674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7671", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPython script for get reverse shell with using CVE-2024-4577\nURL\uff1ahttps://github.com/team-MineDEV/CVE-2024-26229\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-16T05:09:56.000000Z"}, {"uuid": "2ed837c9-96de-440e-b1d0-1d6aa2d1e823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8166", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA firebeam plugin that exploits the CVE-2024-26229 vulnerability to perform elevation of privilege from a  privileged user\nURL\uff1ahttps://github.com/Cracked5pider/eop24-26229\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-04T18:12:53.000000Z"}, {"uuid": "6c6a8b4f-824c-48d4-86e9-65d6bb7faab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8189", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA firebeam plugin that exploits the CVE-2024-26229 vulnerability to perform elevation of privilege from a  privileged user\nURL\uff1ahttps://github.com/fevar54/CVE-2024-42461\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-06T22:20:33.000000Z"}, {"uuid": "df4a4d73-d14d-4179-a15a-8cbd620e55af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7640", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCobalt Strike\n\u63cf\u8ff0\uff1aBOF implementations of CVE-2024-26229 for Cobalt Strike and BruteRatel\nURL\uff1ahttps://github.com/NVISOsecurity/CVE-2024-26229-BOF\n\n\u6807\u7b7e\uff1a#Cobalt Strike", "creation_timestamp": "2024-06-13T10:00:07.000000Z"}, {"uuid": "6c90454f-a893-4671-9eba-9eb146479150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/hackingbra/161", "content": "CVE-2024-26229: Windows LPE\n\nPATCHADO: 9 de abril de 2024\n\nhttps://github.com/RalfHacker/CVE-2024-26229-exploit\n\nP.S. Corrigida ligeiramente a explora\u00e7\u00e3o original", "creation_timestamp": "2024-06-11T10:22:25.000000Z"}, {"uuid": "32beca09-5a85-4d31-a0ca-5684243afd59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "Telegram/w2sQVYJqPhbRHT9akHM-iGzWKC3IsG1yKSbs6TyOkRlzfbo", "content": "", "creation_timestamp": "2026-03-27T15:00:06.000000Z"}, {"uuid": "8eda19d1-55b6-4b98-a685-03b4c38fefc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "seen", "source": "https://t.me/itsec_news/4525", "content": "\u200b\u26a1\ufe0fCheck Point \u0438 Veeam \u043d\u0435 \u0443\u0441\u0442\u043e\u044f\u043b\u0438: \u043e\u0431\u0437\u043e\u0440 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u0438\u044e\u043d\u044c\n\n\ud83d\udcac\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Positive Technologies \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0441\u043f\u0438\u0441\u043e\u043a \u0434\u0435\u0432\u044f\u0442\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft, VMware, Linux, VPN-\u0448\u043b\u044e\u0437\u0435 \u043e\u0442 Check Point Software Technologies \u0438 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Veeam Backup Enterprise Manager. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u043a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043c\u0435\u0440.\n\n\u0422\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0441\u0447\u0438\u0442\u0430\u044e\u0442\u0441\u044f \u0442\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u043b\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f. \u0414\u043b\u044f \u0438\u0445 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Positive Technologies \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432: \u0431\u0430\u0437\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432, \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0442\u0438, \u0431\u043b\u043e\u0433\u0438 \u0438 \u0442\u0435\u043b\u0435\u0433\u0440\u0430\u043c-\u043a\u0430\u043d\u0430\u043b\u044b, \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043a\u043e\u0434\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Windows\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0432 Windows. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u043e\u043a\u043e\u043b\u043e \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0430\u0442\u0430\u043a\u0438.\n\n1. CVE-2024-26229: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 Client-Side Caching (CSC) Windows. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u0443\u0447\u0435 (\u043e\u0442\u043d\u0435\u0441\u0435\u043d\u0430 \u0432 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044e CWE-122 ). ). \u042d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f CSC. CVSS-\u043e\u0446\u0435\u043d\u043a\u0430: 7,8.\n\n2. CVE-2024-26169: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 (Windows Error Reporting). \u041e\u043d\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043e\u0448\u0438\u0431\u043e\u043a Windows \u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0430 \u0432 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044e CWE-269 . \u042d\u0442\u043e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u0441\u043b\u0443\u0436\u0431\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0438\u0437\u043c\u0435\u043d\u044f\u0435\u0442, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0438\u0437-\u0437\u0430 \u0447\u0435\u0433\u043e \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u043f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. CVSS-\u043e\u0446\u0435\u043d\u043a\u0430: 7,8.\n\n3. CVE-2024-30088: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 Windows, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b NtQueryInformationToken. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043d\u0430\u0434 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c. CVSS-\u043e\u0446\u0435\u043d\u043a\u0430: 7,0.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u044b\u0448\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Microsoft \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: CVE-2024-26229 , CVE-2024-26169 , CVE-2024-30088 .\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux \u0438 VMware\n\u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043b\u0443\u0442\u043e\u0440\u0430 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n4. CVE-2024-1086: \u041e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 netfilter \u044f\u0434\u0440\u0430 Linux \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. CVSS-\u043e\u0446\u0435\u043d\u043a\u0430: 7,8. \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043e \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043d\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 kernel.org .\nVMware \u0442\u0430\u043a\u0436\u0435 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043f\u043e\u0434 \u0443\u0434\u0430\u0440\u043e\u043c.\n\n5 \u0438 6. CVE-2024-37080 \u0438 CVE-2024-37079: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 VMware vCenter, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 VMware vCenter \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0441 \u0446\u0435\u043b\u044c\u044e \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0430\u0442\u0430\u043a\u0438. \u042d\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440 DCE (RPC). CVSS-\u043e\u0446\u0435\u043d\u043a\u0430: 9,8. \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 VMware.\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PHP \u0438 VPN-\u0448\u043b\u044e\u0437\u0435 Check Point\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0437\u044b\u043a\u0435 PHP \u0438 VPN-\u0448\u043b\u044e\u0437\u0430\u0445 Check Point Software Technologies.\n\n7. CVE-2024-4577: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0437\u044b\u043a\u0435 PHP \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 Apache \u0438 PHP CGI \u0432 Windows. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 (remote code execution, RCE) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043d\u0435\u0439 \u0441 \u0446\u0435\u043b\u044c\u044e \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-07-11T09:12:24.000000Z"}, {"uuid": "8e1c6618-195c-4af4-af84-9b013462b8d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/true_sec/80", "content": "CVE-2024-26229 Windows LPE (PoC)\n\nImproper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code in the csc.sys driver", "creation_timestamp": "2024-06-11T07:33:54.000000Z"}, {"uuid": "759995c1-7d76-481b-b183-5d8733b21e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "exploited", "source": "https://t.me/kasperskyb2b/1303", "content": "\ud83d\udc4c \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\u2708\ufe0fAPT \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u0433\u0435\u0439\u043c\u0435\u0440\u043e\u0432: \u043d\u043e\u0432\u043e\u0435 \u0412\u041f\u041e Disgomoji \u0430\u0442\u0430\u043a\u0443\u0435\u0442 Linux-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u043f\u0440\u0435\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0446\u0435\u043b\u0438 \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430, \u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 Discord, \u0430 \u0441\u0430\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u043a\u0430\u043a \u044d\u043c\u043e\u0434\u0437\u0438. \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u0410\u0437\u0438\u0438.\n\n\ud83d\udc7e \u0420\u0430\u043d\u044c\u0448\u0435 \u0431\u043e\u0435\u0432\u044b\u0435 \u0437\u0438\u0440\u043e\u0434\u0435\u0438 \u0441\u0447\u0438\u0442\u0430\u043b\u0438\u0441\u044c \u043f\u0440\u0435\u0440\u043e\u0433\u0430\u0442\u0438\u0432\u043e\u0439 APT \u043d\u0430 \u0433\u043e\u0441\u0441\u043b\u0443\u0436\u0431\u0435, \u043d\u043e \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432\u0441\u0451 \u0447\u0430\u0449\u0435 \u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438: \u043f\u043e \u043d\u043e\u0432\u044b\u043c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c, \u0437\u0430\u043a\u0440\u044b\u0442\u0430\u044f \u0432 \u043c\u0430\u0440\u0442\u0435 CVE-2024-26169 \u0432 Windows Error Reporting, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430\u0441\u044c \u0431\u0430\u043d\u0434\u043e\u0439 Blackbasta \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0437\u0430 \u0442\u0440\u0438 \u043c\u0435\u0441\u044f\u0446\u0430 \u0434\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f. \u041d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f \u0432 \u043c\u0430\u0440\u0442\u0435 \u044d\u0442\u0430 \u0434\u044b\u0440\u0430 \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u043b\u0430\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0432\u0436\u0438\u0432\u0443\u044e. \n\n\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c, \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0439 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 CVE-2024-26229 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0439 PoC \u2014 \u044d\u0442\u043e \u0442\u043e\u0436\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043d\u043e \u0447\u0435\u0440\u0435\u0437 Windows CSC. \n\n\ud83d\udc40 \u041f\u0435\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Scattered Spider/Octo tempest/UNC3944 \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b\u0430 \u0441\u0432\u043e\u044e \u0441\u0444\u0435\u0440\u0443 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043f\u043e \u043c\u043e\u0434\u0435\u043b\u0438 SaaS. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0421\u0417\u0418, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0432 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u044a\u0451\u043c\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0438\u0437 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043b\u0430\u043a\u0430 \u0432 \u0441\u0432\u043e\u0451.\n\n\u0422\u0440\u0435\u0432\u043e\u0436\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 MFA \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f\u0445: \u0432\u0441\u0435\u0433\u043e 9% \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442 \u0441\u0432\u043e\u0438 \u0434\u043e\u043c\u0435\u043d\u044b, \u0437\u0430\u0449\u0438\u0449\u0430\u044f \u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 2FA, \u043f\u0440\u0438\u0447\u0451\u043c \u0434\u0432\u0435 \u0442\u0440\u0435\u0442\u0438 \u0438\u0437 \u043d\u0438\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0440\u043e\u0441\u0442\u0435\u0439\u0448\u0438\u0435 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0435 SMS. \u041d\u0430\u0434\u0435\u0435\u043c\u0441\u044f, \u0432\u0430\u0448\u0438 \u0430\u0434\u043c\u0438\u043d\u044b \u043d\u0435 \u0442\u0430\u043a\u0438\u0435 \ud83d\ude07\n\n\u261d\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0438\u043e\u043c\u0435\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u043e\u0432 \u0421\u041a\u0423\u0414 \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u043d\u043e\u0432\u044b\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044e. \u041e\u0442\u043a\u0440\u044b\u0442\u044c \u0434\u0432\u0435\u0440\u044c \u0438\u043d\u043e\u0433\u0434\u0430 \u043c\u043e\u0436\u043d\u043e QR-\u043a\u043e\u0434\u043e\u043c \u0441 \u043f\u0440\u043e\u0441\u0442\u0435\u0439\u0448\u0435\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439, \u0430 \u0441\u0430\u043c \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b \u0437\u0430\u0440\u0430\u0437\u0438\u0442\u044c \u0412\u041f\u041e.\n\n\ud83d\udd11 \u0420\u0430\u0437\u0431\u043e\u0440 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 Badspace/warmcookie, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u0432\u044b\u0441\u043e\u043a\u043e\u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b (\u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043d\u0430 Wordpress) \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0435\u0433\u043e \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0442\u0440\u044e\u043a\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430.\n\n\u0410 \u0443 \u0431\u044d\u043a\u0434\u043e\u0440\u0430  STR RAT \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0441\u0435\u0437\u043e\u043d\u043d\u043e\u0441\u0442\u044c \u2014 \u043e\u043d \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0441 2020 \u0433\u043e\u0434\u0430, \u043d\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0440\u0430\u0437 \u0432 \u0433\u043e\u0434 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u043b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0435\u0433\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438. \n\n\u2708\ufe0f\u0420\u0430\u0437\u0431\u043e\u0440 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0434\u043f\u043e\u043b\u044c\u043d\u044b\u0445 OTP-\u0431\u043e\u0442\u043e\u0432, \u043f\u043e\u043c\u043e\u0433\u0430\u044e\u0449\u0438\u0445 \u0444\u0438\u0448\u0435\u0440\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c 2FA.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #APT @\u041f2\u0422", "creation_timestamp": "2024-06-17T14:55:10.000000Z"}, {"uuid": "8da9ba2f-ea57-46fd-b0e7-345c7f526167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "Telegram/dZUn1vaNlmoc_-wfGQLUuyihOJUvlMpWixd7EYC2EHyoBw", "content": "", "creation_timestamp": "2024-06-11T18:46:41.000000Z"}, {"uuid": "6839a90b-e2dd-42e3-9795-b57fe58bd6e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Course/377", "content": "CVE-2024-26229: Windows LPE\n\nPATCHED: Apr 9, 2024\n\nhttps://github.com/RalfHacker/CVE-2024-26229-exploit\n\n#git #exploit #lpe #pentest #redteam", "creation_timestamp": "2024-06-12T00:15:04.000000Z"}, {"uuid": "700fc8c7-9a0b-41ea-8baa-f5fd7b450513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/897", "content": "\ud83d\udea8POC RELEASED\ud83d\udea8BOF implementations of CVE-2024-26229 for Cobalt Strike and BruteRatel.\n\n#DarkWeb #Cybersecurity #Security #Cyberattack #Cybercrime #Privacy #Infosec #CVE202426229 #Vulnerability \n\nhttps://x.com/DarkWebInformer/status/1801300023679856804\n\nhttps://github.com/NVISOsecurity/CVE-2024-26229-BOF", "creation_timestamp": "2024-06-13T19:09:56.000000Z"}, {"uuid": "906ed5ad-e751-4f13-bd77-6c55f37ae4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/2597", "content": "\u200aCVE-2024-26229: Windows Elevation of Privilege Flaw Weaponized, PoC Exploit on GitHub\n\nhttps://securityonline.info/cve-2024-26229-windows-elevation-of-privilege-flaw-weaponized-poc-exploit-on-github/", "creation_timestamp": "2024-06-15T16:02:36.000000Z"}, {"uuid": "f997d8ed-1d8d-4189-a3ff-434ac007b5dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/2571", "content": "\u200aCVE-2024-26229 : Address Validation Flaws In IOCTL With METHOD_NEITHER\n\nhttps://kalilinuxtutorials.com/cve-2024-26229/", "creation_timestamp": "2024-06-15T08:59:09.000000Z"}, {"uuid": "bff5a0ce-5640-4f81-93b4-0d7288d8afcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/pt_soft/308", "content": "CVE-2024-26229: Windows LPE\n\nPATCHED: Apr 9, 2024\n\nhttps://github.com/RalfHacker/CVE-2024-26229-exploit\n\nP.S. \u0427\u0443\u0442\u044c \u043f\u043e\u043f\u0440\u0430\u0432\u0438\u043b \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\n\n#git #exploit #lpe #pentest #redteam", "creation_timestamp": "2024-06-11T10:24:17.000000Z"}, {"uuid": "9ceb8009-5a9a-47fc-84b6-39d976f5993d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "Telegram/Pj_sXWWks8pqooIXWv5eteiJIrk3itTB4Gjh9HyZsszdiVU", "content": "", "creation_timestamp": "2024-08-06T23:48:46.000000Z"}, {"uuid": "c936d83e-ede3-4315-a931-bd1e318a7c17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/207", "content": "Tools - Hackers Factory\n\nIndicators of Compromises (IOC) of our various investigations \n\nhttps://github.com/eset/malware-ioc\n\nCommunity edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place \n\nhttps://github.com/xm1k3/cent\n\nBOF implementations of CVE-2024-26229 for Cobalt Strike and BruteRatel \n\nhttps://github.com/NVISOsecurity/CVE-2024-26229-BOF\n\nGoogle & Shodan Dorks for web cameras search\n\nLarge list of\u00a0 search queries to find internet-connected webcams. Can be used in Google as well as various IP search engines (Shodan, Netlas, Censys etc).\n\nhttps://github.com/ExploitXpErtz/WebCam-Google-Shodan-Dorks\n\nFirefox Decrypt is a tool to extract passwords from Mozilla (Firefox\u2122, Waterfox\u2122, Thunderbird\u00ae, SeaMonkey\u00ae) profiles \n\nhttps://github.com/unode/firefox_decrypt\n\nThis repository contains a Nuclei template to detect the PHP CGI Argument Injection vulnerability identified as CVE-2024-4577.\n\nhttps://github.com/huseyinstif/CVE-2024-4577-Nuclei-Template\n\nA technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfvenom) by performing on-the-fly decryption of individual encrypted assembly instructions, thus rendering memory scanners useless for that specific memory page. \n\nhttps://github.com/vxCrypt0r/Voidgate\n\nBug-Bounty-Methodology\n\nhttps://github.com/tuhin1729/Bug-Bounty-Methodology\n\nThis repository contains a collection of notes, write-ups, scripts and so much more!\n\nhttps://github.com/HolyBugx/HolyTips\n\nMulti-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud. \n\nhttps://github.com/initstring/cloud_enum\n\n#HackersFactory", "creation_timestamp": "2024-06-19T09:33:42.000000Z"}, {"uuid": "c8b9f90e-16ba-4461-9818-34f3f4463f0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "Telegram/oUBzaszS9MB-JD_sZZNZyNTGtV2NSPMQzJoBHpQUXmKKKaE", "content": "", "creation_timestamp": "2024-08-06T23:48:46.000000Z"}, {"uuid": "3b531a4c-b772-4070-b157-9ca0f9cf25fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3321", "content": "Tools - Hackers Factory\n\nIndicators of Compromises (IOC) of our various investigations \n\nhttps://github.com/eset/malware-ioc\n\nCommunity edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place \n\nhttps://github.com/xm1k3/cent\n\nBOF implementations of CVE-2024-26229 for Cobalt Strike and BruteRatel \n\nhttps://github.com/NVISOsecurity/CVE-2024-26229-BOF\n\nGoogle & Shodan Dorks for web cameras search\n\nLarge list of\u00a0 search queries to find internet-connected webcams. Can be used in Google as well as various IP search engines (Shodan, Netlas, Censys etc).\n\nhttps://github.com/ExploitXpErtz/WebCam-Google-Shodan-Dorks\n\nFirefox Decrypt is a tool to extract passwords from Mozilla (Firefox\u2122, Waterfox\u2122, Thunderbird\u00ae, SeaMonkey\u00ae) profiles \n\nhttps://github.com/unode/firefox_decrypt\n\nThis repository contains a Nuclei template to detect the PHP CGI Argument Injection vulnerability identified as CVE-2024-4577.\n\nhttps://github.com/huseyinstif/CVE-2024-4577-Nuclei-Template\n\nA technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfvenom) by performing on-the-fly decryption of individual encrypted assembly instructions, thus rendering memory scanners useless for that specific memory page. \n\nhttps://github.com/vxCrypt0r/Voidgate\n\nBug-Bounty-Methodology\n\nhttps://github.com/tuhin1729/Bug-Bounty-Methodology\n\nThis repository contains a collection of notes, write-ups, scripts and so much more!\n\nhttps://github.com/HolyBugx/HolyTips\n\nMulti-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud. \n\nhttps://github.com/initstring/cloud_enum\n\n#HackersFactory", "creation_timestamp": "2024-06-19T17:26:27.000000Z"}, {"uuid": "a914e0e3-584b-4da2-b196-1b418a91efb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "Telegram/8z2jQUECZyIboGcdQcV8r6jYgvTfnQbs0Ypxk_upjXcP6m8", "content": "", "creation_timestamp": "2024-07-16T19:34:48.000000Z"}, {"uuid": "c9d46ee5-9af2-4aee-ba38-20fd2ff03620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/cybersecs/2855", "content": "#windows #lpe\n\nImproper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code in the csc.sys driver\n\n\u203c\ufe0f CVE-2024-26229 \u203c\ufe0f\n\nhttps://github.com/RalfHacker/CVE-2024-26229-exploit", "creation_timestamp": "2024-06-12T13:43:08.000000Z"}, {"uuid": "2390189d-58b7-4655-a9b8-897a45613058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/1179", "content": "\u26a0\ufe0f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627\u0644\u0627 \u0628\u0631\u062f\u0646 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0631 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0628\u0627 \u0634\u0645\u0627\u0631\u0647 CVE-2024-26229.\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0648\u0639 BufferOverFlow \u0628\u0648\u062f\u0647 \u0648 \u0648\u06cc\u0646\u062f\u0648\u0632\u200c 10 \u0648 \u0648\u06cc\u0646\u062f\u0648\u0632 11 \u0631\u0627 \u0645\u0648\u0631\u062f \u0627\u062b\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\ud83d\udd25 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06f3 \u0631\u0648\u0632 \u0642\u0628\u0644 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0644\u06cc\u0646\u06a9 \u062f\u0627\u0646\u0644\u0648\u062f \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a:\n\ud83d\udd17 https://github.com/varwara/CVE-2024-26229\n\n\u26a0\ufe0f Privilege Escalation Vulnerability in Windows (CVE-2024-26229)\n\nThis vulnerability is a Buffer Overflow affecting Windows 10 and Windows 11.\n\n\ud83d\udd25 The exploit for this vulnerability was released 3 days ago.\n\nExploit Download Link:\n\ud83d\udd17 https://github.com/varwara/CVE-2024-26229", "creation_timestamp": "2024-06-14T15:30:36.000000Z"}, {"uuid": "f4d65189-e7bf-4976-8881-52307cf965a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/RalfHackerChannel/1500", "content": "CVE-2024-26229: Windows LPE\n\nPATCHED: Apr 9, 2024\n\nhttps://github.com/RalfHacker/CVE-2024-26229-exploit\n\nP.S. \u0427\u0443\u0442\u044c \u043f\u043e\u043f\u0440\u0430\u0432\u0438\u043b \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\n\n#git #exploit #lpe #pentest #redteam", "creation_timestamp": "2024-06-11T10:21:23.000000Z"}, {"uuid": "5fa5f83c-4b20-4935-adb9-c6a356f043bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "exploited", "source": "https://t.me/true_secator/5960", "content": "\u0421\u043b\u0435\u0434\u0443\u044f \u0432\u044b\u0448\u0435\u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u043c\u043e\u0437\u0430\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f\u043c \u0413\u0440\u0438\u0431\u043e\u0432, \u041f\u043e\u0437\u0438\u0442\u0438\u0432\u044b \u043f\u0440\u043e\u0448\u0435\u0440\u0441\u0442\u0438\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438\u0437 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432, \u0441\u043e\u0446\u0441\u0435\u0442\u0435\u0439, \u0431\u043b\u043e\u0433\u043e\u0432, \u0422\u0413-\u043a\u0430\u043d\u0430\u043b\u043e\u0432, \u0431\u0430\u0437 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u043a\u043e\u0434\u0430, \u0432\u044b\u0434\u0435\u043b\u0438\u0432 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u044e\u043d\u044f.\n\n\u041f\u043e \u0441\u0443\u0442\u0438 \u044d\u0442\u043e \u0441\u0430\u043c\u044b\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043b\u0438\u0431\u043e \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432\u0436\u0438\u0432\u0443\u044e, \u043b\u0438\u0431\u043e \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n\u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043c\u043d\u043e\u0433\u043e \u2014 \u0434\u0435\u0432\u044f\u0442\u044c:\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Microsoft Windows, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439: \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 CSC (CVE-2024-26229), \u0441\u043b\u0443\u0436\u0431\u0435 Error Reporting (CVE-2024-26169) \u0438 \u044f\u0434\u0440\u0435 \u041e\u0421 (CVE-2024-30088);\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0432 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432\u043e\u043c \u044f\u0437\u044b\u043a\u0435 PHP \u043d\u0430 \u0443\u0437\u043b\u0430\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows (CVE-2024-4577);\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u044f\u0434\u0440\u0435 Linux (CVE-2024-1086);\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432 Check Point Quantum Security Gateways (CVE-2024-24919);\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 VMware vCenter, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 (CVE-2024-37079, CVE-2024-37080);\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Veeam Backup & Replication, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2024-29849).\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043f\u043e \u043a\u0430\u0436\u0434\u043e\u0439 \u0441 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0436\u0435\u0440\u0442\u0432, \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u043a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043c\u0435\u0440 - \u0432 \u0431\u043b\u043e\u0433\u0435\u00a0Positive Technologies.", "creation_timestamp": "2024-07-11T18:50:01.000000Z"}, {"uuid": "09e2789c-08a1-4f64-97a9-98ae7b9437da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2949", "content": "https://github.com/Cracked5pider/eop24-26229\n\nA firebeam plugin that exploits the CVE-2024-26229 vulnerability to perform elevation of privilege from a privileged user\n#github #tools", "creation_timestamp": "2024-08-05T16:31:08.000000Z"}, {"uuid": "61e77fe4-6812-446e-ad90-11d51f6b5aa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2647", "content": "https://github.com/varwara/CVE-2024-26229\n\ncve-2024-26229\n#github #tools #\u63d0\u6743", "creation_timestamp": "2024-06-11T12:40:55.000000Z"}, {"uuid": "6bdf4234-a972-4f8e-a56c-fce28920e8c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10662", "content": "#exploit\n1. CVE-2024-26229:\nWindows 10 LPE vulnerability\nhttps://github.com/varwara/CVE-2024-26229\n]-> https://github.com/RalfHacker/CVE-2024-26229-exploit\n\n2. CVE-2024-29849:\nVeeam Authentication bypass vulnerability\nhttps://summoning.team/blog/veeam-enterprise-manager-cve-2024-29849-auth-bypass", "creation_timestamp": "2024-06-11T19:09:19.000000Z"}, {"uuid": "b3dd432f-8375-4d30-9f89-819ed78fed30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/93", "content": "https://github.com/varwara/CVE-2024-26229\n\ncve-2024-26229\n#github #tools #\u63d0\u6743", "creation_timestamp": "2024-12-21T15:48:07.000000Z"}, {"uuid": "0896ec36-cdc4-40ba-b700-24683cce3e1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "seen", "source": "https://t.me/zero_cipher/275", "content": "A look at the features and structure of phoenix and how to compile and use it:\n\nPart 1 (related to kernel and bypass):\n\n1.1 UEFI Bootkit Load drivers from ESP before booting Windows\n\n1.2 Disabling Secure Boot Changing UEFI variables to bypass Secure Boot\n\n1.3 Disabling HVCI Patching BCD and Kernel to disable Hypervisor-protected Code Integrity\n\n1.4 Disabling DSE Patching the CiValidateImageHeader and CiGetPolicy functions in the kernel\n\n1.5 Patch Boot Manager Patching bootmgr to bypass Integrity Checks\n\n1.6 Spoof Driver Signature Replacing the driver signature with a Microsoft test signature\n\n1.7 Registering Boot Entry Persistence at the UEFI level by registering a new Boot Option\n\n1.8 Kernel DSE/KPP Bypass Directly patching kernel functions to disable PatchGuard\n\nPart 2 (token manipulation and privilege escalation):\n\n2.1 Token Stealing via DKOM Copying the SYSTEM token to the current process via EPROCESS\n\n2.2 Token Stealing Safe Copy token while preserving RefCount to prevent BSOD\n\n2.3 Token Duplication Create duplicate token with NtDuplicateToken\n\n2.4 Enable All Privileges Enable 15+ Privileges including SeDebug, SeTcb, SeLoadDriver\n\n2.5 CreateProcessWithToken Run process with arbitrary token (e.g. SYSTEM)\n\n2.6 30 Local PE Techniques including Unquoted Path, DLL Hijacking, Scheduled Task, WMI Event, Named Pipe, SAM Copy, LSASS Dump, AlwaysInstallElevated, Print Spooler, CVE-2024-26229, CVE-2025-7771, CVE-2024-30804, CVE-2024-35250 and ...\n\n2.7 30 Domain PE Techniques including Golden Ticket, Silver Ticket, Diamond Ticket, Skeleton Key, AD CS ESC1-ESC8, DCShadow, DCSync, Pass-the-Hash, Pass-the-Ticket, NTLM Relay, LDAP Injection, GPP Decryption and...\n\nPart 3 (hiding and dkom):\n\n3.1 Hide Process Remove process from ActiveProcessLinks with dynamic offset\n\n3.2 Hide Thread Remove thread from ETHREAD list with dynamic offset\n\n3.3 Hide Driver Remove driver from PsLoadedModuleList\n\n3.4 Hide File Hide files via File System Filter\n\n3.5 Hide Registry Key Hide registry keys via Registry Callbacks\n\n3.6 Hide Network Connection Hide network connections\n\n3.7 Patch 70+ Syscalls Patch NtQuerySystemInformation, NtOpenProcess, NtReadVirtualMemory, NtCreateFile, NtCreateKey, NtEnumerateKey and more than 70 other functions\n\n3.8 Patch PspCidTable Hide from Windows Handle Table\n\n3.9 Hide From Csrss Hide from Client/Server Runtime Subsystem\n\n3.10 Hide From Task Manager Hide from Task Manager via patch functions\n\nPart 4 (evasion):\n\n4.1 Remove EDR Callbacks Remove callbacks EDR from PspCreateProcessNotifyRoutine, PspCreateThreadNotifyRoutine, and PspLoadImageNotifyRoutine\n\n4.2 Patch AMSI Patch AmsiScanBuffer and AmsiScanString in amsi.dll\n\n4.3 Patch ETW Patch EtwEventWrite, EtwEventWriteFull, EtwEventWriteString, EtwEventWriteTransfer\n\n4.4 Syscall Hooks Hook 70+ Syscalls for hiding and control\n\n4.5 Call Stack Spoofing Spoof Call Stack with Vectored Exception Handler\n\n4.6 Indirect Syscall Execute Syscall without going to ntdll.dll\n\n4.7 Install VEH Install Vectored Exception Handler for Spoofing\n\n4.8 Enable All Evasion Enable all Evasion techniques at once", "creation_timestamp": "2026-08-17T19:00:04.212967Z"}, {"uuid": "81c619e7-870c-401d-9137-1128cfce2855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "seen", "source": "https://t.me/zero_cipher/275", "content": "A look at the features and structure of phoenix and how to compile and use it:\n\nPart 1 (related to kernel and bypass):\n\n1.1 UEFI Bootkit Load drivers from ESP before booting Windows\n\n1.2 Disabling Secure Boot Changing UEFI variables to bypass Secure Boot\n\n1.3 Disabling HVCI Patching BCD and Kernel to disable Hypervisor-protected Code Integrity\n\n1.4 Disabling DSE Patching the CiValidateImageHeader and CiGetPolicy functions in the kernel\n\n1.5 Patch Boot Manager Patching bootmgr to bypass Integrity Checks\n\n1.6 Spoof Driver Signature Replacing the driver signature with a Microsoft test signature\n\n1.7 Registering Boot Entry Persistence at the UEFI level by registering a new Boot Option\n\n1.8 Kernel DSE/KPP Bypass Directly patching kernel functions to disable PatchGuard\n\nPart 2 (token manipulation and privilege escalation):\n\n2.1 Token Stealing via DKOM Copying the SYSTEM token to the current process via EPROCESS\n\n2.2 Token Stealing Safe Copy token while preserving RefCount to prevent BSOD\n\n2.3 Token Duplication Create duplicate token with NtDuplicateToken\n\n2.4 Enable All Privileges Enable 15+ Privileges including SeDebug, SeTcb, SeLoadDriver\n\n2.5 CreateProcessWithToken Run process with arbitrary token (e.g. SYSTEM)\n\n2.6 30 Local PE Techniques including Unquoted Path, DLL Hijacking, Scheduled Task, WMI Event, Named Pipe, SAM Copy, LSASS Dump, AlwaysInstallElevated, Print Spooler, CVE-2024-26229, CVE-2025-7771, CVE-2024-30804, CVE-2024-35250 and ...\n\n2.7 30 Domain PE Techniques including Golden Ticket, Silver Ticket, Diamond Ticket, Skeleton Key, AD CS ESC1-ESC8, DCShadow, DCSync, Pass-the-Hash, Pass-the-Ticket, NTLM Relay, LDAP Injection, GPP Decryption and...\n\nPart 3 (hiding and dkom):\n\n3.1 Hide Process Remove process from ActiveProcessLinks with dynamic offset\n\n3.2 Hide Thread Remove thread from ETHREAD list with dynamic offset\n\n3.3 Hide Driver Remove driver from PsLoadedModuleList\n\n3.4 Hide File Hide files via File System Filter\n\n3.5 Hide Registry Key Hide registry keys via Registry Callbacks\n\n3.6 Hide Network Connection Hide network connections\n\n3.7 Patch 70+ Syscalls Patch NtQuerySystemInformation, NtOpenProcess, NtReadVirtualMemory, NtCreateFile, NtCreateKey, NtEnumerateKey and more than 70 other functions\n\n3.8 Patch PspCidTable Hide from Windows Handle Table\n\n3.9 Hide From Csrss Hide from Client/Server Runtime Subsystem\n\n3.10 Hide From Task Manager Hide from Task Manager via patch functions\n\nPart 4 (evasion):\n\n4.1 Remove EDR Callbacks Remove callbacks EDR from PspCreateProcessNotifyRoutine, PspCreateThreadNotifyRoutine, and PspLoadImageNotifyRoutine\n\n4.2 Patch AMSI Patch AmsiScanBuffer and AmsiScanString in amsi.dll\n\n4.3 Patch ETW Patch EtwEventWrite, EtwEventWriteFull, EtwEventWriteString, EtwEventWriteTransfer\n\n4.4 Syscall Hooks Hook 70+ Syscalls for hiding and control\n\n4.5 Call Stack Spoofing Spoof Call Stack with Vectored Exception Handler\n\n4.6 Indirect Syscall Execute Syscall without going to ntdll.dll\n\n4.7 Install VEH Install Vectored Exception Handler for Spoofing\n\n4.8 Enable All Evasion Enable all Evasion techniques at once", "creation_timestamp": "2026-08-18T00:00:12.953784Z"}, {"uuid": "b1e5abc9-dd37-44f5-8307-1edb96a10e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/cyberpoleshuk/134", "content": "\u041a\u0442\u043e \u043d\u0435 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-26229 \u0443 \u043c\u0435\u043d\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c: \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 C \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d \u043e\u043a\u043e\u043b\u043e 16 \u0447\u0430\u0441\u043e\u0432 \u043d\u0430\u0437\u0430\u0434 \u0438 \u0432 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u0430\u0445 \u0435\u0433\u043e \u0435\u0449\u0435 \u043d\u0435\u0442 \ud83d\ude2b\nhttps://www.virustotal.com/gui/file/38ec8c05f3ebd5c02d15430a7812baab1829e9696bc7278cb4a26f1f84ec933e/\n\n\u0414\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u0432 \u0442\u0430\u043d\u043a\u0435: \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435 \u0438 \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442 \u043f\u0440\u0430\u0432\u0430 \u0423\u0417 \u0434\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 system\n\n#malaware #exploit", "creation_timestamp": "2026-07-17T06:00:04.988292Z"}, {"uuid": "6ec8af87-8366-42c6-9684-0438275a32b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/cyberpoleshuk/134", "content": "\u041a\u0442\u043e \u043d\u0435 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-26229 \u0443 \u043c\u0435\u043d\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c: \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 C \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d \u043e\u043a\u043e\u043b\u043e 16 \u0447\u0430\u0441\u043e\u0432 \u043d\u0430\u0437\u0430\u0434 \u0438 \u0432 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u0430\u0445 \u0435\u0433\u043e \u0435\u0449\u0435 \u043d\u0435\u0442 \ud83d\ude2b\nhttps://www.virustotal.com/gui/file/38ec8c05f3ebd5c02d15430a7812baab1829e9696bc7278cb4a26f1f84ec933e/\n\n\u0414\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u0432 \u0442\u0430\u043d\u043a\u0435: \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435 \u0438 \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442 \u043f\u0440\u0430\u0432\u0430 \u0423\u0417 \u0434\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 system\n\n#malaware #exploit", "creation_timestamp": "2026-07-18T00:00:40.256048Z"}, {"uuid": "656b74fb-190f-4de7-93ee-bddca1eda5df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "seen", "source": "https://t.me/cyberwarehouse/448", "content": "https://github.com/RalfHacker/CVE-2024-26229-exploit", "creation_timestamp": "2026-07-26T02:00:22.479996Z"}, {"uuid": "c5130d88-4749-4389-a86d-431f3bc136c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26229", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/448", "content": "https://github.com/RalfHacker/CVE-2024-26229-exploit", "creation_timestamp": "2026-07-27T00:00:21.070469Z"}]}