{"metadata": {"vulnerability": "cve-2011-3402", "count": 52, "kinds": {"milestone": 4, "sighting": 16, "kev": 11, "other": 21}}, "data": [{"timestamp": "2011-09-09T00:00:00Z", "date_only": false, "value": "2011-09-09T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2011-3402", "field": "cveMetadata.dateReserved"}, {"timestamp": "2011-11-03T00:00:00Z", "date_only": false, "value": "2011-11-03T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2011-3402", "field": "containers.cna.datePublic"}, {"timestamp": "2011-11-04T00:00:00Z", "date_only": false, "value": "2011-11-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTA-2011-ALE-006", "record": "CERTA-2011-ALE-006", "field": "revisions.0.revision_date"}, {"timestamp": "2011-11-04T21:00:00Z", "date_only": false, "value": "2011-11-04T21:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2011-3402", "field": "timestamps.asserted_at", "uuid": "88638a18-cacf-4d8f-9bb7-ac1f79cff93a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2011-11-04T21:00:00Z", "date_only": false, "value": "2011-11-04T21:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2011-3402", "field": "evidence.0.details.added_date", "uuid": "88638a18-cacf-4d8f-9bb7-ac1f79cff93a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2011-11-04T21:00:00Z", "date_only": false, "value": "2011-11-04T21:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2011-3402", "field": "timestamps.first_seen_at", "uuid": "88638a18-cacf-4d8f-9bb7-ac1f79cff93a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2011-11-04T21:00:00Z", "date_only": false, "value": "2011-11-04T21:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2011-3402", "field": "cveMetadata.datePublished"}, {"timestamp": "2011-11-04T21:00:00Z", "date_only": false, "value": "2011-11-04T21:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2011-3402", "field": "status.status_updated_at", "uuid": "88638a18-cacf-4d8f-9bb7-ac1f79cff93a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2011-11-04T21:55:00Z", "date_only": false, "value": "2011-11-04T21:55:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QV6F-65C9-QP9P", "record": "GHSA-QV6F-65C9-QP9P", "field": "database_specific.nvd_published_at"}, {"timestamp": "2011-11-04T21:55:00Z", "date_only": false, "value": "2011-11-04T21:55Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2011-3402", "record": "GSD-2011-3402", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2011-11-04T21:55:04.693Z", "date_only": false, "value": "2011-11-04T21:55:04.693", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2011-3402", "record": "FKIE_CVE-2011-3402", "field": "published"}, {"timestamp": "2011-11-09T00:00:00Z", "date_only": false, "value": "2011-11-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTA-2011-ALE-006", "record": "CERTA-2011-ALE-006", "field": "revisions.1.revision_date"}, {"timestamp": "2011-12-14T00:00:00Z", "date_only": false, "value": "2011-12-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTA-2011-ALE-006", "record": "CERTA-2011-ALE-006", "field": "revisions.2.revision_date"}, {"timestamp": "2011-12-14T00:00:00Z", "date_only": false, "value": "2011-12-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTA-2011-AVI-684", "record": "CERTA-2011-AVI-684", "field": "revisions.0.revision_date"}, {"timestamp": "2012-05-09T00:00:00Z", "date_only": false, "value": "2012-05-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTA-2012-AVI-259", "record": "CERTA-2012-AVI-259", "field": "revisions.0.revision_date"}, {"timestamp": "2012-06-13T00:00:00Z", "date_only": false, "value": "2012-06-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTA-2012-AVI-323", "record": "CERTA-2012-AVI-323", "field": "revisions.0.revision_date"}, {"timestamp": "2018-05-29T15:50:33Z", "date_only": false, "value": "2018-05-29T15:50:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/forensics/duqu_check.rb", "record": "CVE-2011-3402", "field": "creation_timestamp", "uuid": "6b2f5abf-42ef-493e-b248-39255dd5d019", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/forensics/duqu_check.rb"}, {"timestamp": "2018-10-12T19:57:01Z", "date_only": false, "value": "2018-10-12T19:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2011-3402", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-10-09T16:54:04Z", "date_only": false, "value": "2020-10-09T16:54:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a55437f3-0cf7-44ca-9fdd-edefb18b7111", "record": "CVE-2011-3402", "field": "creation_timestamp", "uuid": "cffb838b-5c60-4b40-b0eb-84a3d7eb7032"}, {"timestamp": "2022-05-13T01:15:35Z", "date_only": false, "value": "2022-05-13T01:15:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QV6F-65C9-QP9P", "record": "GHSA-QV6F-65C9-QP9P", "field": "published"}, {"timestamp": "2023-12-07T18:38:00Z", "date_only": false, "value": "2023-12-07T18:38Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2011-3402", "record": "GSD-2011-3402", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:19:10.221Z", "date_only": false, "value": "2023-12-13T01:19:10.221924Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2011-3402", "record": "GSD-2011-3402", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-06T23:29:56.897Z", "date_only": false, "value": "2024-08-06T23:29:56.897Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2011-3402", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:40Z", "date_only": false, "value": "2025-02-06T03:13:40.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2011-3402", "field": "creation_timestamp", "uuid": "d39bc945-f711-471b-9bda-d2c219ce07f0"}, {"timestamp": "2025-02-23T04:08:57Z", "date_only": false, "value": "2025-02-23T04:08:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2011-3402", "field": "creation_timestamp", "uuid": "2a01ee3e-f9ed-4c9f-bcf0-e168f6bdeb68"}, {"timestamp": "2025-08-31T03:00:55Z", "date_only": false, "value": "2025-08-31T03:00:55.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2011-3402", "field": "creation_timestamp", "uuid": "15f0f01d-164f-4c80-8c10-4ae0c815cefb"}, {"timestamp": "2025-08-31T03:12:42Z", "date_only": false, "value": "2025-08-31T03:12:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2011-3402", "field": "creation_timestamp", "uuid": "3506690e-e16f-440d-aa65-7b4f7f50a252"}, {"timestamp": "2025-10-04T03:55:29.370Z", "date_only": false, "value": "2025-10-04T03:55:29.370251Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2011-3402", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-10-04T03:55:29.370Z", "date_only": false, "value": "2025-10-04T03:55:29.370251Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2011-3402", "record": "FKIE_CVE-2011-3402", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2011-3402", "field": "timestamps.asserted_at", "uuid": "efa8ef0e-acdc-47b4-8451-8d32b135d25e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": true, "value": "2025-10-06", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2011-3402", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": true, "value": "2025-10-06", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2011-3402", "field": "evidence.0.details.date_added", "uuid": "efa8ef0e-acdc-47b4-8451-8d32b135d25e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2011-3402", "field": "timestamps.first_seen_at", "uuid": "efa8ef0e-acdc-47b4-8451-8d32b135d25e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2011-3402", "field": "status.status_updated_at", "uuid": "efa8ef0e-acdc-47b4-8451-8d32b135d25e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2011-3402", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2025-10-06T18:10:02Z", "date_only": false, "value": "2025-10-06T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2011-3402", "field": "creation_timestamp", "uuid": "e752aa3d-005e-46c4-843a-7b34c4f33d4c"}, {"timestamp": "2025-10-06T19:30:13.644Z", "date_only": false, "value": "2025-10-06T19:30:13.644553Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4868669", "record": "CVE-2011-3402", "field": "creation_timestamp", "uuid": "3758d412-eeff-4bbc-abba-ce2359d599d5", "url": "https://feedsin.space/feed/CISAKevBot/items/4868669"}, {"timestamp": "2025-10-06T20:49:36.222Z", "date_only": false, "value": "2025-10-06T20:49:36.222127Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m2kifgaw322b", "record": "CVE-2011-3402", "field": "creation_timestamp", "uuid": "302cc594-571a-4b6f-a5af-c245e8525167", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m2kifgaw322b"}, {"timestamp": "2025-10-07T03:22:07Z", "date_only": false, "value": "2025-10-07T03:22:07.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2011-3402", "field": "creation_timestamp", "uuid": "3b18fab7-ac07-4b66-bd59-1618cd2fe17c"}, {"timestamp": "2025-10-07T06:56:38.885Z", "date_only": false, "value": "2025-10-07T06:56:38.885400Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3m2lkcrr6jk2h", "record": "CVE-2011-3402", "field": "creation_timestamp", "uuid": "6db80851-22ed-4a74-8853-3d5d2ab7d954", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3m2lkcrr6jk2h"}, {"timestamp": "2025-10-07T21:02:34.751Z", "date_only": false, "value": "2025-10-07T21:02:34.751297Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2mzldej6g2i", "record": "CVE-2011-3402", "field": "creation_timestamp", "uuid": "213e1518-6440-47f2-aac6-7c49e4e316d2", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2mzldej6g2i"}, {"timestamp": "2025-10-22T00:05:48.983Z", "date_only": false, "value": "2025-10-22T00:05:48.983Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2011-3402", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:05:48.983Z", "date_only": false, "value": "2025-10-22T00:05:48.983Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2011-3402", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T03:30:30Z", "date_only": false, "value": "2025-10-22T03:30:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QV6F-65C9-QP9P", "record": "GHSA-QV6F-65C9-QP9P", "field": "modified"}, {"timestamp": "2025-10-27T00:00:00Z", "date_only": true, "value": "2025-10-27", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2011-3402", "field": "evidence.0.details.due_date", "uuid": "efa8ef0e-acdc-47b4-8451-8d32b135d25e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2011-3402", "field": "timestamps.recorded_at", "uuid": "efa8ef0e-acdc-47b4-8451-8d32b135d25e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:25:51.228Z", "date_only": false, "value": "2026-02-02T12:25:51.228368Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/efa8ef0e-acdc-47b4-8451-8d32b135d25e", "record": "CVE-2011-3402", "field": "creation_timestamp", "uuid": "7b7b1f5a-cde3-449c-a7fd-b63570f1032b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/efa8ef0e-acdc-47b4-8451-8d32b135d25e"}, {"timestamp": "2026-06-16T23:33:14.020Z", "date_only": false, "value": "2026-06-16T23:33:14.020", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2011-3402", "record": "FKIE_CVE-2011-3402", "field": "lastModified"}, {"timestamp": "2026-06-19T16:45:37.739Z", "date_only": false, "value": "2026-06-19T16:45:37.739891Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9e4516c3-0737-4eec-9786-45fc04b2f97c", "record": "CVE-2011-3402", "field": "creation_timestamp", "uuid": "308943b3-1d04-4302-bf6e-168718494bd2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9e4516c3-0737-4eec-9786-45fc04b2f97c"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2011-3402", "field": "timestamps.recorded_at", "uuid": "88638a18-cacf-4d8f-9bb7-ac1f79cff93a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:09.770Z", "date_only": false, "value": "2026-06-23T14:04:09.770600Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/88638a18-cacf-4d8f-9bb7-ac1f79cff93a", "record": "CVE-2011-3402", "field": "creation_timestamp", "uuid": "decec96a-f874-4575-9734-dcf1f194bcf9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/88638a18-cacf-4d8f-9bb7-ac1f79cff93a"}, {"timestamp": "2026-08-14T16:00:06.103Z", "date_only": false, "value": "2026-08-14T16:00:06.103203Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/1184", "record": "CVE-2011-3402", "field": "creation_timestamp", "uuid": "ba4af00c-d25e-47c6-94d2-a01e73534078", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-61882 \u2014 \u0431\u0430\u0433 \u0432 Oracle E-Business Suite. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 servlet \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 XML, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043f\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 URL (SSRF). \u0417\u0430\u0442\u0435\u043c \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 return_url (CRLF-\u0432\u0441\u0442\u0430\u0432\u043a\u0430) \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0432 POST \u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0435 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435, \u0434\u043e\u0436\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0443 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442 \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0441\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443.\n\n\ud83d\udd35 CVE-2025-20362 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 VPN \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco Secure Firewall ASA/FTD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP(S)-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a URL-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043e\u0431\u0445\u043e\u0434\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0412 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 CVE-2025-20333 \u0438 CVE-2025-20363 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0443\u0436\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 in wild.\n\n\ud83d\udd35 CVE-2025-27915 \u2014 XSS-\u0431\u0430\u0433 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 iCalendar (.ICS, \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 Zimbra), \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 .ics-\u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0441 \u043e\u0431\u0444\u0443\u0441\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c JavaScript-\u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b\u0441\u044f \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0441\u0435\u0441\u0441\u0438\u0438 \u0436\u0435\u0440\u0442\u0432\u044b \u043f\u0440\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044f. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043a\u0440\u0430\u0441\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u043a\u0438 \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u044f\u0449\u0438\u043a\u0435 \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043a\u0440\u0430\u0441\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430 \u0431\u0435\u0437 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\ud83d\udd35 CISA \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 in wild \u2014 CVE-2010-3765 (RCE, Mozilla), CVE-2010-3962 (\u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438, Internet Explorer), CVE-2011-3402 (RCE \u0432 Windows), CVE-2013-3918 (\u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u043f\u0430\u043c\u044f\u0442\u0438, Windows), CVE-2021-22555 (\u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u043a\u0443\u0447\u0438, Linux), CVE-2021-43226 (\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, Windows), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0436\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u0430\u044f \u0440\u0430\u043d\u0435\u0435 CVE-2025-61882.\n\n#blue_team #CVE_\u0434\u043d\u044f", "url": "https://t.me/purp_sec/1184"}]}