https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 05 Jul 2026 08:40:54 +0000 https://vulnerability.circl.lu/sighting/4f38f1ef-c29f-4231-835a-16e64002b06a/export {"uuid": "4f38f1ef-c29f-4231-835a-16e64002b06a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "published-proof-of-concept", "source": "Telegram/bj8doEkkdNqHpfVQfl8gvA4415dyF2kRdOr9jMxstG-0IPA", "content": "", "creation_timestamp": "2026-04-17T15:00:06.000000Z"} {"uuid": "4f38f1ef-c29f-4231-835a-16e64002b06a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "published-proof-of-concept", "source": "Telegram/bj8doEkkdNqHpfVQfl8gvA4415dyF2kRdOr9jMxstG-0IPA", "content": "", "creation_timestamp": "2026-04-17T15:00:06.000000Z"} https://vulnerability.circl.lu/sighting/4f38f1ef-c29f-4231-835a-16e64002b06a/export Fri, 17 Apr 2026 15:00:06 +0000 https://vulnerability.circl.lu/sighting/f6ba01c2-d921-4d82-9129-cb1a3c1adf8c/export {"uuid": "f6ba01c2-d921-4d82-9129-cb1a3c1adf8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21034", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5626", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-21034\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In multiple functions of SensorService.cpp, there is a possible access of accurate sensor data due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-230358834\n\ud83d\udccf Published: 2023-03-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T20:58:53.159Z\n\ud83d\udd17 References:\n1. https://source.android.com/security/bulletin/pixel/2023-03-01", "creation_timestamp": "2025-02-26T21:25:46.000000Z"} {"uuid": "f6ba01c2-d921-4d82-9129-cb1a3c1adf8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21034", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5626", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-21034\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In multiple functions of SensorService.cpp, there is a possible access of accurate sensor data due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-230358834\n\ud83d\udccf Published: 2023-03-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T20:58:53.159Z\n\ud83d\udd17 References:\n1. https://source.android.com/security/bulletin/pixel/2023-03-01", "creation_timestamp": "2025-02-26T21:25:46.000000Z"} https://vulnerability.circl.lu/sighting/f6ba01c2-d921-4d82-9129-cb1a3c1adf8c/export Wed, 26 Feb 2025 21:25:46 +0000 https://vulnerability.circl.lu/sighting/6a0c7096-9bbb-4200-84c2-b6c8b83c1813/export {"uuid": "6a0c7096-9bbb-4200-84c2-b6c8b83c1813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "seen", "source": "https://t.me/pntests/113", "content": "\ud83e\udd29 \u041a\u043e\u043d\u043a\u0443\u0440\u0441 \u0438\u043d\u0432\u0430\u0439\u0442\u043e\u0432 \u043d\u0430 Standoff Hacks \u0437\u0430 \u043b\u0443\u0447\u0448\u0438\u0435 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b \u043e \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d!\n\n\u0422\u0430\u043b\u0430\u043d\u0442\u043b\u0438\u0432\u044b\u0435 \u0430\u0432\u0442\u043e\u0440\u044b \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u044f\u0442\u0441\u044f \u043a \u043d\u0430\u0448\u0435\u043c\u0443 priv8-\u0438\u0432\u0435\u043d\u0442\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0439\u0434\u0435\u0442 26 \u043d\u043e\u044f\u0431\u0440\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Moscow Hacking Week. \n\n\u041f\u044f\u0442\u044c \u0438\u043d\u0432\u0430\u0439\u0442\u043e\u0432 \u043c\u044b \u0440\u0430\u0437\u044b\u0433\u0440\u0430\u043b\u0438 \u0437\u0430 \u0441\u0430\u043c\u044b\u0435 \u043a\u0440\u0443\u0442\u044b\u0435 \u0441\u0442\u0430\u0442\u044c\u0438. \u0412\u043e\u0442 \u043d\u0438\u043a\u0438 \u043f\u043e\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0438 \u0438\u0445 \u0442\u0435\u043c\u044b:\n\n1. whoamins. \u00ab\u041e\u0431\u044b\u0447\u043d\u044b\u0439 Client Side \u0441 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439\u00bb\n\n2. qwqoro. \u00abE-mail Injection\u00bb\n\n3. iSavAnna. \u00ab\u041d\u0435 \u0432\u0441\u0435 \"\u043e\u0448\u0438\u0431\u043a\u0438\" \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b \u2014 \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00bb\n\n4. Ivan. \u00ab\u041a\u0430\u043a \u043d\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0435\u0437\u0430\u0442\u044c \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f. aCropalypse (CVE-2023-21036)\u00bb\n\n5. Firewall. \u00ab\u041a\u0430\u043a \u043b\u043e\u043c\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u043d\u0430 1\u0421-\u0411\u0438\u0442\u0440\u0438\u043a\u0441\u00bb\n\n\u041e\u0434\u0438\u043d \u0431\u043e\u043d\u0443\u0441\u043d\u044b\u0439, \u0448\u0435\u0441\u0442\u043e\u0439, \u0438\u043d\u0432\u0430\u0439\u0442 \u2014 \u0437\u0430 \u0432\u0438\u0434\u0435\u043e \u00ab\u0413\u0430\u0439\u0434 \u043f\u043e \u0440\u0435\u043a\u043e\u043d\u0443 \u0432 \u0431\u0430\u0433\u0431\u0430\u0443\u043d\u0442\u0438 \u0434\u043b\u044f \u043d\u043e\u0432\u0438\u0447\u043a\u043e\u0432\u00bb, \u0435\u0433\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 lifei8hitt.\n\n\u0410 \u0435\u0449\u0435 \u0441\u0432\u043e\u044e \u0441\u0442\u0430\u0442\u044c\u044e \u00ab\u0410\u043d\u0430\u043b\u0438\u0437 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438\u00bb \u043f\u0440\u0438\u0441\u043b\u0430\u043b superhacker123 \u2014 \u043e\u043d\u0430 \u0432\u044b\u0448\u043b\u0430 \u0434\u043e\u0441\u0442\u043e\u0439\u043d\u043e\u0439, \u043d\u043e \u0435\u0435 \u0430\u0432\u0442\u043e\u0440 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0438\u043d\u0432\u0430\u0439\u0442 \u0435\u0449\u0435 \u0434\u043e \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0430 \ud83d\ude09\n\n\u0412\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u043a\u043e\u0440\u043e \u0431\u0443\u0434\u0443\u0442 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u0425\u0430\u0431\u0440\u0435 (\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043c\u043e\u0436\u043d\u043e \u0437\u0434\u0435\u0441\u044c) \u2014 \u043e\u043d\u0438 \u043f\u043e\u043c\u043e\u0433\u0443\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u0442\u044c \u0435\u0449\u0435 \u0441\u0438\u043b\u044c\u043d\u0435\u0435 (\u0438, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c Hacks). \u0421 \u0437\u0430\u0441\u043b\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0431\u0435\u0434\u043e\u0439! \ud83d\udc4f", "creation_timestamp": "2023-10-16T18:44:49.000000Z"} {"uuid": "6a0c7096-9bbb-4200-84c2-b6c8b83c1813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "seen", "source": "https://t.me/pntests/113", "content": "\ud83e\udd29 \u041a\u043e\u043d\u043a\u0443\u0440\u0441 \u0438\u043d\u0432\u0430\u0439\u0442\u043e\u0432 \u043d\u0430 Standoff Hacks \u0437\u0430 \u043b\u0443\u0447\u0448\u0438\u0435 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b \u043e \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d!\n\n\u0422\u0430\u043b\u0430\u043d\u0442\u043b\u0438\u0432\u044b\u0435 \u0430\u0432\u0442\u043e\u0440\u044b \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u044f\u0442\u0441\u044f \u043a \u043d\u0430\u0448\u0435\u043c\u0443 priv8-\u0438\u0432\u0435\u043d\u0442\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0439\u0434\u0435\u0442 26 \u043d\u043e\u044f\u0431\u0440\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Moscow Hacking Week. \n\n\u041f\u044f\u0442\u044c \u0438\u043d\u0432\u0430\u0439\u0442\u043e\u0432 \u043c\u044b \u0440\u0430\u0437\u044b\u0433\u0440\u0430\u043b\u0438 \u0437\u0430 \u0441\u0430\u043c\u044b\u0435 \u043a\u0440\u0443\u0442\u044b\u0435 \u0441\u0442\u0430\u0442\u044c\u0438. \u0412\u043e\u0442 \u043d\u0438\u043a\u0438 \u043f\u043e\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0438 \u0438\u0445 \u0442\u0435\u043c\u044b:\n\n1. whoamins. \u00ab\u041e\u0431\u044b\u0447\u043d\u044b\u0439 Client Side \u0441 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439\u00bb\n\n2. qwqoro. \u00abE-mail Injection\u00bb\n\n3. iSavAnna. \u00ab\u041d\u0435 \u0432\u0441\u0435 \"\u043e\u0448\u0438\u0431\u043a\u0438\" \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b \u2014 \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00bb\n\n4. Ivan. \u00ab\u041a\u0430\u043a \u043d\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0435\u0437\u0430\u0442\u044c \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f. aCropalypse (CVE-2023-21036)\u00bb\n\n5. Firewall. \u00ab\u041a\u0430\u043a \u043b\u043e\u043c\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u043d\u0430 1\u0421-\u0411\u0438\u0442\u0440\u0438\u043a\u0441\u00bb\n\n\u041e\u0434\u0438\u043d \u0431\u043e\u043d\u0443\u0441\u043d\u044b\u0439, \u0448\u0435\u0441\u0442\u043e\u0439, \u0438\u043d\u0432\u0430\u0439\u0442 \u2014 \u0437\u0430 \u0432\u0438\u0434\u0435\u043e \u00ab\u0413\u0430\u0439\u0434 \u043f\u043e \u0440\u0435\u043a\u043e\u043d\u0443 \u0432 \u0431\u0430\u0433\u0431\u0430\u0443\u043d\u0442\u0438 \u0434\u043b\u044f \u043d\u043e\u0432\u0438\u0447\u043a\u043e\u0432\u00bb, \u0435\u0433\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 lifei8hitt.\n\n\u0410 \u0435\u0449\u0435 \u0441\u0432\u043e\u044e \u0441\u0442\u0430\u0442\u044c\u044e \u00ab\u0410\u043d\u0430\u043b\u0438\u0437 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438\u00bb \u043f\u0440\u0438\u0441\u043b\u0430\u043b superhacker123 \u2014 \u043e\u043d\u0430 \u0432\u044b\u0448\u043b\u0430 \u0434\u043e\u0441\u0442\u043e\u0439\u043d\u043e\u0439, \u043d\u043e \u0435\u0435 \u0430\u0432\u0442\u043e\u0440 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0438\u043d\u0432\u0430\u0439\u0442 \u0435\u0449\u0435 \u0434\u043e \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0430 \ud83d\ude09\n\n\u0412\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u043a\u043e\u0440\u043e \u0431\u0443\u0434\u0443\u0442 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u0425\u0430\u0431\u0440\u0435 (\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043c\u043e\u0436\u043d\u043e \u0437\u0434\u0435\u0441\u044c) \u2014 \u043e\u043d\u0438 \u043f\u043e\u043c\u043e\u0433\u0443\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u0442\u044c \u0435\u0449\u0435 \u0441\u0438\u043b\u044c\u043d\u0435\u0435 (\u0438, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c Hacks). \u0421 \u0437\u0430\u0441\u043b\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0431\u0435\u0434\u043e\u0439! \ud83d\udc4f", "creation_timestamp": "2023-10-16T18:44:49.000000Z"} https://vulnerability.circl.lu/sighting/6a0c7096-9bbb-4200-84c2-b6c8b83c1813/export Mon, 16 Oct 2023 18:44:49 +0000 https://vulnerability.circl.lu/sighting/9838fe88-c92a-4e02-a27f-c2afd5251140/export {"uuid": "9838fe88-c92a-4e02-a27f-c2afd5251140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "seen", "source": "Telegram/ERi97NB1jlS5bAjPJ50BFpHL6Dp9_Hj-9S5GyICO6Z88", "content": "", "creation_timestamp": "2023-10-16T18:20:40.000000Z"} {"uuid": "9838fe88-c92a-4e02-a27f-c2afd5251140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "seen", "source": "Telegram/ERi97NB1jlS5bAjPJ50BFpHL6Dp9_Hj-9S5GyICO6Z88", "content": "", "creation_timestamp": "2023-10-16T18:20:40.000000Z"} https://vulnerability.circl.lu/sighting/9838fe88-c92a-4e02-a27f-c2afd5251140/export Mon, 16 Oct 2023 18:20:40 +0000 https://vulnerability.circl.lu/sighting/c225943d-c1c6-443d-af61-f209a65c5987/export {"uuid": "c225943d-c1c6-443d-af61-f209a65c5987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "published-proof-of-concept", "source": "https://t.me/jokerplstaeen/17285", "content": "\u200b\u200baCropalypse gif\n\naCropalypse CVE-2023-21036 related GIF PoC. The aCropalypse reported affects PNG, but a similar exploit exists in GIF images.\n\nhttps://github.com/heriet/acropalypse-gif\n\n#infosec #cve #poc", "creation_timestamp": "2023-05-23T17:56:34.000000Z"} {"uuid": "c225943d-c1c6-443d-af61-f209a65c5987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "published-proof-of-concept", "source": "https://t.me/jokerplstaeen/17285", "content": "\u200b\u200baCropalypse gif\n\naCropalypse CVE-2023-21036 related GIF PoC. The aCropalypse reported affects PNG, but a similar exploit exists in GIF images.\n\nhttps://github.com/heriet/acropalypse-gif\n\n#infosec #cve #poc", "creation_timestamp": "2023-05-23T17:56:34.000000Z"} https://vulnerability.circl.lu/sighting/c225943d-c1c6-443d-af61-f209a65c5987/export Tue, 23 May 2023 17:56:34 +0000 https://vulnerability.circl.lu/sighting/dea1e5ca-8584-4f03-a9fd-77e492e746a8/export {"uuid": "dea1e5ca-8584-4f03-a9fd-77e492e746a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/2895", "content": "kAFL\n\nA fuzzer for full VM kernel/driver targets.\n\nhttps://github.com/IntelLabs/kAFL\n\n#cybersecurity #infosec #linux\n\n\u200b\u200bfavfound (criminalip api)\n\nThis code was made to extract the fabicon hash from your desired IP address or URL. You can also see all the IP addresses that are associated with the fabicon hash value. I used an OSINT search engine similar to Shodan and Censys called CriminalIP and the API from their free service.\n\nhttps://github.com/elihypoo414/favfound\n\n#cybersecurity #infosec\n\n\u200b\u200bmssql-spider\n\nAutomated exploitation of MSSQL user impersonation and linked instances.\n\nhttps://github.com/dadevel/mssql-spider\n\n#infosec #pentesting #redteam\n\n\u200b\u200bdontgo403\n\nTool to bypass 40X response codes.\n\nhttps://github.com/devploit/dontgo403\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bWeb application pentesting checklist\n\nA OWASP Based Checklist With 500+ Test Cases.\n\nhttps://github.com/Hari-prasaanth/Web-App-Pentest-Checklist\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bsonos/amlogic haxx\n\nhere you will find some exploit & tool code that was part of my presentation about the Sonos One @ Hack in the Box amsterdam 2023. the EL3 exploit can be used to dump your OTP/eFUSE data. sonostool can be used to get decryption keys for Sonos LUKS volumes as well as fetch and decrypt OTA updates without using a sonos device as an oracle.\n\nhttps://github.com/blasty/sonos\n\n#cybersecurity #infosec #exploit\n\n\u200b\u200baCropalypse gif\n\naCropalypse CVE-2023-21036 related GIF PoC. The aCropalypse reported affects PNG, but a similar exploit exists in GIF images.\n\nhttps://github.com/heriet/acropalypse-gif\n\n#infosec #cve #poc\n\n\u200b\u200budpx\n\nFast and lightweight, UDPX is a single-packet UDP scanner written in Go that supports the discovery of over 45 services with the ability to add custom ones. It is easy to use and portable, and can be run on Linux, Mac OS, and Windows. Unlike internet-wide scanners like zgrab2 and zmap, UDPX is designed for portability and ease of use.\n\nhttps://github.com/nullt3r/udpx\n\n#pentesting #infosec #redteam\n\n\u200b\u200bSQLRecon\n\nA C# MS-SQL toolkit designed for offensive reconnaissance and post-exploitation. For detailed usage information on each technique, refer to the wiki.\n\nhttps://github.com/xforcered/SQLRecon\n\nDetails:\nhttps://github.com/skahwah/Conference-Talks/tree/main/2022-Way-West-Hackin-Fest\n\n#infosec #pentesting #redteam\n\n\u200b\u200bTeamFiltration\n\nTeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts.\n\nhttps://github.com/Flangvik/TeamFiltration\n\n#infosec #cybersec \n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory\n\n2/2", "creation_timestamp": "2023-04-24T14:53:17.000000Z"} {"uuid": "dea1e5ca-8584-4f03-a9fd-77e492e746a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/2895", "content": "kAFL\n\nA fuzzer for full VM kernel/driver targets.\n\nhttps://github.com/IntelLabs/kAFL\n\n#cybersecurity #infosec #linux\n\n\u200b\u200bfavfound (criminalip api)\n\nThis code was made to extract the fabicon hash from your desired IP address or URL. You can also see all the IP addresses that are associated with the fabicon hash value. I used an OSINT search engine similar to Shodan and Censys called CriminalIP and the API from their free service.\n\nhttps://github.com/elihypoo414/favfound\n\n#cybersecurity #infosec\n\n\u200b\u200bmssql-spider\n\nAutomated exploitation of MSSQL user impersonation and linked instances.\n\nhttps://github.com/dadevel/mssql-spider\n\n#infosec #pentesting #redteam\n\n\u200b\u200bdontgo403\n\nTool to bypass 40X response codes.\n\nhttps://github.com/devploit/dontgo403\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bWeb application pentesting checklist\n\nA OWASP Based Checklist With 500+ Test Cases.\n\nhttps://github.com/Hari-prasaanth/Web-App-Pentest-Checklist\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bsonos/amlogic haxx\n\nhere you will find some exploit & tool code that was part of my presentation about the Sonos One @ Hack in the Box amsterdam 2023. the EL3 exploit can be used to dump your OTP/eFUSE data. sonostool can be used to get decryption keys for Sonos LUKS volumes as well as fetch and decrypt OTA updates without using a sonos device as an oracle.\n\nhttps://github.com/blasty/sonos\n\n#cybersecurity #infosec #exploit\n\n\u200b\u200baCropalypse gif\n\naCropalypse CVE-2023-21036 related GIF PoC. The aCropalypse reported affects PNG, but a similar exploit exists in GIF images.\n\nhttps://github.com/heriet/acropalypse-gif\n\n#infosec #cve #poc\n\n\u200b\u200budpx\n\nFast and lightweight, UDPX is a single-packet UDP scanner written in Go that supports the discovery of over 45 services with the ability to add custom ones. It is easy to use and portable, and can be run on Linux, Mac OS, and Windows. Unlike internet-wide scanners like zgrab2 and zmap, UDPX is designed for portability and ease of use.\n\nhttps://github.com/nullt3r/udpx\n\n#pentesting #infosec #redteam\n\n\u200b\u200bSQLRecon\n\nA C# MS-SQL toolkit designed for offensive reconnaissance and post-exploitation. For detailed usage information on each technique, refer to the wiki.\n\nhttps://github.com/xforcered/SQLRecon\n\nDetails:\nhttps://github.com/skahwah/Conference-Talks/tree/main/2022-Way-West-Hackin-Fest\n\n#infosec #pentesting #redteam\n\n\u200b\u200bTeamFiltration\n\nTeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts.\n\nhttps://github.com/Flangvik/TeamFiltration\n\n#infosec #cybersec \n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory\n\n2/2", "creation_timestamp": "2023-04-24T14:53:17.000000Z"} https://vulnerability.circl.lu/sighting/dea1e5ca-8584-4f03-a9fd-77e492e746a8/export Mon, 24 Apr 2023 14:53:17 +0000 https://vulnerability.circl.lu/sighting/95061445-173e-49a4-9c35-50d5113aa580/export {"uuid": "95061445-173e-49a4-9c35-50d5113aa580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4084", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aWeb tool for detecting Acropalypse (CVE-2023-21036)\nURL\uff1ahttps://github.com/lordofpipes/acropadetect\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-04-23T05:54:39.000000Z"} {"uuid": "95061445-173e-49a4-9c35-50d5113aa580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4084", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aWeb tool for detecting Acropalypse (CVE-2023-21036)\nURL\uff1ahttps://github.com/lordofpipes/acropadetect\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-04-23T05:54:39.000000Z"} https://vulnerability.circl.lu/sighting/95061445-173e-49a4-9c35-50d5113aa580/export Sun, 23 Apr 2023 05:54:39 +0000 https://vulnerability.circl.lu/sighting/b7671f31-9968-490b-980e-8cce0f23e250/export {"uuid": "b7671f31-9968-490b-980e-8cce0f23e250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8162", "content": "#exploit\n1. CVE-2023-21036,\u00a0CVE-2023-28303:\naCropalypse Vulnerability and Restoration of GIF Images\nhttps://zenn.dev/heriet/articles/acropalypse-gif\n]-> https://github.com/heriet/acropalypse-gif\n\n2. CVE-2023-2017:\nShopware 6 Server-side Template Injection (SSTI) via Twig Security Extension\nhttps://starlabs.sg/advisories/23/23-2017", "creation_timestamp": "2023-04-22T12:47:01.000000Z"} {"uuid": "b7671f31-9968-490b-980e-8cce0f23e250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8162", "content": "#exploit\n1. CVE-2023-21036,\u00a0CVE-2023-28303:\naCropalypse Vulnerability and Restoration of GIF Images\nhttps://zenn.dev/heriet/articles/acropalypse-gif\n]-> https://github.com/heriet/acropalypse-gif\n\n2. CVE-2023-2017:\nShopware 6 Server-side Template Injection (SSTI) via Twig Security Extension\nhttps://starlabs.sg/advisories/23/23-2017", "creation_timestamp": "2023-04-22T12:47:01.000000Z"} https://vulnerability.circl.lu/sighting/b7671f31-9968-490b-980e-8cce0f23e250/export Sat, 22 Apr 2023 12:47:01 +0000 https://vulnerability.circl.lu/sighting/86974265-306c-4df0-8083-0e30d32370a9/export {"uuid": "86974265-306c-4df0-8083-0e30d32370a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "published-proof-of-concept", "source": "https://t.me/zero_day_uz/320", "content": "Exploiting aCropalypse: Recovering Truncated PNGs (CVE-2023-21036)\nVulnerability in the Google Pixel's inbuilt screenshot editing tool, Markup, enabling partial recovery of the original, unedited image data of a cropped and/or redacted screenshot.\nhttps://www.da.vidbuchanan.co.uk/blog/exploiting-acropalypse.html\nReport: https://issuetracker.google.com/issues/180526528\nVulnerability online test: https://acropalypse.app/", "creation_timestamp": "2023-04-08T01:46:05.000000Z"} {"uuid": "86974265-306c-4df0-8083-0e30d32370a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "published-proof-of-concept", "source": "https://t.me/zero_day_uz/320", "content": "Exploiting aCropalypse: Recovering Truncated PNGs (CVE-2023-21036)\nVulnerability in the Google Pixel's inbuilt screenshot editing tool, Markup, enabling partial recovery of the original, unedited image data of a cropped and/or redacted screenshot.\nhttps://www.da.vidbuchanan.co.uk/blog/exploiting-acropalypse.html\nReport: https://issuetracker.google.com/issues/180526528\nVulnerability online test: https://acropalypse.app/", "creation_timestamp": "2023-04-08T01:46:05.000000Z"} https://vulnerability.circl.lu/sighting/86974265-306c-4df0-8083-0e30d32370a9/export Sat, 08 Apr 2023 01:46:05 +0000 https://vulnerability.circl.lu/sighting/6e83a4d5-611e-41bb-8c6b-438490172f9f/export {"uuid": "6e83a4d5-611e-41bb-8c6b-438490172f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "seen", "source": "https://t.me/By3side/142", "content": "\u0412\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u043c\u0430\u0437\u0430\u043d\u043d\u043e\u0439/\u043e\u0431\u0440\u0435\u0437\u0430\u043d\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f\n\n\u0412\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u044d\u0442\u043e \u041d\u0415 \u0448\u0443\u0442\u043a\u0430, \u0445\u043e\u0442\u044c \u043f\u043e\u0441\u0442 \u0438 \u0432\u044b\u0445\u043e\u0434\u0438\u0442 1 \u0430\u043f\u0440\u0435\u043b\u044f.\n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435\u0441\u044c \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u044b\u043c \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u043c Google Pixel \u0438\u043b\u0438 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c Snipping Tool \u0432 Windows 11 \u043b\u044e\u0431\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043b\u044f \u043e\u0431\u0440\u0435\u0437\u043a\u0438 \u0438 \u0437\u0430\u043c\u0430\u0437\u044b\u0432\u0430\u043d\u0438\u044f \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f, \u0442\u043e \u0443 \u043d\u0430\u0441 \u0434\u043b\u044f \u0432\u0430\u0441 \u043f\u043b\u043e\u0445\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438.\n\n\u0415\u0441\u0442\u044c \u0448\u0430\u043d\u0441, \u0447\u0442\u043e \u0432\u0430\u0448\u0435 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u043e\u0436\u043d\u043e \u00ab\u043e\u0442\u043c\u0435\u043d\u0438\u0442\u044c\u00bb. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0435\u0441\u043b\u0438 \u043a\u0430\u0440\u0442\u0438\u043d\u043a\u0430 \u0438 \u0437\u0430\u043c\u0430\u0437\u0430\u043d\u0430, \u0438 \u043e\u0431\u0440\u0435\u0437\u0430\u043d\u0430 \u0448\u0430\u043d\u0441 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0432\u044b\u0441\u043e\u043a. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0444\u043e\u0442\u043e\u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u044b \u043e\u0441\u043e\u0431\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438, \u0438 \u0443 \u043d\u0438\u0445 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u00ab\u043b\u0438\u0448\u043d\u0435\u0435 \u043c\u0435\u0441\u0442\u043e\u00bb \u0432 \u043a\u043e\u043d\u0446\u0435 \u043a\u0430\u0440\u0442\u0438\u043d\u043a\u0438.\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0435\u0441\u043b\u0438 \u043c\u044b \u043a\u0430\u0440\u0442\u0438\u043d\u043a\u0443 \u043e\u0431\u0440\u0435\u0437\u0430\u043b\u0438, \u0442\u043e \u0443 \u043d\u0430\u0441 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u043d\u0435\u0435 \u043c\u0435\u0441\u0442\u043e \u0432 \u043a\u043e\u043d\u0446\u0435 \u0444\u0430\u0439\u043b\u0430. \u0418\u043b\u0438 \u0435\u0441\u043b\u0438 \u043c\u044b \u0437\u0430\u043c\u0430\u0437\u0430\u043b\u0438 \u043e\u0434\u043d\u0438\u043c \u0446\u0432\u0435\u0442\u043e\u043c, \u0442\u043e \u043a\u0430\u0440\u0442\u0438\u043d\u043a\u0430 \u043b\u0443\u0447\u0448\u0435 \u0441\u043e\u0436\u043c\u0435\u0442\u0441\u044f \u0438 \u0442\u043e\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u0442\u0441\u044f \u043b\u0438\u0448\u043d\u0435\u0435 \u043c\u0435\u0441\u0442\u043e. \u0410 \u044d\u0442\u0443 \u043b\u0438\u0448\u043d\u044e\u044e \u0447\u0430\u0441\u0442\u044c \u0444\u043e\u0442\u043e\u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440 \u043d\u0435 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442, \u0433\u0434\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0441\u0442\u0430\u0442\u044c\u0441\u044f \u0442\u043e\u0442 \u0441\u0430\u043c\u044b\u0439 \u043e\u0431\u0440\u0435\u0437\u0430\u043d\u043d\u044b\u0439 \u0438\u043b\u0438 \u0437\u0430\u043c\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u043a\u0443\u0441\u043e\u043a. \u041a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043b\u0435\u0433\u043a\u043e \u0432\u0435\u0440\u043d\u0443\u0442\u044c. \u0423\u0436\u0435 \u0434\u0430\u0436\u0435 \u0435\u0441\u0442\u044c \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u044d\u0442\u043e \u043f\u043e\u043f\u0440\u043e\u0431\u043e\u0432\u0430\u0442\u044c \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043d\u0430 \u043b\u044e\u0431\u044b\u0445 \u0444\u0430\u0439\u043b\u0430\u0445, \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u0431\u044b\u043b\u0438 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043d\u0430 Pixel.\n\n\u0414\u043b\u044f Pixel \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 - Acropalypse (CVE-2023-21036), \u043e\u043d\u0430 \u0443\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u0432 \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438.\n\u0414\u043b\u044f Snipping Tool \u0432 Windows 11 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0435\u0449\u0435 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u043c\u0443 \u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0430 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u0445:\n- \u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 Pixel \u2013 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0435\u0433\u043e.\n- \u041d\u0435 \u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435\u0441\u044c. \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0443\u0442\u0438\u043b\u0438\u0442\u043e\u0439 Snipping Tool \u0432 Windows 11. \u0415\u0441\u0442\u044c \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0438\u043d\u044b\u0445 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0443\u0434\u043e\u0431\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n- \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0442\u043e\u043b\u044c\u043a\u043e 100% \u043d\u0435\u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u0443\u044e \u0437\u0430\u043b\u0438\u0432\u043a\u0443 \u043f\u0440\u0438 \u0437\u0430\u043c\u0430\u0437\u044b\u0432\u0430\u043d\u0438\u0438/\u0437\u0430\u043a\u0440\u0430\u0448\u0438\u0432\u0430\u043d\u0438\u0438.\n- \u041d\u0438\u043a\u0430\u043a\u043e\u0439 \u00ab\u043f\u0438\u043a\u0441\u0435\u043b\u0438\u0437\u0430\u0446\u0438\u0438\u00bb \u0438 \u00ab\u0440\u0430\u0437\u043c\u044b\u0442\u0438\u044f\u00bb \u2014 \u044d\u0442\u043e \u043e\u0431\u0440\u0430\u0442\u0438\u043c\u043e.", "creation_timestamp": "2023-04-01T10:19:58.000000Z"} {"uuid": "6e83a4d5-611e-41bb-8c6b-438490172f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21036", "type": "seen", "source": "https://t.me/By3side/142", "content": "\u0412\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u043c\u0430\u0437\u0430\u043d\u043d\u043e\u0439/\u043e\u0431\u0440\u0435\u0437\u0430\u043d\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f\n\n\u0412\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u044d\u0442\u043e \u041d\u0415 \u0448\u0443\u0442\u043a\u0430, \u0445\u043e\u0442\u044c \u043f\u043e\u0441\u0442 \u0438 \u0432\u044b\u0445\u043e\u0434\u0438\u0442 1 \u0430\u043f\u0440\u0435\u043b\u044f.\n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435\u0441\u044c \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u044b\u043c \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u043c Google Pixel \u0438\u043b\u0438 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c Snipping Tool \u0432 Windows 11 \u043b\u044e\u0431\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043b\u044f \u043e\u0431\u0440\u0435\u0437\u043a\u0438 \u0438 \u0437\u0430\u043c\u0430\u0437\u044b\u0432\u0430\u043d\u0438\u044f \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f, \u0442\u043e \u0443 \u043d\u0430\u0441 \u0434\u043b\u044f \u0432\u0430\u0441 \u043f\u043b\u043e\u0445\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438.\n\n\u0415\u0441\u0442\u044c \u0448\u0430\u043d\u0441, \u0447\u0442\u043e \u0432\u0430\u0448\u0435 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u043e\u0436\u043d\u043e \u00ab\u043e\u0442\u043c\u0435\u043d\u0438\u0442\u044c\u00bb. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0435\u0441\u043b\u0438 \u043a\u0430\u0440\u0442\u0438\u043d\u043a\u0430 \u0438 \u0437\u0430\u043c\u0430\u0437\u0430\u043d\u0430, \u0438 \u043e\u0431\u0440\u0435\u0437\u0430\u043d\u0430 \u0448\u0430\u043d\u0441 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0432\u044b\u0441\u043e\u043a. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0444\u043e\u0442\u043e\u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u044b \u043e\u0441\u043e\u0431\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438, \u0438 \u0443 \u043d\u0438\u0445 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u00ab\u043b\u0438\u0448\u043d\u0435\u0435 \u043c\u0435\u0441\u0442\u043e\u00bb \u0432 \u043a\u043e\u043d\u0446\u0435 \u043a\u0430\u0440\u0442\u0438\u043d\u043a\u0438.\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0435\u0441\u043b\u0438 \u043c\u044b \u043a\u0430\u0440\u0442\u0438\u043d\u043a\u0443 \u043e\u0431\u0440\u0435\u0437\u0430\u043b\u0438, \u0442\u043e \u0443 \u043d\u0430\u0441 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u043d\u0435\u0435 \u043c\u0435\u0441\u0442\u043e \u0432 \u043a\u043e\u043d\u0446\u0435 \u0444\u0430\u0439\u043b\u0430. \u0418\u043b\u0438 \u0435\u0441\u043b\u0438 \u043c\u044b \u0437\u0430\u043c\u0430\u0437\u0430\u043b\u0438 \u043e\u0434\u043d\u0438\u043c \u0446\u0432\u0435\u0442\u043e\u043c, \u0442\u043e \u043a\u0430\u0440\u0442\u0438\u043d\u043a\u0430 \u043b\u0443\u0447\u0448\u0435 \u0441\u043e\u0436\u043c\u0435\u0442\u0441\u044f \u0438 \u0442\u043e\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u0442\u0441\u044f \u043b\u0438\u0448\u043d\u0435\u0435 \u043c\u0435\u0441\u0442\u043e. \u0410 \u044d\u0442\u0443 \u043b\u0438\u0448\u043d\u044e\u044e \u0447\u0430\u0441\u0442\u044c \u0444\u043e\u0442\u043e\u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440 \u043d\u0435 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442, \u0433\u0434\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0441\u0442\u0430\u0442\u044c\u0441\u044f \u0442\u043e\u0442 \u0441\u0430\u043c\u044b\u0439 \u043e\u0431\u0440\u0435\u0437\u0430\u043d\u043d\u044b\u0439 \u0438\u043b\u0438 \u0437\u0430\u043c\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u043a\u0443\u0441\u043e\u043a. \u041a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043b\u0435\u0433\u043a\u043e \u0432\u0435\u0440\u043d\u0443\u0442\u044c. \u0423\u0436\u0435 \u0434\u0430\u0436\u0435 \u0435\u0441\u0442\u044c \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u044d\u0442\u043e \u043f\u043e\u043f\u0440\u043e\u0431\u043e\u0432\u0430\u0442\u044c \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043d\u0430 \u043b\u044e\u0431\u044b\u0445 \u0444\u0430\u0439\u043b\u0430\u0445, \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u0431\u044b\u043b\u0438 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043d\u0430 Pixel.\n\n\u0414\u043b\u044f Pixel \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 - Acropalypse (CVE-2023-21036), \u043e\u043d\u0430 \u0443\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u0432 \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438.\n\u0414\u043b\u044f Snipping Tool \u0432 Windows 11 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0435\u0449\u0435 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u043c\u0443 \u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0430 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u0445:\n- \u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 Pixel \u2013 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0435\u0433\u043e.\n- \u041d\u0435 \u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435\u0441\u044c. \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0443\u0442\u0438\u043b\u0438\u0442\u043e\u0439 Snipping Tool \u0432 Windows 11. \u0415\u0441\u0442\u044c \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0438\u043d\u044b\u0445 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0443\u0434\u043e\u0431\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n- \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0442\u043e\u043b\u044c\u043a\u043e 100% \u043d\u0435\u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u0443\u044e \u0437\u0430\u043b\u0438\u0432\u043a\u0443 \u043f\u0440\u0438 \u0437\u0430\u043c\u0430\u0437\u044b\u0432\u0430\u043d\u0438\u0438/\u0437\u0430\u043a\u0440\u0430\u0448\u0438\u0432\u0430\u043d\u0438\u0438.\n- \u041d\u0438\u043a\u0430\u043a\u043e\u0439 \u00ab\u043f\u0438\u043a\u0441\u0435\u043b\u0438\u0437\u0430\u0446\u0438\u0438\u00bb \u0438 \u00ab\u0440\u0430\u0437\u043c\u044b\u0442\u0438\u044f\u00bb \u2014 \u044d\u0442\u043e \u043e\u0431\u0440\u0430\u0442\u0438\u043c\u043e.", "creation_timestamp": "2023-04-01T10:19:58.000000Z"} https://vulnerability.circl.lu/sighting/6e83a4d5-611e-41bb-8c6b-438490172f9f/export Sat, 01 Apr 2023 10:19:58 +0000