{"vulnerability": "2018-07", "sightings": [{"uuid": "600ff564-04a4-4da2-80c1-342fe717e647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/5d4941a2-b614-429c-a8de-acb9950d210f", "content": "", "creation_timestamp": "2019-08-06T09:07:33.000000Z"}, {"uuid": "4bd920af-8170-4acb-b374-e8db445102df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/c7244416-f6dc-43cb-934d-67da8c15d123", "content": "", "creation_timestamp": "2021-03-25T07:11:51.000000Z"}, {"uuid": "011537f4-6c21-4fe1-861f-27b2c4cdab12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "7ae01961-d5a8-4513-9f2d-4379507df719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:18.000000Z"}, {"uuid": "536fc0ac-015e-4f8d-b36a-dffcb0bace5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0797", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:18.000000Z"}, {"uuid": "84e42298-d4c5-4cb5-a881-833084acf66a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/f9a5e50f-7287-429b-b073-628d0c46fa8c", "content": "", "creation_timestamp": "2020-10-09T13:20:47.000000Z"}, {"uuid": "5e229529-f292-4c17-9da4-9801a522799b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/22f5ee8a-e366-494c-b081-dec0757af273", "content": "", "creation_timestamp": "2020-10-09T14:50:15.000000Z"}, {"uuid": "56ead111-42c0-4c72-9e87-f55983afa71d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/b51d5ffe-e680-4249-bf5e-df1a943ebd76", "content": "", "creation_timestamp": "2023-02-02T13:17:21.000000Z"}, {"uuid": "498dd804-cbe1-4527-968a-52c3465d6e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/2acd7b8b-14ab-4995-bac6-d5e7b10edbfb", "content": "", "creation_timestamp": "2023-12-13T17:40:03.000000Z"}, {"uuid": "c2daa5e9-88bd-4d0c-917b-b87d9c396dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0780", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43720", "content": "", "creation_timestamp": "2018-01-17T00:00:00.000000Z"}, {"uuid": "3cae0be9-e859-431b-b2c1-fca3b070b069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0743", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43962", "content": "", "creation_timestamp": "2018-02-02T00:00:00.000000Z"}, {"uuid": "50ab5cc2-c99c-4f4a-931b-ed01c75826e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0758", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43491", "content": "", "creation_timestamp": "2018-01-10T00:00:00.000000Z"}, {"uuid": "8e8a7b8e-f86e-4e04-b6bb-d41e19bb7161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0745", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43470", "content": "", "creation_timestamp": "2018-01-09T00:00:00.000000Z"}, {"uuid": "3175142b-291c-47b1-aced-0c2897fd879c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0707", "type": "exploited", "source": "https://www.exploit-db.com/exploits/45043", "content": "", "creation_timestamp": "2018-07-17T00:00:00.000000Z"}, {"uuid": "58c100f7-01cb-4c54-bc79-787b7036d982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0706", "type": "exploited", "source": "https://www.exploit-db.com/exploits/45043", "content": "", "creation_timestamp": "2018-07-17T00:00:00.000000Z"}, {"uuid": "59fea2db-f34a-4689-b675-908e4e0b3598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0707", "type": "exploited", "source": "https://www.exploit-db.com/exploits/45015", "content": "", "creation_timestamp": "2018-07-13T00:00:00.000000Z"}, {"uuid": "97fce78d-3dd3-4f37-afdb-8b41a0ff7302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0774", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43715", "content": "", "creation_timestamp": "2018-01-17T00:00:00.000000Z"}, {"uuid": "7d998f53-58bc-425b-a5f5-8f1e36fc4d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0746", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43471", "content": "", "creation_timestamp": "2018-01-09T00:00:00.000000Z"}, {"uuid": "38d69a70-0f4d-4ed8-8335-82c350e759cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0710", "type": "exploited", "source": "https://www.exploit-db.com/exploits/45015", "content": "", "creation_timestamp": "2018-07-13T00:00:00.000000Z"}, {"uuid": "04e20179-1b83-493e-964c-1b7fba4858d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0709", "type": "exploited", "source": "https://www.exploit-db.com/exploits/45015", "content": "", "creation_timestamp": "2018-07-13T00:00:00.000000Z"}, {"uuid": "479c079f-93b3-456a-8870-542dcc7587b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0748", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43514", "content": "", "creation_timestamp": "2018-01-11T00:00:00.000000Z"}, {"uuid": "d221133b-b75b-4ae4-a87e-542e305f67c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0708", "type": "exploited", "source": "https://www.exploit-db.com/exploits/45015", "content": "", "creation_timestamp": "2018-07-13T00:00:00.000000Z"}, {"uuid": "0f6368d4-2bb7-4670-bb70-bc16eacee48b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0706", "type": "exploited", "source": "https://www.exploit-db.com/exploits/45015", "content": "", "creation_timestamp": "2018-07-13T00:00:00.000000Z"}, {"uuid": "8b830ce2-acdb-432f-b991-1cacb3e7588f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0770", "type": "exploited", "source": "https://www.exploit-db.com/exploits/44075", "content": "", "creation_timestamp": "2018-02-15T00:00:00.000000Z"}, {"uuid": "7608821a-6bab-4067-aa73-196fcb2cc151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0777", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43718", "content": "", "creation_timestamp": "2018-01-17T00:00:00.000000Z"}, {"uuid": "ebf30b43-2e6c-45de-a0f7-dd805ff3f3fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0749", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43517", "content": "", "creation_timestamp": "2018-01-11T00:00:00.000000Z"}, {"uuid": "89f843d2-c0e3-4ef7-b666-a24283d70803", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0752", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43516", "content": "", "creation_timestamp": "2018-01-11T00:00:00.000000Z"}, {"uuid": "82533828-aab4-45ab-b545-18e7e6ca213e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0767", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43522", "content": "", "creation_timestamp": "2018-01-11T00:00:00.000000Z"}, {"uuid": "3ae95a80-9549-4d33-9bc8-3442ca590d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0751", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43515", "content": "", "creation_timestamp": "2018-01-11T00:00:00.000000Z"}, {"uuid": "4407ea88-4556-4892-9633-1a04b9227f0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0775", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43717", "content": "", "creation_timestamp": "2018-01-17T00:00:00.000000Z"}, {"uuid": "bf8410f6-ceec-4315-be80-5e62d6cb3eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0769", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43710", "content": "", "creation_timestamp": "2018-01-17T00:00:00.000000Z"}, {"uuid": "04e0a998-7db4-4dd2-8e7a-6293d90a5ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0776", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43723", "content": "", "creation_timestamp": "2018-01-17T00:00:00.000000Z"}, {"uuid": "c25247c4-3d4e-4095-b632-dc4e6ec1ea0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0744", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43446", "content": "", "creation_timestamp": "2018-01-05T00:00:00.000000Z"}, {"uuid": "23384c5f-f366-42b5-9de3-369fad4b6197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971001", "content": "", "creation_timestamp": "2024-12-24T20:22:53.370527Z"}, {"uuid": "2bc91834-f5e7-43c4-a68f-95233607864a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971002", "content": "", "creation_timestamp": "2024-12-24T20:22:54.168636Z"}, {"uuid": "6954c059-4dc8-4230-a6c1-2f5e040829c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0706", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "ee4329b8-5892-46e5-882e-518e28510a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0707", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "35c63d89-d84f-428d-8754-a7d45103507f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0706", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:01.000000Z"}, {"uuid": "30c39f84-fdca-4138-986a-d41a06226c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0707", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:01.000000Z"}, {"uuid": "d6d70b11-1382-4728-8c70-23da79f88af7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:40.000000Z"}, {"uuid": "79362641-557a-4c21-950a-7570ef9dd9a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0706", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/qnap_qcenter_change_passwd_exec.rb", "content": "", "creation_timestamp": "2018-07-14T15:26:26.000000Z"}, {"uuid": "6d020622-bd11-436a-99b5-90e36b5f5110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:00:54.000000Z"}, {"uuid": "9e48eebb-6a86-4436-bf6a-dea27a73aa12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0707", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/qnap_qcenter_change_passwd_exec.rb", "content": "", "creation_timestamp": "2018-07-14T15:26:26.000000Z"}, {"uuid": "e3c9fba2-a18b-4aff-b1d7-6c63f5e34df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2018-0739", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "653a5de4-40b3-4444-92a4-6837edca5cb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2018-0798", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/371a464c-9ef3-46fe-85ff-e6b11dadaf5f", "content": "", "creation_timestamp": "2026-02-02T12:28:53.523210Z"}, {"uuid": "dabab864-040c-4e08-9a40-7d7ef26d95d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/b51d5ffe-e680-4249-bf5e-df1a943ebd76", "content": "", "creation_timestamp": "2026-04-17T00:17:14.000000Z"}, {"uuid": "bae2072e-36ee-4662-961d-93f6048fa830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0769", "type": "published-proof-of-concept", "source": "https://t.me/antichat/651", "content": "ProjectZero \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u043e \u0434\u0432\u0443\u043c \u043d\u043e\u0432\u044b\u043c \u0438 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u043c memory corruption \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 Ms Edge. \u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u044d\u0442\u043e out of bounds write \u0432 Chakra Jit (CVE-2018-0777 \u0438 CVE-2018-0769), \u0434\u0435\u0442\u0430\u043b\u0438 \u0438 PoC\u0438 \u0435\u0441\u0442\u044c \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0430\u043c: https://bugs.chromium.org/p/project-zero/issues/detail?id=1429, https://bugs.chromium.org/p/project-zero/issues/detail?id=1390.", "creation_timestamp": "2018-01-17T07:18:26.000000Z"}, {"uuid": "65e4641a-caff-473f-8175-f96bd5807521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0777", "type": "published-proof-of-concept", "source": "https://t.me/antichat/651", "content": "ProjectZero \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u043e \u0434\u0432\u0443\u043c \u043d\u043e\u0432\u044b\u043c \u0438 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u043c memory corruption \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 Ms Edge. \u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u044d\u0442\u043e out of bounds write \u0432 Chakra Jit (CVE-2018-0777 \u0438 CVE-2018-0769), \u0434\u0435\u0442\u0430\u043b\u0438 \u0438 PoC\u0438 \u0435\u0441\u0442\u044c \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0430\u043c: https://bugs.chromium.org/p/project-zero/issues/detail?id=1429, https://bugs.chromium.org/p/project-zero/issues/detail?id=1390.", "creation_timestamp": "2018-01-17T07:18:26.000000Z"}, {"uuid": "7920be78-5886-4414-9087-14fcd55c9248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "exploited", "source": "https://t.me/antichat/5730", "content": "Multiple Chinese Threat Groups Exploiting CVE-2018-0798 Equation Editor Vulnerability Since Late 2018\nhttps://www.anomali.com/blog/multiple-chinese-threat-groups-exploiting-cve-2018-0798-equation-editor-vulnerability-since-late-2018", "creation_timestamp": "2019-07-04T20:31:13.000000Z"}, {"uuid": "e14b391b-2dfd-497c-8586-612b5e7c791d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0769", "type": "published-proof-of-concept", "source": "https://t.me/br0wsec/20", "content": "ProjectZero \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u043e \u0434\u0432\u0443\u043c \u043d\u043e\u0432\u044b\u043c \u0438 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u043c memory corruption \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 Ms Edge. \u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u044d\u0442\u043e out of bounds write \u0432 Chakra Jit (CVE-2018-0777 \u0438 CVE-2018-0769), \u0434\u0435\u0442\u0430\u043b\u0438 \u0438 PoC\u0438 \u0435\u0441\u0442\u044c \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0430\u043c: https://bugs.chromium.org/p/project-zero/issues/detail?id=1429, https://bugs.chromium.org/p/project-zero/issues/detail?id=1390. \u0410 \u0442\u0430\u043a\u0436\u0435 out of bounds read \u0432 ChakraAsmJs (CVE-2018-0780): https://bugs.chromium.org/p/project-zero/issues/detail?id=1433. \u042d\u0442\u043e \u0442\u043e, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e MS \u0432 \u044f\u043d\u0432\u0430\u0440\u0435.", "creation_timestamp": "2018-01-17T08:44:45.000000Z"}, {"uuid": "183b0183-0702-40ec-833a-d538a3156272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0777", "type": "published-proof-of-concept", "source": "https://t.me/br0wsec/20", "content": "ProjectZero \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u043e \u0434\u0432\u0443\u043c \u043d\u043e\u0432\u044b\u043c \u0438 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u043c memory corruption \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 Ms Edge. \u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u044d\u0442\u043e out of bounds write \u0432 Chakra Jit (CVE-2018-0777 \u0438 CVE-2018-0769), \u0434\u0435\u0442\u0430\u043b\u0438 \u0438 PoC\u0438 \u0435\u0441\u0442\u044c \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0430\u043c: https://bugs.chromium.org/p/project-zero/issues/detail?id=1429, https://bugs.chromium.org/p/project-zero/issues/detail?id=1390. \u0410 \u0442\u0430\u043a\u0436\u0435 out of bounds read \u0432 ChakraAsmJs (CVE-2018-0780): https://bugs.chromium.org/p/project-zero/issues/detail?id=1433. \u042d\u0442\u043e \u0442\u043e, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e MS \u0432 \u044f\u043d\u0432\u0430\u0440\u0435.", "creation_timestamp": "2018-01-17T08:44:45.000000Z"}, {"uuid": "aae9af07-5d3d-4ff6-822d-b37a7444b0a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0780", "type": "published-proof-of-concept", "source": "https://t.me/br0wsec/20", "content": "ProjectZero \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u043e \u0434\u0432\u0443\u043c \u043d\u043e\u0432\u044b\u043c \u0438 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u043c memory corruption \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 Ms Edge. \u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u044d\u0442\u043e out of bounds write \u0432 Chakra Jit (CVE-2018-0777 \u0438 CVE-2018-0769), \u0434\u0435\u0442\u0430\u043b\u0438 \u0438 PoC\u0438 \u0435\u0441\u0442\u044c \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0430\u043c: https://bugs.chromium.org/p/project-zero/issues/detail?id=1429, https://bugs.chromium.org/p/project-zero/issues/detail?id=1390. \u0410 \u0442\u0430\u043a\u0436\u0435 out of bounds read \u0432 ChakraAsmJs (CVE-2018-0780): https://bugs.chromium.org/p/project-zero/issues/detail?id=1433. \u042d\u0442\u043e \u0442\u043e, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e MS \u0432 \u044f\u043d\u0432\u0430\u0440\u0435.", "creation_timestamp": "2018-01-17T08:44:45.000000Z"}, {"uuid": "50682180-6985-496f-91c9-5b1efbcd9d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0732", "type": "seen", "source": "https://t.me/ctinow/967", "content": "OpenSSL 1.0.2p & OpenSSL 1.1.0i Released. Fixes two potential DDoS bugs.\nClient DoS due to large DH parameter (CVE-2018-0732)\nCache timing vulnerability in RSA Key Generation (CVE-2018-0737) http://twitter.com/BleepinComputer/status/1029431292339912705", "creation_timestamp": "2018-08-14T20:19:25.000000Z"}, {"uuid": "28799fa7-40cb-410b-8bb3-8bb0c2a1dd41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0737", "type": "seen", "source": "https://t.me/ctinow/967", "content": "OpenSSL 1.0.2p & OpenSSL 1.1.0i Released. Fixes two potential DDoS bugs.\nClient DoS due to large DH parameter (CVE-2018-0732)\nCache timing vulnerability in RSA Key Generation (CVE-2018-0737) http://twitter.com/BleepinComputer/status/1029431292339912705", "creation_timestamp": "2018-08-14T20:19:25.000000Z"}, {"uuid": "6225dfda-900f-4a41-99fc-75fd67dd40ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "https://t.me/arpsyndicate/1048", "content": "#ExploitObserverAlert\n\nCVE-2018-0798\n\nDESCRIPTION: Exploit Observer has 9 entries related to CVE-2018-0798. Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\".\n\nFIRST-EPSS: 0.938570000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-03T22:45:44.000000Z"}, {"uuid": "16bc4a96-867f-4fff-941b-cba9fd75fa74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0797", "type": "seen", "source": "https://t.me/arpsyndicate/1438", "content": "#ExploitObserverAlert\n\nCVE-2018-0802\n\nDESCRIPTION: Exploit Observer has 81 entries related to CVE-2018-0802. Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.\n\nFIRST-EPSS: 0.972110000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2023-12-05T09:01:31.000000Z"}, {"uuid": "b2210f50-4d35-4b6c-874a-546b9e0d35f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0797", "type": "seen", "source": "https://t.me/arpsyndicate/100", "content": "#ExploitObserverAlert\n\nCVE-2018-0802\n\nDESCRIPTION: Exploit Observer has 78 entries related to CVE-2018-0802. Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.\n\nFIRST-EPSS: 0.973170000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2023-11-12T01:31:24.000000Z"}, {"uuid": "69af8b0c-696f-44e6-9fa7-23e9ff361560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/2937", "content": "\u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b APT Bitter (\u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043f\u043e \u041f\u0430\u043a\u0438\u0441\u0442\u0430\u043d\u0443 \u0438 \u041a\u0438\u0442\u0430\u044e, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441\u0442\u043e\u0438\u0442 \u0418\u043d\u0434\u0438\u044f).\n\n\u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0433\u0440\u0443\u043f\u043f\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 Cisco Talos \u0432 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0430 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0411\u0430\u043d\u0433\u043b\u0430\u0434\u0435\u0448, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u043c\u043e\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u043e\u0432\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432. \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0441 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2021 \u0433\u043e\u0434\u0430 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0439 \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u043d\u0433 Bitter, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u0438\u0437\u043c\u0435\u043d\u043d\u044b\u043c \u0441 2013 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u0443\u044e\u0442 \u044d\u0442\u0443 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u0441 Bitter \u043f\u043e \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u044f IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 C2 \u0441 \u0440\u0430\u043d\u0435\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0433\u0440\u0443\u043f\u043f\u044b, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0440\u043e\u043a \u0438 \u0441\u0445\u0435\u043c\u044b \u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u043e\u0434\u0443\u043b\u0435\u0439.\n\n\u0410\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0446\u0435\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u044b \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u0434\u0432\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f, \u043e\u0431\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0447\u0438\u043d\u0430\u043b\u0438\u0441\u044c \u0441 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u043d\u0430 \u043a\u0430\u043d\u0430\u043b\u0435 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b. \u0420\u0430\u0437\u043d\u0438\u0446\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0442\u0438\u043f\u0435 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u043d\u044b\u0445 \u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0438\u0441\u044c\u043c\u0443: \u043e\u0434\u043d\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u0441\u043e\u0431\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 .RTF, \u0430 \u0443 \u0434\u0440\u0443\u0433\u0438\u0435 - \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 .XLSX.\n\n\u041e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c \u044d\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u043f\u043e\u0434 \u043f\u0430\u043a\u0438\u0441\u0442\u0430\u043d\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0412\u043e \u043c\u043d\u043e\u0433\u043e\u043c \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Zimbra, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0441 \u043d\u0435\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438/\u0434\u043e\u043c\u0435\u043d\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b. \u0422\u0435\u043c\u0430\u0442\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043a\u0430\u0441\u0430\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043d\u043e\u043c\u0435\u0440\u043e\u0432 \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0432\u043d\u043e\u0432\u044c \u043f\u0440\u0438\u043d\u044f\u0442\u044b\u043c \u0432 \u0411\u0430\u043d\u0433\u043b\u0430\u0434\u0435\u0448 \u0440\u0435\u0433\u043b\u0430\u043c\u0435\u043d\u0442\u043e\u043c  \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 NEIR \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0430.\n\n\u0414\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b RTF \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2017-11882 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 Microsoft Office. \u041f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0444\u0430\u0439\u043b\u0430 \u0432 Microsoft Word, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u043e\u0441\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 Equation Editor \u0438 \u0432\u044b\u043f\u043e\u043b\u0430\u0441\u044c \u0444\u043e\u0440\u043c\u0443\u043b\u0430 \u0443\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044f, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0430\u044f \u0433\u0430\u0434\u0436\u0435\u0442\u044b \u0432\u043e\u0437\u0432\u0440\u0430\u0442\u043d\u043e-\u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (ROP).\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e ROP \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b \u0448\u0435\u043b\u043b-\u043a\u043e\u0434, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 \u0432 maldocs \u0432 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0444\u043e\u0440\u043c\u0430\u0442\u0435, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0445\u043e\u0441\u0442\u0443 olmajhnservice[.]com \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u0442\u0430\u0431\u043b\u0438\u0446\u044b Excel \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u044d\u0442\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2018-0798 \u0438 CVE-2018-0802, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Microsoft Office. \u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u043e\u0441\u044c \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u043c \u0434\u0432\u0443\u0445 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c \u0437\u0430\u0434\u0430\u0447, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441 \u043f\u044f\u0442\u0438\u043c\u0438\u043d\u0443\u0442\u043d\u044b\u043c \u0438\u043d\u0442\u0435\u0440\u0432\u0430\u043b\u043e\u043c \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0445\u043e\u0441\u0442-\u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0442\u0440\u043e\u044f\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 Cisco Talos \u043d\u0430\u0437\u0432\u0430\u043b\u0438 ZxxZ.\n\n\u042d\u0442\u043e 32-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b Windows, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043c\u043e\u0434\u0443\u043b\u0438 \u0441 \u043e\u0431\u0449\u0438\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a \u00abUpdate.exe\u00bb, \u00abntfsc.exe\u00bb \u0438\u043b\u0438 \u00abnx.exe\u00bb. \u041e\u043d\u0438 \u043b\u0438\u0431\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442\u0441\u044f, \u043b\u0438\u0431\u043e \u043f\u043e\u043c\u0435\u0449\u0430\u044e\u0442\u0441\u044f \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows \u0441\u043e \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0438\u043c\u0435\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u0441\u0435\u043a\u0430\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b Windows Defender \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439.\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0444\u0438\u043b\u044f \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u0431\u0443\u0444\u0435\u0440 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f.\u00a0\u0417\u0430\u0442\u0435\u043c C2 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043c\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u043c\u0441\u044f \u0432 \u00ab%LOCALAPPDATA%\\Debug\\\u00bb. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441\u0431\u043e\u0435\u0432 \u043f\u0440\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 ZxxZ \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u0435\u0449\u0435 225 \u0440\u0430\u0437, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443.\n\n\u041a\u0430\u043a \u0432 \u0438\u043d\u0434\u0438\u0439\u0441\u043a\u043e\u043c \u043a\u0438\u043d\u043e, APT Bitter \u043d\u0435 \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0435\u0442 \u0443\u0434\u0438\u0432\u043b\u044f\u0442\u044c \u0441\u0432\u043e\u0435\u0439 \u0433\u0438\u043f\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e, \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u044f \u0441\u0432\u043e\u0439 \u0430\u0440\u0441\u0435\u043d\u0430\u043b \u043d\u043e\u0432\u044b\u043c\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u0438 \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u044f \u0431\u043e\u043b\u044c\u0448\u0435 \u0443\u0441\u0438\u043b\u0438\u0439 \u0434\u043b\u044f \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.", "creation_timestamp": "2022-05-13T09:24:05.000000Z"}, {"uuid": "41ef1c9d-c01b-44e1-ab3a-cfc2b38ac26a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0730", "type": "seen", "source": "https://t.me/ctinow/202273", "content": "https://ift.tt/OkQMYR0\nCVE-2018-0730 | QNAP QTS File Station injection", "creation_timestamp": "2024-03-07T10:36:58.000000Z"}, {"uuid": "93ab000b-a70a-4343-9a4f-6050495af4a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0732", "type": "seen", "source": "https://t.me/ctinow/168354", "content": "https://ift.tt/90T7UbY\nCVE-2018-0732 | Oracle Fujitsu M10-1 OpenSSL key management (BID-104442 / ID 1041090)", "creation_timestamp": "2024-01-15T14:11:37.000000Z"}, {"uuid": "58598234-ce1b-49f2-ab62-e99d6b3dd84a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "exploited", "source": "https://t.me/information_security_channel/29050", "content": "Multiple Chinese Groups Share the Same RTF Weaponizer\nhttp://feedproxy.google.com/~r/Securityweek/~3/5K_97JR4HFw/multiple-chinese-groups-share-same-rtf-weaponizer\n\nDuring an investigation into a possibly shared RTF weaponizer by Indian and Chinese APT groups, researchers have discovered that multiple Chinese groups have updated the weaponizer to exploit the Microsoft Equation Editor (EE) vulnerability CVE-2018-0798. The same weaponizer had previously delivered exploits for EE vulnerabilities CVE-2017-11882 and CVE-2018-0802.\nread more (https://www.securityweek.com/multiple-chinese-groups-share-same-rtf-weaponizer)", "creation_timestamp": "2019-07-03T21:31:08.000000Z"}, {"uuid": "d950634e-d911-4973-b199-bf5099931076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0739", "type": "seen", "source": "https://t.me/information_security_channel/15321", "content": "First OpenSSL Updates in 2018 Patch Three Flaws\nhttp://feedproxy.google.com/~r/Securityweek/~3/lDXRblL_tHQ/first-openssl-updates-2018-patch-three-flaws\n\nThe first round of security updates released in 2018 for OpenSSL patch a total of three vulnerabilities, but none of them appears to be serious.\nOpenSSL versions 1.1.0h and 1.0.2o patch CVE-2018-0739, a denial-of-service (DoS) vulnerability discovered using Google\u2019s OSS-Fuzz service, which has helped find (https://www.securityweek.com/openssl-patches-flaws-found-google-fuzzer) several flaws in OpenSSL in the past period.\nThe security hole, rated \u201cmoderate,\u201d is related to constructed ASN.1 types with a recursive definition.\n\u201cConstructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion,\u201d the OpenSSL Project said in its advisory (https://www.openssl.org/news/secadv/20180327.txt).\nAnother moderate severity flaw, which only affects the 1.1.0 branch, is CVE-2018-0733. This is an implementation bug in the PA-RISC (https://en.wikipedia.org/wiki/PA-RISC) CRYPTO_memcmp function, and it allows an attacker to forge authenticated messages easier than it should be.\nThe OpenSSL Project learned about this vulnerability in early March from IBM. Only HP-UX PA-RISC systems are impacted.\nFinally, OpenSSL 1.1.0h fixes an overflow bug that could allow an attacker to access TLS-protected communications. The vulnerability, CVE-2017-3738, was first disclosed (https://www.securityweek.com/two-vulnerabilities-patched-openssl) in December 2017, but since an attack is not easy to carry out the issue has been assigned a low severity rating and it has only been patched now.\nFour rounds of security updates were released for OpenSSL last year, and only one of the eight fixed vulnerabilities was classified as high severity.", "creation_timestamp": "2018-03-27T18:32:30.000000Z"}, {"uuid": "fb82e370-87ba-4dd8-9e3e-7100b766612e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0733", "type": "seen", "source": "https://t.me/information_security_channel/15321", "content": "First OpenSSL Updates in 2018 Patch Three Flaws\nhttp://feedproxy.google.com/~r/Securityweek/~3/lDXRblL_tHQ/first-openssl-updates-2018-patch-three-flaws\n\nThe first round of security updates released in 2018 for OpenSSL patch a total of three vulnerabilities, but none of them appears to be serious.\nOpenSSL versions 1.1.0h and 1.0.2o patch CVE-2018-0739, a denial-of-service (DoS) vulnerability discovered using Google\u2019s OSS-Fuzz service, which has helped find (https://www.securityweek.com/openssl-patches-flaws-found-google-fuzzer) several flaws in OpenSSL in the past period.\nThe security hole, rated \u201cmoderate,\u201d is related to constructed ASN.1 types with a recursive definition.\n\u201cConstructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion,\u201d the OpenSSL Project said in its advisory (https://www.openssl.org/news/secadv/20180327.txt).\nAnother moderate severity flaw, which only affects the 1.1.0 branch, is CVE-2018-0733. This is an implementation bug in the PA-RISC (https://en.wikipedia.org/wiki/PA-RISC) CRYPTO_memcmp function, and it allows an attacker to forge authenticated messages easier than it should be.\nThe OpenSSL Project learned about this vulnerability in early March from IBM. Only HP-UX PA-RISC systems are impacted.\nFinally, OpenSSL 1.1.0h fixes an overflow bug that could allow an attacker to access TLS-protected communications. The vulnerability, CVE-2017-3738, was first disclosed (https://www.securityweek.com/two-vulnerabilities-patched-openssl) in December 2017, but since an attack is not easy to carry out the issue has been assigned a low severity rating and it has only been patched now.\nFour rounds of security updates were released for OpenSSL last year, and only one of the eight fixed vulnerabilities was classified as high severity.", "creation_timestamp": "2018-03-27T18:32:30.000000Z"}, {"uuid": "8ef62ad6-1aa6-45ec-9860-dfce744b1c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "exploited", "source": "https://t.me/canyoupwnme/5705", "content": "Multiple Chinese Threat Groups Exploiting CVE-2018-0798 Equation Editor Vulnerability Since Late 2018\nhttps://www.anomali.com/blog/multiple-chinese-threat-groups-exploiting-cve-2018-0798-equation-editor-vulnerability-since-late-2018", "creation_timestamp": "2019-07-04T22:14:02.000000Z"}, {"uuid": "8d7612ed-505a-464c-8277-da6f294f6c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0739", "type": "seen", "source": "https://t.me/cultofwire/499", "content": "\u0412\u044b\u0448\u0435\u043b \u0440\u0435\u043b\u0438\u0437 Tails 3.7.\n\n\u041f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438: \u0441\u0432\u0435\u0436\u0443\u044e \u0434\u044b\u0440\u0443 \u0432 Firefox (\u0432\u043e\u043e\u0431\u0449\u0435 \u0434\u0430, \u043e\u043d\u0430 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 9 \u043c\u0430\u044f), OpenSSL (\u044d\u0442\u043e \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f CVE-2017-3738 \u0438 CVE-2018-0739), Perl (\u0442\u0430\u043c \u0432\u043e\u043e\u0431\u0449\u0435 3 CVE), Libre Office \u0438 libmad. \n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 Tails \u043a\u0430\u043a \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u044b\u0439 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432, \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\nhttps://tails.boum.org/install/index.en.html", "creation_timestamp": "2018-05-10T15:51:05.000000Z"}, {"uuid": "21f7a991-ae75-408c-9443-99a01da5fcc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0708", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/156", "content": "#exploit\n1. CVE-2019-6447:\nES File Explorer Open Port Vulnerability\nhttps://github.com/fs0c131y/ESFileExplorerOpenPortVuln\n\n2. CVE-2018-0708:\nCommand injection in networking of QNAP Q'center Virtual Appliance <=1.7.1063 could allow authenticated users to run arbitrary commands\nhttps://github.com/ntkernel0/CVE-2019-0708\n\n3. CVE-2019-0604:\nMicrosoft SharePoint RCE Vulnerability\nhttps://www.zerodayinitiative.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability", "creation_timestamp": "2024-10-10T11:12:45.000000Z"}, {"uuid": "371a8a35-16ec-44ee-992b-785527775fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0735", "type": "seen", "source": "https://t.me/cibsecurity/902", "content": "ATENTION\u203c New - CVE-2018-0735\n\nThe OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2018-10-29T15:23:10.000000Z"}, {"uuid": "d573face-84a9-4b02-af89-49970318ddb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0734", "type": "seen", "source": "https://t.me/cibsecurity/929", "content": "ATENTION\u203c New - CVE-2018-0734\n\nThe OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a-dev (Affected 1.1.1). Fixed in OpenSSL 1.1.0j-dev (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q-dev (Affected 1.0.2-1.0.2p).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2018-10-30T15:18:13.000000Z"}, {"uuid": "658c54e9-1ffd-40c9-a153-beec0936a46f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0723", "type": "seen", "source": "https://t.me/cibsecurity/1782", "content": "ATENTION\u203c New - CVE-2018-0724\n\nCross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2018-12-26T18:19:28.000000Z"}, {"uuid": "7e31cafc-57c4-4067-8392-79c72270669b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0724", "type": "seen", "source": "https://t.me/cibsecurity/1782", "content": "ATENTION\u203c New - CVE-2018-0724\n\nCross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2018-12-26T18:19:28.000000Z"}, {"uuid": "07d3c9d0-dc4d-4934-b636-c18247ba82f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0723", "type": "seen", "source": "https://t.me/cibsecurity/1783", "content": "ATENTION\u203c New - CVE-2018-0723\n\nCross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2018-12-26T18:19:29.000000Z"}, {"uuid": "6a79ec49-5a53-4935-903a-27f14d9446d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0724", "type": "seen", "source": "https://t.me/cibsecurity/1783", "content": "ATENTION\u203c New - CVE-2018-0723\n\nCross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2018-12-26T18:19:29.000000Z"}, {"uuid": "a3dcee02-5f04-4632-beeb-6d6045940f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0722", "type": "seen", "source": "https://t.me/cibsecurity/2361", "content": "ATENTION\u203c New - CVE-2018-0722\n\nPath Traversal vulnerability in Photo Station versions: 5.7.2 and earlier in QTS 4.3.4, 5.4.4 and earlier in QTS 4.3.3, 5.2.8 and earlier in QTS 4.2.6 could allow remote attackers to access sensitive information on the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-02-01T20:23:57.000000Z"}, {"uuid": "050a8066-1db2-4b61-844a-536d88ae7aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/c7244416-f6dc-43cb-934d-67da8c15d123", "content": "", "creation_timestamp": "2026-06-04T20:28:00.000000Z"}, {"uuid": "64e0882b-0996-427a-b288-bff896365b99", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c3e23ce7-f57c-4f64-9463-648133444ef5", "content": "", "creation_timestamp": "2026-06-19T12:47:51.861296Z"}, {"uuid": "6961f55c-960f-436e-8934-7ecdbcab4b85", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4f777cf7-54a8-49ad-8102-f97df987e1a7", "content": "", "creation_timestamp": "2026-06-23T14:04:35.578681Z"}, {"uuid": "7dbbd30a-7b12-4387-be12-9cbb37c36704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0706", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/qnap_qcenter_change_passwd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Ivan Huertas\", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability in the\\n          `change_passwd` API method within the web interface of QNAP Q'Center\\n          virtual appliance versions prior to 1.7.1083.\\n\\n          The vulnerability allows the 'admin' privileged user account to\\n          execute arbitrary commands as the 'admin' operating system user.\\n\\n          Valid credentials for the 'admin' user account are required, however,\\n          this module also exploits a separate password disclosure issue which\\n          allows any authenticated user to view the password set for the 'admin'\\n          user during first install.\\n\\n          This module has been tested successfully on QNAP Q'Center appliance\\n          version 1.6.1075.\", \"disclosure_date\": \"2018-07-11\", \"fullname\": \"exploit/linux/http/qnap_qcenter_change_passwd_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"QNAP Q'Center change_passwd Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/qnap_qcenter_change_passwd_exec.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/qnap_qcenter_change_passwd_exec\", \"references\": [\"CVE-2018-0706\", \"CVE-2018-0707\", \"EDB-45015\", \"URL-https://www.coresecurity.com/advisories/qnap-qcenter-virtual-appliance-multiple-vulnerabilities\", \"URL-https://seclists.org/fulldisclosure/2018/Jul/45\", \"URL-https://www.securityfocus.com/archive/1/542141\", \"URL-https://www.qnap.com/en-us/security-advisory/nas-201807-10\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Auto\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:53.379557Z"}, {"uuid": "ded6832c-a33f-428c-85ba-1a08320f8afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0707", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/qnap_qcenter_change_passwd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Ivan Huertas\", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability in the\\n          `change_passwd` API method within the web interface of QNAP Q'Center\\n          virtual appliance versions prior to 1.7.1083.\\n\\n          The vulnerability allows the 'admin' privileged user account to\\n          execute arbitrary commands as the 'admin' operating system user.\\n\\n          Valid credentials for the 'admin' user account are required, however,\\n          this module also exploits a separate password disclosure issue which\\n          allows any authenticated user to view the password set for the 'admin'\\n          user during first install.\\n\\n          This module has been tested successfully on QNAP Q'Center appliance\\n          version 1.6.1075.\", \"disclosure_date\": \"2018-07-11\", \"fullname\": \"exploit/linux/http/qnap_qcenter_change_passwd_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"QNAP Q'Center change_passwd Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/qnap_qcenter_change_passwd_exec.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/qnap_qcenter_change_passwd_exec\", \"references\": [\"CVE-2018-0706\", \"CVE-2018-0707\", \"EDB-45015\", \"URL-https://www.coresecurity.com/advisories/qnap-qcenter-virtual-appliance-multiple-vulnerabilities\", \"URL-https://seclists.org/fulldisclosure/2018/Jul/45\", \"URL-https://www.securityfocus.com/archive/1/542141\", \"URL-https://www.qnap.com/en-us/security-advisory/nas-201807-10\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Auto\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:53.461952Z"}]}