{"metadata": {"vulnerability": "CVE-2007-2447", "count": 87, "kinds": {"milestone": 8, "sighting": 38, "kev": 0, "other": 41}}, "data": [{"timestamp": "2007-05-02T00:00:00Z", "date_only": false, "value": "2007-05-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2007-2447", "field": "cveMetadata.dateReserved"}, {"timestamp": "2007-05-07T00:00:00Z", "date_only": false, "value": "2007-05-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2007-05-07T00:00:00Z", "date_only": false, "value": "2007-05-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2007_0354", "record": "RHSA-2007_0354", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2007-05-13T00:00:00Z", "date_only": false, "value": "2007-05-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2007-2447", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2007-05-14T00:00:00Z", "date_only": false, "value": "2007-05-14T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2007-05-14T00:00:00Z", "date_only": false, "value": "2007-05-14T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2007_0354", "record": "RHSA-2007_0354", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2007-05-14T15:18:00Z", "date_only": false, "value": "2007-05-14T15:18:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2007-05-14T15:18:00Z", "date_only": false, "value": "2007-05-14T15:18:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2007_0354", "record": "RHSA-2007_0354", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2007-05-14T15:18:00Z", "date_only": false, "value": "2007-05-14T15:18:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2007-05-14T15:18:00Z", "date_only": false, "value": "2007-05-14T15:18:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2007_0354", "record": "RHSA-2007_0354", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2007-05-14T15:18:00Z", "date_only": false, "value": "2007-05-14T15:18:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "vulnerabilities.1.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2007-05-14T15:18:00Z", "date_only": false, "value": "2007-05-14T15:18:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2007_0354", "record": "RHSA-2007_0354", "field": "vulnerabilities.1.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2007-05-14T21:00:00Z", "date_only": false, "value": "2007-05-14T21:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2007-2447", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2007-05-14T21:19:00Z", "date_only": false, "value": "2007-05-14T21:19:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XXQH-84MJ-WHCJ", "record": "GHSA-XXQH-84MJ-WHCJ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2007-05-14T21:19:00Z", "date_only": false, "value": "2007-05-14T21:19:00.000", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2007-2447", "record": "FKIE_CVE-2007-2447", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2007-05-14T21:19:00Z", "date_only": false, "value": "2007-05-14T21:19Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2007-2447", "record": "GSD-2007-2447", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2007-05-15T00:00:00Z", "date_only": false, "value": "2007-05-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTA-2007-AVI-219", "record": "CERTA-2007-AVI-219", "field": "revisions.0.revision_date"}, {"timestamp": "2007-05-16T00:00:00Z", "date_only": false, "value": "2007-05-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTA-2007-AVI-219", "record": "CERTA-2007-AVI-219", "field": "revisions.1.revision_date"}, {"timestamp": "2007-08-01T00:00:00Z", "date_only": false, "value": "2007-08-01T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTA-2007-AVI-340", "record": "CERTA-2007-AVI-340", "field": "revisions.0.revision_date"}, {"timestamp": "2007-09-21T00:00:00Z", "date_only": false, "value": "2007-09-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTA-2007-AVI-409", "record": "CERTA-2007-AVI-409", "field": "revisions.0.revision_date"}, {"timestamp": "2007-11-20T00:00:00Z", "date_only": false, "value": "2007-11-20T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTA-2007-AVI-409", "record": "CERTA-2007-AVI-409", "field": "revisions.1.revision_date"}, {"timestamp": "2008-01-08T00:00:00Z", "date_only": false, "value": "2008-01-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTA-2008-AVI-007", "record": "CERTA-2008-AVI-007", "field": "revisions.0.revision_date"}, {"timestamp": "2008-01-09T14:22:18Z", "date_only": false, "value": "2008-01-09T14:22:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2008-01-09T14:22:18Z", "date_only": false, "value": "2008-01-09T14:22:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2007_0354", "record": "RHSA-2007_0354", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2010-08-18T00:00:00Z", "date_only": false, "value": "2010-08-18T00:00:00.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://www.exploit-db.com/exploits/16320", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "d91e6bb3-cad5-4b0c-aa99-07874993e710", "url": "https://www.exploit-db.com/exploits/16320"}, {"timestamp": "2018-05-29T15:50:33Z", "date_only": false, "value": "2018-05-29T15:50:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/samba/usermap_script.rb", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "c31cf5ad-11c6-4990-9610-868e5de0d3e3", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/samba/usermap_script.rb"}, {"timestamp": "2018-10-16T14:57:01Z", "date_only": false, "value": "2018-10-16T14:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "CVE-2007-2447", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2018-10-16T16:43:00Z", "date_only": false, "value": "2018-10-16T16:43Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2007-2447", "record": "GSD-2007-2447", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-01T18:03:36Z", "date_only": false, "value": "2022-05-01T18:03:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XXQH-84MJ-WHCJ", "record": "GHSA-XXQH-84MJ-WHCJ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-06-18T10:22:36Z", "date_only": false, "value": "2022-06-18T10:22:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arm1tage/129", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "6a5ab51c-e6b5-4a02-8ed5-8020c1a6c8b9", "content": "HackTheBox:\n\n\u2014Easy Machines\u2014\n\nDriver - WinRM (evil-winrm), printnightmare CVE-2021-1675 (https://habr.com/ru/sandbox/156538/)\nhttps://0xdf.gitlab.io/2022/02/26/htb-driver.html\n\nSecret - JWT, Git source (tig), crush-dumps\nhttps://0xdf.gitlab.io/2022/03/26/htb-secret.html\n\nBackDoor - Wordpress eBook Dir Trav (https://www.exploit-db.com/exploits/39575), gdb exploit (https://www.exploit-db.com/exploits/50539, https://www.rapid7.com/db/modules/exploit/multi/gdb/gdb_server_exec/) \nhttps://0xdf.gitlab.io/2022/04/23/htb-backdoor.html\n\nPrevise - Backup, Site Reverse Shell, low-encrypted passwords\nhttps://0xdf.gitlab.io/2022/01/08/htb-previse.html\n\nBountyHunter - XXE, (root) NOPASSWD python code\nhttps://0xdf.gitlab.io/2021/11/20/htb-bountyhunter.html\n\nHorizontal - Strapi CMS 3.0.0 CVE-2019-18818/CVE-2019-19609 (https://www.exploit-db.com/exploits/50239, https://github.com/diego-tella/CVE-2019-19609-EXPLOIT), Laravel v8 (https://www.exploit-db.com/exploits/49424)\nhttps://0xdf.gitlab.io/2022/02/05/htb-horizontall.html\n\nOptimum - Windows 2012 (https://www.rapid7.com/db/modules/exploit/windows/http/rejetto_hfs_exec/, https://www.rapid7.com/db/modules/exploit/windows/local/ms16_032_secondary_logon_handle_privesc/)\nhttps://0xdf.gitlab.io/2021/03/17/htb-optimum.html\n\nLame - FTP Anonymous, SAMBA exploit (https://github.com/amriunix/CVE-2007-2447)\nhttps://0xdf.gitlab.io/2020/04/07/htb-lame.html\n\nJerry - Tomcat Default Cred, shell via .WAR\nhttps://0xdf.gitlab.io/2018/11/17/htb-jerry.html\n\nBlue - Win7 eternalblue (https://www.rapid7.com/db/modules/exploit/windows/smb/ms17_010_eternalblue/)\nhttps://0xdf.gitlab.io/2021/05/11/htb-blue.html\n\nDevel - Microsoft IIS httpd 7.5 reverse shell via .ASPX, MS11-046 or ms10_015_kitrap0d (https://github.com/abatchy17/WindowsExploits/tree/master/MS11-046)\nhttps://0xdf.gitlab.io/2019/03/05/htb-devel.html\n\nNetmon - PRTG Network Monitor 18.1.37.13946, Backup credentials, CVE-2018-9276 (https://github.com/A1vinSmith/CVE-2018-9276) / (https://www.exploit-db.com/exploits/46527) + evil-winrm\nhttps://0xdf.gitlab.io/2019/06/29/htb-netmon.html\n\nExplore (Android) - 59777 port CVE-2019-6447 (https://www.exploit-db.com/exploits/50070), SSH Creds on Photo, adb shell\nhttps://0xdf.gitlab.io/2021/10/30/htb-explore.html\n\nAntique - Telnet password via snmpget (https://www.irongeek.com/i.php?page=security/networkprinterhacking#JetDirect%20password%20notes), CUPS 1.6.1 (https://github.com/jpillora/chisel) \nhttps://0xdf.gitlab.io/2022/05/03/htb-antique.html\n\nReturn - evil-winrm, Server Operators in net user svc-printer /domain, sc.exe\nhttps://0xdf.gitlab.io/2022/05/05/htb-return.html\n\nGrandpa - CVE-2017-7269 (https://www.rapid7.com/db/modules/exploit/windows/iis/iis_webdav_scstoragepathfromurl/), SEImpersonalPrivilege Churrasco (https://github.com/Re4son/Churrasco/)\nhttps://0xdf.gitlab.io/2020/05/28/htb-grandpa.html\n\nBeep - ShellShock or Elastix 2.2.0 - 'graph.php' Local File Inclusion, (root) NOPASSWD nmap\nhttps://0xdf.gitlab.io/2021/02/23/htb-beep.html\n\nPandora - snmpwalk creds, CVE-2021-32099, Site Reverse Shell\nhttps://0xdf.gitlab.io/2022/05/21/htb-pandora.html\n\nPaper - WPS 5.2.3 - Cve-2019-17671 (https://www.exploit-db.com/exploits/47690, https://0day.work/proof-of-concept-for-wordpress-5-2-3-viewing-unauthenticated-posts/), Chat Bot Dir Trav, CVE-2021-3560 (https://github.com/Almorabea/Polkit-exploit/blob/main/CVE-2021-3560.py)\nhttps://0xjin.medium.com/paper-hackthebox-write-up-2abca22d3b54\n\n\n#hackthebox #ctf", "url": "https://t.me/arm1tage/129", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-25T07:32:29Z", "date_only": false, "value": "2023-11-25T07:32:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/578", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "b0846e9c-5d77-4529-b3e1-b2284c1ba768", "content": "#ExploitObserverAlert\n\nCVE-2007-2447\n\nDESCRIPTION: Exploit Observer has 113 entries related to CVE-2007-2447. The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the \"username map script\" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.\n\nFIRST-EPSS: 0.612690000\nNVD-IS: 6.4\nNVD-ES: 6.8", "url": "https://t.me/arpsyndicate/578"}, {"timestamp": "2023-12-11T14:03:08Z", "date_only": false, "value": "2023-12-11T14:03:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1749", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "3ca558af-d6f4-4942-9302-5fb42dc04937", "content": "#ExploitObserverAlert\n\nCVE-2007-2447\n\nDESCRIPTION: Exploit Observer has 118 entries related to CVE-2007-2447. The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the \"username map script\" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.\n\nFIRST-EPSS: 0.612690000\nNVD-IS: 6.4\nNVD-ES: 6.8", "url": "https://t.me/arpsyndicate/1749"}, {"timestamp": "2023-12-13T01:21:38.250Z", "date_only": false, "value": "2023-12-13T01:21:38.250827Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2007-2447", "record": "GSD-2007-2447", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10683-1", "record": "OPENSUSE-SU-2024:10683-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11365-1", "record": "OPENSUSE-SU-2024:11365-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10683-1", "record": "OPENSUSE-SU-2024:10683-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11365-1", "record": "OPENSUSE-SU-2024:11365-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10683-1", "record": "OPENSUSE-SU-2024:10683-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11365-1", "record": "OPENSUSE-SU-2024:11365-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10683-1", "record": "OPENSUSE-SU-2024:10683-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11365-1", "record": "OPENSUSE-SU-2024:11365-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11365-1", "record": "OPENSUSE-SU-2024:11365-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-22T01:05:55Z", "date_only": false, "value": "2024-11-22T01:05:55+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2007_0354", "record": "RHSA-2007_0354", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-11-22T01:05:55Z", "date_only": false, "value": "2024-11-22T01:05:55+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2007_0354", "record": "RHSA-2007_0354", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-22T01:05:55Z", "date_only": false, "value": "2024-11-22T01:05:55+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2007_0354", "record": "RHSA-2007_0354", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-02-06T03:13:38Z", "date_only": false, "value": "2025-02-06T03:13:38.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "f1315888-701e-42da-b87c-80a6dcced129"}, {"timestamp": "2025-02-23T04:08:22Z", "date_only": false, "value": "2025-02-23T04:08:22.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "78671156-581b-4e27-afce-b1b15d3e2f48"}, {"timestamp": "2025-07-11T15:00:06Z", "date_only": false, "value": "2025-07-11T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/dhQS4aSRkzBP2xNhTxgWl93oTI3lydcQezpn91ZDL8rkFTo", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "4b289cc4-d386-45e7-a188-db215c90e2e5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-17T01:27:32Z", "date_only": false, "value": "2025-07-17T01:27:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/0x3n0/23a1e338707ada635a1c3b26ddbee8ab", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "98ac8b0a-394c-4561-a65e-6d85c0a94f9d", "url": "https://gist.github.com/0x3n0/23a1e338707ada635a1c3b26ddbee8ab"}, {"timestamp": "2025-08-27T15:00:06Z", "date_only": false, "value": "2025-08-27T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/E8g-UlN8K7Ikdmq4mpXg-X6KIM43eacVdnsndMcY8I93-K4", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "4f1500df-6d30-4432-8c82-833737938d31", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-08-27T19:00:08Z", "date_only": false, "value": "2025-08-27T19:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/or1-u7bo3hSkGx90FYNn1JWuirrC5XL-Ob12F2D6DSkjTA4", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "55bea6af-b321-4e50-b82e-f8154bf9fd70", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-11-04T21:08:04.094Z", "date_only": false, "value": "2025-11-04T21:08:04.094Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2007-2447", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-04T21:08:04.094Z", "date_only": false, "value": "2025-11-04T21:08:04.094Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2007-2447", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-05T00:31:11Z", "date_only": false, "value": "2025-11-05T00:31:11Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XXQH-84MJ-WHCJ", "record": "GHSA-XXQH-84MJ-WHCJ", "field": "modified"}, {"timestamp": "2026-04-07T03:00:11Z", "date_only": false, "value": "2026-04-07T03:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/HzOqBhluyLlt9yC4XLrvomtg4oZEtr_GKU8ieYWYpvETezc", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "a7a18003-2b63-4fe6-a024-23239592e410", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-17T23:00:19Z", "date_only": false, "value": "2026-04-17T23:00:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XKmDxZOMvrUD-_NSGAnB8A_hjkfWi1lu0xhYRKJFu8oupFE", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "8763305e-5e24-410b-9bd6-7e9adc94d29d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-18T03:00:05Z", "date_only": false, "value": "2026-04-18T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-5TmsWj813MupXUk3oAfbbPwkALq_IWcYveTIHrZR6Vdl1M", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "8e1aa75b-7bb1-471d-a4f3-e829b9ac6006", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-09T15:00:07Z", "date_only": false, "value": "2026-05-09T15:00:07.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/I9jr2FwJUHwAb81CK7-xeVKSwOp4PweEdPMw4HfzpPMKo1Y", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "5b98655c-add8-4881-acd2-0467b18cbc08"}, {"timestamp": "2026-05-19T23:05:33Z", "date_only": false, "value": "2026-05-19T23:05:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/84879", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "9640b15c-e046-4211-acf0-d05edde91334", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #NTLM Relay\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a SMB-Penetration-Testing-NTLM-Relay-Version-2-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Youneskc\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-19 22:54:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSMB Red Team Lab\u2014 NTLM Relay via LLMNR Poisoning, CVE-2007-2447, NTLMv2 Hash Cracking & NT AUTHORITY\\SYSTEM on Windows 10\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/84879"}, {"timestamp": "2026-05-20T03:00:06Z", "date_only": false, "value": "2026-05-20T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/xh4XcnfPk8jKp2qpT8jzWwwvaCwZdGZH1ZOpAikcTE7X2rw", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "1a37c58a-fa26-4196-bc4d-ececcaad8830", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-27T21:06:35Z", "date_only": false, "value": "2026-05-27T21:06:35.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/x-gpTIreB2tb5Q-Jw8cVX3Xwo2MhNZ2uzY1qavh-XKqhSxE", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "61075076-33de-4df3-8c02-be613b7a87e8"}, {"timestamp": "2026-05-29T09:00:04Z", "date_only": false, "value": "2026-05-29T09:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/IiZ67zcGoo6QZpKiZ8plCh_8QtxQmsZpB3uf27cpFh2eFp4", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "c6d56dc4-fa0e-454c-950d-b05a71d8e43c"}, {"timestamp": "2026-06-16T22:39:37.017Z", "date_only": false, "value": "2026-06-16T22:39:37.017", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2007-2447", "record": "FKIE_CVE-2007-2447", "field": "lastModified"}, {"timestamp": "2026-06-25T10:33:42Z", "date_only": false, "value": "2026-06-25T10:33:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-25T10:33:42Z", "date_only": false, "value": "2026-06-25T10:33:42+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-25T10:33:42Z", "date_only": false, "value": "2026-06-25T10:33:42+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-16T19:00:31.128Z", "date_only": false, "value": "2026-07-16T19:00:31.128580Z", "kind": "sighting", "label": "Seen", "source": "Telegram/JMPLlqAJKVKStPUctSi0425VFAAqn_JlP0EBk3HwzAKEQKc", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "c4f0ccdc-f6da-40b2-ba19-a5c6468b4aa9"}, {"timestamp": "2026-07-18T04:00:03.845Z", "date_only": false, "value": "2026-07-18T04:00:03.845128Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/JMPLlqAJKVKStPUctSi0425VFAAqn_JlP0EBk3HwzAKEQKc", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "a0856788-93fd-4b0b-a644-bce1db368fcc", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-20T18:00:06.573Z", "date_only": false, "value": "2026-07-20T18:00:06.573700Z", "kind": "sighting", "label": "Seen", "source": "Telegram/zF5Spud96hIRv-kMH4Dj2nymZKpXTrW05uWfMwEMnMJUmrg", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "e4ef9a81-0e4f-4d80-a03a-2d2edf5418e3"}, {"timestamp": "2026-07-22T00:00:06.792Z", "date_only": false, "value": "2026-07-22T00:00:06.792865Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/zF5Spud96hIRv-kMH4Dj2nymZKpXTrW05uWfMwEMnMJUmrg", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "b6af50c6-db47-4092-b5f4-7291970aec20", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T12:00:22.690Z", "date_only": false, "value": "2026-07-29T12:00:22.690203Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/15117", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "d706006c-c63c-4e58-9156-da6307678d98", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2007-2447-RCE*\nGithub: https://github.com/MikeRega7/CVE-2007-2447-RCE", "url": "https://t.me/CVEhub/15117"}, {"timestamp": "2026-07-31T00:00:31.410Z", "date_only": false, "value": "2026-07-31T00:00:31.410081Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/15117", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "fd8d4888-648c-4f3e-b1a1-4c343d0c514e", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2007-2447-RCE*\nGithub: https://github.com/MikeRega7/CVE-2007-2447-RCE", "url": "https://t.me/CVEhub/15117", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-27T12:00:10.548Z", "date_only": false, "value": "2026-08-27T12:00:10.548169Z", "kind": "sighting", "label": "Seen", "source": "Telegram/3xgIFenv1edoPacx2wzYue6QE_d1BAY1Qzt7qv1fx21mAco", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "0b491b43-24b7-4ec5-abc3-41dc6b3d4420"}, {"timestamp": "2026-08-27T12:00:14.467Z", "date_only": false, "value": "2026-08-27T12:00:14.467769Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ikZnoSctjKS01YLMJM9Qen4V1zyVECG1kRn9n_uoSWF20Fw", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "4f1fdfb5-8200-44f2-8419-699c9a845387"}, {"timestamp": "2026-08-29T00:00:12.056Z", "date_only": false, "value": "2026-08-29T00:00:12.056243Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ikZnoSctjKS01YLMJM9Qen4V1zyVECG1kRn9n_uoSWF20Fw", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "acfe16a9-398f-4bcc-a935-2e18321aeb8e", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-29T00:00:16.267Z", "date_only": false, "value": "2026-08-29T00:00:16.267236Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3xgIFenv1edoPacx2wzYue6QE_d1BAY1Qzt7qv1fx21mAco", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "f116a646-8e02-41d4-96bf-d03fe4bd6fc5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T03:00:05.651Z", "date_only": false, "value": "2026-09-03T03:00:05.651320Z", "kind": "sighting", "label": "Seen", "source": "Telegram/NJgwL7B1ASSbdk2T8OqFuHqujkni1MAsUBxYkwSwj99SobY", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "7ffe1700-d86c-417b-86e2-339888399242"}, {"timestamp": "2026-09-04T00:01:01.800Z", "date_only": false, "value": "2026-09-04T00:01:01.800590Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/NJgwL7B1ASSbdk2T8OqFuHqujkni1MAsUBxYkwSwj99SobY", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "ab275df1-d4f3-4ace-afa7-f9a2832ac9e5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-05T13:00:05.446Z", "date_only": false, "value": "2026-09-05T13:00:05.446770Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/udjjiEr21s5a1UaOuRbV0uZbiQ5Eh4SwcDMG-c38IJywdoc", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "6ce88d16-4153-4343-8caf-6b0b77b5d3bd", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T03:00:08.197Z", "date_only": false, "value": "2026-09-14T03:00:08.197797Z", "kind": "sighting", "label": "Seen", "source": "Telegram/9NrP2a5dbad0SvG7fb9Uapx71qe-XVfVxvb8R_NhR-XYGGI", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "db7a3806-3471-472f-aa98-594dd271d8df"}, {"timestamp": "2026-09-15T00:00:26.412Z", "date_only": false, "value": "2026-09-15T00:00:26.412433Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/9NrP2a5dbad0SvG7fb9Uapx71qe-XVfVxvb8R_NhR-XYGGI", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "416f928a-653c-44fe-b20c-ee2dd47c0f12", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-20T20:03:42Z", "date_only": false, "value": "2026-09-20T20:03:42Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10683-1", "record": "OPENSUSE-SU-2024:10683-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:03:42Z", "date_only": false, "value": "2026-09-20T20:03:42Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10683-1", "record": "OPENSUSE-SU-2024:10683-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-26T03:00:05Z", "date_only": false, "value": "2026-09-26T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/81ZxAi3drt5TdyCoeDwTgAnR6u7IKZ42DhAcDrRYmOpRijY", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "dc72598f-fa2f-4c51-a06b-c5de045686bd", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-06T21:00:04Z", "date_only": false, "value": "2026-10-06T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ytM1C2XNe8FsBhQ64sXYaiTihMru2Z5JdPp6gZ5Bs59z-Ls", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "65de3ce7-efc5-4932-b982-54b6216b092c"}, {"timestamp": "2026-10-10T19:00:24Z", "date_only": false, "value": "2026-10-10T19:00:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/v5vBpC9g-fd8ae3SCTPjGuGtPA9YMWmTETkvJwvKLhhHWvs", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "38deef3a-f0db-4182-81d0-afe1a0c042b4", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-10T19:00:24Z", "date_only": false, "value": "2026-10-10T19:00:24.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/v5vBpC9g-fd8ae3SCTPjGuGtPA9YMWmTETkvJwvKLhhHWvs", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "a7382b3f-c52f-49d3-972e-f32537931142"}], "metrics": {"as_of": "2026-11-01T22:01:13.047Z", "anchors": {"origin": {"timestamp": "2007-05-07T00:00:00Z", "date_only": false, "value": "2007-05-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "discovery": {"timestamp": "2007-05-07T00:00:00Z", "date_only": false, "value": "2007-05-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2007-05-13T00:00:00Z", "date_only": false, "value": "2007-05-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2007-2447", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2022-06-18T10:22:36Z", "date_only": false, "value": "2022-06-18T10:22:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arm1tage/129", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "6a5ab51c-e6b5-4a02-8ed5-8020c1a6c8b9", "content": "HackTheBox:\n\n\u2014Easy Machines\u2014\n\nDriver - WinRM (evil-winrm), printnightmare CVE-2021-1675 (https://habr.com/ru/sandbox/156538/)\nhttps://0xdf.gitlab.io/2022/02/26/htb-driver.html\n\nSecret - JWT, Git source (tig), crush-dumps\nhttps://0xdf.gitlab.io/2022/03/26/htb-secret.html\n\nBackDoor - Wordpress eBook Dir Trav (https://www.exploit-db.com/exploits/39575), gdb exploit (https://www.exploit-db.com/exploits/50539, https://www.rapid7.com/db/modules/exploit/multi/gdb/gdb_server_exec/) \nhttps://0xdf.gitlab.io/2022/04/23/htb-backdoor.html\n\nPrevise - Backup, Site Reverse Shell, low-encrypted passwords\nhttps://0xdf.gitlab.io/2022/01/08/htb-previse.html\n\nBountyHunter - XXE, (root) NOPASSWD python code\nhttps://0xdf.gitlab.io/2021/11/20/htb-bountyhunter.html\n\nHorizontal - Strapi CMS 3.0.0 CVE-2019-18818/CVE-2019-19609 (https://www.exploit-db.com/exploits/50239, https://github.com/diego-tella/CVE-2019-19609-EXPLOIT), Laravel v8 (https://www.exploit-db.com/exploits/49424)\nhttps://0xdf.gitlab.io/2022/02/05/htb-horizontall.html\n\nOptimum - Windows 2012 (https://www.rapid7.com/db/modules/exploit/windows/http/rejetto_hfs_exec/, https://www.rapid7.com/db/modules/exploit/windows/local/ms16_032_secondary_logon_handle_privesc/)\nhttps://0xdf.gitlab.io/2021/03/17/htb-optimum.html\n\nLame - FTP Anonymous, SAMBA exploit (https://github.com/amriunix/CVE-2007-2447)\nhttps://0xdf.gitlab.io/2020/04/07/htb-lame.html\n\nJerry - Tomcat Default Cred, shell via .WAR\nhttps://0xdf.gitlab.io/2018/11/17/htb-jerry.html\n\nBlue - Win7 eternalblue (https://www.rapid7.com/db/modules/exploit/windows/smb/ms17_010_eternalblue/)\nhttps://0xdf.gitlab.io/2021/05/11/htb-blue.html\n\nDevel - Microsoft IIS httpd 7.5 reverse shell via .ASPX, MS11-046 or ms10_015_kitrap0d (https://github.com/abatchy17/WindowsExploits/tree/master/MS11-046)\nhttps://0xdf.gitlab.io/2019/03/05/htb-devel.html\n\nNetmon - PRTG Network Monitor 18.1.37.13946, Backup credentials, CVE-2018-9276 (https://github.com/A1vinSmith/CVE-2018-9276) / (https://www.exploit-db.com/exploits/46527) + evil-winrm\nhttps://0xdf.gitlab.io/2019/06/29/htb-netmon.html\n\nExplore (Android) - 59777 port CVE-2019-6447 (https://www.exploit-db.com/exploits/50070), SSH Creds on Photo, adb shell\nhttps://0xdf.gitlab.io/2021/10/30/htb-explore.html\n\nAntique - Telnet password via snmpget (https://www.irongeek.com/i.php?page=security/networkprinterhacking#JetDirect%20password%20notes), CUPS 1.6.1 (https://github.com/jpillora/chisel) \nhttps://0xdf.gitlab.io/2022/05/03/htb-antique.html\n\nReturn - evil-winrm, Server Operators in net user svc-printer /domain, sc.exe\nhttps://0xdf.gitlab.io/2022/05/05/htb-return.html\n\nGrandpa - CVE-2017-7269 (https://www.rapid7.com/db/modules/exploit/windows/iis/iis_webdav_scstoragepathfromurl/), SEImpersonalPrivilege Churrasco (https://github.com/Re4son/Churrasco/)\nhttps://0xdf.gitlab.io/2020/05/28/htb-grandpa.html\n\nBeep - ShellShock or Elastix 2.2.0 - 'graph.php' Local File Inclusion, (root) NOPASSWD nmap\nhttps://0xdf.gitlab.io/2021/02/23/htb-beep.html\n\nPandora - snmpwalk creds, CVE-2021-32099, Site Reverse Shell\nhttps://0xdf.gitlab.io/2022/05/21/htb-pandora.html\n\nPaper - WPS 5.2.3 - Cve-2019-17671 (https://www.exploit-db.com/exploits/47690, https://0day.work/proof-of-concept-for-wordpress-5-2-3-viewing-unauthenticated-posts/), Chat Bot Dir Trav, CVE-2021-3560 (https://github.com/Almorabea/Polkit-exploit/blob/main/CVE-2021-3560.py)\nhttps://0xjin.medium.com/paper-hackthebox-write-up-2abca22d3b54\n\n\n#hackthebox #ctf", "url": "https://t.me/arm1tage/129", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2007-05-14T15:18:00Z", "date_only": false, "value": "2007-05-14T15:18:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "vulnerabilities.1.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 476533356.0, "hours": 132370.37666666668, "days": 5515.432361111111, "min_seconds": 476446956.0, "max_seconds": 476533356.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2007-05-13T00:00:00Z", "date_only": false, "value": "2007-05-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2007-2447", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-06-18T10:22:36Z", "date_only": false, "value": "2022-06-18T10:22:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arm1tage/129", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "6a5ab51c-e6b5-4a02-8ed5-8020c1a6c8b9", "content": "HackTheBox:\n\n\u2014Easy Machines\u2014\n\nDriver - WinRM (evil-winrm), printnightmare CVE-2021-1675 (https://habr.com/ru/sandbox/156538/)\nhttps://0xdf.gitlab.io/2022/02/26/htb-driver.html\n\nSecret - JWT, Git source (tig), crush-dumps\nhttps://0xdf.gitlab.io/2022/03/26/htb-secret.html\n\nBackDoor - Wordpress eBook Dir Trav (https://www.exploit-db.com/exploits/39575), gdb exploit (https://www.exploit-db.com/exploits/50539, https://www.rapid7.com/db/modules/exploit/multi/gdb/gdb_server_exec/) \nhttps://0xdf.gitlab.io/2022/04/23/htb-backdoor.html\n\nPrevise - Backup, Site Reverse Shell, low-encrypted passwords\nhttps://0xdf.gitlab.io/2022/01/08/htb-previse.html\n\nBountyHunter - XXE, (root) NOPASSWD python code\nhttps://0xdf.gitlab.io/2021/11/20/htb-bountyhunter.html\n\nHorizontal - Strapi CMS 3.0.0 CVE-2019-18818/CVE-2019-19609 (https://www.exploit-db.com/exploits/50239, https://github.com/diego-tella/CVE-2019-19609-EXPLOIT), Laravel v8 (https://www.exploit-db.com/exploits/49424)\nhttps://0xdf.gitlab.io/2022/02/05/htb-horizontall.html\n\nOptimum - Windows 2012 (https://www.rapid7.com/db/modules/exploit/windows/http/rejetto_hfs_exec/, https://www.rapid7.com/db/modules/exploit/windows/local/ms16_032_secondary_logon_handle_privesc/)\nhttps://0xdf.gitlab.io/2021/03/17/htb-optimum.html\n\nLame - FTP Anonymous, SAMBA exploit (https://github.com/amriunix/CVE-2007-2447)\nhttps://0xdf.gitlab.io/2020/04/07/htb-lame.html\n\nJerry - Tomcat Default Cred, shell via .WAR\nhttps://0xdf.gitlab.io/2018/11/17/htb-jerry.html\n\nBlue - Win7 eternalblue (https://www.rapid7.com/db/modules/exploit/windows/smb/ms17_010_eternalblue/)\nhttps://0xdf.gitlab.io/2021/05/11/htb-blue.html\n\nDevel - Microsoft IIS httpd 7.5 reverse shell via .ASPX, MS11-046 or ms10_015_kitrap0d (https://github.com/abatchy17/WindowsExploits/tree/master/MS11-046)\nhttps://0xdf.gitlab.io/2019/03/05/htb-devel.html\n\nNetmon - PRTG Network Monitor 18.1.37.13946, Backup credentials, CVE-2018-9276 (https://github.com/A1vinSmith/CVE-2018-9276) / (https://www.exploit-db.com/exploits/46527) + evil-winrm\nhttps://0xdf.gitlab.io/2019/06/29/htb-netmon.html\n\nExplore (Android) - 59777 port CVE-2019-6447 (https://www.exploit-db.com/exploits/50070), SSH Creds on Photo, adb shell\nhttps://0xdf.gitlab.io/2021/10/30/htb-explore.html\n\nAntique - Telnet password via snmpget (https://www.irongeek.com/i.php?page=security/networkprinterhacking#JetDirect%20password%20notes), CUPS 1.6.1 (https://github.com/jpillora/chisel) \nhttps://0xdf.gitlab.io/2022/05/03/htb-antique.html\n\nReturn - evil-winrm, Server Operators in net user svc-printer /domain, sc.exe\nhttps://0xdf.gitlab.io/2022/05/05/htb-return.html\n\nGrandpa - CVE-2017-7269 (https://www.rapid7.com/db/modules/exploit/windows/iis/iis_webdav_scstoragepathfromurl/), SEImpersonalPrivilege Churrasco (https://github.com/Re4son/Churrasco/)\nhttps://0xdf.gitlab.io/2020/05/28/htb-grandpa.html\n\nBeep - ShellShock or Elastix 2.2.0 - 'graph.php' Local File Inclusion, (root) NOPASSWD nmap\nhttps://0xdf.gitlab.io/2021/02/23/htb-beep.html\n\nPandora - snmpwalk creds, CVE-2021-32099, Site Reverse Shell\nhttps://0xdf.gitlab.io/2022/05/21/htb-pandora.html\n\nPaper - WPS 5.2.3 - Cve-2019-17671 (https://www.exploit-db.com/exploits/47690, https://0day.work/proof-of-concept-for-wordpress-5-2-3-viewing-unauthenticated-posts/), Chat Bot Dir Trav, CVE-2021-3560 (https://github.com/Almorabea/Polkit-exploit/blob/main/CVE-2021-3560.py)\nhttps://0xjin.medium.com/paper-hackthebox-write-up-2abca22d3b54\n\n\n#hackthebox #ctf", "url": "https://t.me/arm1tage/129", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 659880.0, "hours": 183.3, "days": 7.6375, "min_seconds": 573480.0, "max_seconds": 659880.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2007-05-07T00:00:00Z", "date_only": false, "value": "2007-05-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2007-05-14T15:18:00Z", "date_only": false, "value": "2007-05-14T15:18:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "vulnerabilities.1.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "disclosure_to_patch": {"available": true, "seconds": 141480.0, "hours": 39.3, "days": 1.6375, "min_seconds": 55080.0, "max_seconds": 141480.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2007-05-13T00:00:00Z", "date_only": false, "value": "2007-05-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2007-2447", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2007-05-14T15:18:00Z", "date_only": false, "value": "2007-05-14T15:18:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "vulnerabilities.1.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 659880.0, "hours": 183.3, "days": 7.6375, "min_seconds": 573480.0, "max_seconds": 659880.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2007-05-07T00:00:00Z", "date_only": false, "value": "2007-05-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2007-05-14T15:18:00Z", "date_only": false, "value": "2007-05-14T15:18:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "vulnerabilities.1.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": -476391876.0, "hours": -132331.07666666666, "days": -5513.7948611111115, "min_seconds": -476391876.0, "max_seconds": -476391876.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2022-06-18T10:22:36Z", "date_only": false, "value": "2022-06-18T10:22:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arm1tage/129", "record": "CVE-2007-2447", "field": "creation_timestamp", "uuid": "6a5ab51c-e6b5-4a02-8ed5-8020c1a6c8b9", "content": "HackTheBox:\n\n\u2014Easy Machines\u2014\n\nDriver - WinRM (evil-winrm), printnightmare CVE-2021-1675 (https://habr.com/ru/sandbox/156538/)\nhttps://0xdf.gitlab.io/2022/02/26/htb-driver.html\n\nSecret - JWT, Git source (tig), crush-dumps\nhttps://0xdf.gitlab.io/2022/03/26/htb-secret.html\n\nBackDoor - Wordpress eBook Dir Trav (https://www.exploit-db.com/exploits/39575), gdb exploit (https://www.exploit-db.com/exploits/50539, https://www.rapid7.com/db/modules/exploit/multi/gdb/gdb_server_exec/) \nhttps://0xdf.gitlab.io/2022/04/23/htb-backdoor.html\n\nPrevise - Backup, Site Reverse Shell, low-encrypted passwords\nhttps://0xdf.gitlab.io/2022/01/08/htb-previse.html\n\nBountyHunter - XXE, (root) NOPASSWD python code\nhttps://0xdf.gitlab.io/2021/11/20/htb-bountyhunter.html\n\nHorizontal - Strapi CMS 3.0.0 CVE-2019-18818/CVE-2019-19609 (https://www.exploit-db.com/exploits/50239, https://github.com/diego-tella/CVE-2019-19609-EXPLOIT), Laravel v8 (https://www.exploit-db.com/exploits/49424)\nhttps://0xdf.gitlab.io/2022/02/05/htb-horizontall.html\n\nOptimum - Windows 2012 (https://www.rapid7.com/db/modules/exploit/windows/http/rejetto_hfs_exec/, https://www.rapid7.com/db/modules/exploit/windows/local/ms16_032_secondary_logon_handle_privesc/)\nhttps://0xdf.gitlab.io/2021/03/17/htb-optimum.html\n\nLame - FTP Anonymous, SAMBA exploit (https://github.com/amriunix/CVE-2007-2447)\nhttps://0xdf.gitlab.io/2020/04/07/htb-lame.html\n\nJerry - Tomcat Default Cred, shell via .WAR\nhttps://0xdf.gitlab.io/2018/11/17/htb-jerry.html\n\nBlue - Win7 eternalblue (https://www.rapid7.com/db/modules/exploit/windows/smb/ms17_010_eternalblue/)\nhttps://0xdf.gitlab.io/2021/05/11/htb-blue.html\n\nDevel - Microsoft IIS httpd 7.5 reverse shell via .ASPX, MS11-046 or ms10_015_kitrap0d (https://github.com/abatchy17/WindowsExploits/tree/master/MS11-046)\nhttps://0xdf.gitlab.io/2019/03/05/htb-devel.html\n\nNetmon - PRTG Network Monitor 18.1.37.13946, Backup credentials, CVE-2018-9276 (https://github.com/A1vinSmith/CVE-2018-9276) / (https://www.exploit-db.com/exploits/46527) + evil-winrm\nhttps://0xdf.gitlab.io/2019/06/29/htb-netmon.html\n\nExplore (Android) - 59777 port CVE-2019-6447 (https://www.exploit-db.com/exploits/50070), SSH Creds on Photo, adb shell\nhttps://0xdf.gitlab.io/2021/10/30/htb-explore.html\n\nAntique - Telnet password via snmpget (https://www.irongeek.com/i.php?page=security/networkprinterhacking#JetDirect%20password%20notes), CUPS 1.6.1 (https://github.com/jpillora/chisel) \nhttps://0xdf.gitlab.io/2022/05/03/htb-antique.html\n\nReturn - evil-winrm, Server Operators in net user svc-printer /domain, sc.exe\nhttps://0xdf.gitlab.io/2022/05/05/htb-return.html\n\nGrandpa - CVE-2017-7269 (https://www.rapid7.com/db/modules/exploit/windows/iis/iis_webdav_scstoragepathfromurl/), SEImpersonalPrivilege Churrasco (https://github.com/Re4son/Churrasco/)\nhttps://0xdf.gitlab.io/2020/05/28/htb-grandpa.html\n\nBeep - ShellShock or Elastix 2.2.0 - 'graph.php' Local File Inclusion, (root) NOPASSWD nmap\nhttps://0xdf.gitlab.io/2021/02/23/htb-beep.html\n\nPandora - snmpwalk creds, CVE-2021-32099, Site Reverse Shell\nhttps://0xdf.gitlab.io/2022/05/21/htb-pandora.html\n\nPaper - WPS 5.2.3 - Cve-2019-17671 (https://www.exploit-db.com/exploits/47690, https://0day.work/proof-of-concept-for-wordpress-5-2-3-viewing-unauthenticated-posts/), Chat Bot Dir Trav, CVE-2021-3560 (https://github.com/Almorabea/Polkit-exploit/blob/main/CVE-2021-3560.py)\nhttps://0xjin.medium.com/paper-hackthebox-write-up-2abca22d3b54\n\n\n#hackthebox #ctf", "url": "https://t.me/arm1tage/129", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2007-05-14T15:18:00Z", "date_only": false, "value": "2007-05-14T15:18:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2007:0354", "record": "RHSA-2007:0354", "field": "vulnerabilities.1.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}}}