{"metadata": {"vulnerability": "CVE-2010-3962", "count": 52, "kinds": {"milestone": 4, "sighting": 19, "kev": 11, "other": 18}}, "data": [{"timestamp": "2010-10-14T00:00:00Z", "date_only": false, "value": "2010-10-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2010-3962", "field": "cveMetadata.dateReserved"}, {"timestamp": "2010-11-02T00:00:00Z", "date_only": false, "value": "2010-11-02T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2010-3962", "field": "containers.cna.datePublic"}, {"timestamp": "2010-11-03T00:00:00Z", "date_only": false, "value": "2010-11-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTA-2010-ALE-019", "record": "CERTA-2010-ALE-019", "field": "revisions.0.revision_date"}, {"timestamp": "2010-11-04T00:00:00Z", "date_only": false, "value": "2010-11-04T00:00:00.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://www.exploit-db.com/exploits/15418", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "bdc1ed26-8f83-4c2d-a254-1129bf894b8a", "url": "https://www.exploit-db.com/exploits/15418"}, {"timestamp": "2010-11-04T00:00:00Z", "date_only": false, "value": "2010-11-04T00:00:00.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://www.exploit-db.com/exploits/15421", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "493f34f2-850c-49ff-9061-95c0677dc348", "url": "https://www.exploit-db.com/exploits/15421"}, {"timestamp": "2010-11-05T16:28:00Z", "date_only": false, "value": "2010-11-05T16:28:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2010-3962", "field": "timestamps.asserted_at", "uuid": "89993bcd-c74f-4d6f-8f0a-03c3d8d7c969", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2010-11-05T16:28:00Z", "date_only": false, "value": "2010-11-05T16:28:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2010-3962", "field": "evidence.0.details.added_date", "uuid": "89993bcd-c74f-4d6f-8f0a-03c3d8d7c969", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2010-11-05T16:28:00Z", "date_only": false, "value": "2010-11-05T16:28:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2010-3962", "field": "timestamps.first_seen_at", "uuid": "89993bcd-c74f-4d6f-8f0a-03c3d8d7c969", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2010-11-05T16:28:00Z", "date_only": false, "value": "2010-11-05T16:28:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2010-3962", "field": "cveMetadata.datePublished"}, {"timestamp": "2010-11-05T16:28:00Z", "date_only": false, "value": "2010-11-05T16:28:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2010-3962", "field": "status.status_updated_at", "uuid": "89993bcd-c74f-4d6f-8f0a-03c3d8d7c969", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2010-11-05T17:00:00Z", "date_only": false, "value": "2010-11-05T17:00:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CMH7-CFJQ-P92G", "record": "GHSA-CMH7-CFJQ-P92G", "field": "database_specific.nvd_published_at"}, {"timestamp": "2010-11-05T17:00:00Z", "date_only": false, "value": "2010-11-05T17:00Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2010-3962", "record": "GSD-2010-3962", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2010-11-05T17:00:02.890Z", "date_only": false, "value": "2010-11-05T17:00:02.890", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2010-3962", "record": "FKIE_CVE-2010-3962", "field": "published"}, {"timestamp": "2010-12-15T00:00:00Z", "date_only": false, "value": "2010-12-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTA-2010-AVI-593", "record": "CERTA-2010-AVI-593", "field": "revisions.0.revision_date"}, {"timestamp": "2010-12-17T00:00:00Z", "date_only": false, "value": "2010-12-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTA-2010-ALE-019", "record": "CERTA-2010-ALE-019", "field": "revisions.1.revision_date"}, {"timestamp": "2011-01-20T00:00:00Z", "date_only": false, "value": "2011-01-20T00:00:00.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://www.exploit-db.com/exploits/16551", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "dce0a4ca-6267-42bb-94c9-461324bf5658", "url": "https://www.exploit-db.com/exploits/16551"}, {"timestamp": "2018-05-29T15:50:33Z", "date_only": false, "value": "2018-05-29T15:50:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms10_090_ie_css_clip.rb", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "aff42fd6-bc2b-4fc5-8907-bf45774c03b2", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms10_090_ie_css_clip.rb"}, {"timestamp": "2018-10-12T19:57:01Z", "date_only": false, "value": "2018-10-12T19:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2010-3962", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-10-09T16:37:57Z", "date_only": false, "value": "2020-10-09T16:37:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/08d6547e-ba24-4be2-8de8-133a85b44600", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "fb8535fd-48ea-462d-aff4-366bf57234ae"}, {"timestamp": "2022-02-28T19:15:00Z", "date_only": false, "value": "2022-02-28T19:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2010-3962", "record": "GSD-2010-3962", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-13T01:03:30Z", "date_only": false, "value": "2022-05-13T01:03:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CMH7-CFJQ-P92G", "record": "GHSA-CMH7-CFJQ-P92G", "field": "published"}, {"timestamp": "2023-12-13T01:21:34.710Z", "date_only": false, "value": "2023-12-13T01:21:34.710602Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2010-3962", "record": "GSD-2010-3962", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-07T03:26:12.283Z", "date_only": false, "value": "2024-08-07T03:26:12.283Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2010-3962", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:40Z", "date_only": false, "value": "2025-02-06T03:13:40.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "b8ad20cb-6a4d-4543-a8e4-ae491679233e"}, {"timestamp": "2025-02-23T04:08:50Z", "date_only": false, "value": "2025-02-23T04:08:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "8037b139-251a-4daa-b9da-d7cfcda7a6de"}, {"timestamp": "2025-08-31T03:00:57Z", "date_only": false, "value": "2025-08-31T03:00:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "4c3eabeb-2827-4143-825d-d12b4554d5e5"}, {"timestamp": "2025-08-31T03:12:43Z", "date_only": false, "value": "2025-08-31T03:12:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "ade65e4a-fce8-4014-aafa-a3ff01eb3c36"}, {"timestamp": "2025-10-04T03:55:26.935Z", "date_only": false, "value": "2025-10-04T03:55:26.935049Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2010-3962", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-10-04T03:55:26.935Z", "date_only": false, "value": "2025-10-04T03:55:26.935049Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2010-3962", "record": "FKIE_CVE-2010-3962", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2010-3962", "field": "timestamps.asserted_at", "uuid": "fc27b54a-e79c-40c3-b141-be60acba7b1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": true, "value": "2025-10-06", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2010-3962", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": true, "value": "2025-10-06", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2010-3962", "field": "evidence.0.details.date_added", "uuid": "fc27b54a-e79c-40c3-b141-be60acba7b1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2010-3962", "field": "timestamps.first_seen_at", "uuid": "fc27b54a-e79c-40c3-b141-be60acba7b1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2010-3962", "field": "status.status_updated_at", "uuid": "fc27b54a-e79c-40c3-b141-be60acba7b1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2010-3962", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2025-10-06T18:10:02Z", "date_only": false, "value": "2025-10-06T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "accba9ff-6438-4f0f-9cb3-5ef17a4ceb31"}, {"timestamp": "2025-10-06T19:30:18.507Z", "date_only": false, "value": "2025-10-06T19:30:18.507657Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4868673", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "9cc0294a-849b-4ff8-9bb6-b0bf437fa54c", "url": "https://feedsin.space/feed/CISAKevBot/items/4868673"}, {"timestamp": "2025-10-06T20:49:36.126Z", "date_only": false, "value": "2025-10-06T20:49:36.126213Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m2kifgaw322b", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "f91a6917-252c-45fa-896c-834d5b4fbf97", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m2kifgaw322b"}, {"timestamp": "2025-10-07T03:22:06Z", "date_only": false, "value": "2025-10-07T03:22:06.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "c84c588c-ee83-45e0-967b-83186a71d7e1"}, {"timestamp": "2025-10-07T06:55:41.509Z", "date_only": false, "value": "2025-10-07T06:55:41.509393Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3m2lkb2wcbk2h", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "e739fd12-4337-4e69-85d2-584a172f1e0b", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3m2lkb2wcbk2h"}, {"timestamp": "2025-10-07T21:02:32.901Z", "date_only": false, "value": "2025-10-07T21:02:32.901085Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2mzld3s6p2j", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "f60decf2-9dbd-4439-84e6-bc2afbc331be", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2mzld3s6p2j"}, {"timestamp": "2025-10-22T00:05:51.096Z", "date_only": false, "value": "2025-10-22T00:05:51.096Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2010-3962", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:05:51.096Z", "date_only": false, "value": "2025-10-22T00:05:51.096Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2010-3962", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T03:30:28Z", "date_only": false, "value": "2025-10-22T03:30:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CMH7-CFJQ-P92G", "record": "GHSA-CMH7-CFJQ-P92G", "field": "modified"}, {"timestamp": "2025-10-27T00:00:00Z", "date_only": true, "value": "2025-10-27", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2010-3962", "field": "evidence.0.details.due_date", "uuid": "fc27b54a-e79c-40c3-b141-be60acba7b1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2010-3962", "field": "timestamps.recorded_at", "uuid": "fc27b54a-e79c-40c3-b141-be60acba7b1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:25:50.893Z", "date_only": false, "value": "2026-02-02T12:25:50.893290Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fc27b54a-e79c-40c3-b141-be60acba7b1a", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "56f1e950-1f94-4067-8676-f3fbf8763601", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fc27b54a-e79c-40c3-b141-be60acba7b1a"}, {"timestamp": "2026-06-16T23:23:53.780Z", "date_only": false, "value": "2026-06-16T23:23:53.780", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2010-3962", "record": "FKIE_CVE-2010-3962", "field": "lastModified"}, {"timestamp": "2026-06-19T16:45:38.768Z", "date_only": false, "value": "2026-06-19T16:45:38.768504Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e1714bfd-8877-4677-a101-1fab7051b207", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "f3f1cba2-5eab-4d5c-afb9-a58dbbe196b7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e1714bfd-8877-4677-a101-1fab7051b207"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2010-3962", "field": "timestamps.recorded_at", "uuid": "89993bcd-c74f-4d6f-8f0a-03c3d8d7c969", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:10.647Z", "date_only": false, "value": "2026-06-23T14:04:10.647398Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/89993bcd-c74f-4d6f-8f0a-03c3d8d7c969", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "6d9dd976-51f3-4fa1-9832-2afb6ece83dd", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/89993bcd-c74f-4d6f-8f0a-03c3d8d7c969"}, {"timestamp": "2026-08-14T16:00:06.342Z", "date_only": false, "value": "2026-08-14T16:00:06.342707Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/1184", "record": "CVE-2010-3962", "field": "creation_timestamp", "uuid": "c6ed1e8a-8331-4cae-a228-7846793646c3", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-61882 \u2014 \u0431\u0430\u0433 \u0432 Oracle E-Business Suite. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 servlet \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 XML, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043f\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 URL (SSRF). \u0417\u0430\u0442\u0435\u043c \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 return_url (CRLF-\u0432\u0441\u0442\u0430\u0432\u043a\u0430) \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0432 POST \u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0435 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435, \u0434\u043e\u0436\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0443 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442 \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0441\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443.\n\n\ud83d\udd35 CVE-2025-20362 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 VPN \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco Secure Firewall ASA/FTD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP(S)-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a URL-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043e\u0431\u0445\u043e\u0434\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0412 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 CVE-2025-20333 \u0438 CVE-2025-20363 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0443\u0436\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 in wild.\n\n\ud83d\udd35 CVE-2025-27915 \u2014 XSS-\u0431\u0430\u0433 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 iCalendar (.ICS, \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 Zimbra), \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 .ics-\u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0441 \u043e\u0431\u0444\u0443\u0441\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c JavaScript-\u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b\u0441\u044f \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0441\u0435\u0441\u0441\u0438\u0438 \u0436\u0435\u0440\u0442\u0432\u044b \u043f\u0440\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044f. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043a\u0440\u0430\u0441\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u043a\u0438 \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u044f\u0449\u0438\u043a\u0435 \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043a\u0440\u0430\u0441\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430 \u0431\u0435\u0437 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\ud83d\udd35 CISA \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 in wild \u2014 CVE-2010-3765 (RCE, Mozilla), CVE-2010-3962 (\u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438, Internet Explorer), CVE-2011-3402 (RCE \u0432 Windows), CVE-2013-3918 (\u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u043f\u0430\u043c\u044f\u0442\u0438, Windows), CVE-2021-22555 (\u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u043a\u0443\u0447\u0438, Linux), CVE-2021-43226 (\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, Windows), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0436\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u0430\u044f \u0440\u0430\u043d\u0435\u0435 CVE-2025-61882.\n\n#blue_team #CVE_\u0434\u043d\u044f", "url": "https://t.me/purp_sec/1184"}]}