{"metadata": {"vulnerability": "CVE-2016-9836", "count": 19, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 13}, "linked_omitted": 0}, "data": [{"timestamp": "2016-12-05T00:00:00Z", "date_only": false, "value": "2016-12-05T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2016-9836", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-12-05T00:00:00Z", "date_only": false, "value": "2016-12-05T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2016-9836", "field": "cveMetadata.dateReserved"}, {"timestamp": "2016-12-05T17:00:00Z", "date_only": false, "value": "2016-12-05T17:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2016-9836", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-12-05T17:59:00Z", "date_only": false, "value": "2016-12-05T17:59:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-43P3-CF56-RPQR", "record": "GHSA-43P3-CF56-RPQR", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2016-12-05T17:59:00Z", "date_only": false, "value": "2016-12-05T17:59Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2016-9836", "record": "GSD-2016-9836", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2016-12-05T17:59:00.180Z", "date_only": false, "value": "2016-12-05T17:59:00.180", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2016-9836", "record": "FKIE_CVE-2016-9836", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2016-12-06T10:57:01Z", "date_only": false, "value": "2016-12-06T10:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2016-9836", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2016-12-07T00:00:00Z", "date_only": true, "value": "2016-12-07", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2016-11961", "record": "CNVD-2016-11961", "field": "openTime", "linked_record": true}, {"timestamp": "2016-12-07T00:00:00Z", "date_only": true, "value": "2016-12-07", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2016-11961", "record": "CNVD-2016-11961", "field": "submitTime", "linked_record": true}, {"timestamp": "2016-12-07T19:27:00Z", "date_only": false, "value": "2016-12-07T19:27Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2016-9836", "record": "GSD-2016-9836", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2016-12-15T00:00:00Z", "date_only": false, "value": "2016-12-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2016-AVI-419", "record": "CERTFR-2016-AVI-419", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2017-07-11T02:04:41Z", "date_only": false, "value": "2017-07-11T02:04:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingPublicoficial/162", "record": "CVE-2016-9836", "field": "creation_timestamp", "uuid": "c5611a5c-0a2a-4105-8294-0d4e6aa48c98", "content": "Best Exploits\n\nphpMoAdmin Remote Code Execution (CVE-2015-2208)\nLotusCMS Remote Code Execution (OSVDB-75095)\nElasticSearch Remote Code Execution (CVE-2015-1427)\nShellShock (httpd) Remote Code Execution (CVE-2014-6271)\nIISlap - http.sys Denial of Service/RCE PoC (DoS only). (MS-15-034)\nse0wned - Seowintech Router diagnostic.cgi remote root\nWPsh0pwn - Wordpress WPShop eCommerce Shell Upload (WPVDB-7830)\nnmediapwn - Wordpress N-Media Website Contact Form with File Upload 1.3.4 Shell Upload\npwnflow - Wordpress Work the flow file upload 2.5.2 Shell Upload\ndelusions - Wordpress InfusionSoft Gravity Forms Shell Upload (CVE-2014-6446)\nsuiteshell - SuiteCRM Post-Auth Remote Code Execution (CVE-2015-NOTYET)\nsuiteracer - SuiteCRM Post-Auth Remote Code Execution Race Condition (CVE-2015-xxxx)\nunsanitary - Address Sanitizer + Setuid Binary = Local Root exploit (LD_PRELOAD vector)\nDiamondFox - DiamondFox Botnet C&C Panel Shell Upload\nDoubtfullyMalignant - BenignCertain DoS PoC\nTorCT-Shell - TorCT RAT C&C Panel Shell Upload\nvBullshit - vBulletin 5.x.x unserialize() Remote Code Execution (CVE-2015-7808)\nXanity-Shell - Xanity RAT C&C Panel Shell Upload\nJoomraa - PoC + upload blacklist bypass (CVE-2016-8869, CVE-2016-8870, CVE-2016-9836)\nDeathsize - LifeSize Room remote code execution & local root exploit\nAssetExploder - ManageEngine Asset Explorer remote code execution\nDroppleGanger - Droppler <= 1.6.5 Auth-Bypass & RCE\ntr-06fail - TR-064 Misimplementations leading to remote device takeover in ZyXEL Routers\nscreen2root - Screen 4.05.00 (CVE-2017-5618) local privesc\nFreeACS-Pwn - TR-069 exploit for FreeACS server, disclosed at BSides Edinburgh.\nJoomblah - Joomla 3.7.0 SQL Injection exploit (CVE-2017-8917)\npisspoorpool - Local file inclusion exploit for p2pool status page\nwipgpwn - Remote Root Exploit for WePresent WiPG-1000,1500,2000 devices\nTBA\n\nLink:\n\nhttps://github.com/XiphosResearch/exploits https://www.facebook.com/1656611301265857/posts/1887994441460874", "url": "https://t.me/HackingPublicoficial/162", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-05-17T03:24:12Z", "date_only": false, "value": "2022-05-17T03:24:12Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-43P3-CF56-RPQR", "record": "GHSA-43P3-CF56-RPQR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-05-17T03:24:12Z", "date_only": false, "value": "2022-05-17T03:24:12Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-43P3-CF56-RPQR", "record": "GHSA-43P3-CF56-RPQR", "field": "modified", "linked_record": true}, {"timestamp": "2023-12-13T01:21:21.980Z", "date_only": false, "value": "2023-12-13T01:21:21.980364Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2016-9836", "record": "GSD-2016-9836", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-06T02:59:03.553Z", "date_only": false, "value": "2024-08-06T02:59:03.553Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2016-9836", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-06T02:59:03.553Z", "date_only": false, "value": "2024-08-06T02:59:03.553Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2016-9836", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T00:56:37.973Z", "date_only": false, "value": "2026-06-17T00:56:37.973", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2016-9836", "record": "FKIE_CVE-2016-9836", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-26T07:02:14.832Z", "date_only": false, "value": "2026-07-26T07:02:14.832050Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/1665", "record": "CVE-2016-9836", "field": "creation_timestamp", "uuid": "f3216bdc-d4a6-4adf-831f-52f3751d8840", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u062c\u0648\u0645\u0644\u0627: \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u06cc\u06af\u0631 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u0646\u062f \n\n\ud83c\udf41\ud83c\udf41\ud83c\udf41\ud83c\udf41\ud83c\udf41\n\n\u0633\u0627\u0645\u0627\u0646\u0647 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0645\u062d\u062a\u0648\u0627\u06cc \u062c\u0648\u0645\u0644\u0627 \u0627\u06cc\u0646 \u0647\u0641\u062a\u0647 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f. \u0628\u0627 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648 \u0628\u0627\u0632\u0646\u0634\u0627\u0646\u06cc \u0646\u0627\u0645\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u06af\u0630\u0631\u0648\u0627\u0698\u0647\u200c\u0647\u0627\u060c \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0633\u062a \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc \u062f\u06cc\u06af\u0631 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u062f.\n\n\u0646\u0633\u062e\u0647\u200c\u06cc \u06f3.\u06f6.\u06f5 \u062c\u0648\u0645\u0644\u0627 \u0628\u0631\u0627\u06cc \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0646 \u06f3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0646\u062a\u0634\u0631 \u0634\u062f \u0648 \u062a\u0646\u0647\u0627 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u06af\u0632\u0627\u0631\u0634 \u0634\u062f\u0647 \u0648 \u06f2 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u06cc\u06af\u0631 \u0627\u0632 \u0627\u0647\u0645\u06cc\u062a \u06a9\u0645\u06cc \u0628\u0631\u062e\u0648\u0631\u062f\u0627\u0631 \u0628\u0648\u062f\u0646\u062f. \u0639\u0644\u0627\u0648\u0647 \u0628\u0631 \u0648\u0635\u0644\u0647\u200c\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u060c \u062f\u0631 \u0627\u06cc\u0646 \u0646\u0633\u062e\u0647\u200c \u0633\u0627\u0632\u0648\u06a9\u0627\u0631\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062c\u062f\u06cc\u062f\u06cc \u0646\u06cc\u0632 \u0627\u0631\u0627\u0626\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a. \n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0647\u0645 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc CVE-\u06f2\u06f0\u06f1\u06f6-\u06f9\u06f8\u06f3\u06f8 \u062a\u0645\u0627\u0645\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062c\u0648\u0645\u0644\u0627 \u0627\u0632 \u06f1.\u06f6.\u06f0 \u062a\u0627 \u06f3.\u06f6.\u06f4 \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0631\u062a\u0642\u0627\u0621 \u0627\u0645\u062a\u06cc\u0627\u0632 \u062f\u0631 \u0627\u062b\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u067e\u0627\u0644\u0627\u06cc\u0634\u200c\u0646\u0634\u062f\u0647 \u06a9\u0647 \u062f\u0631 \u062c\u0644\u0633\u0627\u062a \u0630\u062e\u06cc\u0631\u0647\u200c \u0645\u06cc\u200c\u0634\u0648\u0646\u062f \u0648 \u062f\u0631 \u0641\u0631\u0622\u06cc\u0646\u062f \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc \u0641\u0631\u0645 \u0628\u0647 \u0634\u06a9\u0633\u062a \u0628\u0631\u0645\u06cc\u200c\u062e\u0648\u0631\u0646\u062f\u060c \u0646\u0627\u0634\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0628\u0627 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u060c \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062a\u0645\u0627\u0645\u06cc \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u06cc \u0645\u0648\u062c\u0648\u062f \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u062f. \u062c\u0648\u0645\u0644\u0627 \u0645\u06cc\u200c\u06af\u0648\u06cc\u062f \u0627\u06cc\u0646 \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0634\u0627\u0645\u0644 \u062a\u063a\u06cc\u06cc\u0631 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u06af\u0630\u0631\u0648\u0627\u0698\u0647 \u06cc\u0627 \u0648\u0638\u0627\u06cc\u0641 \u06af\u0631\u0648\u0647 \u0628\u0627\u0634\u062f. \u062a\u0645\u0627\u0645\u06cc \u0648\u0628\u06af\u0627\u0647\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u0632 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u062c\u0648\u0645\u0644\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u0628\u0627\u06cc\u062f \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0628\u0647 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f3.\u06f6.\u06f5 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u0646\u062f.\n\n\u062f\u0631 \u062c\u0648\u0645\u0644\u0627 \u06f3.\u06f6.\u06f5 \u06cc\u06a9 \u0627\u0634\u06a9\u0627\u0644 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u0634\u0650\u0644 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc CVE-\u06f2\u06f0\u06f1\u06f6-\u06f9\u06f8\u06f3\u06f6 \u0646\u06cc\u0632 \u0648\u0635\u0644\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647\u200c\u062f\u0644\u06cc\u0644 \u0646\u0627\u06a9\u0627\u0641\u06cc \u0628\u0648\u062f\u0646 \u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627 \u0628\u0631 \u0631\u0648\u06cc \u067e\u0631\u0648\u0646\u062f\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0627\u06cc\u060c \u0627\u062c\u0627\u0632\u0647\u200c\u06cc \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u067e\u0631\u0648\u0646\u062f\u0647\u200c\u0647\u0627\u06cc \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 \u0628\u0627 \u067e\u0633\u0648\u0646\u062f PHP \u0631\u0627 \u0645\u06cc\u200c\u062f\u0647\u062f. \u0645\u0634\u06a9\u0644 \u0633\u0648\u0645 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0641\u0634\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc CVE-\u06f2\u06f0\u06f1\u06f6-\u06f9\u06f8\u06f3\u06f7 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627\u0639\u062b \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0627\u0631\u0628\u0631 \u0628\u062a\u0648\u0627\u0646\u062f \u0645\u062d\u062a\u0648\u0627\u06cc \u0645\u062d\u062f\u0648\u062f\u0634\u062f\u0647 \u0631\u0627 \u0645\u0634\u0627\u0647\u062f\u0647 \u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0627\u0634\u06a9\u0627\u0644 \u0628\u0647\u200c\u062f\u0644\u06cc\u0644 \u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u0646\u0627\u06a9\u0627\u0641\u06cc \u062f\u0631 \u0641\u0647\u0631\u0633\u062a \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u062e \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\u0627\u06cc\u0646 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u062f\u0631\u062c\u0647 \u0627\u0647\u0645\u06cc\u062a \u06a9\u0645 \u062f\u0631 \u0646\u0638\u0631 \u06af\u0631\u0641\u062a\u0647 \u0634\u062f\u0647 \u0648 \u062a\u0646\u0647\u0627 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u06f3.\u06f0.\u06f0 \u062a\u0627 \u06f3.\u06f6.\u06f4 \u062c\u0648\u0645\u0644\u0627 \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f \u0648 \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u062c\u062f\u06cc\u062f \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0639\u0644\u0627\u0648\u0647 \u0628\u0631 \u0648\u0635\u0644\u0647\u200c\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u060c \u0633\u0627\u0632\u0648\u06a9\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062c\u062f\u06cc\u062f\u06cc \u0646\u06cc\u0632 \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f3.\u06f6.\u06f5 \u0627\u0631\u0627\u0626\u0647 \u0634\u062f\u0647 \u06a9\u0647 \u0627\u0632 \u0627\u06cc\u062c\u0627\u062f \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062c\u0648\u0645\u0644\u0627 \u062a\u0648\u0633\u0637 \u06a9\u0627\u0631\u0628\u0631 \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u062c\u062f\u06cc\u062f \u0627\u0645\u06a9\u0627\u0646 \u062a\u0646\u0638\u06cc\u0645 \u00ab\u06af\u0631\u0648\u0647 \u062b\u0628\u062a\u200c\u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631 \u062c\u062f\u06cc\u062f\u00bb \u0648 \u00ab\u06af\u0631\u0648\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0645\u0647\u0645\u0627\u0646\u00bb \u0628\u0631\u0627\u06cc \u06af\u0631\u0648\u0647\u06cc \u0628\u0627 \u0645\u062c\u0648\u0632 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648\u06cc\u0698\u0647 \u0645\u062d\u062f\u0648\u062f \u0634\u062f\u0647 \u0627\u0633\u062a. \u0647\u0645\u0686\u0646\u06cc\u0646 \u0642\u0627\u0628\u0644\u06cc\u062a \u0627\u06cc\u062c\u0627\u062f \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0631 \u0648\u0638\u0627\u06cc\u0641 \u06af\u0631\u0648\u0647\u060c \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u06a9\u0645 \u0645\u062d\u062f\u0648\u062f \u0634\u062f\u0647 \u0627\u0633\u062a. \n\n\u0639\u0644\u0627\u0648\u0647 \u0628\u0631 \u0627\u06cc\u0646\u200c\u0647\u0627\u060c \u062a\u0627\u0628\u0639 ()JUser::authorise \u0646\u06cc\u0632 \u0648\u06cc\u0631\u0627\u06cc\u0634 \u0634\u062f\u0647 \u062a\u0627 \u062a\u0646\u0647\u0627 \u06cc\u06a9 \u0645\u0642\u062f\u0627\u0631 \u0628\u0648\u0644\u06cc\u0646 \u0628\u0631\u06af\u0631\u062f\u0627\u0646\u062f. \u0642\u0628\u0644\u0627\u064b \u0627\u06cc\u0646 \u062a\u0627\u0628\u0639 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0633\u062a \u0645\u0642\u062f\u0627\u0631 \u062a\u0647\u06cc \u06cc\u0627 \u0628\u0648\u0644\u06cc\u0646 \u0628\u0631\u06af\u0631\u062f\u0627\u0646\u062f \u0686\u0631\u0627 \u06a9\u0647 \u062a\u0627\u0628\u0639 \u0641\u0631\u0627\u062e\u0648\u0627\u0646\u06cc\u200c\u0634\u062f\u0647 ()JAccess::check \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0633\u062a \u0645\u0642\u062f\u0627\u0631 \u062a\u0647\u06cc \u0628\u0631\u06af\u0631\u062f\u0627\u0646\u062f. \u067e\u0633 \u0627\u0632 \u0627\u06cc\u062c\u0627\u062f \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a\u060c \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646\u06cc \u06a9\u0647 \u0628\u0647 \u0628\u0627\u0632\u06af\u0631\u062f\u0627\u0646\u062f\u0646 \u0645\u0642\u062f\u0627\u0631 \u062a\u0647\u06cc \u0646\u06cc\u0627\u0632 \u062f\u0627\u0631\u0646\u062f\u060c \u0628\u0627\u06cc\u062f \u0627\u0632 \u062a\u0627\u0628\u0639 ()JAccess::check \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u0646\u062f.", "url": "https://t.me/KaitNews/1665"}], "metrics": {"as_of": "2026-11-12T20:55:01.743Z", "anchors": {"origin": {"timestamp": "2016-12-05T00:00:00Z", "date_only": false, "value": "2016-12-05T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2016-9836", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2016-12-05T00:00:00Z", "date_only": false, "value": "2016-12-05T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2016-9836", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2017-07-11T02:04:41Z", "date_only": false, "value": "2017-07-11T02:04:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingPublicoficial/162", "record": "CVE-2016-9836", "field": "creation_timestamp", "uuid": "c5611a5c-0a2a-4105-8294-0d4e6aa48c98", "content": "Best Exploits\n\nphpMoAdmin Remote Code Execution (CVE-2015-2208)\nLotusCMS Remote Code Execution (OSVDB-75095)\nElasticSearch Remote Code Execution (CVE-2015-1427)\nShellShock (httpd) Remote Code Execution (CVE-2014-6271)\nIISlap - http.sys Denial of Service/RCE PoC (DoS only). (MS-15-034)\nse0wned - Seowintech Router diagnostic.cgi remote root\nWPsh0pwn - Wordpress WPShop eCommerce Shell Upload (WPVDB-7830)\nnmediapwn - Wordpress N-Media Website Contact Form with File Upload 1.3.4 Shell Upload\npwnflow - Wordpress Work the flow file upload 2.5.2 Shell Upload\ndelusions - Wordpress InfusionSoft Gravity Forms Shell Upload (CVE-2014-6446)\nsuiteshell - SuiteCRM Post-Auth Remote Code Execution (CVE-2015-NOTYET)\nsuiteracer - SuiteCRM Post-Auth Remote Code Execution Race Condition (CVE-2015-xxxx)\nunsanitary - Address Sanitizer + Setuid Binary = Local Root exploit (LD_PRELOAD vector)\nDiamondFox - DiamondFox Botnet C&C Panel Shell Upload\nDoubtfullyMalignant - BenignCertain DoS PoC\nTorCT-Shell - TorCT RAT C&C Panel Shell Upload\nvBullshit - vBulletin 5.x.x unserialize() Remote Code Execution (CVE-2015-7808)\nXanity-Shell - Xanity RAT C&C Panel Shell Upload\nJoomraa - PoC + upload blacklist bypass (CVE-2016-8869, CVE-2016-8870, CVE-2016-9836)\nDeathsize - LifeSize Room remote code execution & local root exploit\nAssetExploder - ManageEngine Asset Explorer remote code execution\nDroppleGanger - Droppler <= 1.6.5 Auth-Bypass & RCE\ntr-06fail - TR-064 Misimplementations leading to remote device takeover in ZyXEL Routers\nscreen2root - Screen 4.05.00 (CVE-2017-5618) local privesc\nFreeACS-Pwn - TR-069 exploit for FreeACS server, disclosed at BSides Edinburgh.\nJoomblah - Joomla 3.7.0 SQL Injection exploit (CVE-2017-8917)\npisspoorpool - Local file inclusion exploit for p2pool status page\nwipgpwn - Remote Root Exploit for WePresent WiPG-1000,1500,2000 devices\nTBA\n\nLink:\n\nhttps://github.com/XiphosResearch/exploits https://www.facebook.com/1656611301265857/posts/1887994441460874", "url": "https://t.me/HackingPublicoficial/162", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 18842681.0, "hours": 5234.078055555556, "days": 218.08658564814814, "min_seconds": 18756281.0, "max_seconds": 18842681.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2016-12-05T00:00:00Z", "date_only": false, "value": "2016-12-05T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2016-9836", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2017-07-11T02:04:41Z", "date_only": false, "value": "2017-07-11T02:04:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingPublicoficial/162", "record": "CVE-2016-9836", "field": "creation_timestamp", "uuid": "c5611a5c-0a2a-4105-8294-0d4e6aa48c98", "content": "Best Exploits\n\nphpMoAdmin Remote Code Execution (CVE-2015-2208)\nLotusCMS Remote Code Execution (OSVDB-75095)\nElasticSearch Remote Code Execution (CVE-2015-1427)\nShellShock (httpd) Remote Code Execution (CVE-2014-6271)\nIISlap - http.sys Denial of Service/RCE PoC (DoS only). (MS-15-034)\nse0wned - Seowintech Router diagnostic.cgi remote root\nWPsh0pwn - Wordpress WPShop eCommerce Shell Upload (WPVDB-7830)\nnmediapwn - Wordpress N-Media Website Contact Form with File Upload 1.3.4 Shell Upload\npwnflow - Wordpress Work the flow file upload 2.5.2 Shell Upload\ndelusions - Wordpress InfusionSoft Gravity Forms Shell Upload (CVE-2014-6446)\nsuiteshell - SuiteCRM Post-Auth Remote Code Execution (CVE-2015-NOTYET)\nsuiteracer - SuiteCRM Post-Auth Remote Code Execution Race Condition (CVE-2015-xxxx)\nunsanitary - Address Sanitizer + Setuid Binary = Local Root exploit (LD_PRELOAD vector)\nDiamondFox - DiamondFox Botnet C&C Panel Shell Upload\nDoubtfullyMalignant - BenignCertain DoS PoC\nTorCT-Shell - TorCT RAT C&C Panel Shell Upload\nvBullshit - vBulletin 5.x.x unserialize() Remote Code Execution (CVE-2015-7808)\nXanity-Shell - Xanity RAT C&C Panel Shell Upload\nJoomraa - PoC + upload blacklist bypass (CVE-2016-8869, CVE-2016-8870, CVE-2016-9836)\nDeathsize - LifeSize Room remote code execution & local root exploit\nAssetExploder - ManageEngine Asset Explorer remote code execution\nDroppleGanger - Droppler <= 1.6.5 Auth-Bypass & RCE\ntr-06fail - TR-064 Misimplementations leading to remote device takeover in ZyXEL Routers\nscreen2root - Screen 4.05.00 (CVE-2017-5618) local privesc\nFreeACS-Pwn - TR-069 exploit for FreeACS server, disclosed at BSides Edinburgh.\nJoomblah - Joomla 3.7.0 SQL Injection exploit (CVE-2017-8917)\npisspoorpool - Local file inclusion exploit for p2pool status page\nwipgpwn - Remote Root Exploit for WePresent WiPG-1000,1500,2000 devices\nTBA\n\nLink:\n\nhttps://github.com/XiphosResearch/exploits https://www.facebook.com/1656611301265857/posts/1887994441460874", "url": "https://t.me/HackingPublicoficial/162", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 313620901.743635, "hours": 87116.91715100972, "days": 3629.8715479587386, "min_seconds": 313534501.743635, "max_seconds": 313620901.743635, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2016-12-05T00:00:00Z", "date_only": false, "value": "2016-12-05T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2016-9836", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-12T20:55:01.743Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 294778220.743635, "hours": 81882.83909545417, "days": 3411.7849623105903, "min_seconds": 294778220.743635, "max_seconds": 294778220.743635, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2017-07-11T02:04:41Z", "date_only": false, "value": "2017-07-11T02:04:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingPublicoficial/162", "record": "CVE-2016-9836", "field": "creation_timestamp", "uuid": "c5611a5c-0a2a-4105-8294-0d4e6aa48c98", "content": "Best Exploits\n\nphpMoAdmin Remote Code Execution (CVE-2015-2208)\nLotusCMS Remote Code Execution (OSVDB-75095)\nElasticSearch Remote Code Execution (CVE-2015-1427)\nShellShock (httpd) Remote Code Execution (CVE-2014-6271)\nIISlap - http.sys Denial of Service/RCE PoC (DoS only). (MS-15-034)\nse0wned - Seowintech Router diagnostic.cgi remote root\nWPsh0pwn - Wordpress WPShop eCommerce Shell Upload (WPVDB-7830)\nnmediapwn - Wordpress N-Media Website Contact Form with File Upload 1.3.4 Shell Upload\npwnflow - Wordpress Work the flow file upload 2.5.2 Shell Upload\ndelusions - Wordpress InfusionSoft Gravity Forms Shell Upload (CVE-2014-6446)\nsuiteshell - SuiteCRM Post-Auth Remote Code Execution (CVE-2015-NOTYET)\nsuiteracer - SuiteCRM Post-Auth Remote Code Execution Race Condition (CVE-2015-xxxx)\nunsanitary - Address Sanitizer + Setuid Binary = Local Root exploit (LD_PRELOAD vector)\nDiamondFox - DiamondFox Botnet C&C Panel Shell Upload\nDoubtfullyMalignant - BenignCertain DoS PoC\nTorCT-Shell - TorCT RAT C&C Panel Shell Upload\nvBullshit - vBulletin 5.x.x unserialize() Remote Code Execution (CVE-2015-7808)\nXanity-Shell - Xanity RAT C&C Panel Shell Upload\nJoomraa - PoC + upload blacklist bypass (CVE-2016-8869, CVE-2016-8870, CVE-2016-9836)\nDeathsize - LifeSize Room remote code execution & local root exploit\nAssetExploder - ManageEngine Asset Explorer remote code execution\nDroppleGanger - Droppler <= 1.6.5 Auth-Bypass & RCE\ntr-06fail - TR-064 Misimplementations leading to remote device takeover in ZyXEL Routers\nscreen2root - Screen 4.05.00 (CVE-2017-5618) local privesc\nFreeACS-Pwn - TR-069 exploit for FreeACS server, disclosed at BSides Edinburgh.\nJoomblah - Joomla 3.7.0 SQL Injection exploit (CVE-2017-8917)\npisspoorpool - Local file inclusion exploit for p2pool status page\nwipgpwn - Remote Root Exploit for WePresent WiPG-1000,1500,2000 devices\nTBA\n\nLink:\n\nhttps://github.com/XiphosResearch/exploits https://www.facebook.com/1656611301265857/posts/1887994441460874", "url": "https://t.me/HackingPublicoficial/162", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-12T20:55:01.743Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}