{"metadata": {"vulnerability": "CVE-2017-3066", "count": 75, "kinds": {"milestone": 5, "sighting": 35, "kev": 11, "other": 24}, "linked_omitted": 0}, "data": [{"timestamp": "2016-12-02T00:00:00Z", "date_only": false, "value": "2016-12-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2017-3066", "field": "cveMetadata.dateReserved"}, {"timestamp": "2017-04-25T22:00:00Z", "date_only": false, "value": "2017-04-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0433", "record": "WID-SEC-W-2025-0433", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2017-04-25T22:00:00Z", "date_only": false, "value": "2017-04-25T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0433", "record": "WID-SEC-W-2025-0433", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2017-04-25T22:00:00Z", "date_only": false, "value": "2017-04-25T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0433", "record": "WID-SEC-W-2025-0433", "field": "vulnerabilities.1.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2017-04-26T00:00:00Z", "date_only": false, "value": "2017-04-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2017-AVI-130", "record": "CERTFR-2017-AVI-130", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2017-04-27T00:00:00Z", "date_only": false, "value": "2017-04-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / adobe", "record": "CVE-2017-3066", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2017-04-27T00:00:00Z", "date_only": true, "value": "2017-04-27", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2017-06457", "record": "CNVD-2017-06457", "field": "submitTime", "linked_record": true}, {"timestamp": "2017-04-27T14:00:00Z", "date_only": false, "value": "2017-04-27T14:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2017-3066", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2017-04-27T14:59:00Z", "date_only": false, "value": "2017-04-27T14:59:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7CC9-8VJG-GPP8", "record": "GHSA-7CC9-8VJG-GPP8", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2017-04-27T14:59:00Z", "date_only": false, "value": "2017-04-27T14:59Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2017-3066", "record": "GSD-2017-3066", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2017-04-27T14:59:00.233Z", "date_only": false, "value": "2017-04-27T14:59:00.233", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-3066", "record": "FKIE_CVE-2017-3066", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2017-05-14T00:00:00Z", "date_only": true, "value": "2017-05-14", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2017-06457", "record": "CNVD-2017-06457", "field": "openTime", "linked_record": true}, {"timestamp": "2018-02-08T23:00:00Z", "date_only": false, "value": "2018-02-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0433", "record": "WID-SEC-W-2025-0433", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2018-02-09T10:57:01Z", "date_only": false, "value": "2018-02-09T10:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / adobe", "record": "CVE-2017-3066", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-09-04T14:09:00Z", "date_only": false, "value": "2020-09-04T14:09Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2017-3066", "record": "GSD-2017-3066", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2020-10-09T16:13:18Z", "date_only": false, "value": "2020-10-09T16:13:18.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5418d4ce-3a6c-4b8d-b61f-aa38b37bd843", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "066b94af-6847-4db8-9cd7-86098b82058d"}, {"timestamp": "2022-05-13T01:17:39Z", "date_only": false, "value": "2022-05-13T01:17:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7CC9-8VJG-GPP8", "record": "GHSA-7CC9-8VJG-GPP8", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-12-13T01:21:16.677Z", "date_only": false, "value": "2023-12-13T01:21:16.677430Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2017-3066", "record": "GSD-2017-3066", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-05T14:16:27.674Z", "date_only": false, "value": "2024-08-05T14:16:27.674Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2017-3066", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2017-3066", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1c90cdc8-4615-4751-8b6b-6f55ed643d9a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2017-3066", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "cb71dbdf-5aeb-4690-8e3d-ed08c0d24315", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": true, "value": "2025-02-24", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2017-3066", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2017-3066", "field": "evidence.0.details.added_date", "uuid": "cb71dbdf-5aeb-4690-8e3d-ed08c0d24315", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": true, "value": "2025-02-24", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2017-3066", "field": "evidence.0.details.date_added", "uuid": "1c90cdc8-4615-4751-8b6b-6f55ed643d9a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2017-3066", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1c90cdc8-4615-4751-8b6b-6f55ed643d9a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2017-3066", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "cb71dbdf-5aeb-4690-8e3d-ed08c0d24315", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2017-3066", "field": "status.status_updated_at", "uuid": "1c90cdc8-4615-4751-8b6b-6f55ed643d9a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2017-3066", "field": "status.status_updated_at", "uuid": "cb71dbdf-5aeb-4690-8e3d-ed08c0d24315", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2017-3066", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2017-3066 added to CISA KEV"}, {"timestamp": "2025-02-24T15:18:37.932Z", "date_only": false, "value": "2025-02-24T15:18:37.932324Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2017-3066", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-24T15:18:37.932Z", "date_only": false, "value": "2025-02-24T15:18:37.932324Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-3066", "record": "FKIE_CVE-2017-3066", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-02-24T15:27:38Z", "date_only": false, "value": "2025-02-24T15:27:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5141", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "e67a0f4a-3b27-4e7f-99f3-369779951650", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2017-3066\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution.\n\ud83d\udccf Published: 2017-04-27T14:00:00.000Z\n\ud83d\udccf Modified: 2025-02-24T15:18:40.638Z\n\ud83d\udd17 References:\n1. https://www.exploit-db.com/exploits/43993/\n2. https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html\n3. http://www.securityfocus.com/bid/98003\n4. http://www.securitytracker.com/id/1038364", "url": "https://t.me/DarkWebInformer_CVEAlerts/5141", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-24T18:10:02Z", "date_only": false, "value": "2025-02-24T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "14448284-41d8-4b30-b2ea-d88bbf431483"}, {"timestamp": "2025-02-24T18:53:19.649Z", "date_only": false, "value": "2025-02-24T18:53:19.649803Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3416269", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "672f5114-a07e-46f7-93eb-e0b3f4a59de6", "url": "https://feedsin.space/feed/CISAKevBot/items/3416269"}, {"timestamp": "2025-02-24T18:57:54.344Z", "date_only": false, "value": "2025-02-24T18:57:54.344058Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3liwzpi46rk2a", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "fe9ca74d-dfb1-42bb-9f3d-4b8560b1d230", "url": "https://bsky.app/profile/aakl.bsky.social/post/3liwzpi46rk2a"}, {"timestamp": "2025-02-24T19:18:50.165Z", "date_only": false, "value": "2025-02-24T19:18:50.165005Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3lix2uw7lcl2v", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "f8b8abff-0e1f-4c6e-8fb4-0d688f1a9780", "url": "https://bsky.app/profile/potato.software/post/3lix2uw7lcl2v"}, {"timestamp": "2025-02-24T20:43:12.457Z", "date_only": false, "value": "2025-02-24T20:43:12.457456Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lix7lrhbu22n", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "c2fda6d1-856b-4017-9590-e3fa2a7eaec1", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lix7lrhbu22n"}, {"timestamp": "2025-02-24T20:51:00.971Z", "date_only": false, "value": "2025-02-24T20:51:00.971089Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lix7zqqfve27", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "d9f7e40f-92b5-47d4-9861-68f6ac9b3d95", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3lix7zqqfve27"}, {"timestamp": "2025-02-24T23:00:00Z", "date_only": false, "value": "2025-02-24T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0433", "record": "WID-SEC-W-2025-0433", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2025-02-24T23:00:00Z", "date_only": false, "value": "2025-02-24T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0433", "record": "WID-SEC-W-2025-0433", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-02-25T03:10:00Z", "date_only": false, "value": "2025-02-25T03:10:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/02/two-actively-exploited-security-flaws.html", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "6a8ff6c0-20c1-4740-acf6-c2ba5ed0ef0f", "url": "https://thehackernews.com/2025/02/two-actively-exploited-security-flaws.html"}, {"timestamp": "2025-02-25T05:02:54.249Z", "date_only": false, "value": "2025-02-25T05:02:54.249017Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3liy3jcrzd724", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "bef3439a-27ce-438c-a079-bcdc487b1ffd", "url": "https://bsky.app/profile/hackingne.ws/post/3liy3jcrzd724"}, {"timestamp": "2025-02-25T05:18:25Z", "date_only": false, "value": "2025-02-25T05:18:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6392", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "0b3623ae-00b8-4468-8f75-c9a4a4eba2eb", "content": "\ud83d\uded1 CISA has warned about two vulnerabilities: CVE-2017-3066 and CVE-2024-20953. Despite patches being available, they're flagged due to continued exploitation risks.\n\n\ud83d\udd17 Read the full article: https://thehackernews.com/2025/02/two-actively-exploited-security-flaws.html", "url": "https://t.me/thehackernews/6392", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-25T06:26:10Z", "date_only": false, "value": "2025-02-25T06:26:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/P05abIsgFcOMwF0xKLcD_WUydryjDXXb5zsZyzBAL13VrQ", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "074ab605-5bbc-40f1-bae0-0166634ff23d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-25T09:44:49.893Z", "date_only": false, "value": "2025-02-25T09:44:49.893546Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liylakrh2c72", "record": "cve-2017-3066", "field": "creation_timestamp", "uuid": "8bd9951d-604e-4ecc-9985-06f60ef165f4", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liylakrh2c72"}, {"timestamp": "2025-02-25T11:42:46Z", "date_only": false, "value": "2025-02-25T11:42:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/02/25/two-actively-exploited-security-flaws.html", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "745ac84d-8723-4462-9162-aa24716e0c99", "url": "https://threatintel.cc/2025/02/25/two-actively-exploited-security-flaws.html"}, {"timestamp": "2025-02-25T12:08:08.809Z", "date_only": false, "value": "2025-02-25T12:08:08.809137Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liyt4hbnjok2", "record": "cve-2017-3066", "field": "creation_timestamp", "uuid": "ad2d9be0-fa7a-426e-ae7f-bb469e2404f5", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liyt4hbnjok2"}, {"timestamp": "2025-02-25T12:08:26.552Z", "date_only": false, "value": "2025-02-25T12:08:26.552+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0433", "record": "WID-SEC-W-2025-0433", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-02-25T12:25:32Z", "date_only": false, "value": "2025-02-25T12:25:32.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/QbIF-1r2XDcTtDEBPuWiCQ3VauntzEArXLtEMmzy4Zg7wrg", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "741a934c-02f8-4d8b-ba19-4e56ed13b090"}, {"timestamp": "2025-02-25T21:02:03.042Z", "date_only": false, "value": "2025-02-25T21:02:03.042381Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lizr4f4q7n2p", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "3ec0189a-f227-479e-b4e8-be7729c032a5", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lizr4f4q7n2p"}, {"timestamp": "2025-02-26T14:07:38.375Z", "date_only": false, "value": "2025-02-26T14:07:38.375037Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lj3jybzwlsh2", "record": "cve-2017-3066", "field": "creation_timestamp", "uuid": "d53cf69e-10d3-4eb9-84e7-89042228495a", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lj3jybzwlsh2"}, {"timestamp": "2025-02-27T06:11:04.688Z", "date_only": false, "value": "2025-02-27T06:11:04.688584Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lj5aa2w6ryy2", "record": "cve-2017-3066", "field": "creation_timestamp", "uuid": "7d6be8ec-7a28-4aff-9abf-c369ecbdf00c", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lj5aa2w6ryy2"}, {"timestamp": "2025-02-27T12:17:12.335Z", "date_only": false, "value": "2025-02-27T12:17:12.335325Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lj5umyjk2ck2", "record": "cve-2017-3066", "field": "creation_timestamp", "uuid": "f5dce27b-7499-4a35-b92b-9d026619f69e", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lj5umyjk2ck2"}, {"timestamp": "2025-02-27T12:47:55.741Z", "date_only": false, "value": "2025-02-27T12:47:55.741171Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lj5wgfi3ssy2", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "6c5214d9-ee89-472e-811d-2d1c6fd586fc", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lj5wgfi3ssy2"}, {"timestamp": "2025-02-28T06:31:24.202Z", "date_only": false, "value": "2025-02-28T06:31:24.202545Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lj7rtxlckjq2", "record": "cve-2017-3066", "field": "creation_timestamp", "uuid": "b9715967-f71d-4433-ab2b-ba76717f15ad", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lj7rtxlckjq2"}, {"timestamp": "2025-02-28T07:35:35.798Z", "date_only": false, "value": "2025-02-28T07:35:35.798979Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lj7veefhdpq2", "record": "cve-2017-3066", "field": "creation_timestamp", "uuid": "1ea68be8-80ca-42db-9684-d9afc882e57a", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lj7veefhdpq2"}, {"timestamp": "2025-02-28T08:21:17.532Z", "date_only": false, "value": "2025-02-28T08:21:17.532120Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lj7xswkruyq2", "record": "cve-2017-3066", "field": "creation_timestamp", "uuid": "82eaaf3f-5230-4fc9-90b9-113c78f598d5", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lj7xswkruyq2"}, {"timestamp": "2025-02-28T09:03:20.480Z", "date_only": false, "value": "2025-02-28T09:03:20.480052Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lja2cx65pnw2", "record": "cve-2017-3066", "field": "creation_timestamp", "uuid": "bdd91fe5-4ea1-4ed9-838d-534165741f20", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lja2cx65pnw2"}, {"timestamp": "2025-03-02T17:57:01.545Z", "date_only": false, "value": "2025-03-02T17:57:01.545158Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljfyzpvia332", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "1d8e7f10-4046-4d33-825b-47de8b2b7540", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljfyzpvia332"}, {"timestamp": "2025-03-06T04:40:21Z", "date_only": false, "value": "2025-03-06T04:40:21.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "cef2600c-acef-44b7-becc-ddaeebcb63b3"}, {"timestamp": "2025-03-17T00:00:00Z", "date_only": true, "value": "2025-03-17", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2017-3066", "field": "evidence.0.details.due_date", "uuid": "1c90cdc8-4615-4751-8b6b-6f55ed643d9a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-08-18T18:30:59Z", "date_only": false, "value": "2025-08-18T18:30:59.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "0c9db658-218b-47b0-bf70-665ce2fbef0f"}, {"timestamp": "2025-10-21T23:55:41.607Z", "date_only": false, "value": "2025-10-21T23:55:41.607Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2017-3066", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:55:41.607Z", "date_only": false, "value": "2025-10-21T23:55:41.607Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2017-3066", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:21Z", "date_only": false, "value": "2025-10-22T00:31:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7CC9-8VJG-GPP8", "record": "GHSA-7CC9-8VJG-GPP8", "field": "modified", "linked_record": true}, {"timestamp": "2026-02-02T12:26:12.578Z", "date_only": false, "value": "2026-02-02T12:26:12.578065Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1c90cdc8-4615-4751-8b6b-6f55ed643d9a", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "765026e9-cd80-4a37-8c96-7b13fc6c245f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1c90cdc8-4615-4751-8b6b-6f55ed643d9a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T01:17:26.550Z", "date_only": false, "value": "2026-06-17T01:17:26.550", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-3066", "record": "FKIE_CVE-2017-3066", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:26.835Z", "date_only": false, "value": "2026-06-19T12:46:26.835949Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/66683b50-f2b1-456b-b7a3-0824ac63b853", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "d0bde128-31ac-422d-b621-797fa6bad0c1", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/66683b50-f2b1-456b-b7a3-0824ac63b853", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2017-3066", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "cb71dbdf-5aeb-4690-8e3d-ed08c0d24315", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:06:05.429Z", "date_only": false, "value": "2026-06-23T14:06:05.429369Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cb71dbdf-5aeb-4690-8e3d-ed08c0d24315", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "a7400594-575c-405f-9043-73c65c4db8f4", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cb71dbdf-5aeb-4690-8e3d-ed08c0d24315", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-25T15:00:17.279Z", "date_only": false, "value": "2026-07-25T15:00:17.279824Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/436", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "fd90c0cb-0234-4763-8c47-ee39942de3dd", "content": "\u0417\u0430\u0431\u044b\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044e\u0442\u0441\u044f \u0432 \u0430\u0440\u0441\u0435\u043d\u0430\u043b \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432\n\n\u26a0\ufe0f CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Adobe ColdFusion \u0438 Oracle Agile PLM \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0431\u0440\u0435\u0448\u0435\u0439 KEV. \u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 (CVE-2017-3066) \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0441 2017 \u0433\u043e\u0434\u0430, \u043d\u043e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043d\u0435\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\ud83d\udd13 \u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b. \u0420\u0430\u043d\u0435\u0435 \u0432 2024 \u0433\u043e\u0434\u0443 \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 Oracle Agile PLM \u0447\u0435\u0440\u0435\u0437 \u0434\u0440\u0443\u0433\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u043a \u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0443.\n\n\u23f0 \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u043c \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430\u043c \u0421\u0428\u0410 \u043f\u0440\u0435\u0434\u043f\u0438\u0441\u0430\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043e 17 \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u0436\u0435 \u0441\u0442\u0430\u0440\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 \u043d\u0435\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #ColdFusion #Oracle #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/436"}, {"timestamp": "2026-08-04T13:00:10.019Z", "date_only": false, "value": "2026-08-04T13:00:10.019336Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/309", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "c1ef87b7-873a-4477-a8fd-fa3821100036", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-1128 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Everest Forms \u0434\u043b\u044f WordPress, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u0430 \u0444\u0430\u0439\u043b\u0430 \u0438 \u043f\u0443\u0442\u0438 \u043a \u043d\u0435\u043c\u0443 \u0432 \u043c\u0435\u0442\u043e\u0434\u0435 format \u043a\u043b\u0430\u0441\u0441\u0430 EVF_Form_Fields_Upload. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0430\u0439\u0442, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u0434, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 wp-config.php.\n\n\ud83d\udd35CVE-2017-3066 \u0438 CVE-2024-20953 \u2014 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Adobe ColdFusion \u0438 Oracle Agile PLM, \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 CISA \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a \u043d\u0438\u043c \u0432\u044b\u0448\u043b\u0438 \u0432 2017 \u0438 2024 \u0433\u043e\u0434\u0430\u0445 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e. \u041e\u0434\u043d\u0430\u043a\u043e, \u043a\u0430\u043a \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u043d\u0435\u0440\u0435\u0434\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u043d\u0435\u0431\u0440\u0435\u0433\u0430\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0442\u0430\u0440\u044b\u0435 CVE.\n\n\ud83d\udd35CVE-2023-20198 \u0438 CVE-2018-0171 \u2014 \u044f \u0443\u0436\u0435 \u043f\u0438\u0441\u0430\u043b \u043f\u0440\u043e \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco IOS XE \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0435 \u043e\u0442 18 \u0444\u0435\u0432\u0440\u0430\u043b\u044f. \u0421\u0442\u043e\u0438\u0442 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044c \u0438\u0445 \u0435\u0449\u0435 \u0440\u0430\u0437, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 GreyNoise \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u0441\u0432\u0435\u0436\u0438\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \n\n\ud83d\udd35CVE-2025\u201327364 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MITRE Caldera, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0435\u0439 \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0432 Caldera Manx \u0438 Sandcat. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0433\u0434\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0430 Caldera.\n\n\ud83d\udd35CVE-2025-20051, CVE-2025-24490, CVE-2025-25279 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Mattermost, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c SQLi-\u0430\u0442\u0430\u043a\u0438, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c. \u0417\u043d\u0430\u044e, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u043e\u0442 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440, \u0442\u0430\u043a \u0447\u0442\u043e \u043d\u0430\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d Mattermost Boards \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 9.0.5.\n\n#blue_team #CVE_\u0434\u043d\u044f", "url": "https://t.me/purp_sec/309"}, {"timestamp": "2026-08-06T04:00:04.611Z", "date_only": false, "value": "2026-08-06T04:00:04.611481Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/436", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "a36ad4f8-a88c-4d11-9f19-6cfcbd07bcce", "content": "\u0417\u0430\u0431\u044b\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044e\u0442\u0441\u044f \u0432 \u0430\u0440\u0441\u0435\u043d\u0430\u043b \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432\n\n\u26a0\ufe0f CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Adobe ColdFusion \u0438 Oracle Agile PLM \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0431\u0440\u0435\u0448\u0435\u0439 KEV. \u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 (CVE-2017-3066) \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0441 2017 \u0433\u043e\u0434\u0430, \u043d\u043e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043d\u0435\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\ud83d\udd13 \u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b. \u0420\u0430\u043d\u0435\u0435 \u0432 2024 \u0433\u043e\u0434\u0443 \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 Oracle Agile PLM \u0447\u0435\u0440\u0435\u0437 \u0434\u0440\u0443\u0433\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u043a \u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0443.\n\n\u23f0 \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u043c \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430\u043c \u0421\u0428\u0410 \u043f\u0440\u0435\u0434\u043f\u0438\u0441\u0430\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043e 17 \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u0436\u0435 \u0441\u0442\u0430\u0440\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 \u043d\u0435\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #ColdFusion #Oracle #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/436", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-05T18:00:06.346Z", "date_only": false, "value": "2026-09-05T18:00:06.346985Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wtW6bpJN7eATls7OA2vLhVZp9FPDSfjpd85Ww_IzNKkpSTY", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "e04170b9-53dd-43a7-a030-998ea57573c0", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2017-3066", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "1c90cdc8-4615-4751-8b6b-6f55ed643d9a", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-11T23:07:50.832Z", "anchors": {"origin": {"timestamp": "2017-04-25T22:00:00Z", "date_only": false, "value": "2017-04-25T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0433", "record": "WID-SEC-W-2025-0433", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2017-04-25T22:00:00Z", "date_only": false, "value": "2017-04-25T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0433", "record": "WID-SEC-W-2025-0433", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2025-02-24T15:27:38Z", "date_only": false, "value": "2025-02-24T15:27:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5141", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "e67a0f4a-3b27-4e7f-99f3-369779951650", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2017-3066\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution.\n\ud83d\udccf Published: 2017-04-27T14:00:00.000Z\n\ud83d\udccf Modified: 2025-02-24T15:18:40.638Z\n\ud83d\udd17 References:\n1. https://www.exploit-db.com/exploits/43993/\n2. https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html\n3. http://www.securityfocus.com/bid/98003\n4. http://www.securitytracker.com/id/1038364", "url": "https://t.me/DarkWebInformer_CVEAlerts/5141", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2017-3066", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1c90cdc8-4615-4751-8b6b-6f55ed643d9a", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 247197600.0, "hours": 68666.0, "days": 2861.0833333333335, "min_seconds": 247197600.0, "max_seconds": 247284000.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2017-04-25T22:00:00Z", "date_only": false, "value": "2017-04-25T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0433", "record": "WID-SEC-W-2025-0433", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2017-3066", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1c90cdc8-4615-4751-8b6b-6f55ed643d9a", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 247197600.0, "hours": 68666.0, "days": 2861.0833333333335, "min_seconds": 247197600.0, "max_seconds": 247284000.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2017-04-25T22:00:00Z", "date_only": false, "value": "2017-04-25T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0433", "record": "WID-SEC-W-2025-0433", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2017-3066", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1c90cdc8-4615-4751-8b6b-6f55ed643d9a", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 247253258.0, "hours": 68681.46055555556, "days": 2861.727523148148, "min_seconds": 247253258.0, "max_seconds": 247253258.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2017-04-25T22:00:00Z", "date_only": false, "value": "2017-04-25T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0433", "record": "WID-SEC-W-2025-0433", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2025-02-24T15:27:38Z", "date_only": false, "value": "2025-02-24T15:27:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5141", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "e67a0f4a-3b27-4e7f-99f3-369779951650", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2017-3066\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution.\n\ud83d\udccf Published: 2017-04-27T14:00:00.000Z\n\ud83d\udccf Modified: 2025-02-24T15:18:40.638Z\n\ud83d\udd17 References:\n1. https://www.exploit-db.com/exploits/43993/\n2. https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html\n3. http://www.securityfocus.com/bid/98003\n4. http://www.securitytracker.com/id/1038364", "url": "https://t.me/DarkWebInformer_CVEAlerts/5141", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 301280870.832107, "hours": 83689.13078669639, "days": 3487.0471161123496, "min_seconds": 301280870.832107, "max_seconds": 301280870.832107, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2017-04-25T22:00:00Z", "date_only": false, "value": "2017-04-25T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0433", "record": "WID-SEC-W-2025-0433", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-11T23:07:50.832Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 54083270.832107, "hours": 15023.130786696389, "days": 625.9637827790162, "min_seconds": 53996870.832107, "max_seconds": 54083270.832107, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2017-3066", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1c90cdc8-4615-4751-8b6b-6f55ed643d9a", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-11T23:07:50.832Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 54027612.832107, "hours": 15007.670231140833, "days": 625.3195929642014, "min_seconds": 54027612.832107, "max_seconds": 54027612.832107, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-24T15:27:38Z", "date_only": false, "value": "2025-02-24T15:27:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5141", "record": "CVE-2017-3066", "field": "creation_timestamp", "uuid": "e67a0f4a-3b27-4e7f-99f3-369779951650", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2017-3066\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution.\n\ud83d\udccf Published: 2017-04-27T14:00:00.000Z\n\ud83d\udccf Modified: 2025-02-24T15:18:40.638Z\n\ud83d\udd17 References:\n1. https://www.exploit-db.com/exploits/43993/\n2. https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html\n3. http://www.securityfocus.com/bid/98003\n4. http://www.securitytracker.com/id/1038364", "url": "https://t.me/DarkWebInformer_CVEAlerts/5141", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-11T23:07:50.832Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}