{"metadata": {"vulnerability": "CVE-2018-6389", "count": 48, "kinds": {"milestone": 5, "sighting": 30, "kev": 0, "other": 13}}, "data": [{"timestamp": "2018-01-29T00:00:00Z", "date_only": false, "value": "2018-01-29T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2018-6389", "field": "cveMetadata.dateReserved"}, {"timestamp": "2018-02-05T00:00:00Z", "date_only": false, "value": "2018-02-05T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2018-6389", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2018-02-06T17:00:00Z", "date_only": false, "value": "2018-02-06T17:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2018-6389", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2018-02-06T17:29:00Z", "date_only": false, "value": "2018-02-06T17:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PXCX-CPRX-MR28", "record": "GHSA-PXCX-CPRX-MR28", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2018-02-06T17:29:00Z", "date_only": false, "value": "2018-02-06T17:29:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2018-6389", "record": "UBUNTU-CVE-2018-6389", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2018-02-06T17:29:00Z", "date_only": false, "value": "2018-02-06T17:29Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2018-6389", "record": "GSD-2018-6389", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2018-02-06T17:29:00.253Z", "date_only": false, "value": "2018-02-06T17:29:00.253", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-6389", "record": "FKIE_CVE-2018-6389", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2018-02-07T00:00:00Z", "date_only": true, "value": "2018-02-07", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2018-05439", "record": "CNVD-2018-05439", "field": "submitTime", "linked_record": true}, {"timestamp": "2018-02-14T09:33:59Z", "date_only": false, "value": "2018-02-14T09:33:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/canyoupwnme/3262", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "7a6615ce-9d15-47dd-a7a7-5610731623a2", "content": "How to DoS 29% of the World Wide Websites - CVE-2018-6389\nhttps://baraktawily.blogspot.com.tr/2018/02/how-to-dos-29-of-world-wide-websites.html", "url": "https://t.me/canyoupwnme/3262", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2018-03-05T23:57:01Z", "date_only": false, "value": "2018-03-05T23:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2018-6389", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2018-03-16T00:00:00Z", "date_only": true, "value": "2018-03-16", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2018-05439", "record": "CNVD-2018-05439", "field": "openTime", "linked_record": true}, {"timestamp": "2018-04-09T06:36:01Z", "date_only": false, "value": "2018-04-09T06:36:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/codeby_sec/1344", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "c96c6958-556c-49e9-8be6-e0e486fe10b5", "content": "#pentest #vulnerability \nCVE-2018-6389 - Wordpress DOS", "url": "https://t.me/codeby_sec/1344"}, {"timestamp": "2019-03-01T19:07:00Z", "date_only": false, "value": "2019-03-01T19:07Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2018-6389", "record": "GSD-2018-6389", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2019-11-21T11:20:46Z", "date_only": false, "value": "2019-11-21T11:20:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/3397", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "e2a11053-b77b-4424-80a4-764d04e42b86", "content": "700$ Denial of Service(DoS) vulnerability in script-loader.php (CVE-2018-6389)\nhttps://www.pankajinfosec.com/post/700-denial-of-service-dos-vulnerability-in-script-loader-php-cve-2018-6389", "url": "https://t.me/thebugbountyhunter/3397", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2020-01-08T15:00:20Z", "date_only": false, "value": "2020-01-08T15:00:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/3636", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "b371e0bd-7d4e-4e67-9106-f220bd47869b", "content": "DoS of https://nordvpn(.)com/ via CVE-2018-6389 exploitation\nhttps://hackerone.com/reports/752010", "url": "https://t.me/thebugbountyhunter/3636", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2020-01-09T03:42:39Z", "date_only": false, "value": "2020-01-09T03:42:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ctinow/19162", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "3807f380-093c-4e2a-94e8-3630de5ec4d4", "content": "Ian Dunn: Dos https://iandunn.name/ via CVE-2018-6389 exploitation\n\nhttps://ift.tt/39RUzfA", "url": "https://t.me/ctinow/19162", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2020-02-18T19:22:25Z", "date_only": false, "value": "2020-02-18T19:22:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/20503", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "c6e6aa15-8ef9-4c4d-b875-6ed3d1397102", "content": "Maker Ecosystem Growth Holdings, Inc: DoS of https://ift.tt/2ilfTkR via CVE-2018-6389\n\nhttps://ift.tt/39IbsIS", "url": "https://t.me/ctinow/20503"}, {"timestamp": "2021-05-07T18:52:28Z", "date_only": false, "value": "2021-05-07T18:52:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/33097", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "99525db4-da5d-4d87-bdbe-68c6202203a2", "content": "Sifchain: Possibility of DoS attack at https://ift.tt/33ljPcB via CVE-2018-6389 exploitation\n\nhttps://ift.tt/2R5YkcK", "url": "https://t.me/ctinow/33097"}, {"timestamp": "2021-08-19T06:22:02Z", "date_only": false, "value": "2021-08-19T06:22:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/D4RKW0R1D/6418", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "e7aa46c4-3354-463f-a81c-84edac948fab", "content": "FROM INTERNET\n\n1)CVE-2018-6389 exploitation - using scripts loader\nhttps://hackerone.com/reports/925425\n\n2)No DMARC record at cordacon.com\nhttps://hackerone.com/reports/1125143\n\n3)Fortinet FortiWeb OS Command Injection\nhttps://www.rapid7.com/blog/post/2021/08/17/fortinet-fortiweb-os-command-injection/\n\n4)How I found read/write access to the personal data of 3 million users of an E-commerce website?\nhttps://medium.com/@psr595bro/how-i-found-read-write-access-to-the-personal-data-of-3-million-users-of-an-e-commerce-website-b9026b0d4bd3\n\n5)Secure Coding Handbook\nhttps://vladtoie.gitbook.io/secure-coding/\n\n6)Top 10 Kubernetes Application Security Hardening Techniques\nhttps://blog.aquasec.com/kubernetes-hardening-techniques?utm_campaign=General%20website&utm_medium=email&_hsmi=150580512&_hsenc=p2ANqtz-97I89xNVbSDmrI-6_skudpuKla-2JD0OyfIGrOQjOzHaPHKFNH-yb-vsMmjcOxUtBSOj__vlDRyYYlEdqvzg1Ujdc01w&utm_content=150580512&utm_source=hs_email\n\n7)Vulnerability Assessment I A Complete Guide\nhttps://www.hackerone.com/blog/vulnerability-assessment-i-complete-guide\n\n8)Breaking into Cybersecurity Successfully.pdf\nhttps://github.com/iamthefrogy/FYI/blob/main/Material/Breaking%20into%20Cybersecurity%20Successfully.pdf", "url": "https://t.me/D4RKW0R1D/6418", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-08-19T08:21:59Z", "date_only": false, "value": "2021-08-19T08:21:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/D4RKW0R1D/557", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "338fe254-873e-4708-85db-8b11d5d7115d", "content": "FROM INTERNET\n\n1)CVE-2018-6389 exploitation - using scripts loader\nhttps://hackerone.com/reports/925425\n\n2)No DMARC record at cordacon.com\nhttps://hackerone.com/reports/1125143\n\n3)Fortinet FortiWeb OS Command Injection\nhttps://www.rapid7.com/blog/post/2021/08/17/fortinet-fortiweb-os-command-injection/\n\n4)How I found read/write access to the personal data of 3 million users of an E-commerce website?\nhttps://medium.com/@psr595bro/how-i-found-read-write-access-to-the-personal-data-of-3-million-users-of-an-e-commerce-website-b9026b0d4bd3\n\n5)Secure Coding Handbook\nhttps://vladtoie.gitbook.io/secure-coding/\n\n6)Top 10 Kubernetes Application Security Hardening Techniques\nhttps://blog.aquasec.com/kubernetes-hardening-techniques?utm_campaign=General%20website&utm_medium=email&_hsmi=150580512&_hsenc=p2ANqtz-97I89xNVbSDmrI-6_skudpuKla-2JD0OyfIGrOQjOzHaPHKFNH-yb-vsMmjcOxUtBSOj__vlDRyYYlEdqvzg1Ujdc01w&utm_content=150580512&utm_source=hs_email\n\n7)Vulnerability Assessment I A Complete Guide\nhttps://www.hackerone.com/blog/vulnerability-assessment-i-complete-guide\n\n8)Breaking into Cybersecurity Successfully.pdf\nhttps://github.com/iamthefrogy/FYI/blob/main/Material/Breaking%20into%20Cybersecurity%20Successfully.pdf", "url": "https://t.me/D4RKW0R1D/557", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-05-14T01:29:43Z", "date_only": false, "value": "2022-05-14T01:29:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PXCX-CPRX-MR28", "record": "GHSA-PXCX-CPRX-MR28", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-05-14T01:29:43Z", "date_only": false, "value": "2022-05-14T01:29:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PXCX-CPRX-MR28", "record": "GHSA-PXCX-CPRX-MR28", "field": "modified", "linked_record": true}, {"timestamp": "2022-06-20T19:53:12Z", "date_only": false, "value": "2022-06-20T19:53:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LeakingXTeam/20993", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "5bec636b-8902-4be6-8109-53ca3dd5abb5", "content": "\ud83d\udd25 Best HQ Wordpress Exploit AiO Package \u2764\ufe0f\n\n\u2757\ufe0f NOTED : Not for Sale !!! \n\nMaybe you hard find exploit wordpress and this our channel want gift something special to everyone\nfor support our channel exploit must working with python I recommend python3 and python2 \ninstalled both in machine because tools some different coder and exploit will be needed different version 2.7 and 3\n\n\n\u26a0\ufe0f I am Not Responsible for Any Damage \u26a0\ufe0f\n\nCVE-2014-7969\nCVE-2014-9473\nCVE-2015-6522\nCVE-2016-10033\nCVE-2018-6389\nCVE-2019-20361-EXPLOIT\nCVE-2019-8942-RCE\nCVE-2020-11738\nCVE-2020-12800\nCVE-2020-24186-WordPress-wpDiscuz-7.0.4-RCE\nCVE-2021-24762\nCVE-2021-25094-tatsu-preauth-rce\nWordpress-Plugin-Spritz-RFI\nWORDPRESS-Revslider-Exploit-0DAY\nWordpress-scanner\nWordPress_4.9.8_RCE_POC\nWP-augmented-reality-RCE\nWP-Content-Injection-Exploit\nwp-file-manager-CVE-2020-25213\nwp-gravity-form-exploit\nwp-plugin-amministrazione-aperta-LFI\nWP-SMTP-0DAY\n\nDownload Here : https://t.me/hackingtoolsprvi8/2377", "url": "https://t.me/LeakingXTeam/20993", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-06-20T19:53:12Z", "date_only": false, "value": "2022-06-20T19:53:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/spammermarketool/39118", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "608eb5a5-7b68-4ca0-8a58-77855fca3ab1", "content": "\ud83d\udd25 Best HQ Wordpress Exploit AiO Package \u2764\ufe0f\n\n\u2757\ufe0f NOTED : Not for Sale !!! \n\nMaybe you hard find exploit wordpress and this our channel want gift something special to everyone\nfor support our channel exploit must working with python I recommend python3 and python2 \ninstalled both in machine because tools some different coder and exploit will be needed different version 2.7 and 3\n\n\n\u26a0\ufe0f I am Not Responsible for Any Damage \u26a0\ufe0f\n\nCVE-2014-7969\nCVE-2014-9473\nCVE-2015-6522\nCVE-2016-10033\nCVE-2018-6389\nCVE-2019-20361-EXPLOIT\nCVE-2019-8942-RCE\nCVE-2020-11738\nCVE-2020-12800\nCVE-2020-24186-WordPress-wpDiscuz-7.0.4-RCE\nCVE-2021-24762\nCVE-2021-25094-tatsu-preauth-rce\nWordpress-Plugin-Spritz-RFI\nWORDPRESS-Revslider-Exploit-0DAY\nWordpress-scanner\nWordPress_4.9.8_RCE_POC\nWP-augmented-reality-RCE\nWP-Content-Injection-Exploit\nwp-file-manager-CVE-2020-25213\nwp-gravity-form-exploit\nwp-plugin-amministrazione-aperta-LFI\nWP-SMTP-0DAY\n\nDownload Here : https://t.me/hackingtoolsprvi8/2377", "url": "https://t.me/spammermarketool/39118", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-06-20T19:53:12Z", "date_only": false, "value": "2022-06-20T19:53:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/spammerspacer/33792", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "04c6b02a-7563-4778-9640-b30fe4d3fa1f", "content": "\ud83d\udd25 Best HQ Wordpress Exploit AiO Package \u2764\ufe0f\n\n\u2757\ufe0f NOTED : Not for Sale !!! \n\nMaybe you hard find exploit wordpress and this our channel want gift something special to everyone\nfor support our channel exploit must working with python I recommend python3 and python2 \ninstalled both in machine because tools some different coder and exploit will be needed different version 2.7 and 3\n\n\n\u26a0\ufe0f I am Not Responsible for Any Damage \u26a0\ufe0f\n\nCVE-2014-7969\nCVE-2014-9473\nCVE-2015-6522\nCVE-2016-10033\nCVE-2018-6389\nCVE-2019-20361-EXPLOIT\nCVE-2019-8942-RCE\nCVE-2020-11738\nCVE-2020-12800\nCVE-2020-24186-WordPress-wpDiscuz-7.0.4-RCE\nCVE-2021-24762\nCVE-2021-25094-tatsu-preauth-rce\nWordpress-Plugin-Spritz-RFI\nWORDPRESS-Revslider-Exploit-0DAY\nWordpress-scanner\nWordPress_4.9.8_RCE_POC\nWP-augmented-reality-RCE\nWP-Content-Injection-Exploit\nwp-file-manager-CVE-2020-25213\nwp-gravity-form-exploit\nwp-plugin-amministrazione-aperta-LFI\nWP-SMTP-0DAY\n\nDownload Here : https://t.me/hackingtoolsprvi8/2377", "url": "https://t.me/spammerspacer/33792", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-06-20T20:34:58Z", "date_only": false, "value": "2022-06-20T20:34:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qA7RHbfeiqXzFaQFtQDWHegpUj17EgvuINx_Fz9sXMRGmneY", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "93d2f64e-6975-4934-a57e-f67a35b562df", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-08-25T16:41:15Z", "date_only": false, "value": "2022-08-25T16:41:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hackingtoolsprvi8/2727", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "7e6ff4a1-c9e1-4245-a1a1-e51ff5bd4220", "content": "\ud83d\udd25 Best HQ Wordpress Exploit AiO Package \u2764\ufe0f\n\n\u2757\ufe0f NOTED : Not for Sale !!! \n\nMaybe you hard find exploit wordpress and this our channel want gift something special to everyone\nfor support our channel exploit must working with python I recommend python3 and python2 \ninstalled both in machine because tools some different coder and exploit will be needed different version 2.7 and 3\n\n\n\u26a0\ufe0f I am Not Responsible for Any Damage \u26a0\ufe0f\n\nCVE-2014-7969\nCVE-2014-9473\nCVE-2015-6522\nCVE-2016-10033\nCVE-2018-6389\nCVE-2019-20361-EXPLOIT\nCVE-2019-8942-RCE\nCVE-2020-11738\nCVE-2020-12800\nCVE-2020-24186-WordPress-wpDiscuz-7.0.4-RCE\nCVE-2021-24762\nCVE-2021-25094-tatsu-preauth-rce\nWordpress-Plugin-Spritz-RFI\nWORDPRESS-Revslider-Exploit-0DAY\nWordpress-scanner\nWordPress_4.9.8_RCE_POC\nWP-augmented-reality-RCE\nWP-Content-Injection-Exploit\nwp-file-manager-CVE-2020-25213\nwp-gravity-form-exploit\nwp-plugin-amministrazione-aperta-LFI\nWP-SMTP-0DAY\n\nDownload Here : https://t.me/hackingtoolsprvi8/2377", "url": "https://t.me/hackingtoolsprvi8/2727", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-08-25T16:41:15Z", "date_only": false, "value": "2022-08-25T16:41:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/dt3wzguPwvHeMGbS-iOOUe43Y1n6HJwkKjrvq5BX_wYbkhfe", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "8eb2d19c-3ea9-4bc7-b832-6c2623a97d42", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-02-24T22:06:49Z", "date_only": false, "value": "2023-02-24T22:06:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/95558", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "532896dd-baa1-4f76-9d5d-a0d829387c9e", "content": "U.S. Dept Of Defense: DoS at \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 (CVE-2018-6389)\n\nhttps://ift.tt/P6flUKv", "url": "https://t.me/ctinow/95558"}, {"timestamp": "2023-03-24T20:36:45Z", "date_only": false, "value": "2023-03-24T20:36:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/101392", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "237ca0ee-d0c6-4c5a-ba9a-30f9d183beee", "content": "U.S. Dept Of Defense: DoS at \u2588\u2588\u2588\u2588\u2588(CVE-2018-6389)\n\nhttps://ift.tt/w12JF0G", "url": "https://t.me/ctinow/101392"}, {"timestamp": "2023-04-20T22:06:39Z", "date_only": false, "value": "2023-04-20T22:06:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ctinow/107174", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "96b66edc-9149-4000-85d6-cc5c619057a6", "content": "Fastly VDP: CVE-2018-6389 exploitation - using scripts loader\n\nhttps://ift.tt/IAGEomv", "url": "https://t.me/ctinow/107174", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-23T21:57:13Z", "date_only": false, "value": "2023-04-23T21:57:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/640", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "83437b24-e3a3-4aa1-9cea-8a136d7869bc", "content": "https://hackerone.com/reports/690330\n\n\u042d\u0442\u043e\u0442 \u0440\u0435\u043f\u043e\u0440\u0442 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WordPress, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS) \u0441\u0430\u0439\u0442\u0430, \u0435\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 load-scripts.php \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 JavaScript-\u0444\u0430\u0439\u043b\u043e\u0432 \u0431\u0435\u0437 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043f\u043e \u0440\u0430\u0437\u043c\u0435\u0440\u0443. \u0425\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0438\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u044e \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0443 DoS \u043d\u0430 \u0441\u0430\u0439\u0442. \u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0442\u0430\u043a\u0436\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u0440 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0438 \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438, \u0433\u0434\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0434\u0430\u043d\u043d\u043e\u043c \u0442\u0438\u043f\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 WordPress. \u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c web application firewall \u0438 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c .htaccess-\u0444\u0430\u0439\u043b \u0441 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u0440\u0435\u0436\u0438\u043c\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u0443 load-scripts.php. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 Using Components with Known Vulnerabilities \u0432 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u0435 OWASP Top 10 2017. \u0412 CVE (Common Vulnerabilities and Exposures) \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2018-6389. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0441\u0430\u0439\u0442\u0430.", "url": "https://t.me/critical_bug/640", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-24T18:55:32Z", "date_only": false, "value": "2023-04-24T18:55:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/660", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "0989385a-e466-414e-864a-4448e55f3a68", "content": "https://hackerone.com/reports/694467\n\n\u042d\u0442\u043e\u0442 \u0440\u0435\u043f\u043e\u0440\u0442 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WordPress, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 JS-\u0444\u0430\u0439\u043b\u043e\u0432 \u0438 CSS-\u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0444\u0430\u0439\u043b\u044b load-scripts.php, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0438\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u044e \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS). \u0412 \u043e\u0442\u0447\u0451\u0442\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0435\u0451 \u0440\u0435\u0448\u0435\u043d\u0438\u044f. \u0422\u0430\u043a\u0436\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 OWASP 2017 \u0438 CVE-2018-6389. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 DoS \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u0430\u0439\u0442, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u0430\u0439\u0442\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0431\u0438\u0437\u043d\u0435\u0441-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432.", "url": "https://t.me/critical_bug/660"}, {"timestamp": "2023-12-13T01:22:35.243Z", "date_only": false, "value": "2023-12-13T01:22:35.243555Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2018-6389", "record": "GSD-2018-6389", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2023-12-18T00:42:09Z", "date_only": false, "value": "2023-12-18T00:42:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1873", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "82bc97a0-39a2-4e9e-8d26-2ae9f638f7e2", "content": "#ExploitObserverAlert\n\nCVE-2018-6389\n\nDESCRIPTION: Exploit Observer has 111 entries related to CVE-2018-6389. In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times.\n\nFIRST-EPSS: 0.408310000\nNVD-IS: 3.6\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1873"}, {"timestamp": "2024-02-14T08:51:19Z", "date_only": false, "value": "2024-02-14T08:51:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/184474", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "797cea27-e452-4548-9896-389a8953ba71", "content": "https://ift.tt/aKxsNc9\nPublitas: CVE-2018-6389 exploitation - using scripts loader", "url": "https://t.me/ctinow/184474"}, {"timestamp": "2024-06-02T07:46:18Z", "date_only": false, "value": "2024-06-02T07:46:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/openSource3/151", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "3ee849ad-c0ef-45f8-93ae-c4c8edc05ae9", "content": "CVE ID : CVE-2018-6389\nSystem : WordPress 4.9.2\nType : DOS\n\nExploit \n\u0637\u0631\u064a\u0642\u0629 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0628\u0641\u062f\u064a\u0648 :\nVideo", "url": "https://t.me/openSource3/151", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-06-22T09:28:36Z", "date_only": false, "value": "2024-06-22T09:28:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/55", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "7a203446-e5c2-4b09-b6ed-dac11384c89a", "content": "#exploit\n1. CVE-2018-5758:\nXXE in Jive-n 0-day\nhttps://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2018-5758\n\n2. CVE-2018-1335:\nCommand Injection in Apache Tika-server\nhttps://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2018-1335\n\n3. CVE-2018-6389:\nApache RewriteRule to mitigate potential DoS attack via Wordpress wp-admin/load-scripts.php file\nhttps://github.com/yolabingo/wordpress-fix-cve-2018-6389\n\n4. CVE-2018-12613:\nWordpress plugin Site-Editor v1.1.1 - LFI\nhttps://github.com/0x00-0x00/CVE-2018-7422", "url": "https://t.me/CyberSecurityTechnologies/55", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-05T06:01:49.194Z", "date_only": false, "value": "2024-08-05T06:01:49.194Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2018-6389", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-05T06:01:49.194Z", "date_only": false, "value": "2024-08-05T06:01:49.194Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2018-6389", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-26T11:00:52Z", "date_only": false, "value": "2024-08-26T11:00:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1469", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "9c4ce0a2-113b-4728-b388-b940bee7ebf2", "content": "[\ud83d\udd0d\ud83d\udee1\ufe0f\ud83d\udcbb] \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2018-6389 - \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432\n\n\u26a0\ufe0f \u0422\u0438\u043f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: Uncontrolled Resource Consumption\n\ud83d\udcb0 \u0411\u0430\u0443\u043d\u0442\u0438: \u043d\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u043e\n\ud83d\udcc9 \u041a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u044c: \u043d\u0438\u0437\u043a\u0430\u044f\n\n\ud83d\udd0d \u0410\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 .js \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0441\u0435\u0440\u0438\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u043a\u0430\u0436\u0434\u044b\u0439 \u0444\u0430\u0439\u043b \u043c\u043d\u043e\u0433\u043e\u043a\u0440\u0430\u0442\u043d\u043e. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043a\u0430\u043a CVE-2018-6389. \u041f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 GET-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a /wp-admin/load-scripts.php \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438, \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043e\u0431\u044a\u0435\u043c\u044b \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0438\u0441\u0442\u043e\u0449\u0435\u043d\u0438\u044e \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0412 \u0438\u0442\u043e\u0433\u0435, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430, \u0441\u0435\u0440\u0432\u0435\u0440 \u0442\u0435\u043f\u0435\u0440\u044c \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442 `406 Not Acceptable`.\n\n#ResourceConsumption #Low #SignalSciences\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0440\u0435\u043f\u043e\u0440\u0442\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435", "url": "https://t.me/critical_bug/1469", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-14T06:08:22Z", "date_only": false, "value": "2024-11-14T06:08:22.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/86d5e729-7eed-4d44-8dd6-a0944e5371e5", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "6f78fee3-b951-4f4d-a98e-064406cc95ee"}, {"timestamp": "2025-11-13T15:00:08Z", "date_only": false, "value": "2025-11-13T15:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/d8wD4nyiI6OV0OXzhOtZYCLbRAqpkWgPekubzfScCoXm1wI", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "6e47d1bf-112c-4d60-b5bc-9766807a637e", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T02:01:46.950Z", "date_only": false, "value": "2026-06-17T02:01:46.950", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-6389", "record": "FKIE_CVE-2018-6389", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-26T07:01:52.450Z", "date_only": false, "value": "2026-07-26T07:01:52.450417Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/7534", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "d3974dbb-5a35-4d26-9b60-3d93d17d77dc", "content": "\ud83d\udc68\u200d\ud83d\udcbb\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0646\u0639 \u0633\u0631\u0648\u06cc\u0633\u06cc \u06a9\u0647 \u0648\u0635\u0644\u0647 \u0646\u0634\u062f\u0647 \u0627\u0633\u062a \u0628\u0647 \u0647\u0631 \u06a9\u0633\u06cc \u0627\u0645\u06a9\u0627\u0646 \u0627\u0632 \u06a9\u0627\u0631 \u0627\u0646\u062f\u0627\u062e\u062a\u0646 \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0648\u0631\u062f\u067e\u0631\u0633 \u0631\u0627 \u0645\u06cc\u200c\u062f\u0647\u062f\n\n\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0646\u0639 \u0633\u0631\u0648\u06cc\u0633 \u0633\u0627\u062f\u0647 \u062f\u0631 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 \u062f\u0631 \u0628\u0633\u062a\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u0645\u062d\u062a\u0648\u0627 (CMS) \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0647\u0631 \u06a9\u0633\u06cc \u0627\u06cc\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0631\u0627 \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u062d\u062a\u06cc \u0628\u0627 \u06cc\u06a9 \u062f\u0633\u062a\u06af\u0627\u0647\u060c \u0648 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u067e\u0647\u0646\u0627\u06cc \u0628\u0627\u0646\u062f \u0632\u06cc\u0627\u062f\u06cc \u06a9\u0647 \u062d\u0645\u0644\u0627\u062a \u0645\u0646\u0639 \u0633\u0631\u0648\u06cc\u0633 \u062a\u0648\u0632\u06cc\u0639\u200c\u0634\u062f\u0647\u200c\u06cc \u0633\u0637\u062d \u0634\u0628\u06a9\u0647 \u0628\u0647 \u0622\u0646 \u0646\u06cc\u0627\u0632 \u062f\u0627\u0631\u0646\u062f\u060c \u0648\u0628\u200c\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0648\u0631\u062f\u067e\u0631\u0633 \u0631\u0627 \u0627\u0632 \u06a9\u0627\u0631 \u0628\u06cc\u0646\u062f\u0627\u0632\u062f.\n\u0627\u0632 \u0622\u0646\u200c\u062c\u0627 \u06a9\u0647 \u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0627\u0632 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0646 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0648\u062f\u062f\u0627\u0631\u06cc \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc (CVE-\u06f2\u06f0\u06f1\u06f8-\u06f6\u06f3\u06f8\u06f9) \u0648\u0635\u0644\u0647 \u0646\u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u062a\u0642\u0631\u06cc\u0628\u0627\u064b \u062a\u0645\u0627\u0645 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0648\u0631\u062f\u067e\u0631\u0633 \u06a9\u0647 \u062f\u0631 \u06f9 \u0633\u0627\u0644 \u06af\u0630\u0634\u062a\u0647 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u0622\u062e\u0631\u06cc\u0646 \u0646\u0633\u062e\u0647\u200c\u06cc \u067e\u0627\u06cc\u062f\u0627\u0631 \u0648\u0631\u062f\u067e\u0631\u0633 (\u0646\u0633\u062e\u0647\u200c\u064a \u06f4\u066b\u06f9\u066b\u06f2) \u0631\u0627 \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\u0628\u0647 \u0646\u0638\u0631 \u0645\u06cc\u200c\u0631\u0633\u062f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc \u0628\u0627\u0634\u062f \u0632\u06cc\u0631\u0627 \u0648\u0631\u062f\u067e\u0631\u0633 \u0646\u0632\u062f\u06cc\u06a9 \u0628\u0647 \u06f2\u06f9 \u062f\u0631\u0635\u062f \u0648\u0628 \u0631\u0627 \u062a\u0634\u06a9\u06cc\u0644 \u0645\u06cc\u200c\u062f\u0647\u062f\u060c \u0648 \u0645\u06cc\u0644\u06cc\u0648\u0646\u200c\u0647\u0627 \u0648\u0628\u200c\u06af\u0627\u0647 \u0631\u0627 \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0646\u0641\u0648\u0630\u06af\u0631\u0627\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0622\u0646\u200c\u0647\u0627 \u0631\u0627 \u0627\u0632 \u062f\u0633\u062a\u0631\u0633 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0642\u0627\u0646\u0648\u0646\u06cc \u062e\u0627\u0631\u062c \u0645\u06cc\u200c\u06a9\u0646\u062f.", "url": "https://t.me/KaitNews/7534"}, {"timestamp": "2026-09-07T20:00:03.714Z", "date_only": false, "value": "2026-09-07T20:00:03.714327Z", "kind": "sighting", "label": "Seen", "source": "Telegram/6eKPSIg_MBwqtVbSvi4h5yH150gUXx9aHGjCMtRHjPBfQAk", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "a8cb45df-b4a2-4f65-960f-38a65eff2601"}, {"timestamp": "2026-09-08T00:00:25.096Z", "date_only": false, "value": "2026-09-08T00:00:25.096937Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6eKPSIg_MBwqtVbSvi4h5yH150gUXx9aHGjCMtRHjPBfQAk", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "60649b4e-d255-49e9-b2f5-2b353ae87299", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-17T09:05:44Z", "date_only": false, "value": "2026-10-17T09:05:44Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2018-6389", "record": "UBUNTU-CVE-2018-6389", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-05T07:26:53.307Z", "anchors": {"origin": {"timestamp": "2018-02-05T00:00:00Z", "date_only": false, "value": "2018-02-05T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2018-6389", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2018-02-05T00:00:00Z", "date_only": false, "value": "2018-02-05T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2018-6389", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2019-11-21T11:20:46Z", "date_only": false, "value": "2019-11-21T11:20:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/3397", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "e2a11053-b77b-4424-80a4-764d04e42b86", "content": "700$ Denial of Service(DoS) vulnerability in script-loader.php (CVE-2018-6389)\nhttps://www.pankajinfosec.com/post/700-denial-of-service-dos-vulnerability-in-script-loader-php-cve-2018-6389", "url": "https://t.me/thebugbountyhunter/3397", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2018-02-14T09:33:59Z", "date_only": false, "value": "2018-02-14T09:33:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/canyoupwnme/3262", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "7a6615ce-9d15-47dd-a7a7-5610731623a2", "content": "How to DoS 29% of the World Wide Websites - CVE-2018-6389\nhttps://baraktawily.blogspot.com.tr/2018/02/how-to-dos-29-of-world-wide-websites.html", "url": "https://t.me/canyoupwnme/3262", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 812039.0, "hours": 225.5663888888889, "days": 9.398599537037038, "min_seconds": 725639.0, "max_seconds": 812039.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-02-05T00:00:00Z", "date_only": false, "value": "2018-02-05T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2018-6389", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2018-02-14T09:33:59Z", "date_only": false, "value": "2018-02-14T09:33:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/canyoupwnme/3262", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "7a6615ce-9d15-47dd-a7a7-5610731623a2", "content": "How to DoS 29% of the World Wide Websites - CVE-2018-6389\nhttps://baraktawily.blogspot.com.tr/2018/02/how-to-dos-29-of-world-wide-websites.html", "url": "https://t.me/canyoupwnme/3262", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 812039.0, "hours": 225.5663888888889, "days": 9.398599537037038, "min_seconds": 725639.0, "max_seconds": 812039.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-02-05T00:00:00Z", "date_only": false, "value": "2018-02-05T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2018-6389", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2018-02-14T09:33:59Z", "date_only": false, "value": "2018-02-14T09:33:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/canyoupwnme/3262", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "7a6615ce-9d15-47dd-a7a7-5610731623a2", "content": "How to DoS 29% of the World Wide Websites - CVE-2018-6389\nhttps://baraktawily.blogspot.com.tr/2018/02/how-to-dos-29-of-world-wide-websites.html", "url": "https://t.me/canyoupwnme/3262", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 56546446.0, "hours": 15707.346111111112, "days": 654.4727546296297, "min_seconds": 56460046.0, "max_seconds": 56546446.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-02-05T00:00:00Z", "date_only": false, "value": "2018-02-05T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2018-6389", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2019-11-21T11:20:46Z", "date_only": false, "value": "2019-11-21T11:20:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/3397", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "e2a11053-b77b-4424-80a4-764d04e42b86", "content": "700$ Denial of Service(DoS) vulnerability in script-loader.php (CVE-2018-6389)\nhttps://www.pankajinfosec.com/post/700-denial-of-service-dos-vulnerability-in-script-loader-php-cve-2018-6389", "url": "https://t.me/thebugbountyhunter/3397", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 276074813.307183, "hours": 76687.44814088417, "days": 3195.3103392035073, "min_seconds": 275988413.307183, "max_seconds": 276074813.307183, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-02-05T00:00:00Z", "date_only": false, "value": "2018-02-05T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2018-6389", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-05T07:26:53.307Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 275262774.307183, "hours": 76461.88175199529, "days": 3185.91173966647, "min_seconds": 275262774.307183, "max_seconds": 275262774.307183, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-02-14T09:33:59Z", "date_only": false, "value": "2018-02-14T09:33:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/canyoupwnme/3262", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "7a6615ce-9d15-47dd-a7a7-5610731623a2", "content": "How to DoS 29% of the World Wide Websites - CVE-2018-6389\nhttps://baraktawily.blogspot.com.tr/2018/02/how-to-dos-29-of-world-wide-websites.html", "url": "https://t.me/canyoupwnme/3262", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-05T07:26:53.307Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 219528367.307183, "hours": 60980.10202977306, "days": 2540.8375845738774, "min_seconds": 219528367.307183, "max_seconds": 219528367.307183, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-11-21T11:20:46Z", "date_only": false, "value": "2019-11-21T11:20:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/3397", "record": "CVE-2018-6389", "field": "creation_timestamp", "uuid": "e2a11053-b77b-4424-80a4-764d04e42b86", "content": "700$ Denial of Service(DoS) vulnerability in script-loader.php (CVE-2018-6389)\nhttps://www.pankajinfosec.com/post/700-denial-of-service-dos-vulnerability-in-script-loader-php-cve-2018-6389", "url": "https://t.me/thebugbountyhunter/3397", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-05T07:26:53.307Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}