{"metadata": {"vulnerability": "CVE-2022-24706", "count": 64, "kinds": {"milestone": 5, "sighting": 29, "kev": 11, "other": 19}}, "data": [{"timestamp": "2022-02-10T00:00:00Z", "date_only": false, "value": "2022-02-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-24706", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-04-26T00:00:00Z", "date_only": false, "value": "2022-04-26T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-24706", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-04-26T10:15:00Z", "date_only": false, "value": "2022-04-26T10:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VXC9-8M8H-9CP6", "record": "GHSA-VXC9-8M8H-9CP6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-04-26T10:15:00Z", "date_only": false, "value": "2022-04-26T10:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-24706", "record": "GSD-2022-24706", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-04-26T10:15:35.083Z", "date_only": false, "value": "2022-04-26T10:15:35.083", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24706", "record": "FKIE_CVE-2022-24706", "field": "published"}, {"timestamp": "2022-04-26T14:36:58Z", "date_only": false, "value": "2022-04-26T14:36:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/41424", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "64a33e62-1b6a-456b-9d18-0868eb96be45", "content": "\u203c CVE-2022-24706 \u203c\n\nIn Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/41424"}, {"timestamp": "2022-04-27T00:00:21Z", "date_only": false, "value": "2022-04-27T00:00:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VXC9-8M8H-9CP6", "record": "GHSA-VXC9-8M8H-9CP6", "field": "published"}, {"timestamp": "2022-04-28T00:00:00Z", "date_only": true, "value": "2022-04-28", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-41634", "record": "CNVD-2022-41634", "field": "submitTime"}, {"timestamp": "2022-04-28T17:51:45Z", "date_only": false, "value": "2022-04-28T17:51:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/9439", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "a24e2e15-e629-49a8-8576-8717a77d80fe", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 CVE-2022-24706: Apache CouchDB Remote Code Execution Vulnerability.\n\nhttps://securityonline.info/cve-2022-24706-apache-couchdb-remote-code-execution-vulnerability/", "url": "https://t.me/cKure/9439"}, {"timestamp": "2022-04-29T17:20:21Z", "date_only": false, "value": "2022-04-29T17:20:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ShlezySec_Channel/39", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "d3e5c26c-cb6e-4a49-a560-56ca691c35d4", "content": "CVE-2022-24706: \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e9\u05dc RCE \u05d1- Apache CouchDB.\n\n https://securityonline.info/cve-2022-24706-apache-couchdb-remote-code-execution-vulnerability/", "url": "https://t.me/ShlezySec_Channel/39"}, {"timestamp": "2022-05-22T07:42:51Z", "date_only": false, "value": "2022-05-22T07:42:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2091", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "ab2e2b9a-a2b4-4865-8c95-c8b8382f76a4", "content": "#exploit\nCVE-2022-24706:\nApache CouchDB RCE\n\nhttps://github.com/sadshade/CVE-2022-24706-CouchDB-Exploit\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2091"}, {"timestamp": "2022-05-22T07:43:39Z", "date_only": false, "value": "2022-05-22T07:43:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arvin_club/5463", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "d3537239-c61f-4d07-b384-eb3d12336996", "content": "https://github.com/sadshade/CVE-2022-24706-CouchDB-Exploit", "url": "https://t.me/arvin_club/5463"}, {"timestamp": "2022-05-22T13:20:17Z", "date_only": false, "value": "2022-05-22T13:20:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6052", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "b4a00d8d-fd3f-4fd6-b25a-621bdfca871a", "content": "#exploit\nCVE-2022-24706:\nApache CouchDB RCE\nhttps://github.com/sadshade/CVE-2022-24706-CouchDB-Exploit", "url": "https://t.me/CyberSecurityTechnologies/6052"}, {"timestamp": "2022-05-28T00:00:00Z", "date_only": true, "value": "2022-05-28", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-41634", "record": "CNVD-2022-41634", "field": "openTime"}, {"timestamp": "2022-07-03T09:00:52Z", "date_only": false, "value": "2022-07-03T09:00:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/1894", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "faa39726-f22e-42aa-ab8a-b59652b00ce8", "content": "Apache CouchDB 3.2.1 - Remote Code Execution (RCE) CVE-2022-24706\nhttps://github.com/XmasSnowISBACK/CVE-2022-24706\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/1894"}, {"timestamp": "2022-07-04T02:29:34Z", "date_only": false, "value": "2022-07-04T02:29:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2633", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "2090e578-076c-4a24-b6d4-94b3ee94286d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-24706 POC exploit\nURL\uff1ahttps://github.com/superzerosec/CVE-2022-24706\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2633"}, {"timestamp": "2022-07-05T06:24:51Z", "date_only": false, "value": "2022-07-05T06:24:51.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/k8m3X8YhQhkrr48KHoFrxNHe2bYjefr1euD_m-0TzPewCA", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "4e9dda2d-077e-41e8-bb66-834a44d593fe"}, {"timestamp": "2022-07-05T14:02:24Z", "date_only": false, "value": "2022-07-05T14:02:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackcodes/796", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "1363d01b-d67f-4745-8b31-10a80259d42c", "content": "Today's Update\n1. nday exploit: netgear orbi unauthenticated command injection (CVE-2020-27861)\n2. Collection of Exploits, CVES(Unauthenticated) and Wordpress Scanners\n3. CVE-2022-24706 exploit\n4. Androguard Tool - Reverse engineering and pentesting of Android applications.\n5. Amsi-Bypass-Powershell Scripts\n6. Bug-Bounty-Tips\n7. nacs - Event-driven pentest scanner\n8. Malaysia locatefamily Data leak\n9. Jaeles \u2013 The Swiss Army knife for automated Web Application Testing\n10. D(COM) V(ulnerability) S(canner) AKA Devious swiss army knife \u2013 Lateral movement using DCOM Objects\n11. Pak Military Garments Company Data dump Video\n12. CVE-2022-24342 - JetBrains TeamCity \u2013 account takeover via CSRF in GitHub authentication (PoC)\n\nLink:- https://forum.hackbyte.org", "url": "https://t.me/crackcodes/796"}, {"timestamp": "2022-08-06T00:00:00Z", "date_only": true, "value": "2022-08-06", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-60929", "record": "CNVD-2022-60929", "field": "submitTime"}, {"timestamp": "2022-08-10T19:00:04Z", "date_only": false, "value": "2022-08-10T19:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/2232", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "babc13ab-c9c7-43c2-a3ea-8f6b2384b62f", "content": "\u2060Apache CouchDB Unauthorized RCE Vulnerability (CVE-2022-24706)", "url": "https://t.me/poxek/2232"}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-24706", "field": "timestamps.asserted_at", "uuid": "e92780c3-e73f-426d-80c7-a8d18324bbe4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-24706", "field": "timestamps.asserted_at", "uuid": "f8684aab-0ffb-43f5-aff8-991234476068", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": true, "value": "2022-08-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-24706", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-24706", "field": "evidence.0.details.added_date", "uuid": "f8684aab-0ffb-43f5-aff8-991234476068", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": true, "value": "2022-08-25", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-24706", "field": "evidence.0.details.date_added", "uuid": "e92780c3-e73f-426d-80c7-a8d18324bbe4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-24706", "field": "timestamps.first_seen_at", "uuid": "e92780c3-e73f-426d-80c7-a8d18324bbe4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-24706", "field": "timestamps.first_seen_at", "uuid": "f8684aab-0ffb-43f5-aff8-991234476068", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-24706", "field": "status.status_updated_at", "uuid": "e92780c3-e73f-426d-80c7-a8d18324bbe4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-24706", "field": "status.status_updated_at", "uuid": "f8684aab-0ffb-43f5-aff8-991234476068", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-24706", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-09-15T00:00:00Z", "date_only": true, "value": "2022-09-15", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-24706", "field": "evidence.0.details.due_date", "uuid": "e92780c3-e73f-426d-80c7-a8d18324bbe4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-20T00:00:00Z", "date_only": true, "value": "2022-09-20", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-60929", "record": "CNVD-2022-60929", "field": "openTime"}, {"timestamp": "2022-11-01T18:06:49Z", "date_only": false, "value": "2022-11-01T18:06:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_couchdb_erlang_rce.rb", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "8bd64fa5-3527-429f-8758-bbfa0a1186ac", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_couchdb_erlang_rce.rb"}, {"timestamp": "2022-11-02T00:00:00Z", "date_only": false, "value": "2022-11-02T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2022-24706", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-11-21T19:28:00Z", "date_only": false, "value": "2022-11-21T19:28Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-24706", "record": "GSD-2022-24706", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "b0c0a09a-ea7c-449e-b5b0-d96d0fa9a360"}, {"timestamp": "2023-12-04T12:55:55Z", "date_only": false, "value": "2023-12-04T12:55:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1210", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "e8972d9e-3341-405f-9b8a-c71c128cbda6", "content": "#ExploitObserverAlert\n\nCVE-2022-24706\n\nDESCRIPTION: Exploit Observer has 45 entries related to CVE-2022-24706. In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.\n\nFIRST-EPSS: 0.973770000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1210"}, {"timestamp": "2023-12-13T01:19:43.281Z", "date_only": false, "value": "2023-12-13T01:19:43.281227Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-24706", "record": "GSD-2022-24706", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-06T10:51:24.067Z", "date_only": false, "value": "2024-03-06T10:51:24.067Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-COUCHDB-2022-24706", "record": "BIT-COUCHDB-2022-24706", "field": "published"}, {"timestamp": "2024-08-03T04:20:50.213Z", "date_only": false, "value": "2024-08-03T04:20:50.213Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-24706", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-13T07:24:44Z", "date_only": false, "value": "2024-12-13T07:24:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/10f82b82-84ee-4adf-8565-e0d6d034c2a3", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "917172d1-2196-489b-a3c7-1e4a786fcce5"}, {"timestamp": "2024-12-24T20:32:55.764Z", "date_only": false, "value": "2024-12-24T20:32:55.764591Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971696", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "65f5ee94-0aa2-4429-8c53-b5cc7277a496", "url": "https://feedsin.space/feed/CISAKevBot/items/2971696"}, {"timestamp": "2025-01-29T16:14:35.670Z", "date_only": false, "value": "2025-01-29T16:14:35.670152Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-24706", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-29T16:14:35.670Z", "date_only": false, "value": "2025-01-29T16:14:35.670152Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24706", "record": "FKIE_CVE-2022-24706", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "8837b533-d336-48be-ba5c-56c5036e99fc"}, {"timestamp": "2025-02-23T02:10:35Z", "date_only": false, "value": "2025-02-23T02:10:35.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "0c0f9c02-9e16-410d-b986-619fe76d54a5"}, {"timestamp": "2025-02-23T04:10:44Z", "date_only": false, "value": "2025-02-23T04:10:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "fee7bcba-634d-4bae-a7ca-3532a6e86b78"}, {"timestamp": "2025-03-08T04:34:11Z", "date_only": false, "value": "2025-03-08T04:34:11.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-8zcTreMBBldfKP1IsJnKweegQ9IWaw48gsHWa0SK0mQ-wXZ", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "bde7b499-79cc-41a2-a35f-b2cec9ddbbe8"}, {"timestamp": "2025-03-29T04:53:32Z", "date_only": false, "value": "2025-03-29T04:53:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/26563", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "a289eaad-da73-41ba-949a-38bfba23d5f6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aApache CouchDB 3.2.1 - Remote Code Execution (RCE) Checker\nURL\uff1ahttps://github.com/becrevex/CVE-2022-24706\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/26563"}, {"timestamp": "2025-08-15T16:40:05Z", "date_only": false, "value": "2025-08-15T16:40:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/7335", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "05d5723c-ec61-4e9d-85ff-cc5026389b18", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 F6 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u043c \u043d\u0430\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u0438 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u044b Kinsing (H2Miner \u0438\u00a0Resourceful Wolf) \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0437\u0430 \u0440\u0443\u0431\u0435\u0436\u043e\u043c \u0441 2019 \u0433\u043e\u0434\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0441\u0432\u043e\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u043e\u0442\u00a0\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Kinsing, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u00a0\u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0434\u0436\u0435\u043a\u0438\u043d\u0433\u0435 - \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u044b, \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e Monero (XMR), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u0438 \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u0438 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432.\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435, \u0417\u0430\u043f\u0430\u0434\u043d\u043e\u0439 \u0415\u0432\u0440\u043e\u043f\u0435 \u0438 \u0410\u0437\u0438\u0438. \n\n\u0412 2024 \u0433\u043e\u0434\u0443 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0430\u0442\u0430\u043a Kinsing, \u043d\u0435 \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0430\u044f \u0446\u0435\u043b\u044c \u0430\u0442\u0430\u043a\u0438 \u0438 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0430 \u0432 2025 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043f\u043e RU.\n\n\u0412\u0435\u0441\u043d\u043e\u0439 \u043e\u0434\u0438\u043d \u0438\u0437 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 F6 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0432\u043e\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 IoCs, \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438 \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u044f\u0432\u043b\u044f\u0435\u043c\u044b\u0445 TTPs \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0432\u044b\u0448\u043b\u0438 \u043d\u0430 \u0441\u043b\u0435\u0434 Kinsing.\n\n\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0446\u0435\u043b\u044c Kinsing - \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442.\n\n\u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442\u00a0\u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a,\u00a0Kinsing\u00a0\u043d\u0435 \u043f\u0440\u0438\u0431\u0435\u0433\u0430\u0435\u0442 \u043a\u00a0\u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c, \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0432\u044b\u044f\u0432\u043b\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2017-9841, CVE-2019-17564, CVE-2019-19781, CVE-2020-10684, CVE-2020-17519, CVE-2020-5902, CVE-2020-9480, CVE-2021-26084, CVE-2021-41773, CVE-2021-44228, CVE-2022-24706, CVE-2022-26134, CVE-2023-35042.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0436\u0435\u0440\u0442\u0432\u044b \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0449\u0435\u0442 \u043c\u0430\u0439\u043d\u0435\u0440\u044b \u043a\u043e\u043d\u043a\u0443\u0440\u0435\u043d\u0442\u043e\u0432, \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0438\u0445 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439.\n\n\u0410\u0442\u0430\u043a\u0438 Kinsing \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430\u00a0\u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 Linux-\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432\u00a0\u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0438\u00a0\u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u00a0\u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u00a0\u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u0432\u00a0\u0442\u0430\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445, \u043a\u0430\u043a Docker, Kubernetes, Redis \u0438\u00a0PostgreSQL, \u0430\u00a0\u0442\u0430\u043a\u0436\u0435 \u0432\u00a0\u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 - Apache Log4j, Tomcat, NiFi, Confluence, Citrix, WebLogic \u0438\u00a0\u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u0414\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0446\u0435\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440,\u00a0lh.sh\u00a0\u0434\u043b\u044f\u00a0Log4Shell), \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043c\u0430\u0439\u043d\u0435\u0440\u044b \u0438\u00a0\u0441\u0430\u043c \u0431\u0438\u043d\u0430\u0440\u043d\u0438\u043a Kinsing.\n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f - \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0442\u044b, \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u043d\u044b\u0439 \u0438\u0437\u043d\u043e\u0441 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f (\u043e\u0442\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u00a0\u043f\u0440\u0438\u043c\u0435\u043d\u0451\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0434\u043e \u0438\u0442\u043e\u0433\u043e\u0432\u043e\u0439 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u0438\u00a0\u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439) \u0438 IOCs - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "url": "https://t.me/true_secator/7335"}, {"timestamp": "2025-10-21T23:15:40.735Z", "date_only": false, "value": "2025-10-21T23:15:40.735Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-24706", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:40.735Z", "date_only": false, "value": "2025-10-21T23:15:40.735Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-24706", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:32Z", "date_only": false, "value": "2025-10-22T00:32:32Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VXC9-8M8H-9CP6", "record": "GHSA-VXC9-8M8H-9CP6", "field": "modified"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-24706", "field": "timestamps.recorded_at", "uuid": "e92780c3-e73f-426d-80c7-a8d18324bbe4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:27:14.946Z", "date_only": false, "value": "2026-02-02T12:27:14.946877Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e92780c3-e73f-426d-80c7-a8d18324bbe4", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "7507b07b-5a1b-4448-8b06-bf69433692a2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e92780c3-e73f-426d-80c7-a8d18324bbe4"}, {"timestamp": "2026-06-17T04:32:20.160Z", "date_only": false, "value": "2026-06-17T04:32:20.160", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24706", "record": "FKIE_CVE-2022-24706", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:05.851Z", "date_only": false, "value": "2026-06-19T12:47:05.851810Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/df53e359-23b0-49cc-8145-7dab86d50ef5", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "3c00900c-3b9f-4835-be9f-72114dfc1b04", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/df53e359-23b0-49cc-8145-7dab86d50ef5"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-24706", "field": "timestamps.recorded_at", "uuid": "f8684aab-0ffb-43f5-aff8-991234476068", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:32.101Z", "date_only": false, "value": "2026-06-23T14:05:32.101643Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f8684aab-0ffb-43f5-aff8-991234476068", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "dcb1ad49-72ab-4d11-8d4f-a647042893c5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f8684aab-0ffb-43f5-aff8-991234476068"}, {"timestamp": "2026-07-26T02:02:42.096Z", "date_only": false, "value": "2026-07-26T02:02:42.096683Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/615", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "46a0aea6-7218-46e1-9c8a-b7f17e9a5c5b", "content": "CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e 10 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041a\u0430\u0442\u0430\u043b\u043e\u0433\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0421\u0428\u0410 (CISA) \u0432\u043d\u043e\u0432\u044c \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u043e \u041a\u0430\u0442\u0430\u043b\u043e\u0433 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u043f\u043e\u043b\u043d\u0438\u0432 \u0435\u0433\u043e \u0435\u0449\u0435 10 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2013 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442 Delta Electronics. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2021-38406 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,8), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041f\u041e \u0434\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043d\u0435\u043b\u0435\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u2013 DOPSoft 2 \u0432\u0435\u0440\u0441\u0438\u0438 2.00.07 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u0434\u0430\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435\u0442. \u041e\u0434\u043d\u0430\u043a\u043e CISA \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u00ab\u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 \u0443\u0441\u0442\u0430\u0440\u0435\u043b \u0438 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d, \u0435\u0441\u043b\u0438 \u043e\u043d \u0432\u0441\u0435 \u0435\u0449\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f\u00bb.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433:\n\nCVE-2022-26352 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c dotCMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432.\nCVE-2022-24706 \u2014 \u041d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 Apache CouchDB \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\nCVE-2022-24112 \u2014 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Apache APISIX.\nCVE-2022-22963 \u2014 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c VMware Tanzu Spring Cloud, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\nCVE-2022-2294 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c WebRTC, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438.\nCVE-2021-39226 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Grafana.\nCVE-2020-36193 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PEAR Archive_Tar, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u0441\u0441\u044b\u043b\u043e\u043a.\nCVE-2020-28949 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PEAR Archive_Tar, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u041a\u0430\u0442\u0430\u043b\u043e\u0433 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c iOS \u0438 macOS, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2021-31010 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5). \u042d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Apple Core Telephony, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b. \u0412\u0435\u043d\u0434\u043e\u0440 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0434\u0430\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0435\u0449\u0435 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2021, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0430\u043b, \u0447\u0442\u043e \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0432 \u043c\u0430\u0435 2022 \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b \u0441\u0432\u043e\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://thehackernews.com/2022/08/cisa-adds-10-new-known-actively.html \n\n#CISA #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "url": "https://t.me/EchelonEyes/615"}, {"timestamp": "2026-07-29T12:01:01.288Z", "date_only": false, "value": "2026-07-29T12:01:01.288110Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/2276", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "5725bd9e-4289-41b6-9e8f-defc4c56f58b", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-24706\nGithub: https://github.com/trhacknon/CVE-2022-24706-CouchDB-Exploit\nDescribe: \nIn Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.", "url": "https://t.me/CVEhub/2276"}, {"timestamp": "2026-08-01T04:00:04.992Z", "date_only": false, "value": "2026-08-01T04:00:04.992726Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/2276", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "7a40f9f4-607d-44c5-8a8d-1aa87fcfb673", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-24706\nGithub: https://github.com/trhacknon/CVE-2022-24706-CouchDB-Exploit\nDescribe: \nIn Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.", "url": "https://t.me/CVEhub/2276"}, {"timestamp": "2026-09-01T17:00:29.221Z", "date_only": false, "value": "2026-09-01T17:00:29.221483Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/5866", "record": "CVE-2022-24706", "field": "creation_timestamp", "uuid": "e38fd86f-3ca1-4609-a1bd-ec72b37646e4", "content": "Tails OS maintainers advise users not to use Tor browser until two critical Firefox vulnerabilities (CVE-2022-1802 and CVE-2022-1529) are fixed with the release of version 5.1 on May 31.\nRead details: https://thehackernews.com/2022/05/tails-os-users-advised-not-to-use-tor.html\n\nexploit\nCVE-2022-24706:\nApache CouchDB RCE\nhttps://github.com/sadshade/CVE-2022-24706-CouchDB-Exploit\n\ntools\nRed Team Tactics\nCrimeFlare - tool for bypassing websites protected by CloudFlare WAF\nhttps://github.com/zidansec/CloudPeler", "url": "https://t.me/cissp/5866"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-COUCHDB-2022-24706", "record": "BIT-COUCHDB-2022-24706", "field": "modified"}]}