{"metadata": {"vulnerability": "CVE-2023-0386", "count": 610, "kinds": {"milestone": 52, "sighting": 133, "kev": 11, "other": 414}, "linked_omitted": 0}, "data": [{"timestamp": "2022-09-23T00:00:00Z", "date_only": false, "value": "2022-09-23T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1566", "record": "RHSA-2023:1566", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2022-09-23T00:00:00Z", "date_only": false, "value": "2022-09-23T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1584", "record": "RHSA-2023:1584", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2022-09-23T00:00:00Z", "date_only": false, "value": "2022-09-23T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1566", "record": "RHSA-2023_1566", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2022-09-23T00:00:00Z", "date_only": false, "value": "2022-09-23T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1584", "record": "RHSA-2023_1584", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2022-11-30T00:00:00Z", "date_only": false, "value": "2022-11-30T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1566", "record": "RHSA-2023:1566", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2022-11-30T00:00:00Z", "date_only": false, "value": "2022-11-30T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1584", "record": "RHSA-2023:1584", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2022-11-30T00:00:00Z", "date_only": false, "value": "2022-11-30T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1566", "record": "RHSA-2023_1566", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2022-11-30T00:00:00Z", "date_only": false, "value": "2022-11-30T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1584", "record": "RHSA-2023_1584", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2022-12-09T10:00:00Z", "date_only": false, "value": "2022-12-09T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1566", "record": "RHSA-2023:1566", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2022-12-09T10:00:00Z", "date_only": false, "value": "2022-12-09T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1584", "record": "RHSA-2023:1584", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2022-12-09T10:00:00Z", "date_only": false, "value": "2022-12-09T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1659", "record": "RHSA-2023:1659", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2022-12-09T10:00:00Z", "date_only": false, "value": "2022-12-09T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1566", "record": "RHSA-2023_1566", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2022-12-09T10:00:00Z", "date_only": false, "value": "2022-12-09T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1584", "record": "RHSA-2023_1584", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2022-12-09T10:00:00Z", "date_only": false, "value": "2022-12-09T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1659", "record": "RHSA-2023_1659", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2022-12-12T00:00:00Z", "date_only": false, "value": "2022-12-12T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1566", "record": "RHSA-2023:1566", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2022-12-12T00:00:00Z", "date_only": false, "value": "2022-12-12T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1584", "record": "RHSA-2023:1584", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2022-12-12T00:00:00Z", "date_only": false, "value": "2022-12-12T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1659", "record": "RHSA-2023:1659", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2022-12-12T00:00:00Z", "date_only": false, "value": "2022-12-12T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1566", "record": "RHSA-2023_1566", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2022-12-12T00:00:00Z", "date_only": false, "value": "2022-12-12T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1584", "record": "RHSA-2023_1584", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2022-12-12T00:00:00Z", "date_only": false, "value": "2022-12-12T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1659", "record": "RHSA-2023_1659", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.2.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1566", "record": "RHSA-2023:1566", "field": "vulnerabilities.3.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1584", "record": "RHSA-2023:1584", "field": "vulnerabilities.3.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1659", "record": "RHSA-2023:1659", "field": "vulnerabilities.2.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1660", "record": "RHSA-2023:1660", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1677", "record": "RHSA-2023:1677", "field": "vulnerabilities.3.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1681", "record": "RHSA-2023:1681", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1691", "record": "RHSA-2023:1691", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1703", "record": "RHSA-2023:1703", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1970", "record": "RHSA-2023:1970", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1980", "record": "RHSA-2023:1980", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1984", "record": "RHSA-2023:1984", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1554", "record": "RHSA-2023_1554", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1566", "record": "RHSA-2023_1566", "field": "vulnerabilities.3.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1584", "record": "RHSA-2023_1584", "field": "vulnerabilities.3.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1659", "record": "RHSA-2023_1659", "field": "vulnerabilities.2.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1660", "record": "RHSA-2023_1660", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1677", "record": "RHSA-2023_1677", "field": "vulnerabilities.3.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1681", "record": "RHSA-2023_1681", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1691", "record": "RHSA-2023_1691", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1703", "record": "RHSA-2023_1703", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1970", "record": "RHSA-2023_1970", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1980", "record": "RHSA-2023_1980", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1984", "record": "RHSA-2023_1984", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-13T06:30:00Z", "date_only": false, "value": "2023-01-13T06:30:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2023-01-13T06:30:00Z", "date_only": false, "value": "2023-01-13T06:30:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1566", "record": "RHSA-2023:1566", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2023-01-13T06:30:00Z", "date_only": false, "value": "2023-01-13T06:30:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1584", "record": "RHSA-2023:1584", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2023-01-13T06:30:00Z", "date_only": false, "value": "2023-01-13T06:30:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1659", "record": "RHSA-2023:1659", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2023-01-13T06:30:00Z", "date_only": false, "value": "2023-01-13T06:30:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1660", "record": "RHSA-2023:1660", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2023-01-13T06:30:00Z", "date_only": false, "value": "2023-01-13T06:30:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1677", "record": "RHSA-2023:1677", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2023-01-13T06:30:00Z", "date_only": false, "value": "2023-01-13T06:30:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1554", "record": "RHSA-2023_1554", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2023-01-13T06:30:00Z", "date_only": false, "value": "2023-01-13T06:30:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1566", "record": "RHSA-2023_1566", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2023-01-13T06:30:00Z", "date_only": false, "value": "2023-01-13T06:30:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1584", "record": "RHSA-2023_1584", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2023-01-13T06:30:00Z", "date_only": false, "value": "2023-01-13T06:30:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1659", "record": "RHSA-2023_1659", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2023-01-13T06:30:00Z", "date_only": false, "value": "2023-01-13T06:30:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1660", "record": "RHSA-2023_1660", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2023-01-13T06:30:00Z", "date_only": false, "value": "2023-01-13T06:30:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1677", "record": "RHSA-2023_1677", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2023-01-17T00:00:00Z", "date_only": false, "value": "2023-01-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1677", "record": "RHSA-2023:1677", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2023-01-17T00:00:00Z", "date_only": false, "value": "2023-01-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1677", "record": "RHSA-2023_1677", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2023-01-18T00:00:00Z", "date_only": false, "value": "2023-01-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1677", "record": "RHSA-2023:1677", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2023-01-18T00:00:00Z", "date_only": false, "value": "2023-01-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1677", "record": "RHSA-2023_1677", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2023-01-18T00:00:00Z", "date_only": false, "value": "2023-01-18T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-0386", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1566", "record": "RHSA-2023:1566", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1584", "record": "RHSA-2023:1584", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1659", "record": "RHSA-2023:1659", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1660", "record": "RHSA-2023:1660", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1677", "record": "RHSA-2023:1677", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1554", "record": "RHSA-2023_1554", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1566", "record": "RHSA-2023_1566", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1584", "record": "RHSA-2023_1584", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1659", "record": "RHSA-2023_1659", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1660", "record": "RHSA-2023_1660", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1677", "record": "RHSA-2023_1677", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.2.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1566", "record": "RHSA-2023:1566", "field": "vulnerabilities.3.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1584", "record": "RHSA-2023:1584", "field": "vulnerabilities.3.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1659", "record": "RHSA-2023:1659", "field": "vulnerabilities.2.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1660", "record": "RHSA-2023:1660", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1677", "record": "RHSA-2023:1677", "field": "vulnerabilities.3.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1681", "record": "RHSA-2023:1681", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1691", "record": "RHSA-2023:1691", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1703", "record": "RHSA-2023:1703", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1970", "record": "RHSA-2023:1970", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1980", "record": "RHSA-2023:1980", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1984", "record": "RHSA-2023:1984", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1554", "record": "RHSA-2023_1554", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1566", "record": "RHSA-2023_1566", "field": "vulnerabilities.3.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1584", "record": "RHSA-2023_1584", "field": "vulnerabilities.3.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1659", "record": "RHSA-2023_1659", "field": "vulnerabilities.2.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1660", "record": "RHSA-2023_1660", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1677", "record": "RHSA-2023_1677", "field": "vulnerabilities.3.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1681", "record": "RHSA-2023_1681", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1691", "record": "RHSA-2023_1691", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1703", "record": "RHSA-2023_1703", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1970", "record": "RHSA-2023_1970", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1980", "record": "RHSA-2023_1980", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1984", "record": "RHSA-2023_1984", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-02-14T00:00:00Z", "date_only": false, "value": "2023-02-14T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1677", "record": "RHSA-2023:1677", "field": "vulnerabilities.4.discovery_date", "linked_record": true}, {"timestamp": "2023-02-14T00:00:00Z", "date_only": false, "value": "2023-02-14T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1677", "record": "RHSA-2023_1677", "field": "vulnerabilities.4.discovery_date", "linked_record": true}, {"timestamp": "2023-02-14T00:00:00Z", "date_only": false, "value": "2023-02-14T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1677", "record": "RHSA-2023:1677", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2023-02-14T00:00:00Z", "date_only": false, "value": "2023-02-14T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1677", "record": "RHSA-2023_1677", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1659", "record": "RHSA-2023:1659", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_1659", "record": "RHSA-2023_1659", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1659", "record": "RHSA-2023:1659", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_1659", "record": "RHSA-2023_1659", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2023-03-10T00:00:00Z", "date_only": false, "value": "2023-03-10T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-0386", "record": "MSRC_CVE-2023-0386", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-22T00:00:00Z", "date_only": false, "value": "2023-03-22T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-0386", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-03-22T21:15:00Z", "date_only": false, "value": "2023-03-22T21:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P72Q-V88C-RPRQ", "record": "GHSA-P72Q-V88C-RPRQ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-03-22T21:15:00Z", "date_only": false, "value": "2023-03-22T21:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-0386", "record": "UBUNTU-CVE-2023-0386", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-22T21:15:00Z", "date_only": false, "value": "2023-03-22T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-0386", "record": "GSD-2023-0386", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-03-22T21:15:18.090Z", "date_only": false, "value": "2023-03-22T21:15:18.090", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-0386", "record": "FKIE_CVE-2023-0386", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-22T23:00:00Z", "date_only": false, "value": "2023-03-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-03-22T23:00:00Z", "date_only": false, "value": "2023-03-22T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-22T23:00:00Z", "date_only": false, "value": "2023-03-22T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-22T23:36:07Z", "date_only": false, "value": "2023-03-22T23:36:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/60523", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "74cc20ec-1882-4a21-a6a5-509898fe854a", "content": "\u203c CVE-2023-0386 \u203c\n\nA flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel\u00e2\u20ac\u2122s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/60523"}, {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-0386", "record": "MSRC_CVE-2023-0386", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.1.threats.0.date", "linked_record": true}, {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1566", "record": "RHSA-2023:1566", "field": "vulnerabilities.2.threats.0.date", "linked_record": true}, {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1584", "record": "RHSA-2023:1584", "field": "vulnerabilities.2.threats.0.date", "linked_record": true}, {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1659", "record": "RHSA-2023:1659", "field": "vulnerabilities.1.threats.0.date", "linked_record": true}, {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1660", "record": "RHSA-2023:1660", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1677", "record": "RHSA-2023:1677", "field": "vulnerabilities.2.threats.0.date", "linked_record": true}, {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023_1554", "record": "RHSA-2023_1554", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023_1566", "record": "RHSA-2023_1566", "field": "vulnerabilities.2.threats.0.date", "linked_record": true}, {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023_1584", "record": "RHSA-2023_1584", "field": "vulnerabilities.2.threats.0.date", "linked_record": true}, {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023_1659", "record": "RHSA-2023_1659", "field": "vulnerabilities.1.threats.0.date", "linked_record": true}, {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023_1660", "record": "RHSA-2023_1660", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023_1677", "record": "RHSA-2023_1677", "field": "vulnerabilities.2.threats.0.date", "linked_record": true}, {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-0386", "record": "MSRC_CVE-2023-0386", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-03T22:00:00Z", "date_only": false, "value": "2023-04-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2023-04-04T00:00:00Z", "date_only": false, "value": "2023-04-04T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-0386", "record": "MSRC_CVE-2023-0386", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2023-04-04T00:00:00Z", "date_only": false, "value": "2023-04-04T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2023:1566", "record": "ALSA-2023:1566", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-04T00:00:00Z", "date_only": false, "value": "2023-04-04T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2023:1584", "record": "ALSA-2023:1584", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-04T06:59:16Z", "date_only": false, "value": "2023-04-04T06:59:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-04T06:59:16Z", "date_only": false, "value": "2023-04-04T06:59:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1554", "record": "RHSA-2023_1554", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-04T06:59:16Z", "date_only": false, "value": "2023-04-04T06:59:16+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-04T06:59:16Z", "date_only": false, "value": "2023-04-04T06:59:16+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023_1554", "record": "RHSA-2023_1554", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-04T06:59:16Z", "date_only": false, "value": "2023-04-04T06:59:16+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.2.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-04T06:59:16Z", "date_only": false, "value": "2023-04-04T06:59:16+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023_1554", "record": "RHSA-2023_1554", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-04T09:08:03Z", "date_only": false, "value": "2023-04-04T09:08:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1584", "record": "RHSA-2023:1584", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-04T09:08:03Z", "date_only": false, "value": "2023-04-04T09:08:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1584", "record": "RHSA-2023_1584", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-04T09:08:03Z", "date_only": false, "value": "2023-04-04T09:08:03+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:1584", "record": "RHSA-2023:1584", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-04T09:08:03Z", "date_only": false, "value": "2023-04-04T09:08:03+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023_1584", "record": "RHSA-2023_1584", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-04T09:08:03Z", "date_only": false, "value": "2023-04-04T09:08:03+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:1584", "record": "RHSA-2023:1584", "field": "vulnerabilities.3.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-04T09:08:03Z", "date_only": false, "value": "2023-04-04T09:08:03+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023_1584", "record": "RHSA-2023_1584", "field": "vulnerabilities.3.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-04T09:28:26Z", "date_only": false, "value": "2023-04-04T09:28:26+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1566", "record": "RHSA-2023:1566", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-04T09:28:26Z", "date_only": false, "value": "2023-04-04T09:28:26+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1566", "record": "RHSA-2023_1566", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-04T09:28:26Z", "date_only": false, "value": "2023-04-04T09:28:26+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:1566", "record": "RHSA-2023:1566", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-04T09:28:26Z", "date_only": false, "value": "2023-04-04T09:28:26+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023_1566", "record": "RHSA-2023_1566", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-04T09:28:26Z", "date_only": false, "value": "2023-04-04T09:28:26+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:1566", "record": "RHSA-2023:1566", "field": "vulnerabilities.3.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-04T09:28:26Z", "date_only": false, "value": "2023-04-04T09:28:26+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023_1566", "record": "RHSA-2023_1566", "field": "vulnerabilities.3.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-04T22:00:00Z", "date_only": false, "value": "2023-04-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2023-04-05T13:50:35Z", "date_only": false, "value": "2023-04-05T13:50:35+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1660", "record": "RHSA-2023:1660", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-05T13:50:35Z", "date_only": false, "value": "2023-04-05T13:50:35+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1660", "record": "RHSA-2023_1660", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-05T13:50:35Z", "date_only": false, "value": "2023-04-05T13:50:35+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:1660", "record": "RHSA-2023:1660", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-05T13:50:35Z", "date_only": false, "value": "2023-04-05T13:50:35+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023_1660", "record": "RHSA-2023_1660", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-05T13:50:35Z", "date_only": false, "value": "2023-04-05T13:50:35+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:1660", "record": "RHSA-2023:1660", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-05T13:50:35Z", "date_only": false, "value": "2023-04-05T13:50:35+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023_1660", "record": "RHSA-2023_1660", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-05T14:08:58Z", "date_only": false, "value": "2023-04-05T14:08:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1659", "record": "RHSA-2023:1659", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-05T14:08:58Z", "date_only": false, "value": "2023-04-05T14:08:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1659", "record": "RHSA-2023_1659", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-05T14:08:58Z", "date_only": false, "value": "2023-04-05T14:08:58+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:1659", "record": "RHSA-2023:1659", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-05T14:08:58Z", "date_only": false, "value": "2023-04-05T14:08:58+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023_1659", "record": "RHSA-2023_1659", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-05T14:08:58Z", "date_only": false, "value": "2023-04-05T14:08:58+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:1659", "record": "RHSA-2023:1659", "field": "vulnerabilities.2.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-05T14:08:58Z", "date_only": false, "value": "2023-04-05T14:08:58+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023_1659", "record": "RHSA-2023_1659", "field": "vulnerabilities.2.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-05T22:00:00Z", "date_only": false, "value": "2023-04-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2023-04-07T00:00:00Z", "date_only": false, "value": "2023-04-07T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0291", "record": "CERTFR-2023-AVI-0291", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-04-10T02:03:40Z", "date_only": false, "value": "2023-04-10T02:03:40+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1677", "record": "RHSA-2023:1677", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-10T02:03:40Z", "date_only": false, "value": "2023-04-10T02:03:40+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1677", "record": "RHSA-2023_1677", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-10T02:03:40Z", "date_only": false, "value": "2023-04-10T02:03:40+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:1677", "record": "RHSA-2023:1677", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-10T02:03:40Z", "date_only": false, "value": "2023-04-10T02:03:40+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023_1677", "record": "RHSA-2023_1677", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-10T02:03:40Z", "date_only": false, "value": "2023-04-10T02:03:40+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:1677", "record": "RHSA-2023:1677", "field": "vulnerabilities.3.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-10T02:03:40Z", "date_only": false, "value": "2023-04-10T02:03:40+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023_1677", "record": "RHSA-2023_1677", "field": "vulnerabilities.3.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-10T13:37:40Z", "date_only": false, "value": "2023-04-10T13:37:40+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1681", "record": "RHSA-2023:1681", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-10T13:37:40Z", "date_only": false, "value": "2023-04-10T13:37:40+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1681", "record": "RHSA-2023_1681", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-10T13:37:40Z", "date_only": false, "value": "2023-04-10T13:37:40+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:1681", "record": "RHSA-2023:1681", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-10T13:37:40Z", "date_only": false, "value": "2023-04-10T13:37:40+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023_1681", "record": "RHSA-2023_1681", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-10T13:37:40Z", "date_only": false, "value": "2023-04-10T13:37:40+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:1681", "record": "RHSA-2023:1681", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-10T13:37:40Z", "date_only": false, "value": "2023-04-10T13:37:40+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023_1681", "record": "RHSA-2023_1681", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-10T22:00:00Z", "date_only": false, "value": "2023-04-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2023-04-11T00:00:00Z", "date_only": false, "value": "2023-04-11T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2023:1691", "record": "ALSA-2023:1691", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-11T00:00:00Z", "date_only": false, "value": "2023-04-11T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2023:1703", "record": "ALSA-2023:1703", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-11T14:26:48Z", "date_only": false, "value": "2023-04-11T14:26:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1691", "record": "RHSA-2023:1691", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-11T14:26:48Z", "date_only": false, "value": "2023-04-11T14:26:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1691", "record": "RHSA-2023_1691", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-11T14:26:48Z", "date_only": false, "value": "2023-04-11T14:26:48+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:1691", "record": "RHSA-2023:1691", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-11T14:26:48Z", "date_only": false, "value": "2023-04-11T14:26:48+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023_1691", "record": "RHSA-2023_1691", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-11T14:26:48Z", "date_only": false, "value": "2023-04-11T14:26:48+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:1691", "record": "RHSA-2023:1691", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-11T14:26:48Z", "date_only": false, "value": "2023-04-11T14:26:48+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023_1691", "record": "RHSA-2023_1691", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-11T14:28:42Z", "date_only": false, "value": "2023-04-11T14:28:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1703", "record": "RHSA-2023:1703", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-11T14:28:42Z", "date_only": false, "value": "2023-04-11T14:28:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1703", "record": "RHSA-2023_1703", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-11T14:28:42Z", "date_only": false, "value": "2023-04-11T14:28:42+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:1703", "record": "RHSA-2023:1703", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-11T14:28:42Z", "date_only": false, "value": "2023-04-11T14:28:42+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023_1703", "record": "RHSA-2023_1703", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-11T14:28:42Z", "date_only": false, "value": "2023-04-11T14:28:42+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:1703", "record": "RHSA-2023:1703", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-11T14:28:42Z", "date_only": false, "value": "2023-04-11T14:28:42+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023_1703", "record": "RHSA-2023_1703", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-11T22:00:00Z", "date_only": false, "value": "2023-04-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.5.date", "linked_record": true}, {"timestamp": "2023-04-13T22:00:00Z", "date_only": false, "value": "2023-04-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.6.date", "linked_record": true}, {"timestamp": "2023-04-16T22:00:00Z", "date_only": false, "value": "2023-04-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.7.date", "linked_record": true}, {"timestamp": "2023-04-18T22:00:00Z", "date_only": false, "value": "2023-04-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.8.date", "linked_record": true}, {"timestamp": "2023-04-20T13:48:52Z", "date_only": false, "value": "2023-04-20T13:48:52Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2023:1691", "record": "ALSA-2023:1691", "field": "modified", "linked_record": true}, {"timestamp": "2023-04-20T14:34:53Z", "date_only": false, "value": "2023-04-20T14:34:53Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2023:1703", "record": "ALSA-2023:1703", "field": "modified", "linked_record": true}, {"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0333", "record": "CERTFR-2023-AVI-0333", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0334", "record": "CERTFR-2023-AVI-0334", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-04-25T10:24:04Z", "date_only": false, "value": "2023-04-25T10:24:04+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1980", "record": "RHSA-2023:1980", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-25T10:24:04Z", "date_only": false, "value": "2023-04-25T10:24:04+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1980", "record": "RHSA-2023_1980", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-25T10:24:04Z", "date_only": false, "value": "2023-04-25T10:24:04+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:1980", "record": "RHSA-2023:1980", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-25T10:24:04Z", "date_only": false, "value": "2023-04-25T10:24:04+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023_1980", "record": "RHSA-2023_1980", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-25T10:24:04Z", "date_only": false, "value": "2023-04-25T10:24:04+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:1980", "record": "RHSA-2023:1980", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-25T10:24:04Z", "date_only": false, "value": "2023-04-25T10:24:04+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023_1980", "record": "RHSA-2023_1980", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-25T10:25:33Z", "date_only": false, "value": "2023-04-25T10:25:33+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1984", "record": "RHSA-2023:1984", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-25T10:25:33Z", "date_only": false, "value": "2023-04-25T10:25:33+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1984", "record": "RHSA-2023_1984", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-25T10:25:33Z", "date_only": false, "value": "2023-04-25T10:25:33+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:1984", "record": "RHSA-2023:1984", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-25T10:25:33Z", "date_only": false, "value": "2023-04-25T10:25:33+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023_1984", "record": "RHSA-2023_1984", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-25T10:25:33Z", "date_only": false, "value": "2023-04-25T10:25:33+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:1984", "record": "RHSA-2023:1984", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-25T10:25:33Z", "date_only": false, "value": "2023-04-25T10:25:33+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023_1984", "record": "RHSA-2023_1984", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-25T10:30:36Z", "date_only": false, "value": "2023-04-25T10:30:36+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1970", "record": "RHSA-2023:1970", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-25T10:30:36Z", "date_only": false, "value": "2023-04-25T10:30:36+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1970", "record": "RHSA-2023_1970", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-25T10:30:36Z", "date_only": false, "value": "2023-04-25T10:30:36+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:1970", "record": "RHSA-2023:1970", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-25T10:30:36Z", "date_only": false, "value": "2023-04-25T10:30:36+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023_1970", "record": "RHSA-2023_1970", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-25T10:30:36Z", "date_only": false, "value": "2023-04-25T10:30:36+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:1970", "record": "RHSA-2023:1970", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-25T10:30:36Z", "date_only": false, "value": "2023-04-25T10:30:36+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023_1970", "record": "RHSA-2023_1970", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-26T22:00:00Z", "date_only": false, "value": "2023-04-26T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.9.date", "linked_record": true}, {"timestamp": "2023-04-28T00:00:00Z", "date_only": false, "value": "2023-04-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0345", "record": "CERTFR-2023-AVI-0345", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-04-28T00:00:00Z", "date_only": false, "value": "2023-04-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0346", "record": "CERTFR-2023-AVI-0346", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-05-03T00:00:00Z", "date_only": false, "value": "2023-05-03T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-0386", "record": "MSRC_CVE-2023-0386", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2023-05-03T00:00:00Z", "date_only": false, "value": "2023-05-03T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-0386", "record": "MSRC_CVE-2023-0386", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-05-05T00:00:00Z", "date_only": false, "value": "2023-05-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0358", "record": "CERTFR-2023-AVI-0358", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-05-05T03:10:29Z", "date_only": false, "value": "2023-05-05T03:10:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4290", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "7edb9a57-be31-4766-8692-e11a14f5b0c0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-0386\u5728ubuntu22.04\u4e0a\u7684\u63d0\u6743\nURL\uff1ahttps://github.com/xkaneiki/CVE-2023-0386\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4290", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-05T12:50:12Z", "date_only": false, "value": "2023-05-05T12:50:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4296", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "8c7911c4-6ca3-4d92-b27c-202006cd5670", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aAn exploit of CVE-2023-0386, verified on 5.19.0-38-generic #39~22.04.1-Ubuntu\nURL\uff1ahttps://github.com/JlSakuya/CVE-2023-0386\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4296", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-05T14:03:02Z", "date_only": false, "value": "2023-05-05T14:03:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/1490", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "9f208739-4467-4811-8425-7c5ac2bcb5bb", "content": "CVE-2023-0386\nLinux Kernel Privilege Escalation\n*\nreadME\n*\nexploit\n\n#linux #exploit", "url": "https://t.me/proxy_bar/1490"}, {"timestamp": "2023-05-05T14:06:48Z", "date_only": false, "value": "2023-05-05T14:06:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/551", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "1a6cfd01-cda9-4243-a7bf-7a21eada8529", "content": "https://github.com/xkaneiki/CVE-2023-0386\nubuntu22.04 \u7684\u63d0\u6743\n#\u63d0\u6743", "url": "https://t.me/CNArsenal/551", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-05T15:52:05Z", "date_only": false, "value": "2023-05-05T15:52:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2926", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "7a4a4d11-eae5-4820-ba51-256467a0cf5a", "content": "Tools - Hackers Factory \n\n\u200b\u200bsecurity-cheatsheets\n\nA collection of cheatsheets for various infosec tools and topics.\n\nhttps://github.com/andrewjkerr/security-cheatsheets\n\n#cybersecurity #infosec\n\n\u200b\u200bOffensive Security Notes\n\nNotes on learning Offensive Security from the ground up\n\nhttps://github.com/root-at-iyn/Offensive-Security\n\n#cybersecurity #infosec\n\n\u200b\u200bcoding_and_ctf\n\nCollection of notes/source code for self-study of offensive security.\n\nhttps://github.com/sanmiguella/coding_and_ctf\n\n#cybersecurity #infosec\n\n\u200b\u200bCobaltStrike beacon in rust\n\nhttps://github.com/b1tg/cobaltstrike-beacon-rust\n\n#infosec #pentesting #redteam\n\n\u200b\u200bOSWA Experience And Exam Preparation Guide\n\nMy Offensive Security OSWA certification experience and my personal opinion what helps in preparation for the exam.\n\nhttps://github.com/rndinfosecguy/OSWA-Experience-And-Exam-Preparation\n\n#cybersecurity #infosec\n\n\u200b\u200bOffensive-Security-Vault\n\nThis is a Personal Knowledge Management tools for taking and managing notes related Offensive Security in Obsidian.\n\nhttps://github.com/hackedbyagirl/Offensive-Security-Vault\n\n#cybersecurity #infosec\n\n\u200b\u200bMaskcat\n\nUtility tool for Hashcat Masks and Password Cracking.\n\nhttps://github.com/JakeWnuk/maskcat\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bSCCMHunter\n\nPost-ex tool built to streamline identifying, profiling & attacking SCCM related assets in an AD domain.\n\nhttps://github.com/garrettfoster13/sccmhunter\n\n#infosec #pentesting #redteam\n\n\u200b\u200bOffsec\n\nOffensive security scripts and documentation.\n\nhttps://github.com/ville87/offsec\n\n#cybersecurity #infosec\n\n\u200b\u200bBHEH's XSSRocket\n\nXSS Rocket is written by Black Hat Ethical Hacking with the help of #ChatGPT as experimentation, with a lot of hours spent modifying the code generated by ChatGPT, and is designed for Offensive Security and XSS (Cross-Site Scripting) attacks.\n\nhttps://github.com/blackhatethicalhacking/XSSRocket\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bCVE-2023-0386\n\nLinux Kernel Privilege Escalation.\n\nhttps://github.com/xkaneiki/CVE-2023-0386\n\n#cybersecurity #infosec\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "url": "https://t.me/dilagrafie/2926", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-05T16:08:20Z", "date_only": false, "value": "2023-05-05T16:08:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/3400", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "1f7045ad-564c-4873-bdfe-3b645964bfc4", "content": "CVE-2023-0386 | Linux Kernel Privilege Escalation\n\nEnables an attacker with low-privileged user access on a Linux machine with an overlay mount containing a file capability in one of its layers to escalate their privileges up to root. The attacker can achieve this by copying a capable file from a nosuid mount into another mount.\n\nDownload: https://system32.ink/news-feed/p/340/", "url": "https://t.me/crackcodes/3400", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-05T16:09:11Z", "date_only": false, "value": "2023-05-05T16:09:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/J1pbr3Pk4w0CyYe0txbL_KmxswDQmfB8T-3bJQthGPk5bw", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "c8071801-e51c-4d78-a734-f330a9bc6635", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-06T06:18:08Z", "date_only": false, "value": "2023-05-06T06:18:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4304", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "663953f5-e0d3-4fa3-9cfe-f7b69c22f260", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-0386 analysis and Exp\nURL\uff1ahttps://github.com/chenaotian/CVE-2023-0386\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4304", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-06T08:07:54Z", "date_only": false, "value": "2023-05-06T08:07:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RalfHackerChannel/1329", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "a375ce90-47de-41a4-8830-65584b9dd2fc", "content": "CVE-2023-0386: Linux LPE\n\nhttps://github.com/xkaneiki/CVE-2023-0386\n\n#exploit #git #lpe", "url": "https://t.me/RalfHackerChannel/1329", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-06T12:46:15Z", "date_only": false, "value": "2023-05-06T12:46:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8244", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "2402c31a-dfff-48c3-8299-e249bc94adf5", "content": "#exploit\n1. CVE-2023-0386:\nLinux Kernel LPE\nhttps://github.com/xkaneiki/CVE-2023-0386\n\n2. CVE-2023-30237:\nCyberGhost VPN client EoP vulnerability\nhttps://www.pentestpartners.com/security-blog/bullied-by-bugcrowd-over-kape-cyberghost-disclosure", "url": "https://t.me/CyberSecurityTechnologies/8244", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-06T13:02:04Z", "date_only": false, "value": "2023-05-06T13:02:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/2173", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "8e75e39f-b98d-442e-899e-e137496db461", "content": "CVE-2023-0386 - PoC Exploit Released for Linux Kernel Privilege Escalation\n\nLink\n\nExploit", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/2173", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-06T17:26:37Z", "date_only": false, "value": "2023-05-06T17:26:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/B_3vlUGGz0Qx6ertKji3nlKRofiERp5Nzl7-CaE3D8qaiA", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "d3ccc4a8-ea68-41a5-9590-16dc25892370", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-07T22:00:00Z", "date_only": false, "value": "2023-05-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.10.date", "linked_record": true}, {"timestamp": "2023-05-08T02:03:55Z", "date_only": false, "value": "2023-05-08T02:03:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4312", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "76d37b12-d625-48a3-aecc-990fdfe1fa73", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-0386 EXP\nURL\uff1ahttps://github.com/CKevens/CVE-2023-0386\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4312", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-09T12:28:52Z", "date_only": false, "value": "2023-05-09T12:28:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2140-1", "record": "SUSE-SU-2023:2140-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-05-09T12:28:52Z", "date_only": false, "value": "2023-05-09T12:28:52Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2140-1", "record": "SUSE-SU-2023:2140-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2023-05-09T12:28:52Z", "date_only": false, "value": "2023-05-09T12:28:52Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:2140-1", "record": "SUSE-SU-2023:2140-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-05-09T12:28:52Z", "date_only": false, "value": "2023-05-09T12:28:52Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2140-1", "record": "SUSE-SU-2023:2140-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-09T12:28:52Z", "date_only": false, "value": "2023-05-09T12:28:52Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2140-1", "record": "SUSE-SU-2023:2140-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-05-09T12:29:44Z", "date_only": false, "value": "2023-05-09T12:29:44Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2141-1", "record": "SUSE-SU-2023:2141-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-05-09T12:29:44Z", "date_only": false, "value": "2023-05-09T12:29:44Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2141-1", "record": "SUSE-SU-2023:2141-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2023-05-09T12:29:44Z", "date_only": false, "value": "2023-05-09T12:29:44Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:2141-1", "record": "SUSE-SU-2023:2141-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-05-09T12:29:44Z", "date_only": false, "value": "2023-05-09T12:29:44Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2141-1", "record": "SUSE-SU-2023:2141-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-09T12:29:44Z", "date_only": false, "value": "2023-05-09T12:29:44Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2141-1", "record": "SUSE-SU-2023:2141-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-05-09T22:00:00Z", "date_only": false, "value": "2023-05-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.11.date", "linked_record": true}, {"timestamp": "2023-05-09T22:29:21Z", "date_only": false, "value": "2023-05-09T22:29:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/malwar3s/46", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "5a7ea5df-b7f8-4211-825c-7d0a8b5bdd5b", "content": "https://github.com/xkaneiki/CVE-2023-0386", "url": "https://t.me/malwar3s/46", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-10T19:31:12Z", "date_only": false, "value": "2023-05-10T19:31:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/iCO3uwwZs9ek5LRSAkrcp4qOEXg5UPACmryqpsPa4D6Elaw", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "df0c0a1b-c3db-4fa2-956d-6d917363dcc8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-10T22:00:00Z", "date_only": false, "value": "2023-05-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.12.date", "linked_record": true}, {"timestamp": "2023-05-11T14:38:55Z", "date_only": false, "value": "2023-05-11T14:38:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/4367", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "2cb175c5-8fa8-414b-bf8e-39ede446c909", "content": "\u041d\u043e \u043d\u0430 \u044d\u0442\u043e\u043c \u0433\u043e\u043b\u043e\u0432\u043d\u0430\u044f \u0431\u043e\u043b\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Linux \u043d\u0435 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f. \n\n\u0415\u0441\u043b\u0438 \u0434\u043b\u044f \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (CVE-2023-32233) \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432\u044b\u0439\u0434\u0435\u0442 15 \u043c\u0430\u044f, \u0442\u043e \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-0386) \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 OverlayFS \u044f\u0434\u0440\u0430 Linux PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d.\n\n\u0418 \u043d\u0430 \u044d\u0442\u043e\u043c \u0444\u043e\u043d\u0435 \u0435\u0449\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u0439 \u0434\u0438\u0441\u0441\u043e\u043d\u0430\u043d\u0441 \u0432\u044b\u0437\u0432\u0430\u043b\u0430 Deep Instinct, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0448\u0442\u0430\u043c\u043c\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f Linux \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c BPFdoor.\n\n\u042d\u0442\u043e\u0442 \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u0441\u0442\u0432\u0430 \u0432\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445 \u0438 \u0441\u0440\u0435\u0434\u0430\u0445 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u043e \u0442\u0430\u043a\u043e\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e Berkley Packet Filter \u2014 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u0430 \u0443\u043a\u043b\u043e\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u043d\u0430 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0442\u0440\u0430\u0444\u0438\u043a.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 BPFdoor \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u043e\u044f\u0442\u044c \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f Red Menshen (\u0430\u043a\u0430 Red Dev 18).\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430\u0441\u044c \u0442\u0435\u043c, \u0447\u0442\u043e \u0441 2021 \u0433\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c, \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u043c, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u043c \u0438 \u043b\u043e\u0433\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445 \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435 \u0438 \u0410\u0437\u0438\u0438.", "url": "https://t.me/true_secator/4367", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-12T00:00:00Z", "date_only": false, "value": "2023-05-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0381", "record": "CERTFR-2023-AVI-0381", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-05-12T00:00:00Z", "date_only": false, "value": "2023-05-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0382", "record": "CERTFR-2023-AVI-0382", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-05-14T22:00:00Z", "date_only": false, "value": "2023-05-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.13.date", "linked_record": true}, {"timestamp": "2023-05-17T08:08:29Z", "date_only": false, "value": "2023-05-17T08:08:29Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2231-1", "record": "SUSE-SU-2023:2231-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-05-17T08:08:29Z", "date_only": false, "value": "2023-05-17T08:08:29Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2231-1", "record": "SUSE-SU-2023:2231-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2023-05-17T08:08:29Z", "date_only": false, "value": "2023-05-17T08:08:29Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:2231-1", "record": "SUSE-SU-2023:2231-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-05-17T08:08:29Z", "date_only": false, "value": "2023-05-17T08:08:29Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2231-1", "record": "SUSE-SU-2023:2231-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-18T22:00:00Z", "date_only": false, "value": "2023-05-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.14.date", "linked_record": true}, {"timestamp": "2023-05-19T00:00:00Z", "date_only": false, "value": "2023-05-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0391", "record": "CERTFR-2023-AVI-0391", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-05-19T00:00:00Z", "date_only": false, "value": "2023-05-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0395", "record": "CERTFR-2023-AVI-0395", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-05-20T00:26:24Z", "date_only": false, "value": "2023-05-20T00:26:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/5048", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "74ce2a86-03b2-4a6b-ab9d-c40a7a0807ab", "content": "CVE-2023-0386 - PoC Exploit Released for Linux Kernel Privilege Escalation\n\nLink\n\nExploit\n\n#POC #exploit #linux \n\u2014\u2014\u2014\u2014\u2014\u2014\u200c\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/5048", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-20T14:53:20Z", "date_only": false, "value": "2023-05-20T14:53:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AyHpwjm0UnmLhePUiSG0s_xlvI6qa97U-qFuurKEUoiNQd0", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "37985d17-3c87-40c8-b9c1-1cbed8316fbf", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-25T19:15:19Z", "date_only": false, "value": "2023-05-25T19:15:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/linkersec/208", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "b4e68ba1-57d3-4d1b-b41d-5df4ccab52bc", "content": "Privilege escalation exploit for CVE-2023-0386 in OverlayFS\n\nA privilege escalation exploit by xkaneiki for a logical bug in OverlayFS. Exploitation requires unprivileged user namespaces enabled.\n\nFollowing the exploit, Ryan Simon et al. published an article describing the exploitation process.", "url": "https://t.me/linkersec/208", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-30T11:00:21Z", "date_only": false, "value": "2023-05-30T11:00:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gJycgIzp9-P92vGciMsmM3AHMS4pKCv2hOA6OUDdYjt7Zb4", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "41f91202-7e3d-474c-82d5-f8879c7aa8ed", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-30T11:50:19Z", "date_only": false, "value": "2023-05-30T11:50:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8392", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "fe927f55-d2f1-4ab3-8bfb-d143090eeaa4", "content": "#Blue_Team_Techniques\n1. The OverlayFS vulnerability CVE-2023-0386:\nOverview, detection, and remediation\nhttps://securitylabs.datadoghq.com/articles/overlayfs-cve-2023-0386\n2. PoC for userland hook evasion\nhttps://github.com/S3cur3Th1sSh1t/Ruy-Lopez\n// PoC for a new approach to completely prevent DLLs from being loaded into a newly spawned process", "url": "https://t.me/CyberSecurityTechnologies/8392", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-06-01T22:00:00Z", "date_only": false, "value": "2023-06-01T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.15.date", "linked_record": true}, {"timestamp": "2023-06-02T00:00:00Z", "date_only": false, "value": "2023-06-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0429", "record": "CERTFR-2023-AVI-0429", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-06-04T22:00:00Z", "date_only": false, "value": "2023-06-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.16.date", "linked_record": true}, {"timestamp": "2023-06-05T07:49:36Z", "date_only": false, "value": "2023-06-05T07:49:36Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2368-1", "record": "SUSE-SU-2023:2368-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-06-05T07:49:36Z", "date_only": false, "value": "2023-06-05T07:49:36Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2368-1", "record": "SUSE-SU-2023:2368-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2023-06-05T07:49:36Z", "date_only": false, "value": "2023-06-05T07:49:36Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:2368-1", "record": "SUSE-SU-2023:2368-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-06-05T07:49:36Z", "date_only": false, "value": "2023-06-05T07:49:36Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2368-1", "record": "SUSE-SU-2023:2368-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-06-05T07:49:42Z", "date_only": false, "value": "2023-06-05T07:49:42Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2369-1", "record": "SUSE-SU-2023:2369-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-06-05T07:49:42Z", "date_only": false, "value": "2023-06-05T07:49:42Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2369-1", "record": "SUSE-SU-2023:2369-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2023-06-05T07:49:42Z", "date_only": false, "value": "2023-06-05T07:49:42Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:2369-1", "record": "SUSE-SU-2023:2369-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-06-05T07:49:42Z", "date_only": false, "value": "2023-06-05T07:49:42Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2369-1", "record": "SUSE-SU-2023:2369-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-06-05T07:49:54Z", "date_only": false, "value": "2023-06-05T07:49:54Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2371-1", "record": "SUSE-SU-2023:2371-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-06-05T07:49:54Z", "date_only": false, "value": "2023-06-05T07:49:54Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2371-1", "record": "SUSE-SU-2023:2371-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2023-06-05T07:49:54Z", "date_only": false, "value": "2023-06-05T07:49:54Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:2371-1", "record": "SUSE-SU-2023:2371-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-06-05T07:49:54Z", "date_only": false, "value": "2023-06-05T07:49:54Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2371-1", "record": "SUSE-SU-2023:2371-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-06-05T22:00:00Z", "date_only": false, "value": "2023-06-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.17.date", "linked_record": true}, {"timestamp": "2023-06-06T06:25:01Z", "date_only": false, "value": "2023-06-06T06:25:01Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2384-1", "record": "SUSE-SU-2023:2384-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-06-06T06:25:01Z", "date_only": false, "value": "2023-06-06T06:25:01Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2384-1", "record": "SUSE-SU-2023:2384-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2023-06-06T06:25:01Z", "date_only": false, "value": "2023-06-06T06:25:01Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:2384-1", "record": "SUSE-SU-2023:2384-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-06-06T06:25:01Z", "date_only": false, "value": "2023-06-06T06:25:01Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2384-1", "record": "SUSE-SU-2023:2384-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-06-06T17:33:48Z", "date_only": false, "value": "2023-06-06T17:33:48Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2425-1", "record": "SUSE-SU-2023:2425-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-06-06T17:33:48Z", "date_only": false, "value": "2023-06-06T17:33:48Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2425-1", "record": "SUSE-SU-2023:2425-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2023-06-06T17:33:48Z", "date_only": false, "value": "2023-06-06T17:33:48Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:2425-1", "record": "SUSE-SU-2023:2425-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-06-06T17:33:48Z", "date_only": false, "value": "2023-06-06T17:33:48Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2425-1", "record": "SUSE-SU-2023:2425-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-06-06T20:33:52Z", "date_only": false, "value": "2023-06-06T20:33:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2428-1", "record": "SUSE-SU-2023:2428-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-06-06T20:33:52Z", "date_only": false, "value": "2023-06-06T20:33:52Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2428-1", "record": "SUSE-SU-2023:2428-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2023-06-06T20:33:52Z", "date_only": false, "value": "2023-06-06T20:33:52Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:2428-1", "record": "SUSE-SU-2023:2428-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-06-06T20:33:52Z", "date_only": false, "value": "2023-06-06T20:33:52Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2428-1", "record": "SUSE-SU-2023:2428-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-06-06T21:04:43Z", "date_only": false, "value": "2023-06-06T21:04:43Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2431-1", "record": "SUSE-SU-2023:2431-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-06-06T21:04:43Z", "date_only": false, "value": "2023-06-06T21:04:43Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2431-1", "record": "SUSE-SU-2023:2431-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2023-06-06T21:04:43Z", "date_only": false, "value": "2023-06-06T21:04:43Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:2431-1", "record": "SUSE-SU-2023:2431-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-06-06T21:04:43Z", "date_only": false, "value": "2023-06-06T21:04:43Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2431-1", "record": "SUSE-SU-2023:2431-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-06-06T22:00:00Z", "date_only": false, "value": "2023-06-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.18.date", "linked_record": true}, {"timestamp": "2023-06-07T11:34:52Z", "date_only": false, "value": "2023-06-07T11:34:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2443-1", "record": "SUSE-SU-2023:2443-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-06-07T11:34:52Z", "date_only": false, "value": "2023-06-07T11:34:52Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2443-1", "record": "SUSE-SU-2023:2443-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2023-06-07T11:34:52Z", "date_only": false, "value": "2023-06-07T11:34:52Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:2443-1", "record": "SUSE-SU-2023:2443-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-06-07T11:34:52Z", "date_only": false, "value": "2023-06-07T11:34:52Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2443-1", "record": "SUSE-SU-2023:2443-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-06-07T12:06:23Z", "date_only": false, "value": "2023-06-07T12:06:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverse_dungeon/3168", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "949fd636-8012-450a-8311-8433d420c308", "content": "\u0420\u0430\u0437\u0431\u043e\u0440 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 OverlayFS (CVE-2023-0386) https://habr.com/p/739030/", "url": "https://t.me/reverse_dungeon/3168"}, {"timestamp": "2023-06-07T14:34:27Z", "date_only": false, "value": "2023-06-07T14:34:27Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2455-1", "record": "SUSE-SU-2023:2455-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-06-07T14:34:27Z", "date_only": false, "value": "2023-06-07T14:34:27Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2455-1", "record": "SUSE-SU-2023:2455-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2023-06-07T14:34:27Z", "date_only": false, "value": "2023-06-07T14:34:27Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:2455-1", "record": "SUSE-SU-2023:2455-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-06-07T14:34:27Z", "date_only": false, "value": "2023-06-07T14:34:27Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2455-1", "record": "SUSE-SU-2023:2455-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-06-07T14:35:00Z", "date_only": false, "value": "2023-06-07T14:35:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2459-1", "record": "SUSE-SU-2023:2459-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-06-07T14:35:00Z", "date_only": false, "value": "2023-06-07T14:35:00Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2459-1", "record": "SUSE-SU-2023:2459-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2023-06-07T14:35:00Z", "date_only": false, "value": "2023-06-07T14:35:00Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:2459-1", "record": "SUSE-SU-2023:2459-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-06-07T14:35:00Z", "date_only": false, "value": "2023-06-07T14:35:00Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2459-1", "record": "SUSE-SU-2023:2459-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-06-08T07:45:50Z", "date_only": false, "value": "2023-06-08T07:45:50Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2468-1", "record": "SUSE-SU-2023:2468-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-06-08T07:45:50Z", "date_only": false, "value": "2023-06-08T07:45:50Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2468-1", "record": "SUSE-SU-2023:2468-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2023-06-08T07:45:50Z", "date_only": false, "value": "2023-06-08T07:45:50Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:2468-1", "record": "SUSE-SU-2023:2468-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-06-08T07:45:50Z", "date_only": false, "value": "2023-06-08T07:45:50Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2468-1", "record": "SUSE-SU-2023:2468-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-06-08T22:00:00Z", "date_only": false, "value": "2023-06-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.19.date", "linked_record": true}, {"timestamp": "2023-06-09T00:00:00Z", "date_only": false, "value": "2023-06-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0445", "record": "CERTFR-2023-AVI-0445", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-06-09T00:00:00Z", "date_only": false, "value": "2023-06-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0447", "record": "CERTFR-2023-AVI-0447", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-06-20T22:00:00Z", "date_only": false, "value": "2023-06-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.20.date", "linked_record": true}, {"timestamp": "2023-06-21T22:00:00Z", "date_only": false, "value": "2023-06-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.21.date", "linked_record": true}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": false, "value": "2023-06-23T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0484", "record": "CERTFR-2023-AVI-0484", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": false, "value": "2023-06-23T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0488", "record": "CERTFR-2023-AVI-0488", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-06-26T16:56:00Z", "date_only": false, "value": "2023-06-26T16:56Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-0386", "record": "GSD-2023-0386", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-07-06T19:24:12Z", "date_only": false, "value": "2023-07-06T19:24:12Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P72Q-V88C-RPRQ", "record": "GHSA-P72Q-V88C-RPRQ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-07-11T14:55:21Z", "date_only": false, "value": "2023-07-11T14:55:21Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2809-1", "record": "SUSE-SU-2023:2809-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-07-11T14:55:21Z", "date_only": false, "value": "2023-07-11T14:55:21Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2809-1", "record": "SUSE-SU-2023:2809-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2023-07-11T14:55:21Z", "date_only": false, "value": "2023-07-11T14:55:21Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:2809-1", "record": "SUSE-SU-2023:2809-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-07-11T14:55:21Z", "date_only": false, "value": "2023-07-11T14:55:21Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2809-1", "record": "SUSE-SU-2023:2809-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-07-11T22:00:00Z", "date_only": false, "value": "2023-07-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.22.date", "linked_record": true}, {"timestamp": "2023-07-13T00:00:00Z", "date_only": false, "value": "2023-07-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0544", "record": "CERTFR-2023-AVI-0544", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-07-23T05:54:28Z", "date_only": false, "value": "2023-07-23T05:54:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/timcore_hacking/2632", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "9dd83e25-e4ef-47a4-8571-153617755e3f", "content": "#hackthebox\n#hacking\n#htb\n\nHackTheBox - TwoMillion\n\n00:00 - Intro\n00:18 - Start of nmap, scanning all ports with min-rate\n02:35 - Browsing to the web page and taking a trip down memory lane with the HackTheBox v1 page\n04:00 - Attempting to enumerate usernames\n05:10 - Solving the HackTheBox Invite Code Challenge\n05:50 - Sending the code to JS-Beautify\n06:45 - Sending a curl request to /api/v1/invite/how/to/generate to see how to generate an invite code\n10:40 - Creating an account and logging into the platform then identifying what we can do\n16:50 - Discovering hitting /api/v1/ provides a list of API Routes, going over them and identifying any dangerous ones\n17:50 - Attempting a mass assignment vulnerability upon logging in now that we know there is an is_admin flag\n22:30 - Playing with the /api/v1/admin/settings/update route and discovering we can hit this as our user and change our role to admin\n24:30 - Now that we are admin, playing with /api/v1/admin/vpn/generate and finding a command injection vulnerability\n26:15 - Got a shell on the box, finding a password in an environment variable and attempting to crack the user passwords\n30:00 - Re-using the database password to login as admin, discovering mail that hints at using a kernel privesc\n32:00 - Searching for the OverlayFS Kernel Exploit\n35:00 - Finding a proof of concept for CVE-2023-0386, seems sketchy but GCC is on the HTB Machine so i don't feel bad about running it\n37:27 - Running the exploit and getting Root, finding an extra challenge thank_you.json, which is can be done pretty much in CyberChef\n42:20 - Looking deeper at the invite code challenge to see if it was vulnerable to Type Juggling (it was back in the day but not anymore)\n43:30 - Testing for command injection with a poisoned username\n47:20 - Didn't work, looking at the source code and discovering it had sanitized usernames on the non-admin function\n\nhttps://www.youtube.com/watch?v=Exl4P3fsF7U", "url": "https://t.me/timcore_hacking/2632", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-07-23T05:54:28Z", "date_only": false, "value": "2023-07-23T05:54:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/timcore_hacking/2632", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "9ac559fc-f7f9-4832-8652-fd3149e881c5", "content": "#hackthebox\n#hacking\n#htb\n\nHackTheBox - TwoMillion\n\n00:00 - Intro\n00:18 - Start of nmap, scanning all ports with min-rate\n02:35 - Browsing to the web page and taking a trip down memory lane with the HackTheBox v1 page\n04:00 - Attempting to enumerate usernames\n05:10 - Solving the HackTheBox Invite Code Challenge\n05:50 - Sending the code to JS-Beautify\n06:45 - Sending a curl request to /api/v1/invite/how/to/generate to see how to generate an invite code\n10:40 - Creating an account and logging into the platform then identifying what we can do\n16:50 - Discovering hitting /api/v1/ provides a list of API Routes, going over them and identifying any dangerous ones\n17:50 - Attempting a mass assignment vulnerability upon logging in now that we know there is an is_admin flag\n22:30 - Playing with the /api/v1/admin/settings/update route and discovering we can hit this as our user and change our role to admin\n24:30 - Now that we are admin, playing with /api/v1/admin/vpn/generate and finding a command injection vulnerability\n26:15 - Got a shell on the box, finding a password in an environment variable and attempting to crack the user passwords\n30:00 - Re-using the database password to login as admin, discovering mail that hints at using a kernel privesc\n32:00 - Searching for the OverlayFS Kernel Exploit\n35:00 - Finding a proof of concept for CVE-2023-0386, seems sketchy but GCC is on the HTB Machine so i don't feel bad about running it\n37:27 - Running the exploit and getting Root, finding an extra challenge thank_you.json, which is can be done pretty much in CyberChef\n42:20 - Looking deeper at the invite code challenge to see if it was vulnerable to Type Juggling (it was back in the day but not anymore)\n43:30 - Testing for command injection with a poisoned username\n47:20 - Didn't work, looking at the source code and discovering it had sanitized usernames on the non-admin function\n\nhttps://www.youtube.com/watch?v=Exl4P3fsF7U", "url": "https://t.me/timcore_hacking/2632"}, {"timestamp": "2023-09-15T13:41:48Z", "date_only": false, "value": "2023-09-15T13:41:48Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2023:1566", "record": "ALSA-2023:1566", "field": "modified", "linked_record": true}, {"timestamp": "2023-09-15T13:41:48Z", "date_only": false, "value": "2023-09-15T13:41:48Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2023:1584", "record": "ALSA-2023:1584", "field": "modified", "linked_record": true}, {"timestamp": "2023-10-11T16:26:53Z", "date_only": false, "value": "2023-10-11T16:26:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5370", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "b94caf68-f0c6-4e14-a920-49549f3ae1d7", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aThe OverlayFS vulnerability CVE-2023-0386\nURL\uff1ahttps://github.com/Rabie-el-hakouni/CVE-2023-0386\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5370", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-30T06:52:26Z", "date_only": false, "value": "2023-11-30T06:52:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/787", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "db8aa43f-0a7e-44d9-8e00-b95bf75f4661", "content": "#ExploitObserverAlert\n\nCVE-2023-0386\n\nDESCRIPTION: Exploit Observer has 51 entries related to CVE-2023-0386. A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel\u2019s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/787"}, {"timestamp": "2023-12-04T01:31:37Z", "date_only": false, "value": "2023-12-04T01:31:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1081", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "ec5f27c9-00e4-4781-9832-a5111fa25e60", "content": "#ExploitObserverAlert\n\nCVE-2023-0386\n\nDESCRIPTION: Exploit Observer has 50 entries related to CVE-2023-0386. A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel\u2019s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/1081"}, {"timestamp": "2023-12-13T01:20:22.568Z", "date_only": false, "value": "2023-12-13T01:20:22.568338Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-0386", "record": "GSD-2023-0386", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-01-10T23:00:00Z", "date_only": false, "value": "2024-01-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0064", "record": "WID-SEC-W-2024-0064", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-01-10T23:00:00Z", "date_only": false, "value": "2024-01-10T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0064", "record": "WID-SEC-W-2024-0064", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-01-10T23:00:00Z", "date_only": false, "value": "2024-01-10T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0064", "record": "WID-SEC-W-2024-0064", "field": "vulnerabilities.74.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-11T00:00:00Z", "date_only": false, "value": "2024-01-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0027", "record": "CERTFR-2024-AVI-0027", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2024-04-26T14:02:59Z", "date_only": false, "value": "2024-04-26T14:02:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/zUMosOVahjrvbfSki-OY0fLEr1wlqMze_KcW0hLaxiJVz6Xi", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "20e2ee6f-b56d-4b97-877e-b3a51d3d2518", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-06-05T22:00:00Z", "date_only": false, "value": "2024-06-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.23.date", "linked_record": true}, {"timestamp": "2024-06-25T00:00:00Z", "date_only": true, "value": "2024-06-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0527", "record": "CERTFR-2024-AVI-0527", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2024-06-27T12:11:02.905Z", "date_only": false, "value": "2024-06-27T12:11:02.905Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "CVE-2023-0386", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-27T22:00:00Z", "date_only": false, "value": "2024-06-27T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.revision_history.24.date", "linked_record": true}, {"timestamp": "2024-06-27T22:00:00Z", "date_only": false, "value": "2024-06-27T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-06-28T00:00:00Z", "date_only": false, "value": "2024-06-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0527", "record": "CERTFR-2024-AVI-0527", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2024-08-02T05:10:55.563Z", "date_only": false, "value": "2024-08-02T05:10:55.563Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-0386", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:47:12.536Z", "date_only": false, "value": "2024-08-15T17:47:12.536+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0734", "record": "WID-SEC-W-2023-0734", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-09-26T19:31:49Z", "date_only": false, "value": "2024-09-26T19:31:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "c13e37d2-0391-40aa-8a40-1025d9df4e68", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb"}, {"timestamp": "2024-11-15T13:27:03Z", "date_only": false, "value": "2024-11-15T13:27:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1584", "record": "RHSA-2023_1584", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-15T13:27:03Z", "date_only": false, "value": "2024-11-15T13:27:03+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023_1584", "record": "RHSA-2023_1584", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-15T13:27:03Z", "date_only": false, "value": "2024-11-15T13:27:03+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023_1584", "record": "RHSA-2023_1584", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-15T13:27:41Z", "date_only": false, "value": "2024-11-15T13:27:41+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1554", "record": "RHSA-2023_1554", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-15T13:27:41Z", "date_only": false, "value": "2024-11-15T13:27:41+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023_1554", "record": "RHSA-2023_1554", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-15T13:27:41Z", "date_only": false, "value": "2024-11-15T13:27:41+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023_1554", "record": "RHSA-2023_1554", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-15T13:28:00Z", "date_only": false, "value": "2024-11-15T13:28:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1566", "record": "RHSA-2023_1566", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-15T13:28:00Z", "date_only": false, "value": "2024-11-15T13:28:00+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023_1566", "record": "RHSA-2023_1566", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-15T13:28:00Z", "date_only": false, "value": "2024-11-15T13:28:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023_1566", "record": "RHSA-2023_1566", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-15T13:28:44Z", "date_only": false, "value": "2024-11-15T13:28:44+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1660", "record": "RHSA-2023_1660", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-15T13:28:44Z", "date_only": false, "value": "2024-11-15T13:28:44+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023_1660", "record": "RHSA-2023_1660", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-15T13:28:44Z", "date_only": false, "value": "2024-11-15T13:28:44+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023_1660", "record": "RHSA-2023_1660", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-15T13:28:58Z", "date_only": false, "value": "2024-11-15T13:28:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1691", "record": "RHSA-2023_1691", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-15T13:28:58Z", "date_only": false, "value": "2024-11-15T13:28:58+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023_1691", "record": "RHSA-2023_1691", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-15T13:28:58Z", "date_only": false, "value": "2024-11-15T13:28:58+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023_1691", "record": "RHSA-2023_1691", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-15T13:29:02Z", "date_only": false, "value": "2024-11-15T13:29:02+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1681", "record": "RHSA-2023_1681", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-15T13:29:02Z", "date_only": false, "value": "2024-11-15T13:29:02+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023_1681", "record": "RHSA-2023_1681", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-15T13:29:02Z", "date_only": false, "value": "2024-11-15T13:29:02+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023_1681", "record": "RHSA-2023_1681", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-15T13:29:08Z", "date_only": false, "value": "2024-11-15T13:29:08+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1703", "record": "RHSA-2023_1703", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-15T13:29:08Z", "date_only": false, "value": "2024-11-15T13:29:08+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023_1703", "record": "RHSA-2023_1703", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-15T13:29:08Z", "date_only": false, "value": "2024-11-15T13:29:08+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023_1703", "record": "RHSA-2023_1703", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-15T13:30:00Z", "date_only": false, "value": "2024-11-15T13:30:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1984", "record": "RHSA-2023_1984", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-15T13:30:00Z", "date_only": false, "value": "2024-11-15T13:30:00+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023_1984", "record": "RHSA-2023_1984", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-15T13:30:00Z", "date_only": false, "value": "2024-11-15T13:30:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023_1984", "record": "RHSA-2023_1984", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-15T13:30:03Z", "date_only": false, "value": "2024-11-15T13:30:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1980", "record": "RHSA-2023_1980", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-15T13:30:03Z", "date_only": false, "value": "2024-11-15T13:30:03+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023_1980", "record": "RHSA-2023_1980", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-15T13:30:03Z", "date_only": false, "value": "2024-11-15T13:30:03+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023_1980", "record": "RHSA-2023_1980", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-15T13:30:12Z", "date_only": false, "value": "2024-11-15T13:30:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1970", "record": "RHSA-2023_1970", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-15T13:30:12Z", "date_only": false, "value": "2024-11-15T13:30:12+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023_1970", "record": "RHSA-2023_1970", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-15T13:30:12Z", "date_only": false, "value": "2024-11-15T13:30:12+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023_1970", "record": "RHSA-2023_1970", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-22T22:18:52Z", "date_only": false, "value": "2024-11-22T22:18:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1677", "record": "RHSA-2023_1677", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-22T22:18:52Z", "date_only": false, "value": "2024-11-22T22:18:52+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023_1677", "record": "RHSA-2023_1677", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-22T22:18:52Z", "date_only": false, "value": "2024-11-22T22:18:52+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023_1677", "record": "RHSA-2023_1677", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-22T22:31:08Z", "date_only": false, "value": "2024-11-22T22:31:08+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_1659", "record": "RHSA-2023_1659", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-22T22:31:08Z", "date_only": false, "value": "2024-11-22T22:31:08+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023_1659", "record": "RHSA-2023_1659", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-22T22:31:08Z", "date_only": false, "value": "2024-11-22T22:31:08+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023_1659", "record": "RHSA-2023_1659", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "bd6d64cb-c761-43bb-b975-cc96b0afe7f7"}, {"timestamp": "2025-02-23T04:10:50Z", "date_only": false, "value": "2025-02-23T04:10:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "cc825513-f403-4ba4-8299-6d3679664d09"}, {"timestamp": "2025-02-26T16:24:21Z", "date_only": false, "value": "2025-02-26T16:24:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5528", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "fae121e9-0e75-4d33-96ea-7a1fb5253cb3", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0386\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel\u2019s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.\n\ud83d\udccf Published: 2023-03-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T16:05:24.670Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a\n2. https://security.netapp.com/advisory/ntap-20230420-0004/\n3. https://www.debian.org/security/2023/dsa-5402\n4. https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html\n5. http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html\n6. https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/5528"}, {"timestamp": "2025-04-10T22:00:00Z", "date_only": false, "value": "2025-04-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0064", "record": "WID-SEC-W-2024-0064", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2025-04-10T22:00:00Z", "date_only": false, "value": "2025-04-10T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0064", "record": "WID-SEC-W-2024-0064", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-04-11T08:49:58.286Z", "date_only": false, "value": "2025-04-11T08:49:58.286+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0064", "record": "WID-SEC-W-2024-0064", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-06-16T17:37:56Z", "date_only": false, "value": "2025-06-16T17:37:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18481", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "af09d36f-27bb-4eb6-93a0-0e7704e8c540", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0386\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel\u2019s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.\n\ud83d\udccf Published: 2023-03-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-16T17:02:46.953Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a\n2. https://security.netapp.com/advisory/ntap-20230420-0004/\n3. https://www.debian.org/security/2023/dsa-5402\n4. https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html\n5. http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html\n6. https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/18481"}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-0386", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "729ce6ab-308d-431d-89af-a5c2ff780c3e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": true, "value": "2025-06-17", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-0386", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": true, "value": "2025-06-17", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-0386", "field": "evidence.0.details.date_added", "uuid": "729ce6ab-308d-431d-89af-a5c2ff780c3e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.2.threats.0.date", "linked_record": true}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1566", "record": "RHSA-2023:1566", "field": "vulnerabilities.3.threats.0.date", "linked_record": true}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1584", "record": "RHSA-2023:1584", "field": "vulnerabilities.3.threats.0.date", "linked_record": true}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1659", "record": "RHSA-2023:1659", "field": "vulnerabilities.2.threats.0.date", "linked_record": true}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1660", "record": "RHSA-2023:1660", "field": "vulnerabilities.1.threats.0.date", "linked_record": true}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1677", "record": "RHSA-2023:1677", "field": "vulnerabilities.3.threats.0.date", "linked_record": true}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1681", "record": "RHSA-2023:1681", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1691", "record": "RHSA-2023:1691", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1703", "record": "RHSA-2023:1703", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1970", "record": "RHSA-2023:1970", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1980", "record": "RHSA-2023:1980", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2023:1984", "record": "RHSA-2023:1984", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-0386", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "729ce6ab-308d-431d-89af-a5c2ff780c3e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-0386", "field": "status.status_updated_at", "uuid": "729ce6ab-308d-431d-89af-a5c2ff780c3e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-0386", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2023-0386 added to CISA KEV"}, {"timestamp": "2025-06-17T17:45:16.794Z", "date_only": false, "value": "2025-06-17T17:45:16.794987Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lrt2dnquym2z", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "97d50558-f9db-4245-b7b2-3ab8731a5b4e", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lrt2dnquym2z"}, {"timestamp": "2025-06-17T19:55:01.776Z", "date_only": false, "value": "2025-06-17T19:55:01.776736Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrtblnohic25", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "d821e44a-8d50-4837-b17a-886b4a78ad44", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrtblnohic25"}, {"timestamp": "2025-06-17T20:05:47.203Z", "date_only": false, "value": "2025-06-17T20:05:47.203321Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lrtc6ve7q723", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "5265a506-05d9-42bc-8ec3-e4f0e70b9807", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lrtc6ve7q723"}, {"timestamp": "2025-06-17T20:21:14.392Z", "date_only": false, "value": "2025-06-17T20:21:14.392886Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4240092", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "5255a9b6-018c-49e1-8c9f-390ec963717c", "url": "https://feedsin.space/feed/CISAKevBot/items/4240092"}, {"timestamp": "2025-06-18T00:09:57.860Z", "date_only": false, "value": "2025-06-18T00:09:57.860289Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lrtptjgev22s", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "7b50a06d-ea4a-4ba4-973a-3c7cf08b5dee", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3lrtptjgev22s"}, {"timestamp": "2025-06-18T04:43:00Z", "date_only": false, "value": "2025-06-18T04:43:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/06/cisa-warns-of-active-exploitation-of.html", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "43be5a33-2b1c-4dfe-bd20-bd26ce39aa03", "url": "https://thehackernews.com/2025/06/cisa-warns-of-active-exploitation-of.html"}, {"timestamp": "2025-06-18T04:58:51.360Z", "date_only": false, "value": "2025-06-18T04:58:51.360095Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lru7y3sfjo2p", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "c16046f0-fb3d-4c61-b1ce-a234db521d30", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lru7y3sfjo2p"}, {"timestamp": "2025-06-18T05:27:04.959Z", "date_only": false, "value": "2025-06-18T05:27:04.959941Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lrubkhgvsk2p", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "924e1335-be52-4157-a06d-33332f0c5b45", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3lrubkhgvsk2p"}, {"timestamp": "2025-06-18T05:31:19.069Z", "date_only": false, "value": "2025-06-18T05:31:19.069973Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lrubs5diq22x", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "5607973a-34bb-49c1-bcaf-65841f778330", "url": "https://bsky.app/profile/shiojiri.com/post/3lrubs5diq22x"}, {"timestamp": "2025-06-18T06:33:46Z", "date_only": false, "value": "2025-06-18T06:33:46.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/7017", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "86da2420-6eab-4de1-8807-cb4130338a9b", "content": "\ud83d\udee0\ufe0f\ud83d\udd13 A critical Linux kernel flaw (CVE-2023-0386) is now confirmed actively exploited\u2014granting root access via a simple trick.\n\nCISA just added it to the KEV list. Agencies have until July 8 to fix it.\n\nDetails here \u2192 https://thehackernews.com/2025/06/cisa-warns-of-active-exploitation-of.html", "url": "https://t.me/thehackernews/7017", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-18T08:00:42.560Z", "date_only": false, "value": "2025-06-18T08:00:42.560274Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lruk5awfjr2a", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "55a027ff-fc55-43de-8a09-ef7518256c0d", "url": "https://bsky.app/profile/nimblenerd.social/post/3lruk5awfjr2a"}, {"timestamp": "2025-06-18T09:54:11.554Z", "date_only": false, "value": "2025-06-18T09:54:11.554026Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lruqbewmhbo2", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "b2eef932-491b-43ea-a889-3dd9fd9ed0e5", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lruqbewmhbo2"}, {"timestamp": "2025-06-18T11:06:03.286Z", "date_only": false, "value": "2025-06-18T11:06:03.286358Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/114704040729422733", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "67747238-d2fb-4351-adfa-8effe103f29e", "url": "https://infosec.exchange/users/dragonjar/statuses/114704040729422733"}, {"timestamp": "2025-06-18T11:11:14Z", "date_only": false, "value": "2025-06-18T11:11:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/MGLqV8CP4ubA1g1QW4UwY6Ht-GqxXYbjuUa-NpJjm6emRw", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "2b02aa6e-a22c-4920-baa2-3002d798e58a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-18T11:57:29.886Z", "date_only": false, "value": "2025-06-18T11:57:29.886042Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lruxejmfvc2z", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "31352b5f-ad87-47b8-adf0-61fc9cf1db78", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3lruxejmfvc2z"}, {"timestamp": "2025-06-18T12:23:26.247Z", "date_only": false, "value": "2025-06-18T12:23:26.247625Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lruyt2r2422e", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "dbb0c5ce-b4d4-4cba-b203-fbf68db01d37", "url": "https://bsky.app/profile/nimblenerd.social/post/3lruyt2r2422e"}, {"timestamp": "2025-06-18T12:24:23.873Z", "date_only": false, "value": "2025-06-18T12:24:23.873546Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3lruyurjv3m2q", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "029daed2-4f56-4d0d-b78c-fce47b7a4329", "url": "https://bsky.app/profile/technology-news.bsky.social/post/3lruyurjv3m2q"}, {"timestamp": "2025-06-18T12:33:40Z", "date_only": false, "value": "2025-06-18T12:33:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/oyS5t2E86_OQiZAyGp85FZe9HT4MCXLxoteHjzWAXqT3Yz4", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "7bf068f0-a266-4f35-8218-06d564aea37b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-18T12:51:34Z", "date_only": false, "value": "2025-06-18T12:51:34.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberBulletin/3472", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "8c35d2a2-5773-4eb1-bb23-d4f965a67fd5", "content": "\u26a1\ufe0fCISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability.\n\nThe vulnerability, CVE-2023-0386 (CVSS score: 7.8), is an improper ownership bug in the Linux kernel that could be exploited to escalate privileges on susceptible systems. It was patched in early 2023.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/3472", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-18T13:00:17.361Z", "date_only": false, "value": "2025-06-18T13:00:17.361651Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lrv2up6i4ki2", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "4460436f-2ef7-40d5-9104-7813c4b32436", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lrv2up6i4ki2"}, {"timestamp": "2025-06-18T13:06:37.975Z", "date_only": false, "value": "2025-06-18T13:06:37.975775Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lrv373vee6a2", "record": "cve-2023-0386", "field": "creation_timestamp", "uuid": "49680793-5dee-43e6-9579-8b2c721f1a4b", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lrv373vee6a2"}, {"timestamp": "2025-06-18T14:07:32.263Z", "date_only": false, "value": "2025-06-18T14:07:32.263780Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/114704754402276566", "record": "cve-2023-0386", "field": "creation_timestamp", "uuid": "301e0242-1ce7-4f13-82c3-e10d4cb605cf", "url": "https://infosec.exchange/users/defendopsdiaries/statuses/114704754402276566"}, {"timestamp": "2025-06-18T14:09:39.133Z", "date_only": false, "value": "2025-06-18T14:09:39.133481Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lrv6qxyrts2m", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "eed54da5-e7a5-471d-b084-ac3e5e0128d2", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lrv6qxyrts2m"}, {"timestamp": "2025-06-18T14:35:34.793Z", "date_only": false, "value": "2025-06-18T14:35:34.793901Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lrva7dxoys2e", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "887f4ed3-fb4e-4580-9270-f1675100b56d", "url": "https://bsky.app/profile/nimblenerd.social/post/3lrva7dxoys2e"}, {"timestamp": "2025-06-18T20:47:46.637Z", "date_only": false, "value": "2025-06-18T20:47:46.637244Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrvuygiwqs2q", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "8492b601-57d7-4d35-ac44-cb2b93dce1d5", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrvuygiwqs2q"}, {"timestamp": "2025-06-18T20:50:32.681Z", "date_only": false, "value": "2025-06-18T20:50:32.681385Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrvv5t6rvk2q", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "e2058314-e0dd-45b7-9219-9cb94f83a903", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrvv5t6rvk2q"}, {"timestamp": "2025-06-18T20:57:16.083Z", "date_only": false, "value": "2025-06-18T20:57:16.083575Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrvvjn4e222q", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "d5754fd1-9c7c-4e2e-828e-f422a9f89b3f", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrvvjn4e222q"}, {"timestamp": "2025-06-18T21:02:24.024Z", "date_only": false, "value": "2025-06-18T21:02:24.024007Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lrvvsyuu3u2u", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "d8677a14-e6e3-4ed7-8d49-757928613189", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lrvvsyuu3u2u"}, {"timestamp": "2025-06-18T21:37:43.643Z", "date_only": false, "value": "2025-06-18T21:37:43.643787Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aimainainnu.bsky.social/post/3lrvxs75bu224", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "cfccb5ca-52b6-4035-94e0-f32200fc8587", "url": "https://bsky.app/profile/aimainainnu.bsky.social/post/3lrvxs75bu224"}, {"timestamp": "2025-06-18T21:38:12.923Z", "date_only": false, "value": "2025-06-18T21:38:12.923825Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lrvxt3hfy52g", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "bc7578e0-0a09-4689-8eed-3f34dd4141a3", "url": "https://bsky.app/profile/bluesky.awakari.com/post/3lrvxt3hfy52g"}, {"timestamp": "2025-06-18T21:38:15.640Z", "date_only": false, "value": "2025-06-18T21:38:15.640693Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lrvxt6poig2p", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "e980617a-f922-4771-9606-62c45eeaae28", "url": "https://bsky.app/profile/bluesky.awakari.com/post/3lrvxt6poig2p"}, {"timestamp": "2025-06-18T22:58:59.379Z", "date_only": false, "value": "2025-06-18T22:58:59.379279Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrw4dhe2fs22", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "b70397ad-796f-4920-9113-f7904bb545df", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrw4dhe2fs22"}, {"timestamp": "2025-06-19T02:21:10.038Z", "date_only": false, "value": "2025-06-19T02:21:10.038955Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lrwhn24vjw2a", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "0c7b1407-0aed-46ca-9fed-0b0309f1a8c3", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lrwhn24vjw2a"}, {"timestamp": "2025-06-19T06:40:12Z", "date_only": false, "value": "2025-06-19T06:40:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/kasperskyb2b/1780", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "2b9a73fa-c43a-4eff-a436-c4fde91bfedc", "content": "\ud83d\udd04 \u041e\u043f\u0430\u0441\u043d\u044b\u0439 \u0434\u0435\u0444\u0435\u043a\u0442 udisks \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root \u043d\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0431\u043e\u0440\u043e\u043a Linux\n\n\u041d\u043e\u0432\u0430\u044f CVE-2025-6019 \u0432 Linux \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0434\u043e root, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 libblockdev, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u0434\u0435\u043c\u043e\u043d\u0443 udisks2 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 allow_active (\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0438\u0434\u044f\u0449\u0438\u0439 \u043f\u0435\u0440\u0435\u0434 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c). \u0425\u043e\u0442\u044f \u043a\u0430\u0436\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u044d\u0442\u043e \u0441\u0440\u0430\u0437\u0443 \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0430\u0442\u0430\u043a\u0443 \u0432 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044e \u00ab\u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c\u00bb, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043c\u043d\u043e\u0433\u043e \u0442\u0440\u044e\u043a\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c allow_active \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u2014 \u043e\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u0440\u043e\u0434\u0435 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0451\u043d\u043d\u043e\u0439 CVE-2025-6018 \u0432 SUSE \u0434\u043e \u0443\u0433\u043e\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0441\u0441\u0438\u0438.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0447\u0442\u0438 \u0432\u0441\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 (\u043a\u0440\u043e\u043c\u0435 \u043f\u043e\u0436\u0430\u043b\u0443\u0439 Arch) \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 udisks, \u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u043e. PoC \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u043d\u0430 Ubuntu, Debian, Fedora \u0438 openSUSE. \u041f\u0440\u0430\u0432\u0434\u0430, \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u044f\u0445 udisks \u0447\u0430\u0441\u0442\u043e \u0434\u0435\u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d, \u043d\u043e \u043c\u044b \u0436\u0435 \u0441\u0442\u0440\u0435\u043c\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043c \u043d\u0430 *nix \u043d\u0430 \u0434\u0435\u0441\u043a\u0442\u043e\u043f\u0430\u0445, \u043f\u0440\u0430\u0432\u0434\u0430?\n\n\u0412 \u0446\u0435\u043b\u043e\u043c LPE \u0432 Linux-\u0441\u0440\u0435\u0434\u0430\u0445 \u2014 \u0442\u043e\u0432\u0430\u0440, \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u0430\u0442\u0447\u0438\u0442\u044c\u0441\u044f \u043d\u0430\u0434\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e. \u0412\u043e\u0442 CISA \u043f\u043e\u0437\u0430\u0432\u0447\u0435\u0440\u0430 \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u0430 \u0432 KEV \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u0442\u043e\u0433\u043e \u0442\u0438\u043f\u0430, CVE-2023-0386.\n\n\u0422\u0430\u043c, \u0433\u0434\u0435 \u043f\u0430\u0442\u0447 \u0435\u0449\u0451 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u043b\u0438 \u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043d\u0435\u043b\u044c\u0437\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c, \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u043c\u0435\u0440\u043e\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043c\u0435\u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438: \n\ud83d\udca1\u043f\u0440\u0430\u0432\u0438\u043b\u043e polkit  \"org.freedesktop.udisks2.modify-device\" \u2014  \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 allow_active  yes \u27a1\ufe0f auth_admin\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1780", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-19T08:25:31.417Z", "date_only": false, "value": "2025-06-19T08:25:31.417922Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrx3y6h6w5j2", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "782604c5-27a7-41ca-bfa8-b06f1798c68f", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrx3y6h6w5j2"}, {"timestamp": "2025-06-19T09:44:08.742Z", "date_only": false, "value": "2025-06-19T09:44:08.742126Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lrxaf5muhx2a", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "6a4ed17b-f1bd-4dbc-8bcd-10163303e9fa", "url": "https://bsky.app/profile/bluesky.awakari.com/post/3lrxaf5muhx2a"}, {"timestamp": "2025-06-19T13:10:13.143Z", "date_only": false, "value": "2025-06-19T13:10:13.143548Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lrxlskghrmw2", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "1825c634-04d2-40a0-8bc8-aeb0282a1803", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lrxlskghrmw2"}, {"timestamp": "2025-06-19T13:45:40.194Z", "date_only": false, "value": "2025-06-19T13:45:40.194341Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3lrxnuzfuln2f", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "f6197f96-a329-4457-8e0a-de9662d6f8ec", "url": "https://bsky.app/profile/it-connect.bsky.social/post/3lrxnuzfuln2f"}, {"timestamp": "2025-06-19T18:44:35.551Z", "date_only": false, "value": "2025-06-19T18:44:35.551279Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hongybarrosz.bsky.social/post/3lry6liy4lc24", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "b10eb59a-a747-4f92-9be4-5870d58bce24", "url": "https://bsky.app/profile/hongybarrosz.bsky.social/post/3lry6liy4lc24"}, {"timestamp": "2025-06-19T20:30:02.214Z", "date_only": false, "value": "2025-06-19T20:30:02.214740Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lryehr3pmyu2", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "885d06df-2154-46a6-b921-3883a13f6c71", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lryehr3pmyu2"}, {"timestamp": "2025-06-20T09:42:41.865Z", "date_only": false, "value": "2025-06-20T09:42:41.865652Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-692bb08b-c15358b13768c37c", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "aeb084f1-aa20-4daa-ac8d-bb1fb2cc2b8f", "url": "https://poliverso.org/objects/0477a01e-692bb08b-c15358b13768c37c"}, {"timestamp": "2025-06-20T11:19:54.724Z", "date_only": false, "value": "2025-06-20T11:19:54.724837Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrzw75n7fhy2", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "08a63602-421e-4d0c-9206-598b7391098d", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrzw75n7fhy2"}, {"timestamp": "2025-06-20T14:56:24.713Z", "date_only": false, "value": "2025-06-20T14:56:24.713753Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ls2ccbni7q52", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "f2bef062-b5b3-4bd0-b0ca-bb08f1cad06d", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ls2ccbni7q52"}, {"timestamp": "2025-06-20T15:29:51Z", "date_only": false, "value": "2025-06-20T15:29:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/linux4amateurfunk/340", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "ff0bfce6-bcb6-471f-9e7c-1a94f37729c7", "content": "CISA warnt vor Angreifern, die Linux-Sicherheitsl\u00fccke mit PoC-Exploit ausnutzen\n\nCISA hat US-Bundesbeh\u00f6rden vor Angreifern gewarnt, die eine schwerwiegende Sicherheitsl\u00fccke im OverlayFS-Subsystem des Linux-Kernels ausnutzen und sich dadurch Root-Rechte verschaffen k\u00f6nnen.\n\nDiese Sicherheitsl\u00fccke zur lokalen Rechteausweitung (CVE-2023-0386) wird durch eine Schwachstelle im Linux-Kernel bei der unsachgem\u00e4\u00dfen Eigent\u00fcmerverwaltung verursacht. Sie wurde im Januar 2023 behoben und zwei Monate sp\u00e4ter \u00f6ffentlich bekannt gegeben.\n\nAb Mai 2023 wurden zudem mehrere Proof-of-Concept-Exploits (PoC) auf GitHub ver\u00f6ffentlicht. Dies erleichtert Ausnutzungsversuche und r\u00fcckt die Sicherheitsl\u00fccke ganz oben auf die Patch-Priorit\u00e4tsliste von Linux-Administratoren.\n\nLaut einer Analyse von Datadog Security Labs ist CVE-2023-0386 leicht auszunutzen und betrifft eine breite Palette von Linux-Distributionen, darunter auch beliebte wie Debian, Red Hat, Ubuntu und Amazon Linux, wenn diese eine Kernel-Version niedriger als 6.2 verwenden.\n\n\nhttps://www.bleepingcomputer.com/news/security/cisa-warns-of-attackers-exploiting-linux-flaw-with-poc-exploit/", "url": "https://t.me/linux4amateurfunk/340", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-20T15:29:51Z", "date_only": false, "value": "2025-06-20T15:29:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/linux4amateurfunk/340", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "1e5ce8de-a801-491d-b8bd-62cf8d9c04c6", "content": "CISA warnt vor Angreifern, die Linux-Sicherheitsl\u00fccke mit PoC-Exploit ausnutzen\n\nCISA hat US-Bundesbeh\u00f6rden vor Angreifern gewarnt, die eine schwerwiegende Sicherheitsl\u00fccke im OverlayFS-Subsystem des Linux-Kernels ausnutzen und sich dadurch Root-Rechte verschaffen k\u00f6nnen.\n\nDiese Sicherheitsl\u00fccke zur lokalen Rechteausweitung (CVE-2023-0386) wird durch eine Schwachstelle im Linux-Kernel bei der unsachgem\u00e4\u00dfen Eigent\u00fcmerverwaltung verursacht. Sie wurde im Januar 2023 behoben und zwei Monate sp\u00e4ter \u00f6ffentlich bekannt gegeben.\n\nAb Mai 2023 wurden zudem mehrere Proof-of-Concept-Exploits (PoC) auf GitHub ver\u00f6ffentlicht. Dies erleichtert Ausnutzungsversuche und r\u00fcckt die Sicherheitsl\u00fccke ganz oben auf die Patch-Priorit\u00e4tsliste von Linux-Administratoren.\n\nLaut einer Analyse von Datadog Security Labs ist CVE-2023-0386 leicht auszunutzen und betrifft eine breite Palette von Linux-Distributionen, darunter auch beliebte wie Debian, Red Hat, Ubuntu und Amazon Linux, wenn diese eine Kernel-Version niedriger als 6.2 verwenden.\n\n\nhttps://www.bleepingcomputer.com/news/security/cisa-warns-of-attackers-exploiting-linux-flaw-with-poc-exploit/", "url": "https://t.me/linux4amateurfunk/340"}, {"timestamp": "2025-06-20T21:10:58.548Z", "date_only": false, "value": "2025-06-20T21:10:58.548221Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3ls2x7wfbbqy2", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "60cf61a9-a0b3-4196-91c2-df26e46c9492", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3ls2x7wfbbqy2"}, {"timestamp": "2025-06-23T12:58:47.843Z", "date_only": false, "value": "2025-06-23T12:58:47.843627Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lsbn4fri3pz2", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "ce112e9d-56a0-4731-9f3b-c3aed27a3736", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lsbn4fri3pz2"}, {"timestamp": "2025-06-24T12:12:37.513Z", "date_only": false, "value": "2025-06-24T12:12:37.513721Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lse2vb5l5vf2", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "4b38cd4f-b891-487d-a99d-ad9d5d2ac7ff", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lse2vb5l5vf2"}, {"timestamp": "2025-06-24T18:30:30.882Z", "date_only": false, "value": "2025-06-24T18:30:30.882878Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lseq2l32ulv2", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "abbc127f-807a-469b-ab62-772550858542", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lseq2l32ulv2"}, {"timestamp": "2025-06-25T10:03:25Z", "date_only": false, "value": "2025-06-25T10:03:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ics_cert/1195", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "fc57eecd-6c0e-404e-8499-955a177ab200", "content": "CISA \u0631\u0633\u0645\u0627\u064b \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u0647\u0633\u062a\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0631\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0641\u0639\u0627\u0644 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f.\n\n\ud83d\udea8 \u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627\u060c CISA\u060c \u06cc\u06a9 \u062d\u0641\u0631\u0647 \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u0647\u0633\u062a\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633 - CVE-2023-0386 - \u0631\u0627 \u0628\u0647 \u0641\u0647\u0631\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0641\u0639\u0627\u0644 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a . \u0627\u06cc\u0646 \u06cc\u06a9 \u0627\u0634\u06a9\u0627\u0644 \u062f\u0631 \u0632\u06cc\u0631\u0633\u06cc\u0633\u062a\u0645 OverlayFS \u0627\u0633\u062a \u06a9\u0647 \u0647\u06a9\u0631\u0647\u0627 \u0628\u0647 \u0637\u0648\u0631 \u0641\u0639\u0627\u0644 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0627\u0632 \u0622\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u0627\u06af\u0631\u0686\u0647 \u0648\u0635\u0644\u0647 \u0645\u0631\u0628\u0648\u0637\u0647 \u062f\u0631 \u0627\u0648\u0627\u06cc\u0644 \u0633\u0627\u0644 \u06f2\u06f0\u06f2\u06f3 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u2699\ufe0f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u0641\u0627\u06cc\u0644\u06cc \u0628\u0627 \u067e\u0631\u0686\u0645 SUID \u062f\u0631 \u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc \u0645\u0627\u0646\u0646\u062f /tmp \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u062f \u0648 \u062d\u0642\u0648\u0642 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0631\u0628\u0631 \u0631\u06cc\u0634\u0647 \u0631\u0627 \u0628\u0647 \u062f\u0633\u062a \u0622\u0648\u0631\u062f. \u0627\u06cc\u0646 \u0631\u0648\u0634 \u062d\u0645\u0644\u0647 \u0622\u0646\u0642\u062f\u0631 \u0633\u0627\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0622\u0646 \u0631\u0627 \u0628\u0647 \u0631\u0627\u062d\u062a\u06cc \u062e\u0648\u062f\u06a9\u0627\u0631 \u06a9\u0631\u062f \u0648 \u062f\u0631 \u06a9\u0645\u067e\u06cc\u0646\u200c\u0647\u0627\u06cc \u0627\u0646\u0628\u0648\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f - \u0627\u06cc\u0646 \u062f\u0642\u06cc\u0642\u0627\u064b \u0647\u0645\u0627\u0646 \u0686\u06cc\u0632\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062a\u062d\u0642\u06cc\u0642\u0627\u062a Datadog \u0646\u0634\u0627\u0646 \u062f\u0627\u062f.\n\n\ud83d\udcc5 \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u062e\u0637\u0631\u0627\u062a \u0641\u0632\u0627\u06cc\u0646\u062f\u0647\u060c CISA \u0628\u0647 \u0647\u0645\u0647 \u0622\u0698\u0627\u0646\u0633\u200c\u0647\u0627\u06cc \u0641\u062f\u0631\u0627\u0644 \u062f\u0633\u062a\u0648\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u062a\u0627 \u06f8 \u0698\u0648\u0626\u06cc\u0647 \u06f2\u06f0\u06f2\u06f5 \u0648\u0635\u0644\u0647\u200c\u0647\u0627 \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u0646\u062f. \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0639\u0645\u0648\u0645\u06cc\u060c \u067e\u0644\u062a\u0641\u0631\u0645\u200c\u0647\u0627\u06cc \u0627\u0628\u0631\u06cc \u0648 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc CI/CD \u06a9\u0647 \u0628\u0647 \u0639\u0645\u0644\u06a9\u0631\u062f \u0635\u062d\u06cc\u062d \u0645\u06a9\u0627\u0646\u06cc\u0633\u0645\u200c\u0647\u0627\u06cc \u062c\u062f\u0627\u0633\u0627\u0632\u06cc \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0648\u0627\u0628\u0633\u062a\u0647 \u0647\u0633\u062a\u0646\u062f\u060c \u0628\u0647 \u0637\u0648\u0631 \u062e\u0627\u0635 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631 \u0647\u0633\u062a\u0646\u062f.\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ICSCERT_IR\n\u06af\u0631\u0648\u0647 \u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2", "url": "https://t.me/ics_cert/1195", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-08T00:00:00Z", "date_only": true, "value": "2025-07-08", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-0386", "field": "evidence.0.details.due_date", "uuid": "729ce6ab-308d-431d-89af-a5c2ff780c3e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-17T03:55:31.499Z", "date_only": false, "value": "2025-07-17T03:55:31.499341Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-0386", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-07-17T03:55:31.499Z", "date_only": false, "value": "2025-07-17T03:55:31.499341Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-0386", "record": "FKIE_CVE-2023-0386", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-08-31T03:00:51Z", "date_only": false, "value": "2025-08-31T03:00:51.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "f9d3092e-073d-4546-ab39-aa4a03cb199a"}, {"timestamp": "2025-09-09T11:00:15.826Z", "date_only": false, "value": "2025-09-09T11:00:15.826205Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dasgeldco.bsky.social/post/3lyfkurauhp24", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "cc9c1098-72df-4385-b1e1-a2c840ababb5", "url": "https://bsky.app/profile/dasgeldco.bsky.social/post/3lyfkurauhp24"}, {"timestamp": "2025-09-28T08:23:31Z", "date_only": false, "value": "2025-09-28T08:23:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "43aa4960-b47d-4a4c-9991-8208c3a1bb43"}, {"timestamp": "2025-09-29T03:12:14Z", "date_only": false, "value": "2025-09-29T03:12:14.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "ae3d5b00-52e7-428a-b0ad-ab286086c616"}, {"timestamp": "2025-10-01T00:00:00Z", "date_only": false, "value": "2025-10-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2025-10-01T00:00:00Z", "date_only": false, "value": "2025-10-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2025-10-20T00:21:27.842Z", "date_only": false, "value": "2025-10-20T00:21:27.842Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-0386", "record": "MSRC_CVE-2023-0386", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-10-21T23:15:22.744Z", "date_only": false, "value": "2025-10-21T23:15:22.744Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-0386", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:22.744Z", "date_only": false, "value": "2025-10-21T23:15:22.744Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-0386", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:43Z", "date_only": false, "value": "2025-10-22T00:32:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P72Q-V88C-RPRQ", "record": "GHSA-P72Q-V88C-RPRQ", "field": "modified", "linked_record": true}, {"timestamp": "2025-10-23T21:13:00Z", "date_only": false, "value": "2025-10-23T21:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "19de6a93-cc46-42fe-8634-b8ddbfe76ff9"}, {"timestamp": "2025-11-19T15:04:07Z", "date_only": false, "value": "2025-11-19T15:04:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Darkcrai86/aca6f141c1de8ee68b300c0d9cf484cd", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "a1d857b2-4ded-4290-be81-a4b4bf7ac4a9", "url": "https://gist.github.com/Darkcrai86/aca6f141c1de8ee68b300c0d9cf484cd"}, {"timestamp": "2026-02-02T12:25:58.627Z", "date_only": false, "value": "2026-02-02T12:25:58.627141Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/729ce6ab-308d-431d-89af-a5c2ff780c3e", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "427d1522-672d-4d1f-8266-20075b39da93", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/729ce6ab-308d-431d-89af-a5c2ff780c3e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-27T07:25:02Z", "date_only": false, "value": "2026-02-27T07:25:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ghh-jb/61f35d015c4e180bbddcf324be113e26", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "3d4ba220-55ed-43ad-90a2-453ceb5637dc", "url": "https://gist.github.com/ghh-jb/61f35d015c4e180bbddcf324be113e26"}, {"timestamp": "2026-04-22T07:44:53Z", "date_only": false, "value": "2026-04-22T07:44:53Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-0386", "record": "UBUNTU-CVE-2023-0386", "field": "modified", "linked_record": true}, {"timestamp": "2026-04-23T15:00:08Z", "date_only": false, "value": "2026-04-23T15:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/y0aqmKqPISFXaK6BYOX6gYFkEpF4DNtKoY_hRkn9BV7Wl58", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "66c7970f-5fe2-4719-bd66-de0304afdf77", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-01T10:33:20Z", "date_only": false, "value": "2026-06-01T10:33:20+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-0386", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "334108e7-de01-4ef1-8944-4f87f63a909e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:33:20Z", "date_only": false, "value": "2026-06-01T10:33:20+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-0386", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "334108e7-de01-4ef1-8944-4f87f63a909e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:33:20Z", "date_only": false, "value": "2026-06-01T10:33:20+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-0386", "field": "status.status_updated_at", "uuid": "334108e7-de01-4ef1-8944-4f87f63a909e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:33:20.672Z", "date_only": false, "value": "2026-06-01T10:33:20.672Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-0386", "field": "evidence.0.details.added_date", "uuid": "334108e7-de01-4ef1-8944-4f87f63a909e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-11T09:00:04Z", "date_only": false, "value": "2026-06-11T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/X3d0ov_B01fXeFh1HIc4iOWU-yKPAhiRlXClKZPas190B7A", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "28f1b658-a767-4f3a-a928-9952aadce8f3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T05:25:25.427Z", "date_only": false, "value": "2026-06-17T05:25:25.427", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-0386", "record": "FKIE_CVE-2023-0386", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:45:30.289Z", "date_only": false, "value": "2026-06-19T12:45:30.289549Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3d2887e7-1d8d-4eec-bf3d-640e9b02bc7f", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "e2a3a935-8fd3-4ce9-a04b-1c69fbf96981", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3d2887e7-1d8d-4eec-bf3d-640e9b02bc7f", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-0386", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "334108e7-de01-4ef1-8944-4f87f63a909e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:55.114Z", "date_only": false, "value": "2026-06-23T14:03:55.114211Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/334108e7-de01-4ef1-8944-4f87f63a909e", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "36a534b1-74d8-4b1d-a7eb-496c05721d49", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/334108e7-de01-4ef1-8944-4f87f63a909e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-01T20:11:33.835Z", "date_only": false, "value": "2026-07-01T20:11:33.835545Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/stillbigjosh/5a58fa426ea1b76221a6ce2ac9a909f6", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "71292371-89c1-49f2-9510-fae90065d04f", "content": "#!/usr/bin/env bash\n# ==============================================================================\n# HTB CPTS Tool Installer \u2014 Parrot OS (HTB Edition)\n# Mirrors ~/tools directory structure from Kali box\n# Usage: bash install-tools.sh [target-dir]   (default: ~/tools)\n# ==============================================================================\n\nset -euo pipefail\n\nTOOLS_DIR=\"${1:-$HOME/tools}\"\nLOG_FILE=\"$TOOLS_DIR/install.log\"\n\nRED='\\033[0;31m'; GREEN='\\033[0;32m'; YELLOW='\\033[1;33m'; BLUE='\\033[0;34m'; NC='\\033[0m'\n\nlog()     { echo -e \"${GREEN}[+]${NC} $*\" | tee -a \"$LOG_FILE\"; }\nwarn()    { echo -e \"${YELLOW}[!]${NC} $*\" | tee -a \"$LOG_FILE\"; }\nerr()     { echo -e \"${RED}[-]${NC} $*\" | tee -a \"$LOG_FILE\"; }\nsection() { echo -e \"\\n${BLUE}[*] ===== $* =====${NC}\" | tee -a \"$LOG_FILE\"; }\n\n# ------------------------------------------------------------------------------\n# Helpers\n# ------------------------------------------------------------------------------\n\nclone() {\n    local name=\"$1\" url=\"$2\" dest=\"$3\"\n    if [ -d \"$dest/.git\" ]; then\n        warn \"$name already cloned \u2014 pulling latest\"\n        git -C \"$dest\" pull --quiet 2>/dev/null || true\n    else\n        log \"Cloning $name...\"\n        if git clone --quiet --depth=1 \"$url\" \"$dest\" 2>/dev/null; then\n            log \"$name cloned OK\"\n        else\n            err \"Failed to clone $name ($url)\"\n        fi\n    fi\n}\n\ndownload() {\n    local name=\"$1\" url=\"$2\" dest=\"$3\" exe=\"${4:-true}\"\n    if [ -f \"$dest\" ]; then\n        warn \"$name already exists \u2014 skipping\"\n        return\n    fi\n    log \"Downloading $name...\"\n    if curl -fsSL \"$url\" -o \"$dest\"; then\n        [ \"$exe\" = \"true\" ] && chmod +x \"$dest\"\n        log \"$name downloaded OK\"\n    else\n        err \"Failed to download $name\"\n    fi\n}\n\ndownload_zip() {\n    local name=\"$1\" url=\"$2\" dest_dir=\"$3\"\n    log \"Downloading $name...\"\n    if curl -fsSL \"$url\" -o /tmp/_dl.zip && unzip -q /tmp/_dl.zip -d \"$dest_dir\" && rm -f /tmp/_dl.zip; then\n        log \"$name extracted OK\"\n    else\n        err \"Failed to download/extract $name\"\n        rm -f /tmp/_dl.zip\n    fi\n}\n\ndownload_tar() {\n    local name=\"$1\" url=\"$2\" dest_dir=\"$3\"\n    log \"Downloading $name...\"\n    if curl -fsSL \"$url\" | tar -xz -C \"$dest_dir\" 2>/dev/null; then\n        log \"$name extracted OK\"\n    else\n        err \"Failed to download/extract $name\"\n    fi\n}\n\npip_install() {\n    local tool=\"$1\" path=\"$2\"\n    if [ -f \"$path/requirements.txt\" ]; then\n        log \"pip: installing requirements for $tool...\"\n        pip3 install -r \"$path/requirements.txt\" -q 2>/dev/null || warn \"Some pip requirements failed for $tool\"\n    fi\n    if [ -f \"$path/setup.py\" ]; then\n        log \"pip: setup.py install for $tool...\"\n        pip3 install -e \"$path\" -q 2>/dev/null || warn \"setup.py install failed for $tool\"\n    fi\n}\n\nbuild_make() {\n    local name=\"$1\" path=\"$2\"\n    if [ -f \"$path/Makefile\" ]; then\n        log \"make: building $name...\"\n        (cd \"$path\" && make -s 2>/dev/null) && log \"$name built OK\" || warn \"$name make failed\"\n    fi\n}\n\nbuild_go() {\n    local name=\"$1\" path=\"$2\" out=\"${3:-$name}\"\n    if [ -f \"$path/go.mod\" ]; then\n        log \"go: building $name...\"\n        (cd \"$path\" && go build -ldflags=\"-s -w\" -o \"$out\" . 2>/dev/null) && log \"$name built OK\" || warn \"$name go build failed\"\n    fi\n}\n\n# ==============================================================================\n# PREFLIGHT\n# ==============================================================================\n\npreflight() {\n    section \"Preflight\"\n\n    local missing=()\n    for cmd in git curl wget python3 pip3 go ruby gem make gcc unzip; do\n        command -v \"$cmd\" &>/dev/null || missing+=(\"$cmd\")\n    done\n\n    if [ ${#missing[@]} -gt 0 ]; then\n        warn \"Missing: ${missing[*]} \u2014 installing...\"\n        sudo apt-get update -qq 2>/dev/null\n        sudo apt-get install -y git curl wget python3 python3-pip golang-go ruby ruby-dev \\\n            make gcc g++ libssl-dev libffi-dev python3-dev unzip libpcap-dev 2>/dev/null || true\n    fi\n\n    log \"Creating directory structure...\"\n    mkdir -p \"$TOOLS_DIR\"/{Activedir,Payloads,Pivot}\n    mkdir -p \"$TOOLS_DIR\"/Recon/{Linux,Network,Web,Windows}\n    mkdir -p \"$TOOLS_DIR\"/Privesc/{Windows,Linux,App}\n    > \"$LOG_FILE\"\n}\n\n# ==============================================================================\n# ACTIVE DIRECTORY\n# ==============================================================================\n\ninstall_activedir() {\n    section \"Active Directory Tools\"\n    local D=\"$TOOLS_DIR/Activedir\"\n\n    clone \"adidnsdump\"              \"https://github.com/dirkjanm/adidnsdump.git\"                                    \"$D/adidnsdump\"\n    pip_install \"adidnsdump\"        \"$D/adidnsdump\"\n\n    clone \"Certipy\"                 \"https://github.com/dru1d-foofus/Certipy\"                                       \"$D/Certipy\"\n    pip_install \"Certipy\"           \"$D/Certipy\"\n\n    clone \"CVE-2021-1675\"           \"https://github.com/cube0x0/CVE-2021-1675.git\"                                  \"$D/CVE-2021-1675\"\n\n    clone \"gMSADumper\"              \"https://github.com/micahvandeusen/gMSADumper.git\"                              \"$D/gMSADumper\"\n    pip_install \"gMSADumper\"        \"$D/gMSADumper\"\n\n    clone \"kerbrute\"                \"https://github.com/ropnop/kerbrute.git\"                                        \"$D/kerbrute\"\n    build_go \"kerbrute\"             \"$D/kerbrute\" \"kerbrute\"\n\n    clone \"krbrelayx\"               \"https://github.com/dirkjanm/krbrelayx.git\"                                     \"$D/krbrelayx\"\n    pip_install \"krbrelayx\"         \"$D/krbrelayx\"\n\n    clone \"NetNTLMtoSilverTicket\"   \"https://github.com/NotMedic/NetNTLMtoSilverTicket.git\"                         \"$D/NetNTLMtoSilverTicket\"\n\n    clone \"noPac\"                   \"https://github.com/Ridter/noPac.git\"                                           \"$D/noPac\"\n    pip_install \"noPac\"             \"$D/noPac\"\n\n    clone \"PassTheCert\"             \"https://github.com/AlmondOffSec/PassTheCert.git\"                               \"$D/PassTheCert\"\n\n    clone \"PetitPotam\"              \"https://github.com/topotam/PetitPotam.git\"                                     \"$D/PetitPotam\"\n\n    clone \"PKINITtools\"             \"https://github.com/dirkjanm/PKINITtools.git\"                                   \"$D/PKINITtools\"\n    pip_install \"PKINITtools\"       \"$D/PKINITtools\"\n\n    clone \"pywhisker\"               \"https://github.com/ShutdownRepo/pywhisker.git\"                                 \"$D/pywhisker\"\n    pip_install \"pywhisker\"         \"$D/pywhisker\"\n\n    clone \"Security-Assessment-PS\"  \"https://github.com/itzvenom/Security-Assessment-PS.git\"                        \"$D/Security-Assessment-PS\"\n\n    clone \"targetedKerberoast\"      \"https://github.com/ShutdownRepo/targetedKerberoast.git\"                        \"$D/targetedKerberoast\"\n    pip_install \"targetedKerberoast\" \"$D/targetedKerberoast\"\n\n    clone \"windapsearch\"            \"https://github.com/ropnop/windapsearch.git\"                                    \"$D/windapsearch\"\n    pip_install \"windapsearch\"      \"$D/windapsearch\"\n\n    # BloodHound CLI (precompiled)\n    if [ ! -f \"$D/bloodhound/bloodhound-cli\" ]; then\n        mkdir -p \"$D/bloodhound\"\n        local BH_URL\n        BH_URL=$(curl -fsSL \"https://api.github.com/repos/SpecterOps/BloodHound/releases/latest\" \\\n            | grep -o '\"browser_download_url\": *\"[^\"]*bloodhound-cli-linux-amd64\\.tar\\.gz\"' \\\n            | grep -o 'https://[^\"]*' | head -1)\n        if [ -n \"$BH_URL\" ]; then\n            download_tar \"BloodHound CLI\" \"$BH_URL\" \"$D/bloodhound\"\n            chmod +x \"$D/bloodhound/bloodhound-cli\" 2>/dev/null || true\n        else\n            warn \"BloodHound CLI: could not resolve download URL \u2014 check github.com/SpecterOps/BloodHound/releases\"\n        fi\n    else\n        warn \"BloodHound CLI already present\"\n    fi\n\n    # Rubeus (precompiled \u2014 Ghostpack)\n    if [ ! -f \"$D/Rubeus/Rubeus.exe\" ]; then\n        mkdir -p \"$D/Rubeus\"\n        download \"Rubeus.exe\" \\\n            \"https://github.com/r3motecontrol/Ghostpack-CompiledBinaries/raw/master/Rubeus.exe\" \\\n            \"$D/Rubeus/Rubeus.exe\" \"false\"\n    else\n        warn \"Rubeus.exe already present\"\n    fi\n}\n\n# ==============================================================================\n# PAYLOADS\n# ==============================================================================\n\ninstall_payloads() {\n    section \"Payload Tools\"\n    local D=\"$TOOLS_DIR/Payloads\"\n\n    clone \"CVE-2023-36664 Ghostscript\" \"https://github.com/jakabakos/CVE-2023-36664-Ghostscript-command-injection.git\" \"$D/Ghostscript\"\n    clone \"nishang\"                    \"https://github.com/samratashok/nishang.git\"                                     \"$D/nishang\"\n    clone \"ntlm_theft\"                 \"https://github.com/Greenwolf/ntlm_theft.git\"                                    \"$D/ntlm_theft\"\n    clone \"php-reverse-shell\"          \"https://github.com/pentestmonkey/php-reverse-shell.git\"                         \"$D/php-reverse-shell\"\n    clone \"reverse_shell_splunk\"       \"https://github.com/0xjpuff/reverse_shell_splunk.git\"                            \"$D/reverse_shell_splunk\"\n    clone \"wwwolf-php-webshell\"        \"https://github.com/WhiteWinterWolf/wwwolf-php-webshell.git\"                     \"$D/wwwolf-php-webshell\"\n\n    # RunasCs (precompiled)\n    if [ ! -f \"$D/RunasCs/RunasCs.exe\" ]; then\n        mkdir -p \"$D/RunasCs\"\n        download_zip \"RunasCs\" \\\n            \"https://github.com/antonioCoco/RunasCs/releases/latest/download/RunasCs.zip\" \\\n            \"$D/RunasCs\"\n    else\n        warn \"RunasCs (Payloads) already present\"\n    fi\n\n    # ysoserial.net (precompiled)\n    if [ ! -f \"$D/ysoserial/ysoserial.exe\" ]; then\n        mkdir -p \"$D/ysoserial\"\n        local YSOS_URL\n        YSOS_URL=$(curl -fsSL \"https://api.github.com/repos/pwntester/ysoserial.net/releases/latest\" \\\n            | grep -o '\"browser_download_url\": *\"[^\"]*\\.zip\"' \\\n            | grep -o 'https://[^\"]*' | head -1)\n        if [ -n \"$YSOS_URL\" ]; then\n            download_zip \"ysoserial.net\" \"$YSOS_URL\" \"$D/ysoserial\"\n        else\n            warn \"ysoserial.net: could not resolve download URL \u2014 check github.com/pwntester/ysoserial.net/releases\"\n        fi\n    else\n        warn \"ysoserial already present\"\n    fi\n}\n\n# ==============================================================================\n# PIVOT / TUNNELING\n# ==============================================================================\n\ninstall_pivot() {\n    section \"Pivot / Tunneling Tools\"\n    local D=\"$TOOLS_DIR/Pivot\"\n\n    # chisel \u2014 build from source\n    clone \"chisel\" \"https://github.com/jpillora/chisel.git\" \"$D/chisel\"\n    build_go \"chisel\" \"$D/chisel\" \"chisel\"\n\n    # dnscat2 \u2014 Ruby server + C client\n    clone \"dnscat2\" \"https://github.com/iagox86/dnscat2.git\" \"$D/dnscat2\"\n    if [ -f \"$D/dnscat2/server/Gemfile\" ]; then\n        log \"Installing dnscat2 gems...\"\n        (cd \"$D/dnscat2/server\" && gem install bundler -q 2>/dev/null && bundle install -q 2>/dev/null) \\\n            || warn \"dnscat2 gem install failed\"\n    fi\n    if [ -f \"$D/dnscat2/client/Makefile\" ]; then\n        log \"Building dnscat2 C client...\"\n        (cd \"$D/dnscat2/client\" && make -s 2>/dev/null) && log \"dnscat2 client built OK\" || warn \"dnscat2 client build failed\"\n    fi\n\n    clone \"dnscat2-powershell\" \"https://github.com/lukebaggett/dnscat2-powershell.git\" \"$D/dnscat2-powershell\"\n\n    # ptunnel-ng \u2014 build from source\n    clone \"ptunnel-ng\" \"https://github.com/utoni/ptunnel-ng.git\" \"$D/ptunnel-ng\"\n    if [ -f \"$D/ptunnel-ng/autogen.sh\" ]; then\n        log \"Building ptunnel-ng...\"\n        (cd \"$D/ptunnel-ng\" && ./autogen.sh 2>/dev/null && make -s 2>/dev/null) \\\n            && log \"ptunnel-ng built OK\" || warn \"ptunnel-ng build failed\"\n    else\n        build_make \"ptunnel-ng\" \"$D/ptunnel-ng\"\n    fi\n\n    clone \"rpivot\" \"https://github.com/klsecservices/rpivot.git\" \"$D/rpivot\"\n\n    # ligolo-ng (precompiled \u2014 no public git repo with source in original)\n    local LIGOLO_DIR=\"$D/ligolo-ng\"\n    if [ ! -f \"$LIGOLO_DIR/proxy\" ]; then\n        mkdir -p \"$LIGOLO_DIR\"\n        local LIGOLO_VER\n        LIGOLO_VER=$(curl -fsSL \"https://api.github.com/repos/nicocha30/ligolo-ng/releases/latest\" \\\n            | grep '\"tag_name\"' | grep -o 'v[0-9.]*' | head -1)\n        LIGOLO_VER=\"${LIGOLO_VER:-v0.8.2}\"\n        log \"Downloading ligolo-ng $LIGOLO_VER...\"\n        download_tar \"ligolo-ng proxy (linux)\"  \\\n            \"https://github.com/nicocha30/ligolo-ng/releases/download/$LIGOLO_VER/ligolo-ng_proxy_${LIGOLO_VER#v}_linux_amd64.tar.gz\" \\\n            \"$LIGOLO_DIR\" || \\\n        download_tar \"ligolo-ng proxy (linux, alt URL)\" \\\n            \"https://github.com/nicocha30/ligolo-ng/releases/download/$LIGOLO_VER/ligolo-ng_proxy_linux_amd64.tar.gz\" \\\n            \"$LIGOLO_DIR\"\n        chmod +x \"$LIGOLO_DIR/proxy\" 2>/dev/null || true\n\n        download_tar \"ligolo-ng agent (linux)\" \\\n            \"https://github.com/nicocha30/ligolo-ng/releases/download/$LIGOLO_VER/ligolo-ng_agent_${LIGOLO_VER#v}_linux_amd64.tar.gz\" \\\n            \"$LIGOLO_DIR\" || true\n        chmod +x \"$LIGOLO_DIR/agent\" 2>/dev/null || true\n\n        download_zip \"ligolo-ng agent (windows)\" \\\n            \"https://github.com/nicocha30/ligolo-ng/releases/download/$LIGOLO_VER/ligolo-ng_agent_${LIGOLO_VER#v}_windows_amd64.zip\" \\\n            \"$LIGOLO_DIR\" || true\n    else\n        warn \"ligolo-ng already present\"\n    fi\n}\n\n# ==============================================================================\n# PRIVILEGE ESCALATION\n# ==============================================================================\n\ninstall_privesc() {\n    section \"Privilege Escalation Tools\"\n    local GHOSTPACK=\"https://github.com/r3motecontrol/Ghostpack-CompiledBinaries/raw/master\"\n\n    # ---- Windows ----\n    local DW=\"$TOOLS_DIR/Privesc/Windows\"\n\n    clone \"Windows-PrivEsc-Cookbook\"  \"https://github.com/nickvourd/Windows-Local-Privilege-Escalation-Cookbook.git\" \"$DW/Cookbook\"\n    clone \"EnableAllTokenPrivs\"       \"https://github.com/fashionproof/EnableAllTokenPrivs.git\"                       \"$DW/EnableAllTokenPrivs\"\n    clone \"EoPLoadDriver\"             \"https://github.com/TarlogicSecurity/EoPLoadDriver.git\"                         \"$DW/EoPLoadDriver\"\n    clone \"psgetsystem\"               \"https://github.com/decoder-it/psgetsystem.git\"                                 \"$DW/psgetsystem\"\n    clone \"RoguePlanet\"               \"https://github.com/MSNightmare/RoguePlanet.git\"                                \"$DW/RoguePlanet\"\n    clone \"SeTcbPrivilege_escalation\" \"https://github.com/mSameerMalik/SeTcbPrivilege_escalation.git\"                \"$DW/SeTcbPrivilege_escalation\"\n\n    # GodPotato\n    if [ ! -f \"$DW/GodPotato/GodPotato-NET4.exe\" ]; then\n        mkdir -p \"$DW/GodPotato\"\n        download \"GodPotato-NET4.exe\" \\\n            \"https://github.com/BeichenDream/GodPotato/releases/latest/download/GodPotato-NET4.exe\" \\\n            \"$DW/GodPotato/GodPotato-NET4.exe\" \"false\"\n    else\n        warn \"GodPotato already present\"\n    fi\n\n    # JuicyPotato\n    if [ ! -f \"$DW/JuicyPotato/JuicyPotato.exe\" ]; then\n        mkdir -p \"$DW/JuicyPotato\"\n        download \"JuicyPotato.exe\" \\\n            \"https://github.com/ohpe/juicy-potato/releases/latest/download/JuicyPotato.exe\" \\\n            \"$DW/JuicyPotato/JuicyPotato.exe\" \"false\"\n    else\n        warn \"JuicyPotato already present\"\n    fi\n\n    # PrintSpoofer\n    if [ ! -f \"$DW/PrintSpoofer/PrintSpoofer64.exe\" ]; then\n        mkdir -p \"$DW/PrintSpoofer\"\n        download \"PrintSpoofer64.exe\" \\\n            \"https://github.com/itm4n/PrintSpoofer/releases/latest/download/PrintSpoofer64.exe\" \\\n            \"$DW/PrintSpoofer/PrintSpoofer64.exe\" \"false\"\n        download \"PrintSpoofer32.exe\" \\\n            \"https://github.com/itm4n/PrintSpoofer/releases/latest/download/PrintSpoofer32.exe\" \\\n            \"$DW/PrintSpoofer/PrintSpoofer32.exe\" \"false\"\n    else\n        warn \"PrintSpoofer already present\"\n    fi\n\n    # FullPowers\n    if [ ! -f \"$DW/FullPowers/FullPowers.exe\" ]; then\n        mkdir -p \"$DW/FullPowers\"\n        download \"FullPowers.exe\" \\\n            \"https://github.com/itm4n/FullPowers/releases/latest/download/FullPowers.exe\" \\\n            \"$DW/FullPowers/FullPowers.exe\" \"false\"\n    else\n        warn \"FullPowers already present\"\n    fi\n\n    # RunasCs\n    if [ ! -f \"$DW/RunasCs/RunasCs.exe\" ]; then\n        mkdir -p \"$DW/RunasCs\"\n        download_zip \"RunasCs (Privesc)\" \\\n            \"https://github.com/antonioCoco/RunasCs/releases/latest/download/RunasCs.zip\" \\\n            \"$DW/RunasCs\"\n    else\n        warn \"RunasCs (Privesc) already present\"\n    fi\n\n    # Ghostpack binaries: Seatbelt, SharpUp, SharpChrome\n    for bin in Seatbelt.exe SharpUp.exe SharpChrome.exe; do\n        local bname=\"${bin%%.*}\"\n        mkdir -p \"$DW/$bname\"\n        if [ ! -f \"$DW/$bname/$bin\" ]; then\n            download \"$bin\" \"$GHOSTPACK/$bin\" \"$DW/$bname/$bin\" \"false\"\n        else\n        warn \"$bin already present\"\n    fi\n    done\n\n    # SeBackupPrivilege DLLs\n    if [ ! -f \"$DW/SeBackupPrivilege/SeBackupPrivilegeCmdLets.dll\" ]; then\n        mkdir -p \"$DW/SeBackupPrivilege\"\n        local SBP_BASE=\"https://github.com/giuliano108/SeBackupPrivilege/raw/master/SeBackupPrivilegeCmdLets/bin/Debug\"\n        download \"SeBackupPrivilegeCmdLets.dll\" \"$SBP_BASE/SeBackupPrivilegeCmdLets.dll\" \"$DW/SeBackupPrivilege/SeBackupPrivilegeCmdLets.dll\" \"false\"\n        download \"SeBackupPrivilegeUtils.dll\"   \"$SBP_BASE/SeBackupPrivilegeUtils.dll\"   \"$DW/SeBackupPrivilege/SeBackupPrivilegeUtils.dll\"   \"false\"\n    else\n        warn \"SeBackupPrivilege already present\"\n    fi\n\n    # LaZagne.exe (Windows)\n    if [ ! -f \"$DW/LaZagne/LaZagne.exe\" ]; then\n        mkdir -p \"$DW/LaZagne\"\n        download \"LaZagne.exe\" \\\n            \"https://github.com/AlessandroZ/LaZagne/releases/latest/download/LaZagne.exe\" \\\n            \"$DW/LaZagne/LaZagne.exe\" \"false\"\n    else\n        warn \"LaZagne.exe (Privesc/Windows) already present\"\n    fi\n\n    # ---- Linux ----\n    local DL=\"$TOOLS_DIR/Privesc/Linux\"\n\n    clone \"CVE-2021-3156 BaronSamedit\" \"https://github.com/blasty/CVE-2021-3156.git\"                          \"$DL/Baronsamedit\"\n    build_make \"CVE-2021-3156\"         \"$DL/Baronsamedit\"\n\n    clone \"CVE-2022-2588 DirtyCred\"    \"https://github.com/Markakd/CVE-2022-2588.git\"                         \"$DL/DirtyCred\"\n\n    clone \"CVE-2022-0847 DirtyPipe\"    \"https://github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits.git\"  \"$DL/DirtyPipe\"\n    build_make \"CVE-2022-0847\"         \"$DL/DirtyPipe\"\n\n    clone \"fail2ban exploit\"           \"https://github.com/rvizx/fail2ban.git\"                                 \"$DL/fail2ban\"\n\n    clone \"CVE-2023-2640 GameOverlay\"  \"https://github.com/g1vi/CVE-2023-2640-CVE-2023-32629.git\"             \"$DL/GameOverlay\"\n\n    clone \"CVE-2021-3493 OverlayFS\"    \"https://github.com/briskets/CVE-2021-3493.git\"                        \"$DL/OverlayFS-CVE-2021-3493\"\n    if [ -f \"$DL/OverlayFS-CVE-2021-3493/exploit.c\" ]; then\n        log \"Compiling CVE-2021-3493...\"\n        gcc \"$DL/OverlayFS-CVE-2021-3493/exploit.c\" -o \"$DL/OverlayFS-CVE-2021-3493/exploit\" 2>/dev/null \\\n            && log \"CVE-2021-3493 compiled OK\" || warn \"CVE-2021-3493 compile failed\"\n    fi\n\n    clone \"CVE-2023-0386 OverlayFS\"    \"https://github.com/xkaneiki/CVE-2023-0386\"                            \"$DL/OverlayFS-CVE-2023-0386\"\n    build_make \"CVE-2023-0386\"         \"$DL/OverlayFS-CVE-2023-0386\"\n\n    clone \"PwnKit\"                     \"https://github.com/ly4k/PwnKit\"                                        \"$DL/PwnKit\"\n    build_make \"PwnKit\"                \"$DL/PwnKit\"\n\n    clone \"CVE-2024-1086\"              \"https://github.com/Notselwyn/CVE-2024-1086\"                            \"$DL/use_after_free-CVE-2024-1086\"\n\n    # ---- App ----\n    clone \"Nexus-Sonatype-RCE\" \\\n        \"https://github.com/aaryan-11-x/Nexus-Sonatype-Repository-Manager-Groovy-Script-RCE-Authenticated-.git\" \\\n        \"$TOOLS_DIR/Privesc/App/Nexus-Sonatype-Repository-Manager\"\n}\n\n# ==============================================================================\n# RECON\n# ==============================================================================\n\ninstall_recon() {\n    section \"Reconnaissance Tools\"\n\n    # ---- Linux ----\n    local DL=\"$TOOLS_DIR/Recon/Linux\"\n\n    clone \"LaZagne\"          \"https://github.com/AlessandroZ/LaZagne.git\"              \"$DL/LaZagne\"\n    pip_install \"LaZagne\"    \"$DL/LaZagne\"\n\n    clone \"LinEnum\"          \"https://github.com/rebootuser/LinEnum.git\"               \"$DL/LinEnum\"\n    chmod +x \"$DL/LinEnum/LinEnum.sh\" 2>/dev/null || true\n\n    clone \"linuxprivchecker\" \"https://github.com/sleventyeleven/linuxprivchecker.git\"  \"$DL/linuxprivchecker\"\n\n    clone \"mimipenguin\"      \"https://github.com/huntergregal/mimipenguin.git\"         \"$DL/mimipenguin\"\n    build_make \"mimipenguin\" \"$DL/mimipenguin\"\n\n    # linpeas (precompiled)\n    if [ ! -f \"$DL/linpeas/linpeas.sh\" ]; then\n        mkdir -p \"$DL/linpeas\"\n        download \"linpeas.sh\" \\\n            \"https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh\" \\\n            \"$DL/linpeas/linpeas.sh\"\n    else\n        warn \"linpeas already present\"\n    fi\n\n    # pspy (precompiled)\n    if [ ! -f \"$DL/pspy/pspy64\" ]; then\n        mkdir -p \"$DL/pspy\"\n        download \"pspy64\" \"https://github.com/DominicBreuker/pspy/releases/latest/download/pspy64\" \"$DL/pspy/pspy64\"\n        download \"pspy32\" \"https://github.com/DominicBreuker/pspy/releases/latest/download/pspy32\" \"$DL/pspy/pspy32\"\n    else\n        warn \"pspy already present\"\n    fi\n\n    # ---- Network ----\n    local DN=\"$TOOLS_DIR/Recon/Network\"\n\n    clone \"PCredz\"           \"https://github.com/lgandx/PCredz.git\"                   \"$DN/PCredz\"\n    pip_install \"PCredz\"     \"$DN/PCredz\"\n\n    # nmap static binary\n    if [ ! -f \"$DN/nmap-static-binary/nmap\" ]; then\n        mkdir -p \"$DN/nmap-static-binary\"\n        download \"nmap (static linux)\" \\\n            \"https://github.com/andrew-d/static-binaries/raw/master/binaries/linux/x86_64/nmap\" \\\n            \"$DN/nmap-static-binary/nmap\"\n        download \"nmap.exe (static win)\" \\\n            \"https://github.com/andrew-d/static-binaries/raw/master/binaries/windows/x86/nmap.exe\" \\\n            \"$DN/nmap-static-binary/nmap.exe\" \"false\"\n    else\n        warn \"nmap static binary already present\"\n    fi\n\n    # rustscan\n    if [ ! -f \"$DN/rustscan/rustscan\" ]; then\n        mkdir -p \"$DN/rustscan\"\n        log \"Downloading rustscan...\"\n        local RS_URL\n        RS_URL=$(curl -fsSL \"https://api.github.com/repos/RustScan/RustScan/releases/latest\" \\\n            | grep -o '\"browser_download_url\": *\"[^\"]*amd64\\.deb\"' \\\n            | grep -o 'https://[^\"]*' | head -1)\n        if [ -n \"$RS_URL\" ]; then\n            curl -fsSL \"$RS_URL\" -o /tmp/rustscan.deb \\\n                && sudo dpkg -i /tmp/rustscan.deb \\\n                && cp \"$(command -v rustscan)\" \"$DN/rustscan/rustscan\" 2>/dev/null \\\n                && rm -f /tmp/rustscan.deb \\\n                || warn \"rustscan install failed\"\n        else\n            warn \"rustscan: could not resolve .deb URL \u2014 check github.com/RustScan/RustScan/releases\"\n        fi\n    else\n        warn \"rustscan already present\"\n    fi\n\n    # ---- Web ----\n    local DW=\"$TOOLS_DIR/Recon/Web\"\n\n    clone \"Bashfuscator\"      \"https://github.com/Bashfuscator/Bashfuscator\"           \"$DW/Bashfuscator\"\n    pip_install \"Bashfuscator\" \"$DW/Bashfuscator\"\n\n    clone \"FinalRecon\"        \"https://github.com/thewhiteh4t/FinalRecon.git\"          \"$DW/FinalRecon\"\n    pip_install \"FinalRecon\"  \"$DW/FinalRecon\"\n\n    clone \"liffy\"             \"https://github.com/mzfr/liffy.git\"                      \"$DW/liffy\"\n    pip_install \"liffy\"       \"$DW/liffy\"\n\n    clone \"Security-Wordlist\" \"https://github.com/DragonJAR/Security-Wordlist.git\"     \"$DW/Security-Wordlist\"\n\n    clone \"subbrute\"          \"https://github.com/TheRook/subbrute.git\"                \"$DW/subbrute\"\n\n    clone \"username-anarchy\"  \"https://github.com/urbanadventurer/username-anarchy.git\" \"$DW/username-anarchy\"\n\n    clone \"XSStrike\"          \"https://github.com/s0md3v/XSStrike.git\"                 \"$DW/XSStrike\"\n    pip_install \"XSStrike\"    \"$DW/XSStrike\"\n\n    # Aquatone (precompiled)\n    if [ ! -f \"$DW/Aquatone/aquatone\" ]; then\n        mkdir -p \"$DW/Aquatone\"\n        local AQ_URL\n        AQ_URL=$(curl -fsSL \"https://api.github.com/repos/michenriksen/aquatone/releases/latest\" \\\n            | grep -o '\"browser_download_url\": *\"[^\"]*linux_amd64[^\"]*\\.zip\"' \\\n            | grep -o 'https://[^\"]*' | head -1)\n        if [ -n \"$AQ_URL\" ]; then\n            download_zip \"aquatone\" \"$AQ_URL\" \"$DW/Aquatone\"\n            chmod +x \"$DW/Aquatone/aquatone\" 2>/dev/null || true\n        else\n            warn \"aquatone: could not resolve download URL\"\n        fi\n    else\n        warn \"aquatone already present\"\n    fi\n\n    # ---- Windows ----\n    local DWWIN=\"$TOOLS_DIR/Recon/Windows\"\n    local GHOSTPACK=\"https://github.com/r3motecontrol/Ghostpack-CompiledBinaries/raw/master\"\n\n    for bin in Seatbelt.exe SharpChrome.exe SharpUp.exe; do\n        if [ ! -f \"$DWWIN/$bin\" ]; then\n            download \"$bin\" \"$GHOSTPACK/$bin\" \"$DWWIN/$bin\" \"false\"\n        else\n        warn \"$bin (Recon/Windows) already present\"\n    fi\n    done\n\n    # LaZagne.exe (Windows recon copy)\n    if [ ! -f \"$DWWIN/LaZagne.exe\" ]; then\n        download \"LaZagne.exe (Recon/Windows)\" \\\n            \"https://github.com/AlessandroZ/LaZagne/releases/latest/download/LaZagne.exe\" \\\n            \"$DWWIN/LaZagne.exe\" \"false\"\n    else\n        warn \"LaZagne.exe (Recon/Windows) already present\"\n    fi\n}\n\n# ==============================================================================\n# SUMMARY\n# ==============================================================================\n\nprint_summary() {\n    section \"Installation Complete\"\n    log \"Tools installed to: $TOOLS_DIR\"\n    log \"Log file: $LOG_FILE\"\n\n    local warns errors\n    warns=$(grep -c '^\\[!\\]' \"$LOG_FILE\" 2>/dev/null || echo 0)\n    errors=$(grep -c '^\\[-\\]' \"$LOG_FILE\" 2>/dev/null || echo 0)\n\n    echo \"\"\n    echo -e \"${YELLOW}Warnings:${NC} $warns  ${RED}Errors:${NC} $errors\"\n    echo \"\"\n    if [ \"$errors\" -gt 0 ]; then\n        echo -e \"${RED}Failed installs:${NC}\"\n        grep '^\\[-\\]' \"$LOG_FILE\"\n    fi\n    echo \"\"\n    echo -e \"${YELLOW}NOTE:${NC} Windows .exe files are ready to transfer to target hosts.\"\n    echo -e \"${YELLOW}NOTE:${NC} Python tools with venvs may need: python3 -m venv venv && pip3 install -r requirements.txt\"\n    echo -e \"${YELLOW}NOTE:${NC} Some C exploits may need kernel-version-specific recompilation on target.\"\n}\n\n# ==============================================================================\n# MAIN\n# ==============================================================================\n\nmain() {\n    echo -e \"${BLUE}\"\n    cat <<'BANNER'\n  \u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557\n  \u2551   HTB CPTS Tool Installer \u2014 Parrot OS (HTB Edition)  \u2551\n  \u255a\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255d\nBANNER\n    echo -e \"  Tools Dir : $TOOLS_DIR\"\n    echo -e \"  Log File  : $LOG_FILE${NC}\"\n    echo \"\"\n\n    preflight\n    install_activedir\n    install_payloads\n    install_pivot\n    install_privesc\n    install_recon\n    print_summary\n}\n\nmain \"$@\"\n", "url": "https://gist.github.com/stillbigjosh/5a58fa426ea1b76221a6ce2ac9a909f6"}, {"timestamp": "2026-07-13T22:00:07.363Z", "date_only": false, "value": "2026-07-13T22:00:07.363154Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/92560", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "4111b000-6b42-415b-8289-f04f235bca2d", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a TwoMillion-HTB-Write-up\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Cosm3No1de\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a HTML\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 18:57:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWrite-up completo de la m\u00e1quina TwoMillion de Hack The Box. Enumeraci\u00f3n web, explotaci\u00f3n de API, escalada a admin, inyecci\u00f3n de comandos (RCE), reverse shell y escalada a root mediante CVE-2023-0386 (OverlayFS + FUSE). T\u00e9cnicas de pentesting aplicadas en un entorno controlado.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/92560"}, {"timestamp": "2026-07-15T00:00:32.972Z", "date_only": false, "value": "2026-07-15T00:00:32.972840Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/92560", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "b78fc918-2f5b-49a3-899a-0ab37dfb1292", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a TwoMillion-HTB-Write-up\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Cosm3No1de\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a HTML\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 18:57:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWrite-up completo de la m\u00e1quina TwoMillion de Hack The Box. Enumeraci\u00f3n web, explotaci\u00f3n de API, escalada a admin, inyecci\u00f3n de comandos (RCE), reverse shell y escalada a root mediante CVE-2023-0386 (OverlayFS + FUSE). T\u00e9cnicas de pentesting aplicadas en un entorno controlado.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/92560", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-16T19:00:16.249Z", "date_only": false, "value": "2026-07-16T19:00:16.249108Z", "kind": "sighting", "label": "Seen", "source": "Telegram/uxGFUVPy3TOzkodNgeg8vepR-kYpq91Dg5jOn-NGrDlDjCc", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "c08b1002-23e3-4519-b1d6-9adc337c5a45"}, {"timestamp": "2026-07-16T19:00:28.089Z", "date_only": false, "value": "2026-07-16T19:00:28.089757Z", "kind": "sighting", "label": "Seen", "source": "Telegram/V5mTmbk9lnTnZ4jN3rhRcXNWqgo23Po-CHoFPn2rBCSBzO0", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "0029bf21-22a6-4796-a51c-863a0b497766"}, {"timestamp": "2026-07-18T01:00:03.598Z", "date_only": false, "value": "2026-07-18T01:00:03.598130Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/V5mTmbk9lnTnZ4jN3rhRcXNWqgo23Po-CHoFPn2rBCSBzO0", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "8567d952-d3a2-43a4-9165-dc305de6afc3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-25T15:00:12.744Z", "date_only": false, "value": "2026-07-25T15:00:12.744073Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/522", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "1801cb02-227f-4526-aab1-e86b963fffd7", "content": "CISA \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 Linux \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439\n\n\ud83d\udea8 \u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u044b\u0440\u0443 \u0432 \u044f\u0434\u0440\u0435 Linux \u2014 CVE-2023-0386. \u042d\u0442\u043e \u0431\u0430\u0433 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 OverlayFS, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0445\u043e\u0442\u044f \u043f\u0430\u0442\u0447 \u0432\u044b\u0448\u0435\u043b \u0435\u0449\u0451 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 2023 \u0433\u043e\u0434\u0430.\n\n\u2699\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0444\u0430\u0439\u043b \u0441 \u0444\u043b\u0430\u0433\u043e\u043c SUID \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0432\u0440\u043e\u0434\u0435 /tmp \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 root-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0422\u0430\u043a\u043e\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0441\u0442\u043e\u0439, \u0447\u0442\u043e \u0435\u0433\u043e \u043b\u0435\u0433\u043a\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u2014 \u0438\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u043e \u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 Datadog.\n\n\ud83d\udcc5 \u0418\u0437-\u0437\u0430 \u0440\u0430\u0441\u0442\u0443\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432 CISA \u043e\u0431\u044f\u0437\u0430\u043b\u0430 \u0432\u0441\u0435 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e 8 \u0438\u044e\u043b\u044f 2025 \u0433\u043e\u0434\u0430. \u041f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0441 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c, \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0438 CI/CD-\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0432\u0438\u0441\u044f\u0442 \u043e\u0442 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 Linux.\n\n#linux #cisa #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/522"}, {"timestamp": "2026-07-26T00:00:30.979Z", "date_only": false, "value": "2026-07-26T00:00:30.979033Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/522", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "5a5b3c08-d921-43e7-8e04-5f8c03f565b0", "content": "CISA \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 Linux \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439\n\n\ud83d\udea8 \u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u044b\u0440\u0443 \u0432 \u044f\u0434\u0440\u0435 Linux \u2014 CVE-2023-0386. \u042d\u0442\u043e \u0431\u0430\u0433 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 OverlayFS, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0445\u043e\u0442\u044f \u043f\u0430\u0442\u0447 \u0432\u044b\u0448\u0435\u043b \u0435\u0449\u0451 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 2023 \u0433\u043e\u0434\u0430.\n\n\u2699\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0444\u0430\u0439\u043b \u0441 \u0444\u043b\u0430\u0433\u043e\u043c SUID \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0432\u0440\u043e\u0434\u0435 /tmp \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 root-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0422\u0430\u043a\u043e\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0441\u0442\u043e\u0439, \u0447\u0442\u043e \u0435\u0433\u043e \u043b\u0435\u0433\u043a\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u2014 \u0438\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u043e \u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 Datadog.\n\n\ud83d\udcc5 \u0418\u0437-\u0437\u0430 \u0440\u0430\u0441\u0442\u0443\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432 CISA \u043e\u0431\u044f\u0437\u0430\u043b\u0430 \u0432\u0441\u0435 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e 8 \u0438\u044e\u043b\u044f 2025 \u0433\u043e\u0434\u0430. \u041f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0441 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c, \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0438 CI/CD-\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0432\u0438\u0441\u044f\u0442 \u043e\u0442 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 Linux.\n\n#linux #cisa #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/522", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T12:00:19.649Z", "date_only": false, "value": "2026-07-29T12:00:19.649859Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/15918", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "d357a78e-e312-4516-83cd-5f681f2ee481", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0386*\nGithub: https://github.com/Fanxiaoyao66/CVE-2023-0386", "url": "https://t.me/CVEhub/15918"}, {"timestamp": "2026-07-29T12:00:30.963Z", "date_only": false, "value": "2026-07-29T12:00:30.963376Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/12999", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "f0786ef3-e8b1-488f-9f76-e94bd9afc03c", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2023-0386*\nGithub: https://github.com/sxlmnwb/CVE-2023-0386", "url": "https://t.me/CVEhub/12999"}, {"timestamp": "2026-07-29T12:00:33.068Z", "date_only": false, "value": "2026-07-29T12:00:33.068059Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/12512", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "d4e744d8-dfa1-4a8a-a768-3a13fdbd41be", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *kernel_v4.19.72_CVE-2023-0386*\nGithub: https://github.com/hshivhare67/kernel_v4.19.72_CVE-2023-0386", "url": "https://t.me/CVEhub/12512"}, {"timestamp": "2026-07-29T12:00:33.437Z", "date_only": false, "value": "2026-07-29T12:00:33.437715Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/12424", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "a63b71eb-e95c-4123-8740-8bd365c2f683", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0386*\nGithub: https://github.com/CKevens/CVE-2023-0386", "url": "https://t.me/CVEhub/12424"}, {"timestamp": "2026-07-29T12:00:33.730Z", "date_only": false, "value": "2026-07-29T12:00:33.730859Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/12331", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "0a289ff8-ceb4-40cf-ad38-e81fb16f94ef", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0386*\nGithub: https://github.com/chenaotian/CVE-2023-0386", "url": "https://t.me/CVEhub/12331"}, {"timestamp": "2026-07-29T12:00:33.935Z", "date_only": false, "value": "2026-07-29T12:00:33.935963Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/12243", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "3bef3138-03cd-4660-90fb-bdfbf1024222", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0386*\nGithub: https://github.com/xkaneiki/CVE-2023-0386", "url": "https://t.me/CVEhub/12243"}, {"timestamp": "2026-07-29T12:00:34.172Z", "date_only": false, "value": "2026-07-29T12:00:34.172417Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/12200", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "21d3dcf1-2297-436d-8397-82ec47275429", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *linux-4.19.72_CVE-2023-0386*\nGithub: https://github.com/Satheesh575555/linux-4.19.72_CVE-2023-0386", "url": "https://t.me/CVEhub/12200"}, {"timestamp": "2026-07-31T00:00:05.495Z", "date_only": false, "value": "2026-07-31T00:00:05.495462Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/12331", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "6b395b89-0504-4498-b4ac-eb2d483e3390", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0386*\nGithub: https://github.com/chenaotian/CVE-2023-0386", "url": "https://t.me/CVEhub/12331", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T00:00:05.881Z", "date_only": false, "value": "2026-07-31T00:00:05.881058Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/12424", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "125a0f56-02e3-458a-a78d-d7c9db4a174a", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0386*\nGithub: https://github.com/CKevens/CVE-2023-0386", "url": "https://t.me/CVEhub/12424", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T00:00:06.452Z", "date_only": false, "value": "2026-07-31T00:00:06.452381Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/12512", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "a44fdbcf-d157-44ab-8d1e-324d83b9c692", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *kernel_v4.19.72_CVE-2023-0386*\nGithub: https://github.com/hshivhare67/kernel_v4.19.72_CVE-2023-0386", "url": "https://t.me/CVEhub/12512", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T00:00:09.715Z", "date_only": false, "value": "2026-07-31T00:00:09.715663Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/12999", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "467f0b5a-9f33-4910-87f5-a7fbdb7c7506", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2023-0386*\nGithub: https://github.com/sxlmnwb/CVE-2023-0386", "url": "https://t.me/CVEhub/12999", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T00:00:35.716Z", "date_only": false, "value": "2026-07-31T00:00:35.716078Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/15918", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "b08a00e5-b9d8-4346-a075-e5fbe63bf98d", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0386*\nGithub: https://github.com/Fanxiaoyao66/CVE-2023-0386", "url": "https://t.me/CVEhub/15918", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T01:00:04.046Z", "date_only": false, "value": "2026-07-31T01:00:04.046472Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/12200", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "78a9fe04-f215-4667-990d-696ae90999f7", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *linux-4.19.72_CVE-2023-0386*\nGithub: https://github.com/Satheesh575555/linux-4.19.72_CVE-2023-0386", "url": "https://t.me/CVEhub/12200", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T01:00:04.430Z", "date_only": false, "value": "2026-07-31T01:00:04.430577Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/12243", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "246fb85f-673c-4bfe-a5bd-00533dbd0972", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0386*\nGithub: https://github.com/xkaneiki/CVE-2023-0386", "url": "https://t.me/CVEhub/12243", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-14T16:00:11.340Z", "date_only": false, "value": "2026-08-14T16:00:11.340249Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/785", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "9ea9acda-1e69-478e-af0b-348635314b27", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2023-0386 \u2014 \u0431\u0430\u0433 \u0432 \u044f\u0434\u0440\u0435 Linux (\u043c\u043e\u0434\u0443\u043b\u044c OverlayFS). \u041e\u0448\u0438\u0431\u043a\u0430 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u2014 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0441\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0442\u044c SUID-\u0444\u0430\u0439\u043b \u0441 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f\u043c\u0438 root \u0438\u0437 nosuid\u2011\u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0432\u0435\u0440\u0445\u043d\u0438\u0439 \u0441\u043b\u043e\u0439 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 2023 \u0433\u043e\u0434\u0430, \u043d\u043e \u0435\u0435 \u0432\u0441\u0435 \u0440\u0430\u0432\u043d\u043e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b.\n\n\ud83d\udd35 CVE-2025-5309 \u2014 SSTI-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 \u0447\u0430\u0442\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Remote Support (RS) \u0438 Privileged Remote Access (PRA) \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 BeyondTrust. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430 \u0432 \u0448\u0430\u0431\u043b\u043e\u043d\u0438\u0437\u0430\u0442\u043e\u0440\u0435, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u0434\u043e RCE.\n\n\ud83d\udd35 CVE-2025-52467 \u2014 \u0431\u0430\u0433 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Python-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 pgai (PostreSQL), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u0441\u0435\u043a\u0440\u0435\u0442\u0430\u043c GitHub Actions, \u0432\u043a\u043b\u044e\u0447\u0430\u044f GITHUB_TOKEN \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0437\u0430\u043f\u0438\u0441\u0438. PoC \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n\ud83d\udd35 CVE-2025-20271 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cisco AnyConnect VPN \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Meraki MX \u0438 Z Series. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 SSL VPN-\u0441\u0435\u0441\u0441\u0438\u0438. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTPS-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0447\u0442\u043e\u0431\u044b \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c VPN-\u0441\u0435\u0440\u0432\u0435\u0440, \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0432\u0441\u0435 \u0442\u0435\u043a\u0443\u0449\u0438\u0435 \u0441\u0435\u0441\u0441\u0438\u0438 \u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f.\n\n\ud83d\udd35 CVE-2025-50201 \u2014 \u0432 \u0432\u0435\u0431-\u0441\u0438\u0441\u0442\u0435\u043c\u0435 WeGIA \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u043b\u0430\u0433\u043e\u0442\u0432\u043e\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c OS Command Injection \u0432 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /html/configuracao/debug_info.php. \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 branch, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f www-data.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Sitecore Experience Platform (XP) \u0438 \u0435\u0433\u043e PowerShell\u2011\u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u0445: \n\n\ud83d\udd35 CVE\u20112025\u201134509 \u2014 \u0436\u0435\u0441\u0442\u043a\u043e \u043f\u0440\u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u043a\u0440\u0435\u0434\u044b ServicesAPI \u0441 \u043f\u0430\u0440\u043e\u043b\u0435\u043c b, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e;\n\ud83d\udd35 CVE\u20112025\u201134510 \u2014 Post-Auth RCE \u0447\u0435\u0440\u0435\u0437 Path Traversal;\n\ud83d\udd35 CVE\u20112025\u201134511 \u2014 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 PowerShell Extension.\n\n#blue_team #CVE_\u0434\u043d\u044f", "url": "https://t.me/purp_sec/785"}, {"timestamp": "2026-08-24T21:00:07.078Z", "date_only": false, "value": "2026-08-24T21:00:07.078375Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/kiberdruzhinnik/473", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "3d11a574-09ce-4a37-927f-96c1a0206aa1", "content": "\ud83d\udce2\u2757\ud83d\udea8 \u041f\u0435\u043d\u0442\u0435\u0441\u0442\u0438\u043c API: HackTheBox TwoMillion\n\n\u25b6\ufe0f \u0421\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0430 VK Video: https://vk.com/video-226620947_456239071\n\n\u0412 \u044d\u0442\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u043a\u0435 \u0441\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u2014 \u044d\u0442\u043e \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u0430\u044f \u0437\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0440\u0443\u0447\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u044b \u0438 \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c, \u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u043c \u0447\u0435\u0440\u0435\u0437 CVE-2023-0386.\n\n\u0420\u0435\u0448\u0430\u0435\u043c \u043c\u0430\u0448\u0438\u043d\u0443 https://app.hackthebox.com/machines/TwoMillion\n\n\u0422\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0435 \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u0442\u0443\u0442: https://blog.kiberdruzhinnik.ru/2023/06/hackthebox-twomillion/\n\n\u0410\u043d\u043e\u043d\u0441\u044b \u0432 \u0442\u0435\u043b\u0435\u0433\u0440\u0430\u043c \u043a\u0430\u043d\u0430\u043b\u0435: https://t.me/kiberdruzhinnik\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043d\u0430 \u0431\u0443\u0441\u0442\u0438: https://boosty.to/kiberdruzhinnik\n\n#hackthebox #pentest #writeup", "url": "https://t.me/kiberdruzhinnik/473", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-27T12:00:06.933Z", "date_only": false, "value": "2026-08-27T12:00:06.933789Z", "kind": "sighting", "label": "Seen", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "69ff0b0f-ac34-450b-8cb8-9f79c70a81c1"}, {"timestamp": "2026-08-27T16:00:03.882Z", "date_only": false, "value": "2026-08-27T16:00:03.882246Z", "kind": "sighting", "label": "Seen", "source": "Telegram/7flft83Vjf6wLqlUx37f8i8JmZrWmYSQ64bCcsTKPPshTgs", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "987bca6a-cbdc-4037-8506-0803e5e6c0b7"}, {"timestamp": "2026-08-28T00:00:36.204Z", "date_only": false, "value": "2026-08-28T00:00:36.204625Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7flft83Vjf6wLqlUx37f8i8JmZrWmYSQ64bCcsTKPPshTgs", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "7c8f85c3-cb76-4983-8818-7523a38154cc", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-29T00:00:29.332Z", "date_only": false, "value": "2026-08-29T00:00:29.332304Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "a3a42080-599f-4960-b24b-6fce5d59e909", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-29T23:00:07.254Z", "date_only": false, "value": "2026-08-29T23:00:07.254284Z", "kind": "sighting", "label": "Seen", "source": "Telegram/M_G1fInaYoOLF55uFsSl9CgVeAoVLtxwPoLWcWmhrMEUXxw", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "69346ee2-1b52-4180-9b78-50010d5a289d"}, {"timestamp": "2026-08-31T00:00:49.279Z", "date_only": false, "value": "2026-08-31T00:00:49.279204Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/M_G1fInaYoOLF55uFsSl9CgVeAoVLtxwPoLWcWmhrMEUXxw", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "6753037c-20ad-4316-9829-272fc453681f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-02T01:00:12.822Z", "date_only": false, "value": "2026-09-02T01:00:12.822227Z", "kind": "sighting", "label": "Seen", "source": "Telegram/V5hKn0oJ2nGQvFUOA8vMmIzpE0-LTzLZfzF3v7e7Ud5xOzo", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "ff725303-ffec-4973-948e-31d093ef4349"}, {"timestamp": "2026-09-03T00:00:54Z", "date_only": false, "value": "2026-09-03T00:00:54.000187Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/V5hKn0oJ2nGQvFUOA8vMmIzpE0-LTzLZfzF3v7e7Ud5xOzo", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "9f432820-d3ef-45b9-90f9-37c74f5e99cb", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-20T15:05:13Z", "date_only": false, "value": "2026-09-20T15:05:13Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2231-1", "record": "SUSE-SU-2023:2231-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T15:06:42Z", "date_only": false, "value": "2026-09-20T15:06:42Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2368-1", "record": "SUSE-SU-2023:2368-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T15:06:42Z", "date_only": false, "value": "2026-09-20T15:06:42Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2368-1", "record": "SUSE-SU-2023:2368-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T15:06:43Z", "date_only": false, "value": "2026-09-20T15:06:43Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2369-1", "record": "SUSE-SU-2023:2369-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T15:06:44Z", "date_only": false, "value": "2026-09-20T15:06:44Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2371-1", "record": "SUSE-SU-2023:2371-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T15:06:50Z", "date_only": false, "value": "2026-09-20T15:06:50Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2384-1", "record": "SUSE-SU-2023:2384-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T15:07:05Z", "date_only": false, "value": "2026-09-20T15:07:05Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2425-1", "record": "SUSE-SU-2023:2425-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T15:07:06Z", "date_only": false, "value": "2026-09-20T15:07:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2428-1", "record": "SUSE-SU-2023:2428-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T15:07:06Z", "date_only": false, "value": "2026-09-20T15:07:06Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2428-1", "record": "SUSE-SU-2023:2428-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T15:07:07Z", "date_only": false, "value": "2026-09-20T15:07:07Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2431-1", "record": "SUSE-SU-2023:2431-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T15:07:11Z", "date_only": false, "value": "2026-09-20T15:07:11Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2443-1", "record": "SUSE-SU-2023:2443-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T15:07:16Z", "date_only": false, "value": "2026-09-20T15:07:16Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2455-1", "record": "SUSE-SU-2023:2455-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T15:07:17Z", "date_only": false, "value": "2026-09-20T15:07:17Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2459-1", "record": "SUSE-SU-2023:2459-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T15:07:23Z", "date_only": false, "value": "2026-09-20T15:07:23Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2468-1", "record": "SUSE-SU-2023:2468-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T15:11:10Z", "date_only": false, "value": "2026-09-20T15:11:10Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2809-1", "record": "SUSE-SU-2023:2809-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-22T07:00:05.852Z", "date_only": false, "value": "2026-09-22T07:00:05.852700Z", "kind": "sighting", "label": "Seen", "source": "Telegram/WbPra8KDBmS3zuaxnZbCqnbdYOYnP0Mz4tPe5TFMDzTSUnQ", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "54a6ed11-2d74-4c12-a61f-10f095e82088"}, {"timestamp": "2026-09-23T00:00:25.162Z", "date_only": false, "value": "2026-09-23T00:00:25.162106Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/WbPra8KDBmS3zuaxnZbCqnbdYOYnP0Mz4tPe5TFMDzTSUnQ", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "fa0d9f33-bc6d-46ef-ae20-aa0f7fe6048a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-04T11:03:57Z", "date_only": false, "value": "2026-10-04T11:03:57Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2231-1", "record": "SUSE-SU-2023:2231-1", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:01Z", "date_only": false, "value": "2026-10-04T11:04:01Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2369-1", "record": "SUSE-SU-2023:2369-1", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:01Z", "date_only": false, "value": "2026-10-04T11:04:01Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2369-1", "record": "SUSE-SU-2023:2369-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:02Z", "date_only": false, "value": "2026-10-04T11:04:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2371-1", "record": "SUSE-SU-2023:2371-1", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:02Z", "date_only": false, "value": "2026-10-04T11:04:02Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2371-1", "record": "SUSE-SU-2023:2371-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:04Z", "date_only": false, "value": "2026-10-04T11:04:04Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2384-1", "record": "SUSE-SU-2023:2384-1", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:04Z", "date_only": false, "value": "2026-10-04T11:04:04Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2384-1", "record": "SUSE-SU-2023:2384-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:18Z", "date_only": false, "value": "2026-10-04T11:04:18Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2425-1", "record": "SUSE-SU-2023:2425-1", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:18Z", "date_only": false, "value": "2026-10-04T11:04:18Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2425-1", "record": "SUSE-SU-2023:2425-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:19Z", "date_only": false, "value": "2026-10-04T11:04:19Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2431-1", "record": "SUSE-SU-2023:2431-1", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:19Z", "date_only": false, "value": "2026-10-04T11:04:19Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2431-1", "record": "SUSE-SU-2023:2431-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:21Z", "date_only": false, "value": "2026-10-04T11:04:21Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2443-1", "record": "SUSE-SU-2023:2443-1", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:21Z", "date_only": false, "value": "2026-10-04T11:04:21Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2443-1", "record": "SUSE-SU-2023:2443-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:25Z", "date_only": false, "value": "2026-10-04T11:04:25Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2455-1", "record": "SUSE-SU-2023:2455-1", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:25Z", "date_only": false, "value": "2026-10-04T11:04:25Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2455-1", "record": "SUSE-SU-2023:2455-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:26Z", "date_only": false, "value": "2026-10-04T11:04:26Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2459-1", "record": "SUSE-SU-2023:2459-1", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:26Z", "date_only": false, "value": "2026-10-04T11:04:26Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2459-1", "record": "SUSE-SU-2023:2459-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:28Z", "date_only": false, "value": "2026-10-04T11:04:28Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2468-1", "record": "SUSE-SU-2023:2468-1", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:28Z", "date_only": false, "value": "2026-10-04T11:04:28Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2468-1", "record": "SUSE-SU-2023:2468-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-04T11:04:34Z", "date_only": false, "value": "2026-10-04T11:04:34Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2809-1", "record": "SUSE-SU-2023:2809-1", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-11T11:46:08Z", "date_only": false, "value": "2026-10-11T11:46:08Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2231-1", "record": "SUSE-SU-2023:2231-1", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-10-11T11:46:17Z", "date_only": false, "value": "2026-10-11T11:46:17Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2809-1", "record": "SUSE-SU-2023:2809-1", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-10-29T11:00:16Z", "date_only": false, "value": "2026-10-29T11:00:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Qj3btlsw55Ys4txgsD-CfuXPKZun3MaP61zBgsbRBmjs3S0", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "a22acef1-a77d-4a7a-a614-7603858f8156", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-29T11:00:16Z", "date_only": false, "value": "2026-10-29T11:00:16.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Qj3btlsw55Ys4txgsD-CfuXPKZun3MaP61zBgsbRBmjs3S0", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "cb1fbfae-9f38-40f4-b467-842e911f38e5"}, {"timestamp": "2026-11-01T10:30:06Z", "date_only": false, "value": "2026-11-01T10:30:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2231-1", "record": "SUSE-SU-2023:2231-1", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-11-01T10:30:06Z", "date_only": false, "value": "2026-11-01T10:30:06Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2231-1", "record": "SUSE-SU-2023:2231-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-01T10:30:16Z", "date_only": false, "value": "2026-11-01T10:30:16Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2809-1", "record": "SUSE-SU-2023:2809-1", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-11-01T10:30:16Z", "date_only": false, "value": "2026-11-01T10:30:16Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2809-1", "record": "SUSE-SU-2023:2809-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-0386", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "729ce6ab-308d-431d-89af-a5c2ff780c3e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-07T05:35:17Z", "date_only": false, "value": "2026-11-07T05:35:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:17Z", "date_only": false, "value": "2026-11-07T05:35:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1566", "record": "RHSA-2023:1566", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:17Z", "date_only": false, "value": "2026-11-07T05:35:17+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:17Z", "date_only": false, "value": "2026-11-07T05:35:17+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:1566", "record": "RHSA-2023:1566", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:17Z", "date_only": false, "value": "2026-11-07T05:35:17+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:17Z", "date_only": false, "value": "2026-11-07T05:35:17+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:1566", "record": "RHSA-2023:1566", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:19Z", "date_only": false, "value": "2026-11-07T05:35:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1584", "record": "RHSA-2023:1584", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:19Z", "date_only": false, "value": "2026-11-07T05:35:19+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:1584", "record": "RHSA-2023:1584", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:19Z", "date_only": false, "value": "2026-11-07T05:35:19+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:1584", "record": "RHSA-2023:1584", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:22Z", "date_only": false, "value": "2026-11-07T05:35:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1659", "record": "RHSA-2023:1659", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:22Z", "date_only": false, "value": "2026-11-07T05:35:22+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:1659", "record": "RHSA-2023:1659", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:22Z", "date_only": false, "value": "2026-11-07T05:35:22+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:1659", "record": "RHSA-2023:1659", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:23Z", "date_only": false, "value": "2026-11-07T05:35:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1660", "record": "RHSA-2023:1660", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:23Z", "date_only": false, "value": "2026-11-07T05:35:23+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:1660", "record": "RHSA-2023:1660", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:23Z", "date_only": false, "value": "2026-11-07T05:35:23+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:1660", "record": "RHSA-2023:1660", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:24Z", "date_only": false, "value": "2026-11-07T05:35:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1677", "record": "RHSA-2023:1677", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:24Z", "date_only": false, "value": "2026-11-07T05:35:24+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:1677", "record": "RHSA-2023:1677", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:24Z", "date_only": false, "value": "2026-11-07T05:35:24+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:1677", "record": "RHSA-2023:1677", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:25Z", "date_only": false, "value": "2026-11-07T05:35:25+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1691", "record": "RHSA-2023:1691", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:25Z", "date_only": false, "value": "2026-11-07T05:35:25+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1703", "record": "RHSA-2023:1703", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:25Z", "date_only": false, "value": "2026-11-07T05:35:25+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:1691", "record": "RHSA-2023:1691", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:25Z", "date_only": false, "value": "2026-11-07T05:35:25+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:1703", "record": "RHSA-2023:1703", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:25Z", "date_only": false, "value": "2026-11-07T05:35:25+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:1691", "record": "RHSA-2023:1691", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:25Z", "date_only": false, "value": "2026-11-07T05:35:25+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:1703", "record": "RHSA-2023:1703", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:27Z", "date_only": false, "value": "2026-11-07T05:35:27+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1681", "record": "RHSA-2023:1681", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:27Z", "date_only": false, "value": "2026-11-07T05:35:27+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:1681", "record": "RHSA-2023:1681", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:27Z", "date_only": false, "value": "2026-11-07T05:35:27+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:1681", "record": "RHSA-2023:1681", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:42Z", "date_only": false, "value": "2026-11-07T05:35:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1970", "record": "RHSA-2023:1970", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:42Z", "date_only": false, "value": "2026-11-07T05:35:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1980", "record": "RHSA-2023:1980", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:42Z", "date_only": false, "value": "2026-11-07T05:35:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:1984", "record": "RHSA-2023:1984", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:42Z", "date_only": false, "value": "2026-11-07T05:35:42+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:1970", "record": "RHSA-2023:1970", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:42Z", "date_only": false, "value": "2026-11-07T05:35:42+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:1980", "record": "RHSA-2023:1980", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:42Z", "date_only": false, "value": "2026-11-07T05:35:42+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:1984", "record": "RHSA-2023:1984", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:42Z", "date_only": false, "value": "2026-11-07T05:35:42+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:1970", "record": "RHSA-2023:1970", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:42Z", "date_only": false, "value": "2026-11-07T05:35:42+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:1980", "record": "RHSA-2023:1980", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:42Z", "date_only": false, "value": "2026-11-07T05:35:42+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:1984", "record": "RHSA-2023:1984", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-08T18:18:45Z", "date_only": false, "value": "2026-11-08T18:18:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Deckloins/4b44dbfcfb19cb0270533082d1306709", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "fca1e83e-6c70-4f7d-8087-0c6abe29e3ea", "content": "# HackTheBox: TwoMillion Writeup\n\n## 1. Reconnaissance\n\nWe begin the enumeration phase with an Nmap scan, which reveals two open ports:\n\n| Port   | Service |\n| ------ | ------- |\n| **22** | SSH     |\n| **80** | HTTP    |\n\nBrowsing to port 80 reveals a hostname: `2million.htb`. After adding this to our `/etc/hosts` file, we are presented with an old-school HackTheBox landing page.\n\nDirectory fuzzing reveals several interesting endpoints:\n\n- `/login`\n- `/register`\n- `/api`\n- `/invite`\n- `/home`\n\nThe main site lacks functionality, but navigating to `http://2million.htb/invite` brings us to a page where we can validate an invite code. Attempting to register at `/register` also requires this code.\n\n---\n\n## 2. Initial Foothold: Generating the Invite Code\n\nOn the `/invite` page, inspecting the source code reveals a minified and obfuscated JavaScript file: **`inviteapi.min.js`**.\n\nAfter deobfuscating the script, we discover a hidden API endpoint: `/api/v1/invite/how/to/generate`. Sending an empty `POST` request to this endpoint returns a JSON response with a hint:\n\n```json\n{\n  \"0\": 200,\n  \"success\": 1,\n  \"data\": {\n    \"data\": \"Va beqre gb trarengr gur vaivgr pbqr, znxr n CBFG erdhrfg gb \\/ncv\\/i1\\/vaivgr\\/trarengr\",\n    \"enctype\": \"ROT13\"\n  },\n  \"hint\": \"Data is encrypted ... We should probably check the encryption type in order to decrypt it...\"\n}\n```\n\nThe `enctype: \"ROT13\"` is a clear indicator. Applying ROT13 to the data string yields:\n\n> _\"In order to generate the invite code, make a POST request to /api/v1/invite/generate\"_\n\nFollowing these instructions, we send a `POST` request to `/api/v1/invite/generate` and receive an encrypted string: `U1dWSVEtSkI1V0stM1I2TjUtQkZLRlI=`.\n\nWhile this appears to be Base64 encoded at first glance, decoding it directly yields gibberish. The trick is to apply **ROT13** first, followed by **Base64 decoding**, which finally reveals our valid invite code: `SWVIQ-JB5WK-3R6N5-BFKFR`.\n\nWe can now register an account and authenticate.\n\n- **Credentials:** `leftz@test.com` / `Password`\n\n---\n\n## 3. Web Application & API Enumeration\n\nAuthenticated access opens up three new endpoints:\n\n- `/home/access`\n- `/home/rules`\n- `/home/changelog`\n\nThe **Rules** page warns users to operate HTB in a separate environment to avoid being hacked over the HTB Network (`10.10.10.0/24`). It also hints at the possibility of pivoting to other gateways and nodes.\n\nThe **Access** page provides details about our connection and exposes a new target endpoint: `/api/v1/user/vpn`. This endpoint allows us to generate or regenerate a `.ovpn` configuration file.\n\nSending a `GET` request directly to `/api/v1` returns a complete route mapping of the API:\n\n```json\n{\n  \"v1\": {\n    \"user\": {\n      \"GET\": {\n        \"/api/v1\": \"Route List\",\n        \"/api/v1/invite/how/to/generate\": \"Instructions on invite code generation\",\n        \"/api/v1/invite/generate\": \"Generate invite code\",\n        \"/api/v1/invite/verify\": \"Verify invite code\",\n        \"/api/v1/user/auth\": \"Check if user is authenticated\",\n        \"/api/v1/user/vpn/generate\": \"Generate a new VPN configuration\",\n        \"/api/v1/user/vpn/regenerate\": \"Regenerate VPN configuration\",\n        \"/api/v1/user/vpn/download\": \"Download OVPN file\"\n      },\n      \"POST\": {\n        \"/api/v1/user/register\": \"Register a new user\",\n        \"/api/v1/user/login\": \"Login with existing user\"\n      }\n    },\n    \"admin\": {\n      \"GET\": {\n        \"/api/v1/admin/auth\": \"Check if user is admin\"\n      },\n      \"POST\": {\n        \"/api/v1/admin/vpn/generate\": \"Generate VPN for specific user\"\n      },\n      \"PUT\": {\n        \"/api/v1/admin/settings/update\": \"Update user settings\"\n      }\n    }\n  }\n}\n```\n\n---\n\n## 4. Privilege Escalation (User)\n\n### Admin Account Takeover\n\nNotice the `PUT` method for `/api/v1/admin/settings/update`. We can exploit this endpoint to elevate our privileges by setting our user account to an admin role.\n\n```http\nPUT /api/v1/admin/settings/update HTTP/1.1\nHost: 2million.htb\nCookie: PHPSESSID=nusha2pb992c9di6f5qor2orq0\nContent-type: application/json\nContent-Length: 49\n\n{\n  \"email\":\"leftz@test.com\",\n  \"is_admin\":1\n}\n\n```\n\n**Response:**\n\n```json\n{ \"id\": 13, \"username\": \"leftz\", \"is_admin\": 1 }\n```\n\n### Command Injection\n\nNow operating as an admin, we have access to `/api/v1/admin/vpn/generate`. This endpoint takes a username to generate a VPN config, but it is vulnerable to **Command Injection**.\n\nBy injecting a semicolon (`;`), we can break out of the intended command execution context. Injecting `;ls -la;` reveals a `.env` file in the current directory. Modifying the payload allows us to read it:\n\n**Payload:**\n\n```json\n{\n  \"username\": \";cat .env;\"\n}\n```\n\n**Extracted `.env` contents:**\n\n```text\nDB_HOST=127.0.0.1\nDB_DATABASE=htb_prod\nDB_USERNAME=admin\nDB_PASSWORD=SuperDuperPass123\n\n```\n\nThese database credentials are also valid for SSH. Logging in as `admin` via SSH grants us our first flag:\n**User Flag:** `26617ceae701ee755eeaba29c4417210`\n\n---\n\n## 5. Privilege Escalation (Root)\n\nOnce on the box, standard local enumeration reveals an unread email in `/var/mail/admin`:\n\n```bash\nadmin@2million:~$ cat /var/mail/admin\nFrom: ch4p \nTo: admin \nCc: g0blin \nSubject: Urgent: Patch System OS\nDate: Tue, 1 June 2023 10:45:22 -0700\n\nHey admin,\n\nI know you're working as fast as you can to do the DB migration. While we're partially down, can you also upgrade the OS on our web host? There have been a few serious Linux kernel CVEs already this year. That one in OverlayFS / FUSE looks nasty. We can't get popped by that.\n\nHTB Godfather\n\n```\n\nThe email explicitly mentions a vulnerability involving **OverlayFS and FUSE**. A quick search for recent vulnerabilities matching this description points to **CVE-2023-0386**.\n\nRunning `uname -a` confirms the machine is running a vulnerable kernel version.\n\nTo exploit this:\n\n1. Locate a PoC for CVE-2023-0386.\n2. Transfer the exploit to the target machine.\n3. Compile and execute the payload to spawn a root shell.\n\nExecution is successful, granting full system compromise.\n**Root Flag:** `e579ea01b3f9324fdf984ba32172d81e`", "url": "https://gist.github.com/Deckloins/4b44dbfcfb19cb0270533082d1306709"}], "metrics": {"as_of": "2026-11-13T01:56:22.734Z", "anchors": {"origin": {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.2.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "discovery": {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.2.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.2.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2023-05-05T03:10:29Z", "date_only": false, "value": "2023-05-05T03:10:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4290", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "7edb9a57-be31-4766-8692-e11a14f5b0c0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-0386\u5728ubuntu22.04\u4e0a\u7684\u63d0\u6743\nURL\uff1ahttps://github.com/xkaneiki/CVE-2023-0386\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4290", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-0386", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "729ce6ab-308d-431d-89af-a5c2ff780c3e", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-0386", "record": "MSRC_CVE-2023-0386", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 78537600.0, "hours": 21816.0, "days": 909.0, "min_seconds": 78451200.0, "max_seconds": 78624000.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.2.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-0386", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "729ce6ab-308d-431d-89af-a5c2ff780c3e", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 75564000.0, "hours": 20990.0, "days": 874.5833333333334, "min_seconds": 75564000.0, "max_seconds": 75650400.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.2.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-0386", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "729ce6ab-308d-431d-89af-a5c2ff780c3e", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 8701829.0, "hours": 2417.174722222222, "days": 100.71561342592592, "min_seconds": 8701829.0, "max_seconds": 8701829.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.2.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-05-05T03:10:29Z", "date_only": false, "value": "2023-05-05T03:10:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4290", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "7edb9a57-be31-4766-8692-e11a14f5b0c0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-0386\u5728ubuntu22.04\u4e0a\u7684\u63d0\u6743\nURL\uff1ahttps://github.com/xkaneiki/CVE-2023-0386\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4290", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 8553600.0, "hours": 2376.0, "days": 99.0, "min_seconds": 8467200.0, "max_seconds": 8640000.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.2.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-0386", "record": "MSRC_CVE-2023-0386", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, "discovery_after_disclosure": false}, "disclosure_to_patch": {"available": true, "seconds": 5580000.0, "hours": 1550.0, "days": 64.58333333333333, "min_seconds": 5580000.0, "max_seconds": 5666400.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-01-24T10:00:00Z", "date_only": false, "value": "2023-01-24T10:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.2.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-0386", "record": "MSRC_CVE-2023-0386", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 8553600.0, "hours": 2376.0, "days": 99.0, "min_seconds": 8467200.0, "max_seconds": 8640000.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:1554", "record": "RHSA-2023:1554", "field": "vulnerabilities.2.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-0386", "record": "MSRC_CVE-2023-0386", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": true, "seconds": -69984000.0, "hours": -19440.0, "days": -810.0, "min_seconds": -70070400.0, "max_seconds": -69897600.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-0386", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "729ce6ab-308d-431d-89af-a5c2ff780c3e", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-0386", "record": "MSRC_CVE-2023-0386", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploit_publication_to_patch": {"available": true, "seconds": -3121829.0, "hours": -867.1747222222223, "days": -36.132280092592595, "min_seconds": -3121829.0, "max_seconds": -3035429.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2023-05-05T03:10:29Z", "date_only": false, "value": "2023-05-05T03:10:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4290", "record": "CVE-2023-0386", "field": "creation_timestamp", "uuid": "7edb9a57-be31-4766-8692-e11a14f5b0c0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-0386\u5728ubuntu22.04\u4e0a\u7684\u63d0\u6743\nURL\uff1ahttps://github.com/xkaneiki/CVE-2023-0386\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4290", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-0386", "record": "MSRC_CVE-2023-0386", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}}}