{"metadata": {"vulnerability": "CVE-2023-28432", "count": 214, "kinds": {"milestone": 6, "sighting": 160, "kev": 17, "other": 31}, "linked_omitted": 0}, "data": [{"timestamp": "2023-03-15T15:59:10.052Z", "date_only": false, "value": "2023-03-15T15:59:10.052Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-28432", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-03-22T00:00:00Z", "date_only": false, "value": "2023-03-22T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202303-1844", "record": "VAR-202303-1844", "field": "sources_release_date.data.0.date", "linked_record": true}, {"timestamp": "2023-03-22T00:00:00Z", "date_only": true, "value": "2023-03-22", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2023-28432", "record": "GSD-2023-28432", "field": "namespaces.gitlab.com.advisories.0.pubdate", "linked_record": true}, {"timestamp": "2023-03-22T20:16:38.641Z", "date_only": false, "value": "2023-03-22T20:16:38.641Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-28432", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-03-22T21:15:00Z", "date_only": false, "value": "2023-03-22T21:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-28432", "record": "UBUNTU-CVE-2023-28432", "field": "published", "linked_record": true}, {"timestamp": "2023-03-22T21:15:00Z", "date_only": false, "value": "2023-03-22T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-28432", "record": "GSD-2023-28432", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-03-22T21:15:18.257Z", "date_only": false, "value": "2023-03-22T21:15:18.257000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202303-1844", "record": "VAR-202303-1844", "field": "sources_release_date.data.2.date", "linked_record": true}, {"timestamp": "2023-03-22T21:15:18.257Z", "date_only": false, "value": "2023-03-22T21:15:18.257", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-28432", "record": "FKIE_CVE-2023-28432", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-22T23:36:12Z", "date_only": false, "value": "2023-03-22T23:36:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/60525", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "90e86779-fc04-46a2-896a-0f983693d79e", "content": "\u203c CVE-2023-28432 \u203c\n\nMinio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including `MINIO_SECRET_KEY` and `MINIO_ROOT_PASSWORD`, resulting in information disclosure. All users of distributed deployment are impacted. All users are advised to upgrade to RELEASE.2023-03-20T20-16-18Z.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/60525"}, {"timestamp": "2023-03-23T00:00:00Z", "date_only": false, "value": "2023-03-23T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202303-1844", "record": "VAR-202303-1844", "field": "sources_update_date.data.0.date", "linked_record": true}, {"timestamp": "2023-03-23T15:55:52Z", "date_only": false, "value": "2023-03-23T15:55:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4018", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "737c97dc-f798-47f0-a6d4-c12f3b887b5f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-28434 nuclei templates\nURL\uff1ahttps://github.com/Mr-xn/CVE-2023-28432\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4018", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-23T16:34:19Z", "date_only": false, "value": "2023-03-23T16:34:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4019", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "8629aeb5-0580-4a73-b0e2-c078359b0c82", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aMiniO verify interface sensitive information disclosure vulnerability (CVE-2023-28432) \nURL\uff1ahttps://github.com/gobysec/CVE-2023-28432\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4019", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-24T00:00:00Z", "date_only": true, "value": "2023-03-24", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2023-19953", "record": "CNVD-2023-19953", "field": "openTime", "linked_record": true}, {"timestamp": "2023-03-24T00:00:00Z", "date_only": true, "value": "2023-03-24", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2023-19953", "record": "CNVD-2023-19953", "field": "submitTime", "linked_record": true}, {"timestamp": "2023-03-24T03:22:36Z", "date_only": false, "value": "2023-03-24T03:22:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4025", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "73662cdf-dcf7-4f16-9781-61bc558ba452", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-28432,minio\u672a\u6388\u6743\u8bbf\u95ee\u68c0\u6d4b\u5de5\u5177\nURL\uff1ahttps://github.com/Okaytc/minio_unauth_check\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4025", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-24T08:39:24Z", "date_only": false, "value": "2023-03-24T08:39:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4027", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "343c4098-ffe1-4b0a-946c-ce266442e7a4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-28432 POC\nURL\uff1ahttps://github.com/acheiii/CVE-2023-28432\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4027", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-27T00:08:29.261Z", "date_only": false, "value": "2023-03-27T00:08:29.261Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2023-28432", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-03-28T00:00:00Z", "date_only": true, "value": "2023-03-28", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2023-28432", "record": "GSD-2023-28432", "field": "namespaces.gitlab.com.advisories.0.date", "linked_record": true}, {"timestamp": "2023-03-28T16:26:00Z", "date_only": false, "value": "2023-03-28T16:26Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-28432", "record": "GSD-2023-28432", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-03-29T00:00:00Z", "date_only": false, "value": "2023-03-29T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202303-1844", "record": "VAR-202303-1844", "field": "sources_update_date.data.3.date", "linked_record": true}, {"timestamp": "2023-03-29T01:31:42Z", "date_only": false, "value": "2023-03-29T01:31:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4063", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "26dbc490-5447-41e0-a14c-448a924d5b0e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-28432 MinIO\u654f\u611f\u4fe1\u606f\u6cc4\u9732\u68c0\u6d4b\u811a\u672c\nURL\uff1ahttps://github.com/Cuerz/CVE-2023-28432\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4063", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-01T13:48:18Z", "date_only": false, "value": "2023-04-01T13:48:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8035", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "d5b1d1ef-386a-4e9e-b009-deb382b6096a", "content": "#exploit\n1. InjectGPT: the most polite exploit ever\nhttps://blog.luitjes.it/posts/injectgpt-most-polite-exploit-ever\n\n2. CVE-2023-28432:\nMulti-Cloud Object Storage Minio info leak leads to RCE\nhttps://y4er.com/posts/minio-cve-2023-28432", "url": "https://t.me/CyberSecurityTechnologies/8035", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-09T20:37:53Z", "date_only": false, "value": "2023-04-09T20:37:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4139", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "3cc94d0c-b644-430e-83d9-52479885398b", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aTest environments for CVE-2023-28432, information disclosure in MinIO clusters\nURL\uff1ahttps://github.com/h0ng10/CVE-2023-28432_docker\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4139", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-10T07:23:34Z", "date_only": false, "value": "2023-04-10T07:23:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/minio_cve_2023_28432", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "ad9d90b8-3457-422c-9719-0fadb02de63a", "url": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/minio_cve_2023_28432", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-28432", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "732e55ae-b898-42da-a434-7bcdc36380f6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-28432", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "02d210c3-24e4-4960-b7f8-fa2c55a1376d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-04-21T00:00:00Z", "date_only": true, "value": "2023-04-21", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-28432", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-28432", "field": "evidence.0.details.added_date", "uuid": "02d210c3-24e4-4960-b7f8-fa2c55a1376d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-04-21T00:00:00Z", "date_only": true, "value": "2023-04-21", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-28432", "field": "evidence.0.details.date_added", "uuid": "732e55ae-b898-42da-a434-7bcdc36380f6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-28432", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "732e55ae-b898-42da-a434-7bcdc36380f6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-28432", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "02d210c3-24e4-4960-b7f8-fa2c55a1376d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-28432", "field": "status.status_updated_at", "uuid": "732e55ae-b898-42da-a434-7bcdc36380f6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-28432", "field": "status.status_updated_at", "uuid": "02d210c3-24e4-4960-b7f8-fa2c55a1376d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-28432", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2023-28432 added to CISA KEV"}, {"timestamp": "2023-04-22T08:22:51Z", "date_only": false, "value": "2023-04-22T08:22:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/3271", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "424af543-cdf2-40d6-8421-fdad8c011c09", "content": "U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds 3 vulnerabilities to its KEV catalog due to active exploitation!\n\nRead details: https://thehackernews.com/2023/04/cisa-adds-3-actively-exploited-flaws-to.html\n\n\u2705 CVE-2023-28432\n\u2705 CVE-2023-27350\n\u2705 CVE-2023-2136", "url": "https://t.me/thehackernews/3271"}, {"timestamp": "2023-04-22T09:51:45Z", "date_only": false, "value": "2023-04-22T09:51:45.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/94", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "373c520b-9edb-4276-8002-fa306c70969a", "content": "CISA Adds 3 Actively Exploited Flaws to KEV Catalog, including Critical PaperCut Bug\nhttps://thehackernews.com/2023/04/cisa-adds-3-actively-exploited-flaws-to.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.\nThe\u00a0three vulnerabilities\u00a0are as follows -\n\nCVE-2023-28432\u00a0(CVSS score - 7.5) - MinIO Information Disclosure Vulnerability\u00a0\nCVE-2023-27350\u00a0(CVSS score - 9.8) - PaperCut MF/NG Improper Access Control", "url": "https://t.me/KomunitiSiber/94", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-22T10:11:46Z", "date_only": false, "value": "2023-04-22T10:11:46.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/fxtlt0FR2gPXkkvHwdQoUKMqVqE1YDpYCW5PDxLwX___5Q", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "7e087595-d0d1-49f3-aec6-e8ee2dbf837c"}, {"timestamp": "2023-04-22T16:39:36Z", "date_only": false, "value": "2023-04-22T16:39:36.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/aWti5-JhGyF6ZpeB5FIru3CePw7DBIzJEc_PK-w4Sy1PbJA", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "472150e2-83e8-4f50-9313-f832d5a6ad99"}, {"timestamp": "2023-05-03T10:32:24Z", "date_only": false, "value": "2023-05-03T10:32:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/Z_C7-a2w6rvnW7HtxH79xI_MQxL3zFfJww2jFnjkPq6SeE0", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "071be4a3-85f4-4125-b68b-6ef73e074797", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-12T00:00:00Z", "date_only": true, "value": "2023-05-12", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-28432", "field": "evidence.0.details.due_date", "uuid": "732e55ae-b898-42da-a434-7bcdc36380f6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "db8fe8a3-3193-4065-a0f8-8ac00dd88ac4"}, {"timestamp": "2023-08-21T06:05:42Z", "date_only": false, "value": "2023-08-21T06:05:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4954", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "3a479605-6d07-4e20-86df-f59efb30a4c2", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-28432\u68c0\u6d4b\u5de5\u5177\nURL\uff1ahttps://github.com/bingtangbanli/CVE-2023-28432\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4954", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-21T06:05:42Z", "date_only": false, "value": "2023-08-21T06:05:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4955", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "f21dfbfb-a966-495b-9f4b-6afff43ff865", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-28432\u68c0\u6d4b\u5de5\u5177\nURL\uff1ahttps://github.com/bingtangbanli/CVE-2023-28432\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4955", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-21T22:30:15Z", "date_only": false, "value": "2023-08-21T22:30:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8888", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "af128a74-22ef-495d-b7d0-007a2b6d3632", "content": "#exploit\n1. CVE-2023-28432:\nMinIO Information Disclosure\nhttps://github.com/bingtangbanli/CVE-2023-28432\n\n2. CVE-2023-20562:\nExploring Vulns in AMD's Windows Kernel Drivers...\nhttps://github.com/passwa11/HITCON-2023-Demo-CVE-2023-20562", "url": "https://t.me/CyberSecurityTechnologies/8888", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-09-04T16:15:50Z", "date_only": false, "value": "2023-09-04T16:15:50.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/3824", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "3ffe7e75-b0f4-4541-995d-8789461638f0", "content": "An unknown attacker exploited vulnerabilities (CVE-2023-28432 and CVE-2023-28434) in MinIO storage system for unauthorized code execution. How did they backdoor it? \n \nDetails revealed by Security Joes: https://thehackernews.com/2023/09/hackers-exploit-minio-storage-system.html", "url": "https://t.me/thehackernews/3824", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-09-04T22:00:00Z", "date_only": false, "value": "2023-09-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2261", "record": "WID-SEC-W-2023-2261", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-09-04T22:00:00Z", "date_only": false, "value": "2023-09-04T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2261", "record": "WID-SEC-W-2023-2261", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-09-04T22:00:00Z", "date_only": false, "value": "2023-09-04T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2261", "record": "WID-SEC-W-2023-2261", "field": "vulnerabilities.1.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-09-04T22:00:00Z", "date_only": false, "value": "2023-09-04T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2261", "record": "WID-SEC-W-2023-2261", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-10-14T14:57:48Z", "date_only": false, "value": "2023-10-14T14:57:48+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-28432", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "433d5d44-5594-4372-b75b-b059f3477db8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T14:57:48Z", "date_only": false, "value": "2023-10-14T14:57:48+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-28432", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "433d5d44-5594-4372-b75b-b059f3477db8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-16T12:38:26Z", "date_only": false, "value": "2023-10-16T12:38:26.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/webpwn/349", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "966f40ab-44ae-492e-ba6c-9bdd0f0657c4", "content": "\u0415\u0441\u0442\u044c \u0442\u0430\u043a\u0430\u044f \u0448\u0442\u0443\u043a\u0430 \u0434\u043b\u044f \u0445\u0430\u0439\u043b\u043e\u0430\u0434\u0430 - MinIO\n\n\u041e\u0431\u044a\u0435\u043a\u0442\u043d\u043e\u0435 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 Go.\n\u0417\u0430\u0431\u0430\u0432\u043d\u043e, \u043a\u0430\u043a POST \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0440\u0443\u0447\u043a\u0443 /minio/bootstrap/v1/verify \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n\n\u0411\u0430\u0433\u0430 \u043f\u0440\u043e\u0433\u0440\u0435\u043c\u0435\u043b\u0430 (CVE-2023-28432) \u0432 \u041a\u0438\u0442\u0430\u0435 (\u0432\u043e\u0442 \u0440\u0430\u0437\u0431\u043e\u0440), \u0430 \u0443 \u043d\u0430\u0441 \u0447\u0435\u0442 \u043d\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b, \u043f\u043e\u043a\u0430 \u0441\u0430\u043c \u043d\u0435 \u043d\u0430\u0442\u043a\u043d\u0443\u043b\u0441\u044f.", "url": "https://t.me/webpwn/349", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-21T12:12:23Z", "date_only": false, "value": "2023-10-21T12:12:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1332", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "965308ad-0461-4237-88d4-2f9f814ee9f4", "content": "https://github.com/yTxZx/CVE-2023-28432\n#github", "url": "https://t.me/CNArsenal/1332", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-21T15:26:44Z", "date_only": false, "value": "2023-10-21T15:26:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3456", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "5544f85a-2a04-4102-83ff-b89d32f45a8e", "content": "https://github.com/yTxZx/CVE-2023-28432\n#github", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3456", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-21T17:07:26Z", "date_only": false, "value": "2023-10-21T17:07:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9238", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "1462281a-f8e9-4ce4-b720-6140287bf8c6", "content": "#exploit\n1. CVE-2023-34051:\nVMware Aria Operations for Logs - authentication bypass\nhttps://github.com/horizon3ai/CVE-2023-34051\n\n2. CVE-2023-28432:\nMinIO information disclosure\nhttps://github.com/yTxZx/CVE-2023-28432", "url": "https://t.me/CyberSecurityTechnologies/9238", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-07T04:10:35.500Z", "date_only": false, "value": "2023-11-07T04:10:35.500000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202303-1844", "record": "VAR-202303-1844", "field": "sources_update_date.data.2.date", "linked_record": true}, {"timestamp": "2023-11-10T00:00:00Z", "date_only": false, "value": "2023-11-10T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202303-1844", "record": "VAR-202303-1844", "field": "sources_release_date.data.1.date", "linked_record": true}, {"timestamp": "2023-11-10T04:23:00Z", "date_only": false, "value": "2023-11-10T04:23:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202303-1844", "record": "VAR-202303-1844", "field": "sources_update_date.data.1.date", "linked_record": true}, {"timestamp": "2023-11-27T22:23:12Z", "date_only": false, "value": "2023-11-27T22:23:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/600", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "114daa55-c2f4-489c-96a6-7cb3bf7c084a", "content": "#ExploitObserverAlert\n\nCVE-2023-28432\n\nDESCRIPTION: Exploit Observer has 41 entries related to CVE-2023-28432. Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including `MINIO_SECRET_KEY` and `MINIO_ROOT_PASSWORD`, resulting in information disclosure. All users of distributed deployment are impacted. All users are advised to upgrade to RELEASE.2023-03-20T20-16-18Z.\n\nFIRST-EPSS: 0.156100000\nNVD-IS: 3.6\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/600"}, {"timestamp": "2023-12-03T13:47:08Z", "date_only": false, "value": "2023-12-03T13:47:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6054", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "c6c66391-1fc9-4c23-9846-f9403aaaf8fe", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aA testing tool for CobaltStrike-RCE:CVE-2022-39197; Weblogic-RCE:CVE-2023-21839; MinIO:CVE-2023-28432\nURL\uff1ahttps://github.com/Romanc9/Gui-poc-test\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/6054", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-07T03:34:57Z", "date_only": false, "value": "2023-12-07T03:34:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6103", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "edf1efc8-7342-4351-b528-12244d219f48", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-28432\nURL\uff1ahttps://github.com/C1ph3rX13/CVE-2023-28432\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/6103", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-08T00:05:12Z", "date_only": false, "value": "2023-12-08T00:05:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1542", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "f87fcc29-ad75-4ad2-8c58-b8d5217c3561", "content": "#ExploitObserverAlert\n\nCVE-2023-28432\n\nDESCRIPTION: Exploit Observer has 42 entries related to CVE-2023-28432. Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including `MINIO_SECRET_KEY` and `MINIO_ROOT_PASSWORD`, resulting in information disclosure. All users of distributed deployment are impacted. All users are advised to upgrade to RELEASE.2023-03-20T20-16-18Z.\n\nFIRST-EPSS: 0.156100000\nNVD-IS: 3.6\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1542"}, {"timestamp": "2023-12-09T23:44:07Z", "date_only": false, "value": "2023-12-09T23:44:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1579", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "abb77984-f439-4db9-9295-0956ffeec67b", "content": "#ExploitObserverAlert\n\nCVE-2023-28432\n\nDESCRIPTION: Exploit Observer has 42 entries related to CVE-2023-28432. Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including `MINIO_SECRET_KEY` and `MINIO_ROOT_PASSWORD`, resulting in information disclosure. All users of distributed deployment are impacted. All users are advised to upgrade to RELEASE.2023-03-20T20-16-18Z.\n\nFIRST-EPSS: 0.156100000\nNVD-IS: 3.6\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1579"}, {"timestamp": "2023-12-13T01:20:48.226Z", "date_only": false, "value": "2023-12-13T01:20:48.226164Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-28432", "record": "GSD-2023-28432", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2023-12-18T12:52:50Z", "date_only": false, "value": "2023-12-18T12:52:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1988", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "dd53bd5b-89be-4fdf-8c51-503157599557", "content": "#ExploitObserverAlert\n\nCVE-2023-28432\n\nDESCRIPTION: Exploit Observer has 42 entries related to CVE-2023-28432. Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including `MINIO_SECRET_KEY` and `MINIO_ROOT_PASSWORD`, resulting in information disclosure. All users of distributed deployment are impacted. All users are advised to upgrade to RELEASE.2023-03-20T20-16-18Z.\n\nFIRST-EPSS: 0.147430000\nNVD-IS: 3.6\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1988"}, {"timestamp": "2023-12-18T13:46:06.047Z", "date_only": false, "value": "2023-12-18T13:46:06.047000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202303-1844", "record": "VAR-202303-1844", "field": "last_update_date", "linked_record": true}, {"timestamp": "2024-03-06T10:56:38.283Z", "date_only": false, "value": "2024-03-06T10:56:38.283Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-MINIO-2023-28432", "record": "BIT-MINIO-2023-28432", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-03-11T14:10:38Z", "date_only": false, "value": "2024-03-11T14:10:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/minio_bootstrap_verify_info_disc.rb", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "a10896b8-cda7-44e0-a9a4-eedbd0cc3f30", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/minio_bootstrap_verify_info_disc.rb"}, {"timestamp": "2024-08-02T12:38:25.355Z", "date_only": false, "value": "2024-08-02T12:38:25.355Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-28432", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:58:02.058Z", "date_only": false, "value": "2024-08-15T17:58:02.058+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2261", "record": "WID-SEC-W-2023-2261", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-08-16T08:37:53Z", "date_only": false, "value": "2024-08-16T08:37:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1453", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "02e7ac9f-c93c-4506-b7a2-862eaad5176a", "content": "#exploit\n1. CVE-2023-34051:\nVMware Aria Operations for Logs - authentication bypass\nhttps://github.com/horizon3ai/CVE-2023-34051\n\n2. CVE-2023-28432:\nMinIO information disclosure\nhttps://github.com/yTxZx/CVE-2023-28432", "url": "https://t.me/Rootsec_2/1453", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-15T14:11:26Z", "date_only": false, "value": "2024-10-15T14:11:26Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-28432", "record": "UBUNTU-CVE-2023-28432", "field": "modified", "linked_record": true}, {"timestamp": "2024-11-10T00:00:00Z", "date_only": false, "value": "2024-11-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-10)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "3d4ecdc2-7fed-42d5-a211-5a23e751bda5", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-12T00:00:00Z", "date_only": false, "value": "2024-11-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-12)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "02ea0f42-1c32-4098-a227-ee900006e552", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-22T00:00:00Z", "date_only": false, "value": "2024-11-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-22)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "cf9992ef-f4d0-4412-8291-3259bf0d2f94", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-29T00:00:00Z", "date_only": false, "value": "2024-11-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-29)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "62910f3a-274a-4113-882c-a46f265b5b5d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-12-24T20:34:17.462Z", "date_only": false, "value": "2024-12-24T20:34:17.462299Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971806", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "a9f65247-24ff-4397-8047-32000d9e2679", "url": "https://feedsin.space/feed/CISAKevBot/items/2971806"}, {"timestamp": "2024-12-25T00:00:00Z", "date_only": false, "value": "2024-12-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-25)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "547ed518-207e-4be1-ac9f-d20166861744", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-01-28T21:16:56.029Z", "date_only": false, "value": "2025-01-28T21:16:56.029650Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-28432", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-28T21:16:56.029Z", "date_only": false, "value": "2025-01-28T21:16:56.029650Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-28432", "record": "FKIE_CVE-2023-28432", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-02-04T00:00:00Z", "date_only": false, "value": "2025-02-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-04)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "2304b77c-560b-49d7-bba8-ca8d699eaaaf", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "7f032870-d0e1-4a0d-a3c2-198f073dc352"}, {"timestamp": "2025-02-23T02:10:42Z", "date_only": false, "value": "2025-02-23T02:10:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "58153d47-ee91-46b5-b69c-ebc948e2aad9"}, {"timestamp": "2025-02-23T04:10:53Z", "date_only": false, "value": "2025-02-23T04:10:53.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "80c1e6bd-8c4a-4607-94cd-a2006cda0487"}, {"timestamp": "2025-03-15T00:00:00Z", "date_only": false, "value": "2025-03-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-15)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "7ac07f27-9507-46db-9f00-fc443b0c4472", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-15T00:00:00Z", "date_only": false, "value": "2025-03-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-15)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "4f538f47-393e-4037-85fb-422a8a9c7c4c"}, {"timestamp": "2025-03-20T00:00:00Z", "date_only": false, "value": "2025-03-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-20)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "c4bbff5b-399c-4640-9380-095ec35eba4e"}, {"timestamp": "2025-04-02T00:00:00Z", "date_only": false, "value": "2025-04-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-02)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "2245d6c4-c806-4951-9ddd-209dbaac53de", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-07T00:00:00Z", "date_only": false, "value": "2025-04-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-07)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "a220a689-05f7-4bb7-a873-956df2fdb730", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-12T00:00:00Z", "date_only": false, "value": "2025-04-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-12)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "901e388e-2aec-4017-bf14-f53f2a7f6e32", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-20T00:00:00Z", "date_only": false, "value": "2025-04-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-20)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "c2be8f6e-9560-4076-a0c2-88ea03d229b0"}, {"timestamp": "2025-04-24T00:00:00Z", "date_only": false, "value": "2025-04-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-24)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "abafd656-690e-4bab-90f1-63d3041412a3"}, {"timestamp": "2025-05-01T00:00:00Z", "date_only": false, "value": "2025-05-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-01)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "1b4eb12e-e16d-4bfd-bbb4-1c8f9f7586d6"}, {"timestamp": "2025-07-01T00:00:00Z", "date_only": false, "value": "2025-07-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-01)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "a6505ec1-c5e4-4be2-b4fe-3bdcabb0101a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-07)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "f129aa43-51da-4a00-9cb0-f8d1714f737b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-12T00:00:00Z", "date_only": false, "value": "2025-07-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-12)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "8e70655a-15bf-4a84-a4f9-df9db1a2b761", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-30T00:00:00Z", "date_only": false, "value": "2025-07-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-30)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "3abf4a3d-caed-41cc-ac9e-1df3f8851671", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-31T00:00:00Z", "date_only": false, "value": "2025-07-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-31)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "f2860847-cfb1-4e16-bafc-ebca0c32f9fd", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-09-16T00:00:00Z", "date_only": false, "value": "2025-09-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-16)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "593613a4-9760-48a8-a72c-a15654e7912a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-09-21T00:00:00Z", "date_only": false, "value": "2025-09-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-21)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "58096979-964b-4ecf-afad-6b1d26ac3e21", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-09-29T00:00:00Z", "date_only": false, "value": "2025-09-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-29)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "2372bc36-ecf9-4b07-95ea-20600cef405c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-14T00:00:00Z", "date_only": false, "value": "2025-10-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-14)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "5b4dac9e-7be8-4da3-8816-c733689009c9", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-21T23:15:22.503Z", "date_only": false, "value": "2025-10-21T23:15:22.503Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-28432", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:22.503Z", "date_only": false, "value": "2025-10-21T23:15:22.503Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-28432", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:00:00Z", "date_only": false, "value": "2025-10-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-22)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "62370433-355c-4dd3-9dec-cf6ebecd14c4", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-23T21:13:01Z", "date_only": false, "value": "2025-10-23T21:13:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "4ae69242-8ccb-4318-883b-84c813e312db"}, {"timestamp": "2025-12-10T00:00:00Z", "date_only": false, "value": "2025-12-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-10)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "cfcc06e1-c7a2-4fec-a899-608c9f4e5154", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-12-24T00:00:00Z", "date_only": false, "value": "2025-12-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-24)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "5ceca5aa-54b7-4abe-8e90-7175fa03044f"}, {"timestamp": "2025-12-25T00:00:00Z", "date_only": false, "value": "2025-12-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-25)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "7e336ab9-debe-4155-8fe3-2465cbbb7e8c"}, {"timestamp": "2025-12-28T00:00:00Z", "date_only": false, "value": "2025-12-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-28)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "d193714d-08de-4eba-a02f-c66a9a0b8b21", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-12-29T00:00:00Z", "date_only": false, "value": "2025-12-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-29)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "21b331dd-1074-48bc-a92e-c8b4c560e7b9"}, {"timestamp": "2026-01-02T00:00:00Z", "date_only": false, "value": "2026-01-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-02)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "a3e372d6-5cef-4a83-b1f8-7180795d3427"}, {"timestamp": "2026-01-03T00:00:00Z", "date_only": false, "value": "2026-01-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-03)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "e557b7f1-e597-4ac0-8640-4a2b7d566417"}, {"timestamp": "2026-01-06T00:00:00Z", "date_only": false, "value": "2026-01-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-06)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "4f9e8bca-0b25-4bfa-96d4-6046cfab2bcd", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-01-06T00:00:00Z", "date_only": false, "value": "2026-01-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-06)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "a7d94c5d-1fe1-4957-bd44-40425158320f"}, {"timestamp": "2026-01-11T00:00:00Z", "date_only": false, "value": "2026-01-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-11)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "912039ac-947b-4b14-b812-afa2f1665901"}, {"timestamp": "2026-01-12T00:00:00Z", "date_only": false, "value": "2026-01-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-12)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "b83faae9-46ae-4fdd-81dc-2fa348865c06"}, {"timestamp": "2026-01-18T00:00:00Z", "date_only": false, "value": "2026-01-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-18)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "f0efa3b5-93fe-4c81-9d04-0b4b271f72f0", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-01-25T00:00:00Z", "date_only": false, "value": "2026-01-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-25)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "7b444e78-8897-4c53-a65f-48ef364ceb4e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-02T12:27:00.412Z", "date_only": false, "value": "2026-02-02T12:27:00.412671Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/732e55ae-b898-42da-a434-7bcdc36380f6", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "c7509c5a-5123-439b-a17e-78baf3b9091d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/732e55ae-b898-42da-a434-7bcdc36380f6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-20T14:54:38.207Z", "date_only": false, "value": "2026-02-20T14:54:38.207441Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intcyberdigest.bsky.social/post/3mfcegt3al22l", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "78d9aa19-af56-4c94-a495-8bd4cd622c57", "url": "https://bsky.app/profile/intcyberdigest.bsky.social/post/3mfcegt3al22l"}, {"timestamp": "2026-03-24T00:00:00Z", "date_only": false, "value": "2026-03-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-24)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "0c25d74a-2878-4ae1-8f6e-181b434e612a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-11T00:00:00Z", "date_only": false, "value": "2026-04-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-11)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "2b86e02f-b3a4-40a8-94cc-ab0bb715e6ad"}, {"timestamp": "2026-04-21T00:00:00Z", "date_only": false, "value": "2026-04-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-21)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "6b1a1494-9ee9-4f78-a387-a86446e750b9", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-22T00:00:00Z", "date_only": false, "value": "2026-04-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-22)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "ee63f292-3434-437f-a6da-c2a3cffc033c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-24)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "421b3019-e066-4c1e-9554-7d7916589893", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-29T00:00:00Z", "date_only": false, "value": "2026-04-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-29)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "2d0c2530-5126-4785-84dc-c8e4835af868"}, {"timestamp": "2026-04-30T00:00:00Z", "date_only": false, "value": "2026-04-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-30)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "052d5326-f51f-40f8-a4f4-8e8bd1fbd8e3", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-02T00:00:00Z", "date_only": false, "value": "2026-05-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-02)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "88dbd362-b931-483f-8ed8-41c5621413b8", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-03T00:00:00Z", "date_only": false, "value": "2026-05-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-03)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "bf2aa90e-6120-492f-964a-388c49b566f0", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-14T00:00:00Z", "date_only": false, "value": "2026-05-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-14)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "9c603fbf-dda1-44a4-872e-e3b494ecaac5"}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": false, "value": "2026-06-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-09)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "b4d3bf38-bd3d-4ac3-987c-9677f8d2b9c7", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T00:00:00Z", "date_only": false, "value": "2026-06-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-17)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "421ec483-0319-48be-a1cd-688c5df90251", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T05:47:42.203Z", "date_only": false, "value": "2026-06-17T05:47:42.203", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-28432", "record": "FKIE_CVE-2023-28432", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-18T00:00:00Z", "date_only": false, "value": "2026-06-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-18)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "91f2bf49-f1a7-4ea9-90aa-2b04abc5bd1a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-19T00:00:00Z", "date_only": false, "value": "2026-06-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-19)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "2cb402d8-5d6b-42dc-86a7-3978df0959ae", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-19T12:46:56.042Z", "date_only": false, "value": "2026-06-19T12:46:56.042076Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bf2663a4-5e91-40ce-8199-52ac5c5ab8d6", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "bf6fd8f9-d7d4-450a-b696-c61dc8f4f6f5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bf2663a4-5e91-40ce-8199-52ac5c5ab8d6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-21T00:00:00Z", "date_only": false, "value": "2026-06-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-21)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "d1ca2529-653a-4a4e-80b7-c857601ade06", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-28432", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "02d210c3-24e4-4960-b7f8-fa2c55a1376d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:39.880Z", "date_only": false, "value": "2026-06-23T14:05:39.880993Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/02d210c3-24e4-4960-b7f8-fa2c55a1376d", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "502a7010-0020-4d57-9941-2e5996fd428c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/02d210c3-24e4-4960-b7f8-fa2c55a1376d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T09:22:53.377Z", "date_only": false, "value": "2026-06-30T09:22:53.377166Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/433d5d44-5594-4372-b75b-b059f3477db8", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "08b899fc-afb1-4f7f-800d-9f86e9c3011b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/433d5d44-5594-4372-b75b-b059f3477db8", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-02T10:00:11.371Z", "date_only": false, "value": "2026-07-02T10:00:11.371089Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-01)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "64e11c00-0475-461a-9fab-0c92a5cad592"}, {"timestamp": "2026-07-07T10:15:11.491Z", "date_only": false, "value": "2026-07-07T10:15:11.491788Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-06)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "954df4a9-86d0-4c48-bba4-2edcbbc56f9c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-23T10:15:11.596Z", "date_only": false, "value": "2026-07-23T10:15:11.596313Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-22)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "251c588d-daf8-40ab-8442-a47018222a04", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-26T02:02:23.035Z", "date_only": false, "value": "2026-07-26T02:02:23.035817Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1929", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "a943e6fa-ee63-4bc5-ba42-36fbbdaa8b71", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 MinIO \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432\n\n\u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u0432\u044b\u0441\u043e\u043a\u043e\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f MinIO. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Security Joes, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b, \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0432 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b MinIO.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 CVE-2023-28432  (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) \u0438 CVE-2023-28434 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8), \u043f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0421\u0428\u0410 (CISA).\n\n\u0414\u0432\u0430 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u00ab\u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435, \u0438 \u043e\u0431\u043b\u0435\u0433\u0447\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0445\u043e\u0441\u0442\u0435, \u0433\u0434\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 MinIO\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Security Joes.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e \u043a\u0430\u043a \u043f\u043b\u0430\u0446\u0434\u0430\u0440\u043c, \u0430 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u043c\u0435\u043d\u0438\u043b \u043a\u043b\u0438\u0435\u043d\u0442 MinIO \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u0443\u044e \u0442\u0440\u043e\u044f\u043d\u043e\u043c \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435\u043c MIRROR_URL.\n\n\u00ab\u041a\u043e\u043c\u0430\u043d\u0434\u0430 mc admin update \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442 \u0432\u0441\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b MinIO \u0432 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0438, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 MinIO. \u2013 \u042d\u0442\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0447\u0430\u0441\u0442\u043d\u043e\u0433\u043e \u0437\u0435\u0440\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0441\u0440\u0435\u0434, \u0433\u0434\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u00bb.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u0430\u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u044b\u0439 \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b MinIO \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044f \u043a\u0430\u043a \u0431\u044d\u043a\u0434\u043e\u0440. \u041a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430\u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0432\u0448\u0435\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u0431\u0438\u043d\u0430\u0440\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u043e\u043f\u0438\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Evil MinIO, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430 GitHub \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u043f\u0440\u0435\u043b\u044f 2023 \u0433\u043e\u0434\u0430. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0432\u044f\u0437\u0438 \u043c\u0435\u0436\u0434\u0443 \u0430\u0432\u0442\u043e\u0440\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u043c\u0435\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0430\u043c\u0438 Bash \u0438 Python, \u043d\u0435 \u0433\u043e\u0432\u043e\u0440\u044f \u0443\u0436\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u044d\u043a\u0434\u043e\u0440-\u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0441\u0431\u0440\u043e\u0441\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043a\u0440\u0438\u043f\u0442\u0430-\u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430. \u0421\u0446\u0435\u043d\u0430\u0440\u0438\u0439, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043a\u0430\u043a \u0432 \u0441\u0440\u0435\u0434\u0430\u0445 Windows, \u0442\u0430\u043a \u0438 \u0432 Linux, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0430\u043a \u0448\u043b\u044e\u0437 \u0434\u043b\u044f \u043f\u0440\u043e\u0444\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432, \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f, \u0434\u043e\u043b\u0436\u043d\u043e \u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u044b\u0442\u044c \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u043e \u0438\u043b\u0438 \u043d\u0435\u0442. \u0422\u0430\u043a\u043e\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u00ab\u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043a \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0432\u043e\u0438\u0445 \u0443\u0441\u0438\u043b\u0438\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0439 \u0446\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b\u00bb.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.securityjoes.com/post/new-attack-vector-in-the-cloud-attackers-caught-exploiting-object-storage-services \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442", "url": "https://t.me/EchelonEyes/1929"}, {"timestamp": "2026-07-28T00:00:24.937Z", "date_only": false, "value": "2026-07-28T00:00:24.937207Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/EchelonEyes/1929", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "1b372f4b-57d6-4326-88b6-10b4a8afabbf", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 MinIO \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432\n\n\u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u0432\u044b\u0441\u043e\u043a\u043e\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f MinIO. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Security Joes, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b, \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0432 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b MinIO.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 CVE-2023-28432  (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) \u0438 CVE-2023-28434 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8), \u043f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0421\u0428\u0410 (CISA).\n\n\u0414\u0432\u0430 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u00ab\u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435, \u0438 \u043e\u0431\u043b\u0435\u0433\u0447\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0445\u043e\u0441\u0442\u0435, \u0433\u0434\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 MinIO\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Security Joes.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e \u043a\u0430\u043a \u043f\u043b\u0430\u0446\u0434\u0430\u0440\u043c, \u0430 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u043c\u0435\u043d\u0438\u043b \u043a\u043b\u0438\u0435\u043d\u0442 MinIO \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u0443\u044e \u0442\u0440\u043e\u044f\u043d\u043e\u043c \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435\u043c MIRROR_URL.\n\n\u00ab\u041a\u043e\u043c\u0430\u043d\u0434\u0430 mc admin update \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442 \u0432\u0441\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b MinIO \u0432 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0438, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 MinIO. \u2013 \u042d\u0442\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0447\u0430\u0441\u0442\u043d\u043e\u0433\u043e \u0437\u0435\u0440\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0441\u0440\u0435\u0434, \u0433\u0434\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u00bb.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u0430\u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u044b\u0439 \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b MinIO \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044f \u043a\u0430\u043a \u0431\u044d\u043a\u0434\u043e\u0440. \u041a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430\u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0432\u0448\u0435\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u0431\u0438\u043d\u0430\u0440\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u043e\u043f\u0438\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Evil MinIO, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430 GitHub \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u043f\u0440\u0435\u043b\u044f 2023 \u0433\u043e\u0434\u0430. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0432\u044f\u0437\u0438 \u043c\u0435\u0436\u0434\u0443 \u0430\u0432\u0442\u043e\u0440\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u043c\u0435\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0430\u043c\u0438 Bash \u0438 Python, \u043d\u0435 \u0433\u043e\u0432\u043e\u0440\u044f \u0443\u0436\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u044d\u043a\u0434\u043e\u0440-\u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0441\u0431\u0440\u043e\u0441\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043a\u0440\u0438\u043f\u0442\u0430-\u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430. \u0421\u0446\u0435\u043d\u0430\u0440\u0438\u0439, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043a\u0430\u043a \u0432 \u0441\u0440\u0435\u0434\u0430\u0445 Windows, \u0442\u0430\u043a \u0438 \u0432 Linux, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0430\u043a \u0448\u043b\u044e\u0437 \u0434\u043b\u044f \u043f\u0440\u043e\u0444\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432, \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f, \u0434\u043e\u043b\u0436\u043d\u043e \u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u044b\u0442\u044c \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u043e \u0438\u043b\u0438 \u043d\u0435\u0442. \u0422\u0430\u043a\u043e\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u00ab\u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043a \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0432\u043e\u0438\u0445 \u0443\u0441\u0438\u043b\u0438\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0439 \u0446\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b\u00bb.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.securityjoes.com/post/new-attack-vector-in-the-cloud-attackers-caught-exploiting-object-storage-services \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442", "url": "https://t.me/EchelonEyes/1929", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T12:00:05.692Z", "date_only": false, "value": "2026-07-29T12:00:05.692757Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/19460", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "74892119-4fbc-4fef-9960-5c24f0b2f147", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432*\nGithub: https://github.com/bingtangbanli/CVE-2023-28432", "url": "https://t.me/CVEhub/19460"}, {"timestamp": "2026-07-29T12:00:29.236Z", "date_only": false, "value": "2026-07-29T12:00:29.236328Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13856", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "bb18972c-44fc-4596-8a14-1012659aad11", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432-metasploit-scanner*\nGithub: https://github.com/TaroballzChen/CVE-2023-28432-metasploit-scanner", "url": "https://t.me/CVEhub/13856"}, {"timestamp": "2026-07-29T12:00:39.213Z", "date_only": false, "value": "2026-07-29T12:00:39.213344Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/10607", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "b7add184-d2a6-4bc4-95a1-552e650676fe", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *MinIO_CVE-2023-28432_EXP*\nGithub: https://github.com/CHINA-china/MinIO_CVE-2023-28432_EXP", "url": "https://t.me/CVEhub/10607"}, {"timestamp": "2026-07-29T12:00:39.784Z", "date_only": false, "value": "2026-07-29T12:00:39.784823Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/10339", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "d11aacce-bf34-41bd-bd43-623d90a2e9d7", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432_docker*\nGithub: https://github.com/h0ng10/CVE-2023-28432_docker", "url": "https://t.me/CVEhub/10339"}, {"timestamp": "2026-07-29T12:00:42.101Z", "date_only": false, "value": "2026-07-29T12:00:42.101628Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/10075", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "875cd836-50d9-44ff-9be3-b1a75b6bd1f0", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *Minio-CVE-2023-28432*\nGithub: https://github.com/LHXHL/Minio-CVE-2023-28432", "url": "https://t.me/CVEhub/10075"}, {"timestamp": "2026-07-29T12:00:43.749Z", "date_only": false, "value": "2026-07-29T12:00:43.749718Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/9736", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "4fcf7783-3c89-4c62-a719-8c86a97c7681", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432*\nGithub: https://github.com/7a6163/CVE-2023-28432", "url": "https://t.me/CVEhub/9736"}, {"timestamp": "2026-07-29T12:00:44.025Z", "date_only": false, "value": "2026-07-29T12:00:44.025260Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/9590", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "ccff1d6f-66e9-4889-b072-af1130963d89", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *MinIO_CVE-2023-28432*\nGithub: https://github.com/Majus527/MinIO_CVE-2023-28432", "url": "https://t.me/CVEhub/9590"}, {"timestamp": "2026-07-29T12:00:44.472Z", "date_only": false, "value": "2026-07-29T12:00:44.472373Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/9375", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "f23d9f88-1ad3-44ca-a691-904c9a8fbb3b", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432*\nGithub: https://github.com/Cuerz/CVE-2023-28432", "url": "https://t.me/CVEhub/9375"}, {"timestamp": "2026-07-29T12:00:44.874Z", "date_only": false, "value": "2026-07-29T12:00:44.874565Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/9261", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "420c1049-7b87-4063-b9b4-687436ce3cf4", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *minio_cve-2023-28432*\nGithub: https://github.com/yuyongxr/minio_cve-2023-28432", "url": "https://t.me/CVEhub/9261"}, {"timestamp": "2026-07-29T12:00:45.061Z", "date_only": false, "value": "2026-07-29T12:00:45.061405Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/9260", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "fd303b91-e930-4cbf-9edf-43d99a299aae", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *Cve-2023-28432-*\nGithub: https://github.com/steponeerror/Cve-2023-28432-", "url": "https://t.me/CVEhub/9260"}, {"timestamp": "2026-07-29T12:00:45.529Z", "date_only": false, "value": "2026-07-29T12:00:45.529658Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/9048", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "cc648e2c-a19d-48a4-b828-5576c1453465", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432*\nGithub: https://github.com/MzzdToT/CVE-2023-28432", "url": "https://t.me/CVEhub/9048"}, {"timestamp": "2026-07-29T12:00:45.698Z", "date_only": false, "value": "2026-07-29T12:00:45.698834Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/9047", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "b8366b22-222a-4c90-86cb-52701c0f26af", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432*\nGithub: https://github.com/acheiii/CVE-2023-28432", "url": "https://t.me/CVEhub/9047"}, {"timestamp": "2026-07-29T12:00:45.894Z", "date_only": false, "value": "2026-07-29T12:00:45.894546Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8994", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "92ddfefd-696a-4c2b-a55f-43919031a26c", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432*\nGithub: https://github.com/Mr-xn/CVE-2023-28432", "url": "https://t.me/CVEhub/8994"}, {"timestamp": "2026-07-29T12:00:46.754Z", "date_only": false, "value": "2026-07-29T12:00:46.754362Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8999", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "13b688ec-b883-49d7-a27c-e89efc8b4ba1", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432*\nGithub: https://github.com/gobysec/CVE-2023-28432", "url": "https://t.me/CVEhub/8999"}, {"timestamp": "2026-07-30T00:00:27.819Z", "date_only": false, "value": "2026-07-30T00:00:27.819409Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/19460", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "f4915cd4-3b9f-4576-852d-f12eb0e9369b", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432*\nGithub: https://github.com/bingtangbanli/CVE-2023-28432", "url": "https://t.me/CVEhub/19460", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T00:00:24.493Z", "date_only": false, "value": "2026-07-31T00:00:24.493190Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/13856", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "7cb6213a-9808-4e54-b220-2ae88472938d", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432-metasploit-scanner*\nGithub: https://github.com/TaroballzChen/CVE-2023-28432-metasploit-scanner", "url": "https://t.me/CVEhub/13856", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T06:00:03.726Z", "date_only": false, "value": "2026-07-31T06:00:03.726134Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/10607", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "f6bfba72-f831-480b-aff1-d2429f312f87", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *MinIO_CVE-2023-28432_EXP*\nGithub: https://github.com/CHINA-china/MinIO_CVE-2023-28432_EXP", "url": "https://t.me/CVEhub/10607", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T07:00:04.048Z", "date_only": false, "value": "2026-07-31T07:00:04.048194Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/10339", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "59628338-5ee7-4990-9ecd-89619209044d", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432_docker*\nGithub: https://github.com/h0ng10/CVE-2023-28432_docker", "url": "https://t.me/CVEhub/10339", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T08:00:04.207Z", "date_only": false, "value": "2026-07-31T08:00:04.207297Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/10075", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "b748fdb6-c943-49e9-b09e-a9f95ef111ee", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *Minio-CVE-2023-28432*\nGithub: https://github.com/LHXHL/Minio-CVE-2023-28432", "url": "https://t.me/CVEhub/10075", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T10:00:04.907Z", "date_only": false, "value": "2026-07-31T10:00:04.907007Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/9590", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "3d5fd509-e1bc-41a0-8bf8-316283189a9b", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *MinIO_CVE-2023-28432*\nGithub: https://github.com/Majus527/MinIO_CVE-2023-28432", "url": "https://t.me/CVEhub/9590", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T10:00:05.315Z", "date_only": false, "value": "2026-07-31T10:00:05.315408Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/9736", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "bbb17a0f-67bd-4c54-8c67-2ba6a5451a44", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432*\nGithub: https://github.com/7a6163/CVE-2023-28432", "url": "https://t.me/CVEhub/9736", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T11:00:03.255Z", "date_only": false, "value": "2026-07-31T11:00:03.255921Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/9260", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "ec9cf3c5-659c-412e-9d8a-173e4a071ec6", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *Cve-2023-28432-*\nGithub: https://github.com/steponeerror/Cve-2023-28432-", "url": "https://t.me/CVEhub/9260", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T11:00:03.472Z", "date_only": false, "value": "2026-07-31T11:00:03.472873Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/9261", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "87ded003-89de-4979-bb17-dac1ebb2c73d", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *minio_cve-2023-28432*\nGithub: https://github.com/yuyongxr/minio_cve-2023-28432", "url": "https://t.me/CVEhub/9261", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T11:00:04.033Z", "date_only": false, "value": "2026-07-31T11:00:04.033395Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/9375", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "61bdf49c-c3c9-4331-89ea-88c00e5f166e", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432*\nGithub: https://github.com/Cuerz/CVE-2023-28432", "url": "https://t.me/CVEhub/9375", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T12:00:04.175Z", "date_only": false, "value": "2026-07-31T12:00:04.175427Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8994", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "e91c1d77-a6c1-49c7-aa2f-ae25e33554f9", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432*\nGithub: https://github.com/Mr-xn/CVE-2023-28432", "url": "https://t.me/CVEhub/8994", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T12:00:04.441Z", "date_only": false, "value": "2026-07-31T12:00:04.441598Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/9047", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "57ea8de3-569e-4d3b-a549-f362174beeca", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432*\nGithub: https://github.com/acheiii/CVE-2023-28432", "url": "https://t.me/CVEhub/9047", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T12:00:04.680Z", "date_only": false, "value": "2026-07-31T12:00:04.680901Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/9048", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "a4b3e059-6acb-4c45-bb8a-b602e403cfa5", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432*\nGithub: https://github.com/MzzdToT/CVE-2023-28432", "url": "https://t.me/CVEhub/9048", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T13:00:04.993Z", "date_only": false, "value": "2026-07-31T13:00:04.993440Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8999", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "cca05cce-ee33-41e9-9e93-d67f4ae34849", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28432*\nGithub: https://github.com/gobysec/CVE-2023-28432", "url": "https://t.me/CVEhub/8999", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-01T10:15:06.922Z", "date_only": false, "value": "2026-08-01T10:15:06.922209Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-31)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "7f60b899-841f-4dfb-9b8c-3b66e100db65", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-03T11:23:44.318Z", "date_only": false, "value": "2026-08-03T11:23:44.318927Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-02)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "e6200fbd-4e3a-4c12-a155-3361f0ab337d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-04T10:15:11.174Z", "date_only": false, "value": "2026-08-04T10:15:11.174170Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-03)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "df39fe5f-ea60-4a20-a2d6-35edbe97275a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-04T13:00:05.424Z", "date_only": false, "value": "2026-08-04T13:00:05.424166Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kiberdruzhinnik/163", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "89fd576a-d0ef-4ba1-a52c-b785d433edb9", "content": "HackTheBox Skyfall\n\n\u041c\u0430\u0448\u0438\u043d\u0430 HackTheBox \u043d\u0430 Linux \u0443\u0440\u043e\u0432\u043d\u044f Insane, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-28432 \u0432 MinIO, \u0430 \u0434\u0430\u043b\u044c\u0448\u0435 \u0440\u0430\u0441\u043a\u0440\u0443\u0442\u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Vault.\n\nhttps://blog.kiberdruzhinnik.ru/2024/02/hackthebox-skyfall/\n\n#hackthebox #season4 #writeup", "url": "https://t.me/kiberdruzhinnik/163"}, {"timestamp": "2026-08-05T01:00:16.117Z", "date_only": false, "value": "2026-08-05T01:00:16.117457Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/kiberdruzhinnik/163", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "c66486f0-a0a1-4248-92d4-27795004ec8e", "content": "HackTheBox Skyfall\n\n\u041c\u0430\u0448\u0438\u043d\u0430 HackTheBox \u043d\u0430 Linux \u0443\u0440\u043e\u0432\u043d\u044f Insane, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-28432 \u0432 MinIO, \u0430 \u0434\u0430\u043b\u044c\u0448\u0435 \u0440\u0430\u0441\u043a\u0440\u0443\u0442\u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Vault.\n\nhttps://blog.kiberdruzhinnik.ru/2024/02/hackthebox-skyfall/\n\n#hackthebox #season4 #writeup", "url": "https://t.me/kiberdruzhinnik/163", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-05T10:00:09Z", "date_only": false, "value": "2026-08-05T10:00:09.000884Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-04)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "4446bdd9-f928-4b9b-bb87-3b242674e062"}, {"timestamp": "2026-08-10T10:15:09.124Z", "date_only": false, "value": "2026-08-10T10:15:09.124784Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-09)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "e6601caf-3cb5-4761-8501-7e623fd5a62d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-14T10:00:18.872Z", "date_only": false, "value": "2026-08-14T10:00:18.872757Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-13)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "027da2c9-47f3-4ba9-a89e-6cf3718c3ca0"}, {"timestamp": "2026-08-16T10:15:06.835Z", "date_only": false, "value": "2026-08-16T10:15:06.835227Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-15)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "3863a18e-ad81-4328-bdd8-60ff22cd1957", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-20T10:15:19.216Z", "date_only": false, "value": "2026-08-20T10:15:19.216216Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-19)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "d8027598-890b-4926-aeaf-843eb7e70899", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-22T10:15:09.170Z", "date_only": false, "value": "2026-08-22T10:15:09.170411Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-21)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "7cef2d75-28f5-4938-886a-891e4a5e30b4", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-24T21:00:06.871Z", "date_only": false, "value": "2026-08-24T21:00:06.871897Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/kiberdruzhinnik/461", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "eddad434-f64f-4e28-887f-0ffda468ada3", "content": "\ud83d\udce2\u2757\ud83d\udea8 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Vault \u0438 Race Condition: HackTheBox Skyfall\n\n\u25b6\ufe0f \u0421\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0430 VK Video: https://vk.com/video-226620947_456239067\n\n\u041c\u0430\u0448\u0438\u043d\u0430 HackTheBox \u043d\u0430 Linux \u0443\u0440\u043e\u0432\u043d\u044f Insane, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-28432 \u0432 MinIO, \u0430 \u0434\u0430\u043b\u044c\u0448\u0435 \u0440\u0430\u0441\u043a\u0440\u0443\u0442\u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Vault.\n\n\u0420\u0435\u0448\u0430\u0435\u043c \u043c\u0430\u0448\u0438\u043d\u0443 https://app.hackthebox.com/machines/Skyfall\n\n\u0422\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0435 \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u0442\u0443\u0442: https://blog.kiberdruzhinnik.ru/2024/02/hackthebox-skyfall/\n\n\u0410\u043d\u043e\u043d\u0441\u044b \u0432 \u0442\u0435\u043b\u0435\u0433\u0440\u0430\u043c \u043a\u0430\u043d\u0430\u043b\u0435: https://t.me/kiberdruzhinnik\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043d\u0430 \u0431\u0443\u0441\u0442\u0438: https://boosty.to/kiberdruzhinnik\n\n#hackthebox #pentest #writeup", "url": "https://t.me/kiberdruzhinnik/461", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-27T10:15:10.558Z", "date_only": false, "value": "2026-08-27T10:15:10.558571Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-26)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "cdf387ad-4216-414a-9383-fde4eb77242e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-29T19:00:03.990Z", "date_only": false, "value": "2026-08-29T19:00:03.990026Z", "kind": "sighting", "label": "Seen", "source": "Telegram/aA2YJ4OA6RYgyEptz63P4ClDUGZaul2MR1nQ2s2i0fupYSo", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "d28e957c-9e43-4853-98ac-4d1471a70acc"}, {"timestamp": "2026-08-29T19:00:04.103Z", "date_only": false, "value": "2026-08-29T19:00:04.103493Z", "kind": "sighting", "label": "Seen", "source": "Telegram/a_6kNaPVF81_Zs7Hw0VsNPbc8LITfHx5ukERJSEW833mi8w", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "ac233505-1944-485c-a54f-719b8c8a5149"}, {"timestamp": "2026-08-30T00:00:52.828Z", "date_only": false, "value": "2026-08-30T00:00:52.828415Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/a_6kNaPVF81_Zs7Hw0VsNPbc8LITfHx5ukERJSEW833mi8w", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "cef73072-66cb-414a-8f5f-3e8ab82c16f7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-30T00:00:52.916Z", "date_only": false, "value": "2026-08-30T00:00:52.916213Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/aA2YJ4OA6RYgyEptz63P4ClDUGZaul2MR1nQ2s2i0fupYSo", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "66d72a3a-22c4-4365-be88-b7dab2706b52", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T17:00:16.525Z", "date_only": false, "value": "2026-09-01T17:00:16.525367Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7285", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "e3c1cb49-43f2-4e7a-835d-a53ffc4fce32", "content": "exploit\n1. CVE-2023-34051:\nVMware Aria Operations for Logs - authentication bypass\nhttps://github.com/horizon3ai/CVE-2023-34051\n\n2. CVE-2023-28432:\nMinIO information disclosure\nhttps://github.com/yTxZx/CVE-2023-28432\n\n\n\u2069-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.08.01", "url": "https://t.me/cissp/7285"}, {"timestamp": "2026-09-01T17:00:21.259Z", "date_only": false, "value": "2026-09-01T17:00:21.259482Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6723", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "88477311-d635-42d4-9874-d5c7c70aab16", "content": "exploit\n1. InjectGPT: the most polite exploit ever\nhttps://blog.luitjes.it/posts/injectgpt-most-polite-exploit-ever\n\n2. CVE-2023-28432:\nMulti-Cloud Object Storage Minio info leak leads to RCE\nhttps://y4er.com/posts/minio-cve-2023-28432\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.01.12", "url": "https://t.me/cissp/6723"}, {"timestamp": "2026-09-01T20:00:52.133Z", "date_only": false, "value": "2026-09-01T20:00:52.133469Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/117272", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "18231b9e-8aa1-48e7-b335-a2ce70406924", "content": "Black Hat Ethical Hacking\nMinIO Under Siege: Threat Actor Exploits Critical Vulnerabilities\n\nMinIO Under Siege: Threat Actor Exploits Critical VulnerabilitiesPost Views: 16 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nIn a concerning development, an unidentified threat actor has been observed exploiting high-severity security vulnerabilities in the MinIO high-performance object storage system. This intrusion technique enables the attacker to achieve unauthorized code execution on targeted servers, potentially leading to significant data breaches.\n\nSecurity Joes, a renowned cybersecurity and incident response firm, uncovered this threat and detailed its findings. The attacker\u2019s strategy involved leveraging a publicly available exploit chain to establish a backdoor within the MinIO instance.\n\nThis alarming breach hinged on two specific vulnerabilities: CVE-2023-28432, with a CVSS score of 7.5, and CVE-2023-28434, rated at 8.8. Notably, CVE-2023-28432 was added to the U.S. Cybersecurity and Infrastructure Security Agency\u2019s (CISA) Known Exploited Vulnerabilities (KEV) catalog on April 21, 2023.\n\nBoth of these vulnerabilities possessed the potential to expose sensitive data housed within the compromised MinIO installation. Furthermore, they facilitated remote code execution (RCE) on the host where the MinIO application was operational.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nSecurity Joes\u2019 investigation unveiled a troubling attack chain. The threat actor weaponized these vulnerabilities to acquire administrator credentials. With these credentials in hand, they exploited their foothold to replace the legitimate MinIO client on the host with a trojanized version. This was accomplished by triggering an update command, specifying a MIRROR_URL.\n\nThe MinIO documentation explains the update command\u2019s purpose, which is to update all MinIO servers in the deployment, including support for private mirror servers.\n\nhttps://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEhtxGNZXuVuVVEjMfgBCof2eB4K4Q_wTRfnUz76yNe2sxsfMGdrUrIYwTREDPstpq-lezu9lCUrBctxUJ4Ys7vYgTqvZGLG_JEh2qHN94NjjaDVdZJWbufznrycG3R-Oj3nRrv6-gSDF4oJmbO56zeTjUd-q7Unka3zJ0mSPR71YXXCvA-vDXyrOTLhggSS/s728-e3650/mini.jpg \n\nThe consequences of these actions were severe. By replacing the authentic MinIO binary with a malicious counterpart, the attacker effectively sealed the compromise of the system. The tampered binary introduced an endpoint that executed commands via HTTP requests, effectively serving as a surreptitious backdoor. The executed commands inherited the system permissions of the user who initiated the application.\n\nIt\u2019s worth highlighting that the modified binary bore a striking resemblance to an exploit named Evil MinIO, which had been published on GitHub in early April 2023. However, at this juncture, there is no concrete evidence linking the exploit\u2019s author to the attackers.\n\nhttps://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEgZOIwjwz8Pc0e0gGfarkAZ-2lBiPHk73c14zuMYodOis8OGDSzPQdgKQZu3c6MdLOJpTb2gwG0vALlSVs2i3LZOPyZUfcYLzsuozxa3XVt4SR1Kw1QFP8ImRhgKn61aimfmaZX0hX43ihCyJvn9Shrf78vQgdMWrl-2lNBXWadOym3AaASxKc7aQFRI2n_/s728-e3650/shodan.jpg \nTrending: The Remarkable Journey of Dave Kennedy as a Cyber Security Innovator Trending: Recon Tool: Dirhunt What is clear, though, is the proficiency of the threat actor. They demonstrated adeptness in working with bash scripts and Python, leveraging their backdoor access to deliver supplementary payloads from a remote server for post-exploitation via a downloader script.\n\nThis downloader script exhibited versatility by targeting both Windows and Linux env[...]", "url": "https://t.me/hacking_Attack/117272"}, {"timestamp": "2026-09-04T09:00:05.261Z", "date_only": false, "value": "2026-09-04T09:00:05.261083Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/117272", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "ae1f9e49-2cde-45b4-a70a-e0738fbc592d", "content": "Black Hat Ethical Hacking\nMinIO Under Siege: Threat Actor Exploits Critical Vulnerabilities\n\nMinIO Under Siege: Threat Actor Exploits Critical VulnerabilitiesPost Views: 16 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nIn a concerning development, an unidentified threat actor has been observed exploiting high-severity security vulnerabilities in the MinIO high-performance object storage system. This intrusion technique enables the attacker to achieve unauthorized code execution on targeted servers, potentially leading to significant data breaches.\n\nSecurity Joes, a renowned cybersecurity and incident response firm, uncovered this threat and detailed its findings. The attacker\u2019s strategy involved leveraging a publicly available exploit chain to establish a backdoor within the MinIO instance.\n\nThis alarming breach hinged on two specific vulnerabilities: CVE-2023-28432, with a CVSS score of 7.5, and CVE-2023-28434, rated at 8.8. Notably, CVE-2023-28432 was added to the U.S. Cybersecurity and Infrastructure Security Agency\u2019s (CISA) Known Exploited Vulnerabilities (KEV) catalog on April 21, 2023.\n\nBoth of these vulnerabilities possessed the potential to expose sensitive data housed within the compromised MinIO installation. Furthermore, they facilitated remote code execution (RCE) on the host where the MinIO application was operational.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nSecurity Joes\u2019 investigation unveiled a troubling attack chain. The threat actor weaponized these vulnerabilities to acquire administrator credentials. With these credentials in hand, they exploited their foothold to replace the legitimate MinIO client on the host with a trojanized version. This was accomplished by triggering an update command, specifying a MIRROR_URL.\n\nThe MinIO documentation explains the update command\u2019s purpose, which is to update all MinIO servers in the deployment, including support for private mirror servers.\n\nhttps://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEhtxGNZXuVuVVEjMfgBCof2eB4K4Q_wTRfnUz76yNe2sxsfMGdrUrIYwTREDPstpq-lezu9lCUrBctxUJ4Ys7vYgTqvZGLG_JEh2qHN94NjjaDVdZJWbufznrycG3R-Oj3nRrv6-gSDF4oJmbO56zeTjUd-q7Unka3zJ0mSPR71YXXCvA-vDXyrOTLhggSS/s728-e3650/mini.jpg \n\nThe consequences of these actions were severe. By replacing the authentic MinIO binary with a malicious counterpart, the attacker effectively sealed the compromise of the system. The tampered binary introduced an endpoint that executed commands via HTTP requests, effectively serving as a surreptitious backdoor. The executed commands inherited the system permissions of the user who initiated the application.\n\nIt\u2019s worth highlighting that the modified binary bore a striking resemblance to an exploit named Evil MinIO, which had been published on GitHub in early April 2023. However, at this juncture, there is no concrete evidence linking the exploit\u2019s author to the attackers.\n\nhttps://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEgZOIwjwz8Pc0e0gGfarkAZ-2lBiPHk73c14zuMYodOis8OGDSzPQdgKQZu3c6MdLOJpTb2gwG0vALlSVs2i3LZOPyZUfcYLzsuozxa3XVt4SR1Kw1QFP8ImRhgKn61aimfmaZX0hX43ihCyJvn9Shrf78vQgdMWrl-2lNBXWadOym3AaASxKc7aQFRI2n_/s728-e3650/shodan.jpg \nTrending: The Remarkable Journey of Dave Kennedy as a Cyber Security Innovator Trending: Recon Tool: Dirhunt What is clear, though, is the proficiency of the threat actor. They demonstrated adeptness in working with bash scripts and Python, leveraging their backdoor access to deliver supplementary payloads from a remote server for post-exploitation via a downloader script.\n\nThis downloader script exhibited versatility by targeting both Windows and Linux env[...]", "url": "https://t.me/hacking_Attack/117272", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-05T10:15:38.391Z", "date_only": false, "value": "2026-09-05T10:15:38.391437Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-04)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "c855d1f4-0c36-4650-9dfc-7b115cdc7474", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-06T10:15:09.834Z", "date_only": false, "value": "2026-09-06T10:15:09.834215Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-05)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "97ee7a11-3c3b-41f7-8391-8f06ceeef847", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-MINIO-2023-28432", "record": "BIT-MINIO-2023-28432", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-09T20:00:07.127Z", "date_only": false, "value": "2026-09-09T20:00:07.127819Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/7285", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "1a7c3767-4dad-4013-9abb-e38d17d0e5e5", "content": "exploit\n1. CVE-2023-34051:\nVMware Aria Operations for Logs - authentication bypass\nhttps://github.com/horizon3ai/CVE-2023-34051\n\n2. CVE-2023-28432:\nMinIO information disclosure\nhttps://github.com/yTxZx/CVE-2023-28432\n\n\n\u2069-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.08.01", "url": "https://t.me/cissp/7285", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-10T01:00:03.991Z", "date_only": false, "value": "2026-09-10T01:00:03.991007Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/6723", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "9c125499-451e-4852-891d-c9f5bc3b2823", "content": "exploit\n1. InjectGPT: the most polite exploit ever\nhttps://blog.luitjes.it/posts/injectgpt-most-polite-exploit-ever\n\n2. CVE-2023-28432:\nMulti-Cloud Object Storage Minio info leak leads to RCE\nhttps://y4er.com/posts/minio-cve-2023-28432\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.01.12", "url": "https://t.me/cissp/6723", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-18T10:15:08.232Z", "date_only": false, "value": "2026-09-18T10:15:08.232065Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-17)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "0a7d0500-4edc-47cf-a3b0-583fd0fae6ad", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-20T10:15:07.809Z", "date_only": false, "value": "2026-09-20T10:15:07.809783Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-19)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "d532fce2-0743-4b05-92ef-c10e96c9ed49", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-23)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "8adc0fbd-a6e3-4fc5-84e4-ed29d7187725", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-30T00:00:00Z", "date_only": false, "value": "2026-09-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-30)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "18d82517-ff73-4bf2-93de-7e7a1be26917", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-01T00:00:00Z", "date_only": false, "value": "2026-10-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-01)", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "a9f69acc-2b5f-49ac-be3a-99cb70d970cf", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-02T03:00:06Z", "date_only": false, "value": "2026-10-02T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/i3fXBslgjZoZ9-BkV1f35kP30UVmFNa5ZOUTXg5KEMOJv9c", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "456b380a-e3d2-4365-9572-4480202f33b0", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-10T03:00:11Z", "date_only": false, "value": "2026-10-10T03:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/vBt9axNMNYnHPFcXQ_rB77QB-89JRQ90gNYljSNNtcLr3gQ", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "2dbeda02-9490-4d59-8744-4ab9401c0f69", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-10T03:00:11Z", "date_only": false, "value": "2026-10-10T03:00:11.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/vBt9axNMNYnHPFcXQ_rB77QB-89JRQ90gNYljSNNtcLr3gQ", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "5f10e8fe-f2e8-44bb-800b-73d062c9df0f"}, {"timestamp": "2026-10-21T20:23:49Z", "date_only": false, "value": "2026-10-21T20:23:49Z", "kind": "other", "label": "Withdrawn", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-28432", "record": "UBUNTU-CVE-2023-28432", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-28432", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "732e55ae-b898-42da-a434-7bcdc36380f6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-11T00:00:00Z", "date_only": false, "value": "2026-11-11T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-28432", "field": "timestamps.last_seen_at", "uuid": "433d5d44-5594-4372-b75b-b059f3477db8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-11T00:00:00Z", "date_only": true, "value": "2026-11-11", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-28432", "field": "evidence.0.details.observation_date", "uuid": "433d5d44-5594-4372-b75b-b059f3477db8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-11T00:00:00Z", "date_only": false, "value": "2026-11-11T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-28432", "field": "status.status_updated_at", "uuid": "433d5d44-5594-4372-b75b-b059f3477db8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-13T01:00:01Z", "date_only": false, "value": "2026-11-13T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-28432", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "433d5d44-5594-4372-b75b-b059f3477db8", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-15T16:08:09.004Z", "anchors": {"origin": {"timestamp": "2023-03-22T20:16:38.641Z", "date_only": false, "value": "2023-03-22T20:16:38.641Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-28432", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-03-22T20:16:38.641Z", "date_only": false, "value": "2023-03-22T20:16:38.641Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-28432", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-03-23T15:55:52Z", "date_only": false, "value": "2023-03-23T15:55:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4018", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "737c97dc-f798-47f0-a6d4-c12f3b887b5f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-28434 nuclei templates\nURL\uff1ahttps://github.com/Mr-xn/CVE-2023-28432\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4018", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-28432", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "732e55ae-b898-42da-a434-7bcdc36380f6", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 2519001.359, "hours": 699.7225997222223, "days": 29.15510832175926, "min_seconds": 2519001.359, "max_seconds": 2605401.359, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-03-22T20:16:38.641Z", "date_only": false, "value": "2023-03-22T20:16:38.641Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-28432", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-28432", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "732e55ae-b898-42da-a434-7bcdc36380f6", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 2519001.359, "hours": 699.7225997222223, "days": 29.15510832175926, "min_seconds": 2519001.359, "max_seconds": 2605401.359, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-03-22T20:16:38.641Z", "date_only": false, "value": "2023-03-22T20:16:38.641Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-28432", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-28432", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "732e55ae-b898-42da-a434-7bcdc36380f6", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 70753.359, "hours": 19.65371083333333, "days": 0.8189046180555555, "min_seconds": 70753.359, "max_seconds": 70753.359, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-03-22T20:16:38.641Z", "date_only": false, "value": "2023-03-22T20:16:38.641Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-28432", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-03-23T15:55:52Z", "date_only": false, "value": "2023-03-23T15:55:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4018", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "737c97dc-f798-47f0-a6d4-c12f3b887b5f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-28434 nuclei templates\nURL\uff1ahttps://github.com/Mr-xn/CVE-2023-28432\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4018", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 115242690.363184, "hours": 32011.85843421778, "days": 1333.827434759074, "min_seconds": 115242690.363184, "max_seconds": 115242690.363184, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-03-22T20:16:38.641Z", "date_only": false, "value": "2023-03-22T20:16:38.641Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-28432", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T16:08:09.004Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 112723689.004184, "hours": 31312.135834495555, "days": 1304.6723264373147, "min_seconds": 112637289.004184, "max_seconds": 112723689.004184, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-28432", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "732e55ae-b898-42da-a434-7bcdc36380f6", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-15T16:08:09.004Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 115171937.004184, "hours": 31992.204723384442, "days": 1333.0085301410184, "min_seconds": 115171937.004184, "max_seconds": 115171937.004184, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-03-23T15:55:52Z", "date_only": false, "value": "2023-03-23T15:55:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4018", "record": "CVE-2023-28432", "field": "creation_timestamp", "uuid": "737c97dc-f798-47f0-a6d4-c12f3b887b5f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-28434 nuclei templates\nURL\uff1ahttps://github.com/Mr-xn/CVE-2023-28432\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4018", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T16:08:09.004Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}