{"metadata": {"vulnerability": "CVE-2023-29552", "count": 71, "kinds": {"milestone": 5, "sighting": 40, "kev": 11, "other": 15}, "linked_omitted": 0}, "data": [{"timestamp": "2023-04-07T00:00:00Z", "date_only": false, "value": "2023-04-07T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-29552", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-04-24T00:00:00Z", "date_only": false, "value": "2023-04-24T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-29552", "record": "UBUNTU-CVE-2023-29552", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-25T00:00:00Z", "date_only": false, "value": "2023-04-25T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-29552", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-25T15:36:49Z", "date_only": false, "value": "2023-04-25T15:36:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/3282", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "d6aa0e94-8966-4ab7-849c-a79aa40f08b2", "content": "\ud83d\udd25 New SLP protocol vulnerability (CVE-2023-29552) could be weaponized for massive DoS amplification attacks with an amplification factor of up to 2,200.\n\nLearn more: https://thehackernews.com/2023/04/new-slp-vulnerability-could-let.html\n\nMore than 2,000 global organizations and 54,000 SLP instances are said to be affected.", "url": "https://t.me/thehackernews/3282", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-25T16:15:00Z", "date_only": false, "value": "2023-04-25T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-29552", "record": "GSD-2023-29552", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-04-25T16:15:09Z", "date_only": false, "value": "2023-04-25T16:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-288R-5QM5-QP55", "record": "GHSA-288R-5QM5-QP55", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-04-25T16:15:09.537Z", "date_only": false, "value": "2023-04-25T16:15:09.537", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-29552", "record": "FKIE_CVE-2023-29552", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-25T18:30:23Z", "date_only": false, "value": "2023-04-25T18:30:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-288R-5QM5-QP55", "record": "GHSA-288R-5QM5-QP55", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-25T20:02:10Z", "date_only": false, "value": "2023-04-25T20:02:10.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/j_NOQaSS6WIfk39XQXCw2qQeJoi2-3-FLwOGvgRF5EFSFfs", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "da0fd379-9d5f-4d32-ab87-fecc345bad97"}, {"timestamp": "2023-04-25T20:24:58Z", "date_only": false, "value": "2023-04-25T20:24:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/62820", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "0fd79227-5a82-484a-9822-c143f73de24b", "content": "\u203c CVE-2023-29552 \u203c\n\nThe Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/62820"}, {"timestamp": "2023-04-26T08:38:19Z", "date_only": false, "value": "2023-04-26T08:38:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/secmedia/1076", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "56057f71-d290-4616-8ad0-d6061f58ab34", "content": "\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-29552 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 SLP. \u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 BitSight \u0438 Curesec, \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0447\u0440\u0435\u0437\u0432\u044b\u0447\u0430\u0439\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u0430, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0432 2200 \u0440\u0430\u0437.", "url": "https://t.me/secmedia/1076"}, {"timestamp": "2023-04-26T16:50:44Z", "date_only": false, "value": "2023-04-26T16:50:44.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/13966", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "10219d87-a14b-42e8-981a-8cd6a5e3ef7f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SLP \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u0435\u0442 DDoS-\u0430\u0442\u0430\u043a\u0438 \u0432 2200 \u0440\u0430\u0437\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b BitSight \u0438 Curesec \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-29552, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SLP (Service Location Protocol), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u0442\u044c DDoS-\u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 2200 \u0440\u0430\u0437. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0431\u043e\u043b\u0435\u0435 2000 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 54 000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 SLP, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0441\u0442\u0430\u0442\u044c \u043c\u0438\u0448\u0435\u043d\u044f\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\nhttps://xakep.ru/2023/04/26/slp-ddos/", "url": "https://t.me/xakep_ru/13966", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-26T17:04:39Z", "date_only": false, "value": "2023-04-26T17:04:39.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/4325", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "01a594b0-4abb-4ac3-b608-2882c4bac273", "content": "\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SLP \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c DDoS-\u0430\u0442\u0430\u043a\u0430\u043c \u0441 2200-\u043a\u0440\u0430\u0442\u043d\u044b\u043c \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0435\u043c.\n\nSLP \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0432 1997 \u0433\u043e\u0434\u0443 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c (\u041f\u041a, \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u043c, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u043c \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c) \u043b\u0435\u0433\u043a\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433 \u0434\u0440\u0443\u0433\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0437\u0430\u0447\u0430\u0441\u0442\u0443\u044e \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0432 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u044c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0438 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f.\n\n\u0422\u0430\u043a, \u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0431\u043e\u043b\u0435\u0435\u00a070 000\u00a0\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438\u043c\u0435\u044e\u0442 \u043e\u0442\u0435\u0440\u0442\u044b\u0435 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043f\u043e\u0440\u0442\u044b SLP (427 \u043a\u0430\u043a \u0434\u043b\u044f UDP, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f TCP), \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0430\u043a\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043a\u0430\u043a \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u044b VMware ESXi, \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b Konica Minolta, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b Planex, \u0441\u0435\u0440\u0432\u0435\u0440\u044b Supermicro IPMI \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0435\u0434\u0438\u043d\u0438\u0446 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f IBM.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437\u00a0Bitsight\u00a0\u0438\u00a0Curesec. \n\n\u041e\u043d\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-29552 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 SLP, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0441\u0435\u0442\u044c \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0431\u043e\u043b\u044c\u0448\u0435\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435.\n\n\u042d\u0442\u043e\u0442 \u0442\u0440\u044e\u043a \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0445 DDoS-\u0430\u0442\u0430\u043a.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 SLP, \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u0440\u0435\u0441\u0435\u0447\u0435\u0440\u043e\u0432, \u043a\u043e\u044d\u0444\u0444\u0438\u0446\u0438\u0435\u043d\u0442 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u043e\u043b\u043e\u0441\u0441\u0430\u043b\u044c\u043d\u044b\u0435 2200x, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 SLP \u0442\u0440\u0435\u0442\u044c\u0438\u043c \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u043a\u043e\u044d\u0444\u0444\u0438\u0446\u0438\u0435\u043d\u0442\u043e\u043c \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0437\u0430 \u0432\u0441\u044e \u0438\u0441\u0442\u043e\u0440\u0438\u044e.\n\nCloudflare\u00a0\u0438\u00a0Netscout\u00a0\u0441\u0447\u0438\u0442\u0430\u044e\u0442, \u0447\u0442\u043e \u0432\u043d\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f SLP \u0434\u043b\u044f DDoS-\u0430\u0442\u0430\u043a \u0431\u0443\u0434\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u0432 \u0441\u0430\u043c\u043e\u0435 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0443\u0447\u0430\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u0431\u0430\u0433\u0443.\u00a0\n\n\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e, \u0435\u0441\u043b\u0438 \u0443\u0447\u0435\u0441\u0442\u044c, \u0447\u0442\u043e SLP \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f ESXiArgs ransomware\u00a0\u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 VMWare. \n\n\u0411\u0443\u0434\u0435\u043c \u043d\u0430\u0434\u0435\u044f\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u0441\u043b\u0443\u0447\u0430\u044f \u0445\u043e\u0442\u044f \u0431\u044b \u043a\u0430\u043a\u0430\u044f-\u0442\u043e \u0447\u0430\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0437\u0430\u0434\u0443\u043c\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0432\u043e\u0438\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 SLP.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "url": "https://t.me/true_secator/4325", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-26T17:40:19Z", "date_only": false, "value": "2023-04-26T17:40:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/10963", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "f2106d07-826f-465e-835f-5cd59121e547", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 High-severity vulnerability (CVE-2023-29552) discovered in the Service Location Protocol (SLP).\n\nhttps://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp", "url": "https://t.me/cKure/10963"}, {"timestamp": "2023-04-26T21:06:12.748Z", "date_only": false, "value": "2023-04-26T21:06:12.748Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2023-29552", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-04-27T11:05:13Z", "date_only": false, "value": "2023-04-27T11:05:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8192", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "3eb1a60b-65ff-43d7-bcbd-5da0c738b57f", "content": "#exploit\n1. CVE-2023-29552:\nAmplifying SLP Traffic\nhttps://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp\n\n2. Telegram: RCE via WebView\nhttps://davtur19.medium.com/telegram-bug-bounties-rce-privacy-issues-and-more-b1f06a641c1b\n\n3. CVE-2022-29804:\nA directory traversal vulnerability hidden in the Go language standard library\nhttps://tttang.com/archive/1884", "url": "https://t.me/CyberSecurityTechnologies/8192", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-27T19:23:37Z", "date_only": false, "value": "2023-04-27T19:23:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purple_medved/12", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "8b4a4f62-fd30-464b-9837-9738e9c88219", "content": "\u0412 \u0431\u043b\u043e\u0433\u0435 BitSight \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-29552 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u043e\u0439 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SLP (Service Location Protocol). \u042d\u0442\u043e\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0431\u044b\u043b \u0441\u043e\u0437\u0434\u0430\u043d \u0432 \u0434\u0430\u043b\u0435\u043a\u043e\u043c 1997 \u0433\u043e\u0434\u0443, \u043e\u043d \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 427 \u0447\u0435\u0440\u0435\u0437 TCP \u0438 UDP. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u0442\u044c DDoS-\u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 2200 \u0440\u0430\u0437 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 \u0443\u0440\u043e\u0432\u043d\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 - 8,6 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u0443 CVSS. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 SLP, \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u044f \u0430\u0434\u0440\u0435\u0441 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043d\u0430 \u0430\u0434\u0440\u0435\u0441 \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044f 29-\u0431\u0430\u0439\u0442\u043e\u0432\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0432 65,536-\u0431\u0430\u0439\u0442\u043e\u0432\u044b\u0439 \u043e\u0442\u0432\u0435\u0442 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0439 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 VMWare ESXi, \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b Konica Minolta, IBM IMM \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b Planex. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0440, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c SLP \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u043b\u0430 \u0441 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439 \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 TCP \u0438 UDP \u043d\u0430 427 \u043f\u043e\u0440\u0442\u0443.\n\n#CVE-2023-29552 #DDoS-\u0430\u0442\u0430\u043a\u0438 #DoS_amplification", "url": "https://t.me/purple_medved/12"}, {"timestamp": "2023-04-27T23:02:35Z", "date_only": false, "value": "2023-04-27T23:02:35.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/hfwgAwOr-I2NY7E1jCzKYP-osK24R_uQmKQfV3N5WixAHog", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "5dffc557-ad32-4370-bcb9-676e1e7db1a3"}, {"timestamp": "2023-05-04T18:03:29Z", "date_only": false, "value": "2023-05-04T18:03:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/109866", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "dae0b1b8-6055-4265-a41a-f05a7ff9d81b", "content": "CVE-2023-29552: Abusing the SLP Protocol to Launch Massive DDoS Amplification Attacks\n\nhttps://ift.tt/TYqUj9l", "url": "https://t.me/ctinow/109866"}, {"timestamp": "2023-05-04T19:07:00Z", "date_only": false, "value": "2023-05-04T19:07Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-29552", "record": "GSD-2023-29552", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-05-09T03:31:51Z", "date_only": false, "value": "2023-05-09T03:31:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GhostPrincess/11578", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "192e0637-ae7c-4dfb-aab4-7ba4b7a2697f", "content": "What is SLP protocol?\n\nService Location Protocol (SLP) is a network protocol designed to simplify the process of discovering and accessing network services. Developed by the Internet Engineering Task Force (IETF) and defined in RFC 2608, SLP eliminates the need for users or administrators to manually configure clients with the addresses of available network services. Instead, it allows devices and applications to automatically find and connect to services in their local area networks (LANs). Since the SLP protocol doesn\u2019t require authentication, anyone can register new services, which is why it wasn\u2019t intended to be publicly available over the Internet.\n\nHow Does SLP Work?\n\nSLP operates based on a request-response model that involves three primary components: User Agents (UAs), Service Agents (SAs), and Directory Agents (DAs).\n\nUser Agents (UAs): UAs are clients seeking network services. They send out service requests to discover the available services in the network.\n\nService Agents (SAs): SAs represent the network services themselves. They advertise the services they offer and respond to service requests from UAs.\n\nDirectory Agents (DAs): DAs act as a centralized repository for service information. They cache the advertisements from SAs, and UAs can query them to find the desired services more efficiently. Although DAs are optional, their presence improves the overall performance of the SLP system.\n\nUnderstanding How CVE-2023-29552 Works\n\nThe attack technique allows an unauthenticated, remote attacker to register arbitrary services. This would enable the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.\n\nAn Ghost Clan channel:\nhttps://t.me/TheGrayHats\n\n#cybersec #infosec #hacking #hack #cybersecurity #hackers #grayhats", "url": "https://t.me/GhostPrincess/11578"}, {"timestamp": "2023-05-28T11:01:35Z", "date_only": false, "value": "2023-05-28T11:01:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberSkolkovo/123", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "1ea6365e-ee16-4e6d-b2a3-925d2a2e97f3", "content": "\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-29552 (8,6 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SLP. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u0442\u044c DDoS-\u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 2200 \u0440\u0430\u0437. \u0412 \u0447\u0438\u0441\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0432\u0445\u043e\u0434\u044f\u0442 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u044b VMWare ESXi, \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b Konica Minolta, IBM IMM \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b Planex, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u041e\u043d\u0438 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u0440\u044f\u0434\u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Fortune 1000, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0441\u0442\u0440\u0430\u0445\u043e\u0432\u0430\u043d\u0438\u044f, \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432, \u0433\u043e\u0441\u0442\u0438\u043d\u0438\u0447\u043d\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430 \u0438 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u0430.\n\n#\u043a\u0438\u0431\u0435\u0440\u0445\u0430\u0431_\u0446\u0438\u0444\u0440\u044b", "url": "https://t.me/cyberSkolkovo/123"}, {"timestamp": "2023-11-08T00:00:00Z", "date_only": false, "value": "2023-11-08T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-29552", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a7b2e9e6-d290-41b3-af34-4085e8dafa7d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-08T00:00:00Z", "date_only": false, "value": "2023-11-08T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-29552", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "bf106ebc-0adc-43f0-9f15-3284e62f302a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-08T00:00:00Z", "date_only": true, "value": "2023-11-08", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-29552", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2023-11-08T00:00:00Z", "date_only": false, "value": "2023-11-08T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-29552", "field": "evidence.0.details.added_date", "uuid": "bf106ebc-0adc-43f0-9f15-3284e62f302a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-08T00:00:00Z", "date_only": true, "value": "2023-11-08", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-29552", "field": "evidence.0.details.date_added", "uuid": "a7b2e9e6-d290-41b3-af34-4085e8dafa7d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-08T00:00:00Z", "date_only": false, "value": "2023-11-08T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-29552", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a7b2e9e6-d290-41b3-af34-4085e8dafa7d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-08T00:00:00Z", "date_only": false, "value": "2023-11-08T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-29552", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "bf106ebc-0adc-43f0-9f15-3284e62f302a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-08T00:00:00Z", "date_only": false, "value": "2023-11-08T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-29552", "field": "status.status_updated_at", "uuid": "a7b2e9e6-d290-41b3-af34-4085e8dafa7d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-08T00:00:00Z", "date_only": false, "value": "2023-11-08T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-29552", "field": "status.status_updated_at", "uuid": "bf106ebc-0adc-43f0-9f15-3284e62f302a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-08T00:00:00Z", "date_only": false, "value": "2023-11-08T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-29552", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2023-29552 added to CISA KEV"}, {"timestamp": "2023-11-08T18:10:02Z", "date_only": false, "value": "2023-11-08T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "eb41ffea-203a-4d60-b808-c9f70a76c24c"}, {"timestamp": "2023-11-09T07:06:05Z", "date_only": false, "value": "2023-11-09T07:06:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/1047", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "00d3cf97-4ca2-4f25-9c8a-5286f857c770", "content": "CISA Alerts: High-Severity SLP Vulnerability Now Under Active Exploitation\nhttps://thehackernews.com/2023/11/cisa-alerts-high-severity-slp.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday\u00a0added\u00a0a high-severity flaw in the Service Location Protocol (SLP) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\nTracked as\u00a0CVE-2023-29552\u00a0(CVSS score: 7.5), the issue relates to a denial-of-service (DoS) vulnerability that could be weaponized to launch massive DoS", "url": "https://t.me/KomunitiSiber/1047", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-09T07:16:19Z", "date_only": false, "value": "2023-11-09T07:16:19.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/4126", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "de34d1a4-4a4e-414b-9f93-c1f0c34e1872", "content": "CISA adds high-severity flaw (CVE-2023-29552) in SLP to Known Exploited Vulnerabilities list. This flaw is being actively exploited to launch massive DoS amplification attacks. \n \nRead: https://thehackernews.com/2023/11/cisa-alerts-high-severity-slp.html", "url": "https://t.me/thehackernews/4126", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-09T10:16:29Z", "date_only": false, "value": "2023-11-09T10:16:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/ITlnoIKxw8fWTwUOX0oLpzTnmNV1tK6JMvQUjg6Rza1JcQ", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "b0a969e3-7922-4ec9-b6f5-87332f47665f", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-09T21:37:02Z", "date_only": false, "value": "2023-11-09T21:37:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/148464", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "de3e7215-4fc9-498d-a457-4eb5bc2ed43d", "content": "https://ift.tt/mxWLcCh\nNetography Releases Detection for Actively Exploited DoS Amplification CVE-2023-29552", "url": "https://t.me/ctinow/148464"}, {"timestamp": "2023-11-10T12:27:23Z", "date_only": false, "value": "2023-11-10T12:27:23.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5071", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "9f61d6a0-0d6c-442e-b34b-67ea23f7f511", "content": "\u041a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 KEV \u043f\u043e\u043f\u043e\u043b\u043d\u0438\u043b\u0441\u044f \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b SLP \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-29552 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 7,5 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0442\u0438\u043f\u0430 DoS, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 DDoS-\u0430\u0442\u0430\u043a \u0441 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0435\u043c, \u043e \u0447\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 Bitsight\u00a0\u0438 Curesec.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 SLP \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 UDP-\u0442\u0440\u0430\u0444\u0438\u043a \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 DoS \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c \u043a\u043e\u044d\u0444\u0444\u0438\u0446\u0438\u0435\u043d\u0442\u043e\u043c \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Bitsight \u0438 Curesec, \u0443 SLP \u043a\u043e\u044d\u0444\u0444\u0438\u0446\u0438\u0435\u043d\u0442 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f DDoS \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u00a02200, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438 \u0448\u0438\u0440\u043e\u043a\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u0443\u044e \u0441\u0435\u0442\u044c \u0438\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440.\n\nDDoS-\u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c SLP \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b PoC \u043d\u0430 GitHub, \u043e\u0434\u043d\u0430\u043a\u043e \u0442\u043e\u0447\u043d\u044b\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "url": "https://t.me/true_secator/5071", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-29T00:00:00Z", "date_only": true, "value": "2023-11-29", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-29552", "field": "evidence.0.details.due_date", "uuid": "a7b2e9e6-d290-41b3-af34-4085e8dafa7d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-04T04:17:18Z", "date_only": false, "value": "2023-12-04T04:17:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1111", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "4f5a40a5-2262-451f-af48-165165537b8d", "content": "#ExploitObserverAlert\n\nCVE-2023-29552\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-29552. The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.\n\nFIRST-EPSS: 0.043370000\nNVD-IS: 3.6\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1111"}, {"timestamp": "2023-12-13T01:20:57.247Z", "date_only": false, "value": "2023-12-13T01:20:57.247235Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-29552", "record": "GSD-2023-29552", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-05-29T23:44:40Z", "date_only": false, "value": "2024-05-29T23:44:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/5741", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "e88ddcc6-2962-4ea4-a12f-3f48208e11c1", "content": "What is SLP protocol?\n\nService Location Protocol (SLP) is a network protocol designed to simplify the process of discovering and accessing network services. Developed by the Internet Engineering Task Force (IETF) and defined in RFC 2608, SLP eliminates the need for users or administrators to manually configure clients with the addresses of available network services. Instead, it allows devices and applications to automatically find and connect to services in their local area networks (LANs). Since the SLP protocol doesn\u2019t require authentication, anyone can register new services, which is why it wasn\u2019t intended to be publicly available over the Internet.\n\nHow Does SLP Work?\n\nSLP operates based on a request-response model that involves three primary components: User Agents (UAs), Service Agents (SAs), and Directory Agents (DAs).\n\nUser Agents (UAs): UAs are clients seeking network services. They send out service requests to discover the available services in the network.\n\nService Agents (SAs): SAs represent the network services themselves. They advertise the services they offer and respond to service requests from UAs.\n\nDirectory Agents (DAs): DAs act as a centralized repository for service information. They cache the advertisements from SAs, and UAs can query them to find the desired services more efficiently. Although DAs are optional, their presence improves the overall performance of the SLP system.\n\nUnderstanding How CVE-2023-29552 Works\n\nThe attack technique allows an unauthenticated, remote attacker to register arbitrary services. This would enable the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.\n\nhttps://t.me/GrayHatsHack\n\n#cybersec #infosec #hacking #hack #cybersecurity #hackers #grayhats", "url": "https://t.me/GrayHatsHack/5741", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-02T14:14:38.816Z", "date_only": false, "value": "2024-08-02T14:14:38.816Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-29552", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:35:34.222Z", "date_only": false, "value": "2024-12-24T20:35:34.222138Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971913", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "d1ab2006-b306-4cbf-99fc-5ee05583b662", "url": "https://feedsin.space/feed/CISAKevBot/items/2971913"}, {"timestamp": "2025-01-28T21:15:30.516Z", "date_only": false, "value": "2025-01-28T21:15:30.516372Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-29552", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-28T21:15:30.516Z", "date_only": false, "value": "2025-01-28T21:15:30.516372Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-29552", "record": "FKIE_CVE-2023-29552", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-01-28T23:18:07Z", "date_only": false, "value": "2025-01-28T23:18:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3311", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "edf9b29a-0474-4d96-8680-0a6aab7c8c5d", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-29552\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2023-04-25T16:15:09.537\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html\n2. https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html\n3. https://datatracker.ietf.org/doc/html/rfc2608\n4. https://github.com/curesec/slpload\n5. https://security.netapp.com/advisory/ntap-20230426-0001/\n6. https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp\n7. https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks\n8. https://www.suse.com/support/kb/doc/?id=000021051\n9. https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html\n10. https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html\n11. https://datatracker.ietf.org/doc/html/rfc2608\n12. https://github.com/curesec/slpload\n13. https://security.netapp.com/advisory/ntap-20230426-0001/\n14. https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp\n15. https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks\n16. https://www.suse.com/support/kb/doc/?id=000021051", "url": "https://t.me/DarkWebInformer_CVEAlerts/3311", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-23T02:10:48Z", "date_only": false, "value": "2025-02-23T02:10:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "64584799-8df4-4e63-b766-12b86f4eec1d"}, {"timestamp": "2025-10-21T23:05:48.255Z", "date_only": false, "value": "2025-10-21T23:05:48.255Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-29552", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:48.255Z", "date_only": false, "value": "2025-10-21T23:05:48.255Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-29552", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:44Z", "date_only": false, "value": "2025-10-22T00:32:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-288R-5QM5-QP55", "record": "GHSA-288R-5QM5-QP55", "field": "modified", "linked_record": true}, {"timestamp": "2026-02-02T12:26:47.433Z", "date_only": false, "value": "2026-02-02T12:26:47.433070Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a7b2e9e6-d290-41b3-af34-4085e8dafa7d", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "ad7d6098-1258-4348-ba23-f3c1065be666", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a7b2e9e6-d290-41b3-af34-4085e8dafa7d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-22T07:45:18Z", "date_only": false, "value": "2026-04-22T07:45:18Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-29552", "record": "UBUNTU-CVE-2023-29552", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T05:50:32.263Z", "date_only": false, "value": "2026-06-17T05:50:32.263", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-29552", "record": "FKIE_CVE-2023-29552", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:46.483Z", "date_only": false, "value": "2026-06-19T12:46:46.483072Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4317ed82-1b64-4c7e-9b8e-3c5f37acf439", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "ee620082-10a3-4b29-a77e-426fc3456be1", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4317ed82-1b64-4c7e-9b8e-3c5f37acf439", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-29552", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "bf106ebc-0adc-43f0-9f15-3284e62f302a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:47.445Z", "date_only": false, "value": "2026-06-23T14:05:47.445412Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bf106ebc-0adc-43f0-9f15-3284e62f302a", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "39a73237-85bc-4487-a314-0b14dc7a4308", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bf106ebc-0adc-43f0-9f15-3284e62f302a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-06T12:00:13.165Z", "date_only": false, "value": "2026-07-06T12:00:13.165875Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/84", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "cf2423f4-30ff-4211-b1dd-0a5356cc8864", "content": "\u0421\u0428\u0410 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442\u0441\u044f DoS-\u0430\u0442\u0430\u043a\u0430\u043c \u0438\u0437-\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SLP\n\n\ud83d\udee1 \u0421\u043b\u0443\u0436\u0431\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 (CISA) \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 (SLP), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 DoS-\u0430\u0442\u0430\u043a.\n\n\ud83d\udee1 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2023-29552, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c\u0438 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438 BitSight \u0438 Curesec \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0433\u043e\u0434\u0430. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438 \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u0443\u044e \u0441\u0435\u0442\u044c \u0438\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u0441 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u0438\u044f DoS.\n\n\ud83d\udee1 CISA \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0430 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0441\u043b\u0443\u0436\u0431\u044b SLP \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0432 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445, \u0432 \u0441\u0440\u043e\u043a \u0434\u043e 29 \u043d\u043e\u044f\u0431\u0440\u044f.\n\n#\u0421\u0428\u0410 #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #SLP #DoS #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/84"}, {"timestamp": "2026-07-12T05:00:05.030Z", "date_only": false, "value": "2026-07-12T05:00:05.030861Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/84", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "99283590-73bc-4127-bef9-4c165282b599", "content": "\u0421\u0428\u0410 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442\u0441\u044f DoS-\u0430\u0442\u0430\u043a\u0430\u043c \u0438\u0437-\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SLP\n\n\ud83d\udee1 \u0421\u043b\u0443\u0436\u0431\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 (CISA) \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 (SLP), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 DoS-\u0430\u0442\u0430\u043a.\n\n\ud83d\udee1 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2023-29552, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c\u0438 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438 BitSight \u0438 Curesec \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0433\u043e\u0434\u0430. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438 \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u0443\u044e \u0441\u0435\u0442\u044c \u0438\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u0441 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u0438\u044f DoS.\n\n\ud83d\udee1 CISA \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0430 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0441\u043b\u0443\u0436\u0431\u044b SLP \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0432 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445, \u0432 \u0441\u0440\u043e\u043a \u0434\u043e 29 \u043d\u043e\u044f\u0431\u0440\u044f.\n\n#\u0421\u0428\u0410 #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #SLP #DoS #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/84", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-17T11:00:07.192Z", "date_only": false, "value": "2026-07-17T11:00:07.192905Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/158", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "34e6fe39-6b8d-4a57-a6ec-d04174b5b16e", "content": "CISA adds high-severity flaw (CVE-2023-29552) in SLP to Known Exploited Vulnerabilities list. This flaw is being actively exploited to launch massive DoS amplification attacks. \n \nRead: https://thehackernews.com/2023/11/cisa-alerts-high-severity-slp.html", "url": "https://t.me/cyberwarehouse/158"}, {"timestamp": "2026-07-18T00:00:28.489Z", "date_only": false, "value": "2026-07-18T00:00:28.489087Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cyberwarehouse/158", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "94739d23-98a1-421b-b702-9d0747e03362", "content": "CISA adds high-severity flaw (CVE-2023-29552) in SLP to Known Exploited Vulnerabilities list. This flaw is being actively exploited to launch massive DoS amplification attacks. \n \nRead: https://thehackernews.com/2023/11/cisa-alerts-high-severity-slp.html", "url": "https://t.me/cyberwarehouse/158", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-26T02:02:27.252Z", "date_only": false, "value": "2026-07-26T02:02:27.252922Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1479", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "339d2dbc-8372-4970-bb83-ae54549494f3", "content": "\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SLP \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c DDoS-\u0430\u0442\u0430\u043a\u0438 \u0432 2200 \u0440\u0430\u0437 \u043c\u043e\u0449\u043d\u0435\u0435, \u0447\u0435\u043c \u0440\u0430\u043d\u044c\u0448\u0435\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 Bitsight \u0438 Marco Lux \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043b\u0438\u044f\u044e\u0449\u0435\u0439 \u043d\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441\u043b\u0443\u0436\u0431\u044b (SLP). \u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441\u0432\u0435\u0440\u0445\u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 \u00ab\u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u043a\u0430\u0436\u0443\u0442\u0441\u044f \u0432 2200 \u0440\u0430\u0437 \u043c\u043e\u0449\u043d\u0435\u0435, \u0447\u0435\u043c \u043b\u044e\u0431\u0430\u044f \u0438\u0437 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043f\u043e \u0441\u0435\u0439 \u0434\u0435\u043d\u044c DDoS-\u0430\u0442\u0430\u043a.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-29552 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,6). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 2000 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u0438 \u0431\u043e\u043b\u0435\u0435 54 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 SLP, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442. \u0421\u0440\u0435\u0434\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u2013 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 VMWare ESXi, \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b Konica Minolta, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b Planex, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f IBM (IMM), SMC IPMI \u0438 665 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u0438\u0434\u043e\u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0412 \u043f\u0435\u0440\u0432\u0443\u044e \u0434\u0435\u0441\u044f\u0442\u043a\u0443 \u0441\u0442\u0440\u0430\u043d \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0438\u043c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b SLP, \u0432\u0445\u043e\u0434\u044f\u0442 \u0421\u0428\u0410, \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u044f, \u042f\u043f\u043e\u043d\u0438\u044f, \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u041a\u0430\u043d\u0430\u0434\u0430, \u0424\u0440\u0430\u043d\u0446\u0438\u044f, \u0418\u0442\u0430\u043b\u0438\u044f, \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u044f, \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u044b \u0438 \u0418\u0441\u043f\u0430\u043d\u0438\u044f.\n\nSLP \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0441\u043b\u0443\u0436\u0431, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b, \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2023-29552 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438 SLP, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0443 \u0441 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0435\u0440\u0435\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0432\u0441\u0435, \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u2014 \u044d\u0442\u043e \u043d\u0430\u0439\u0442\u0438 SLP-\u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430 UDP-\u043f\u043e\u0440\u0442\u0443 427 \u0438 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u00ab\u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 SLP \u043d\u0435 \u043e\u0442\u043a\u0430\u0436\u0435\u0442 \u0432 \u0431\u043e\u043b\u044c\u0448\u0435\u043c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0437\u0430\u043f\u0438\u0441\u0435\u0439\u00bb, \u0430 \u0437\u0430\u0442\u0435\u043c \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u043a \u044d\u0442\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0443 \u0441 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u043c \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u0430\u0434\u0440\u0435\u0441\u0430.\n\n\u0427\u0442\u043e\u0431\u044b \u0441\u043c\u044f\u0433\u0447\u0438\u0442\u044c \u0443\u0433\u0440\u043e\u0437\u0443, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c SLP \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u043a \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443, \u0438\u043b\u0438, \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b, \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u0447\u0435\u0440\u0435\u0437 UDP \u0438 TCP-\u043f\u043e\u0440\u0442 427.\n\n\u00ab\u041d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0432\u0430\u0436\u043d\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0441\u0442\u0440\u043e\u0433\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0443\u0436\u043d\u044b\u043c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u044f\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Cloudflare \u043e\u0436\u0438\u0434\u0430\u044e\u0442 \u0440\u043e\u0441\u0442\u0430 DDoS-\u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 SLP \u0443\u0436\u0435 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u043d\u0435\u0434\u0435\u043b\u0438. \u041f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u0438 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0421\u0428\u0410 (CISA). \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #DDoS", "url": "https://t.me/EchelonEyes/1479"}, {"timestamp": "2026-07-28T00:00:08.304Z", "date_only": false, "value": "2026-07-28T00:00:08.304695Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/EchelonEyes/1479", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "f14fb2fa-e464-4a25-8955-1170d520331e", "content": "\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SLP \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c DDoS-\u0430\u0442\u0430\u043a\u0438 \u0432 2200 \u0440\u0430\u0437 \u043c\u043e\u0449\u043d\u0435\u0435, \u0447\u0435\u043c \u0440\u0430\u043d\u044c\u0448\u0435\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 Bitsight \u0438 Marco Lux \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043b\u0438\u044f\u044e\u0449\u0435\u0439 \u043d\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441\u043b\u0443\u0436\u0431\u044b (SLP). \u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441\u0432\u0435\u0440\u0445\u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 \u00ab\u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u043a\u0430\u0436\u0443\u0442\u0441\u044f \u0432 2200 \u0440\u0430\u0437 \u043c\u043e\u0449\u043d\u0435\u0435, \u0447\u0435\u043c \u043b\u044e\u0431\u0430\u044f \u0438\u0437 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043f\u043e \u0441\u0435\u0439 \u0434\u0435\u043d\u044c DDoS-\u0430\u0442\u0430\u043a.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-29552 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,6). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 2000 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u0438 \u0431\u043e\u043b\u0435\u0435 54 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 SLP, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442. \u0421\u0440\u0435\u0434\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u2013 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 VMWare ESXi, \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b Konica Minolta, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b Planex, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f IBM (IMM), SMC IPMI \u0438 665 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u0438\u0434\u043e\u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0412 \u043f\u0435\u0440\u0432\u0443\u044e \u0434\u0435\u0441\u044f\u0442\u043a\u0443 \u0441\u0442\u0440\u0430\u043d \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0438\u043c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b SLP, \u0432\u0445\u043e\u0434\u044f\u0442 \u0421\u0428\u0410, \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u044f, \u042f\u043f\u043e\u043d\u0438\u044f, \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u041a\u0430\u043d\u0430\u0434\u0430, \u0424\u0440\u0430\u043d\u0446\u0438\u044f, \u0418\u0442\u0430\u043b\u0438\u044f, \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u044f, \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u044b \u0438 \u0418\u0441\u043f\u0430\u043d\u0438\u044f.\n\nSLP \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0441\u043b\u0443\u0436\u0431, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b, \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2023-29552 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438 SLP, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0443 \u0441 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0435\u0440\u0435\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0432\u0441\u0435, \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u2014 \u044d\u0442\u043e \u043d\u0430\u0439\u0442\u0438 SLP-\u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430 UDP-\u043f\u043e\u0440\u0442\u0443 427 \u0438 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u00ab\u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 SLP \u043d\u0435 \u043e\u0442\u043a\u0430\u0436\u0435\u0442 \u0432 \u0431\u043e\u043b\u044c\u0448\u0435\u043c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0437\u0430\u043f\u0438\u0441\u0435\u0439\u00bb, \u0430 \u0437\u0430\u0442\u0435\u043c \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u043a \u044d\u0442\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0443 \u0441 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u043c \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u0430\u0434\u0440\u0435\u0441\u0430.\n\n\u0427\u0442\u043e\u0431\u044b \u0441\u043c\u044f\u0433\u0447\u0438\u0442\u044c \u0443\u0433\u0440\u043e\u0437\u0443, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c SLP \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u043a \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443, \u0438\u043b\u0438, \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b, \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u0447\u0435\u0440\u0435\u0437 UDP \u0438 TCP-\u043f\u043e\u0440\u0442 427.\n\n\u00ab\u041d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0432\u0430\u0436\u043d\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0441\u0442\u0440\u043e\u0433\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0443\u0436\u043d\u044b\u043c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u044f\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Cloudflare \u043e\u0436\u0438\u0434\u0430\u044e\u0442 \u0440\u043e\u0441\u0442\u0430 DDoS-\u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 SLP \u0443\u0436\u0435 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u043d\u0435\u0434\u0435\u043b\u0438. \u041f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u0438 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0421\u0428\u0410 (CISA). \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #DDoS", "url": "https://t.me/EchelonEyes/1479", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T12:03:10.529Z", "date_only": false, "value": "2026-07-29T12:03:10.529404Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2428", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "6ef11dad-9b28-4e67-a8a5-a6afd8e9a3b4", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (18-24 \u0430\u043f\u0440\u0435\u043b\u044f)\n\n1\ufe0f\u20e3 \u0418\u0411-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 BitSight \u0438 Curesec \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \ud83d\udcbeCVE-2023-29552 (8,6 \u043f\u043e CVSS), \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \ud83d\udcdd\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SLP (Service Location Protocol).\n\n2\ufe0f\u20e3 \u0412 \ud83d\udcbb\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e (\u0443\u0436\u0435 \u043d\u0435 \u043f\u0435\u0440\u0432\u0443\u044e) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u0430\u0436\u0438 \ud83d\udcc2\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c.\n\n3\ufe0f\u20e3 \u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f Google \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 GhostToken \u0432 Google Cloud Platform (GCP).\n\n4\ufe0f\u20e3 \u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f Google \ud83d\udd0e\u043d\u0430\u0448\u043b\u0430 \u0435\u0449\u0451 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \ud83c\udf0fChrome \u2014 \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0443\u0442\u043e\u043a \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439. \n\n5\ufe0f\u20e3 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Trust Wallet \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u043d\u0435\u043a\u0430\u0441\u0442\u043e\u0434\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \ud83d\udcb5\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0430. \n\n6\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u0430\u043c\u0438 \u043f\u043e \u0418\u0411 \u0438\u0437 \ud83c\uddf7\ud83c\uddfaPositive Technologies, \u0412\u043b\u0430\u0434\u0438\u043c\u0438\u0440\u043e\u043c \u0420\u0430\u0437\u043e\u0432\u044b\u043c \u0438 \u0410\u043b\u0435\u043a\u0441\u0430\u043d\u0434\u0440\u043e\u043c \u0423\u0441\u0442\u0438\u043d\u043e\u0432\u044b\u043c, \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Nokia NetAct \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \ud83d\udcf2Nokia. \n\n7\ufe0f\u20e3 \u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \ud83d\udee0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u043c \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0435 Pwn2Own Vancouver 2023. \n\n8\ufe0f\u20e3 \u041a\u043e\u043c\u0430\u043d\u0434\u0430 Google Audit \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \ud83d\udd0e\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Intel Trust Domain Extensions (TDX). \u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b\u0430 81 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 \u0438 \u0434\u0435\u0441\u044f\u0442\u044c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u044b\u0445 \ud83d\udcbd\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.", "url": "https://t.me/cisoclub/2428"}, {"timestamp": "2026-09-01T17:00:07.057Z", "date_only": false, "value": "2026-09-01T17:00:07.057119Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/881", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "841ac830-5ffe-46a7-bf7e-b6c3240f3f82", "content": "CISA \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-29552) \u0432 SLP \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 DoS-\u0430\u0442\u0430\u043a\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0421\u0428\u0410 (CISA) \u0432 \u0441\u0440\u0435\u0434\u0443 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441\u043b\u0443\u0436\u0431\u044b (SLP) \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (KEV), \u0441\u043e\u0441\u043b\u0430\u0432\u0448\u0438\u0441\u044c \u043d\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-29552 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5), \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0442\u0438\u043f\u0430 \u00ab\u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb (DoS), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 DoS-\u0430\u0442\u0430\u043a .  https://www.cisa.gov/news-events/alerts/2023/11/08/cisa-adds-one-known-exploited-vulnerability-catalog", "url": "https://t.me/Hackme_news/881"}, {"timestamp": "2026-09-01T17:00:08.683Z", "date_only": false, "value": "2026-09-01T17:00:08.683196Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/742", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "aa788a42-3aff-4661-983e-fa238ec48c9c", "content": "\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SLP \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432 2200 \u0440\u0430\u0437 \u0431\u043e\u043b\u0435\u0435 \u043c\u043e\u0449\u043d\u044b\u0435 DDoS-\u0430\u0442\u0430\u043a\u0438\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043c\u0430\u0441\u0441\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 \u00ab\u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb (DoS) \u0441 \u043a\u043e\u044d\u0444\u0444\u0438\u0446\u0438\u0435\u043d\u0442\u043e\u043c \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0434\u043e 2200 \u0440\u0430\u0437, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u0443 \u0430\u0442\u0430\u043a\u0443 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0441 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0435\u043c, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u043e\u0433\u0434\u0430-\u043b\u0438\u0431\u043e \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c\u00bb, \u2014 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Bitsight \u0438 Curesec \u041f\u0435\u0434\u0440\u043e \u0423\u043c\u0431\u0435\u043b\u0438\u043d\u043e. \u0438 \u041c\u0430\u0440\u043a\u043e \u041b\u044e\u043a\u0441 \u0441\u043a\u0430\u0437\u0430\u043b \u0432 \u043e\u0442\u0447\u0435\u0442\u0435, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c The Hacker News.\n\n\u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-29552 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,6), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 2000 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438 \u0431\u043e\u043b\u0435\u0435 54 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 SLP, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.", "url": "https://t.me/Hackme_news/742"}, {"timestamp": "2026-09-01T17:00:20.833Z", "date_only": false, "value": "2026-09-01T17:00:20.833209Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6806", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "924e9506-9229-441b-81c3-a4db35c0217d", "content": "exploit\n1. CVE-2023-29552:\nAmplifying SLP Traffic\nhttps://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp\n\n2. Telegram: RCE via WebView\nhttps://davtur19.medium.com/telegram-bug-bounties-rce-privacy-issues-and-more-b1f06a641c1b\n\n3. CVE-2022-29804:\nA directory traversal vulnerability hidden in the Go language standard library\nhttps://tttang.com/archive/1884\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.09", "url": "https://t.me/cissp/6806"}, {"timestamp": "2026-09-01T17:00:21.023Z", "date_only": false, "value": "2026-09-01T17:00:21.023171Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6799", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "efcb4c73-2c50-45d0-968c-125ceb409212", "content": "\ud83d\udd25 New SLP protocol vulnerability (CVE-2023-29552) could be weaponized for massive DoS amplification attacks with an amplification factor of up to 2,200.\n\nLearn more: https://thehackernews.com/2023/04/new-slp-vulnerability-could-let.html\n\nMore than 2,000 global organizations and 54,000 SLP instances are said to be affected.\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.05", "url": "https://t.me/cissp/6799"}, {"timestamp": "2026-09-08T22:00:04.596Z", "date_only": false, "value": "2026-09-08T22:00:04.596325Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Hackme_news/881", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "544fdd1c-c3ae-48cc-88de-026945f9015b", "content": "CISA \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-29552) \u0432 SLP \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 DoS-\u0430\u0442\u0430\u043a\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0421\u0428\u0410 (CISA) \u0432 \u0441\u0440\u0435\u0434\u0443 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441\u043b\u0443\u0436\u0431\u044b (SLP) \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (KEV), \u0441\u043e\u0441\u043b\u0430\u0432\u0448\u0438\u0441\u044c \u043d\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-29552 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5), \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0442\u0438\u043f\u0430 \u00ab\u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb (DoS), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 DoS-\u0430\u0442\u0430\u043a .  https://www.cisa.gov/news-events/alerts/2023/11/08/cisa-adds-one-known-exploited-vulnerability-catalog", "url": "https://t.me/Hackme_news/881", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-10T01:00:04.680Z", "date_only": false, "value": "2026-09-10T01:00:04.680793Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/6806", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "01955f95-8c01-4f20-bce5-89a8cc01f168", "content": "exploit\n1. CVE-2023-29552:\nAmplifying SLP Traffic\nhttps://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp\n\n2. Telegram: RCE via WebView\nhttps://davtur19.medium.com/telegram-bug-bounties-rce-privacy-issues-and-more-b1f06a641c1b\n\n3. CVE-2022-29804:\nA directory traversal vulnerability hidden in the Go language standard library\nhttps://tttang.com/archive/1884\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.09", "url": "https://t.me/cissp/6806", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-29552", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "a7b2e9e6-d290-41b3-af34-4085e8dafa7d", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-15T10:48:04.785Z", "anchors": {"origin": {"timestamp": "2023-04-24T00:00:00Z", "date_only": false, "value": "2023-04-24T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-29552", "record": "UBUNTU-CVE-2023-29552", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-04-24T00:00:00Z", "date_only": false, "value": "2023-04-24T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-29552", "record": "UBUNTU-CVE-2023-29552", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2023-04-27T11:05:13Z", "date_only": false, "value": "2023-04-27T11:05:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8192", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "3eb1a60b-65ff-43d7-bcbd-5da0c738b57f", "content": "#exploit\n1. CVE-2023-29552:\nAmplifying SLP Traffic\nhttps://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp\n\n2. Telegram: RCE via WebView\nhttps://davtur19.medium.com/telegram-bug-bounties-rce-privacy-issues-and-more-b1f06a641c1b\n\n3. CVE-2022-29804:\nA directory traversal vulnerability hidden in the Go language standard library\nhttps://tttang.com/archive/1884", "url": "https://t.me/CyberSecurityTechnologies/8192", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2023-04-25T15:36:49Z", "date_only": false, "value": "2023-04-25T15:36:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/3282", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "d6aa0e94-8966-4ab7-849c-a79aa40f08b2", "content": "\ud83d\udd25 New SLP protocol vulnerability (CVE-2023-29552) could be weaponized for massive DoS amplification attacks with an amplification factor of up to 2,200.\n\nLearn more: https://thehackernews.com/2023/04/new-slp-vulnerability-could-let.html\n\nMore than 2,000 global organizations and 54,000 SLP instances are said to be affected.", "url": "https://t.me/thehackernews/3282", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 142609.0, "hours": 39.61361111111111, "days": 1.6505671296296296, "min_seconds": 56209.0, "max_seconds": 142609.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-24T00:00:00Z", "date_only": false, "value": "2023-04-24T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-29552", "record": "UBUNTU-CVE-2023-29552", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-04-25T15:36:49Z", "date_only": false, "value": "2023-04-25T15:36:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/3282", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "d6aa0e94-8966-4ab7-849c-a79aa40f08b2", "content": "\ud83d\udd25 New SLP protocol vulnerability (CVE-2023-29552) could be weaponized for massive DoS amplification attacks with an amplification factor of up to 2,200.\n\nLearn more: https://thehackernews.com/2023/04/new-slp-vulnerability-could-let.html\n\nMore than 2,000 global organizations and 54,000 SLP instances are said to be affected.", "url": "https://t.me/thehackernews/3282", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 142609.0, "hours": 39.61361111111111, "days": 1.6505671296296296, "min_seconds": 56209.0, "max_seconds": 142609.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-24T00:00:00Z", "date_only": false, "value": "2023-04-24T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-29552", "record": "UBUNTU-CVE-2023-29552", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-04-25T15:36:49Z", "date_only": false, "value": "2023-04-25T15:36:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/3282", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "d6aa0e94-8966-4ab7-849c-a79aa40f08b2", "content": "\ud83d\udd25 New SLP protocol vulnerability (CVE-2023-29552) could be weaponized for massive DoS amplification attacks with an amplification factor of up to 2,200.\n\nLearn more: https://thehackernews.com/2023/04/new-slp-vulnerability-could-let.html\n\nMore than 2,000 global organizations and 54,000 SLP instances are said to be affected.", "url": "https://t.me/thehackernews/3282", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 299113.0, "hours": 83.08694444444444, "days": 3.4619560185185185, "min_seconds": 212713.0, "max_seconds": 299113.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-24T00:00:00Z", "date_only": false, "value": "2023-04-24T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-29552", "record": "UBUNTU-CVE-2023-29552", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-04-27T11:05:13Z", "date_only": false, "value": "2023-04-27T11:05:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8192", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "3eb1a60b-65ff-43d7-bcbd-5da0c738b57f", "content": "#exploit\n1. CVE-2023-29552:\nAmplifying SLP Traffic\nhttps://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp\n\n2. Telegram: RCE via WebView\nhttps://davtur19.medium.com/telegram-bug-bounties-rce-privacy-issues-and-more-b1f06a641c1b\n\n3. CVE-2022-29804:\nA directory traversal vulnerability hidden in the Go language standard library\nhttps://tttang.com/archive/1884", "url": "https://t.me/CyberSecurityTechnologies/8192", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 112445284.785689, "hours": 31234.801329358055, "days": 1301.450055389919, "min_seconds": 112358884.785689, "max_seconds": 112445284.785689, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-24T00:00:00Z", "date_only": false, "value": "2023-04-24T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-29552", "record": "UBUNTU-CVE-2023-29552", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-15T10:48:04.785Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 112302675.785689, "hours": 31195.187718246943, "days": 1299.7994882602893, "min_seconds": 112302675.785689, "max_seconds": 112302675.785689, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-25T15:36:49Z", "date_only": false, "value": "2023-04-25T15:36:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/3282", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "d6aa0e94-8966-4ab7-849c-a79aa40f08b2", "content": "\ud83d\udd25 New SLP protocol vulnerability (CVE-2023-29552) could be weaponized for massive DoS amplification attacks with an amplification factor of up to 2,200.\n\nLearn more: https://thehackernews.com/2023/04/new-slp-vulnerability-could-let.html\n\nMore than 2,000 global organizations and 54,000 SLP instances are said to be affected.", "url": "https://t.me/thehackernews/3282", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T10:48:04.785Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 112146171.785689, "hours": 31151.714384913612, "days": 1297.9880993714005, "min_seconds": 112146171.785689, "max_seconds": 112146171.785689, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-27T11:05:13Z", "date_only": false, "value": "2023-04-27T11:05:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8192", "record": "CVE-2023-29552", "field": "creation_timestamp", "uuid": "3eb1a60b-65ff-43d7-bcbd-5da0c738b57f", "content": "#exploit\n1. CVE-2023-29552:\nAmplifying SLP Traffic\nhttps://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp\n\n2. Telegram: RCE via WebView\nhttps://davtur19.medium.com/telegram-bug-bounties-rce-privacy-issues-and-more-b1f06a641c1b\n\n3. CVE-2022-29804:\nA directory traversal vulnerability hidden in the Go language standard library\nhttps://tttang.com/archive/1884", "url": "https://t.me/CyberSecurityTechnologies/8192", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T10:48:04.785Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}