{"metadata": {"vulnerability": "CVE-2023-36745", "count": 63, "kinds": {"milestone": 6, "sighting": 33, "kev": 0, "other": 24}}, "data": [{"timestamp": "2023-06-26T13:29:45.609Z", "date_only": false, "value": "2023-06-26T13:29:45.609Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-36745", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-09-12T07:00:00Z", "date_only": false, "value": "2023-09-12T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36745", "record": "MSRC_CVE-2023-36745", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-09-12T07:00:00Z", "date_only": false, "value": "2023-09-12T07:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36745", "record": "MSRC_CVE-2023-36745", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-09-12T07:00:00Z", "date_only": false, "value": "2023-09-12T07:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2023-36745", "field": "containers.cna.datePublic"}, {"timestamp": "2023-09-12T07:00:00Z", "date_only": false, "value": "2023-09-12T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36745", "record": "MSRC_CVE-2023-36745", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-09-12T07:00:00Z", "date_only": false, "value": "2023-09-12T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36745", "record": "MSRC_CVE-2023-36745", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-09-12T16:58:31.857Z", "date_only": false, "value": "2023-09-12T16:58:31.857Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-36745", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-09-12T17:15:00Z", "date_only": false, "value": "2023-09-12T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-36745", "record": "GSD-2023-36745", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-09-12T17:15:10Z", "date_only": false, "value": "2023-09-12T17:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-53R8-J48R-2W33", "record": "GHSA-53R8-J48R-2W33", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-09-12T17:15:10.697Z", "date_only": false, "value": "2023-09-12T17:15:10.697", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-36745", "record": "FKIE_CVE-2023-36745", "field": "published"}, {"timestamp": "2023-09-12T18:30:21Z", "date_only": false, "value": "2023-09-12T18:30:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-53R8-J48R-2W33", "record": "GHSA-53R8-J48R-2W33", "field": "published"}, {"timestamp": "2023-09-12T20:23:13Z", "date_only": false, "value": "2023-09-12T20:23:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/70305", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "b212b70e-eaf2-4c0e-a07a-fdf48a5da964", "content": "\u203c CVE-2023-36745 \u203c\n\nMicrosoft Exchange Server Remote Code Execution Vulnerability\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/70305"}, {"timestamp": "2023-09-12T22:00:00Z", "date_only": false, "value": "2023-09-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2332", "record": "WID-SEC-W-2023-2332", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-09-12T22:00:00Z", "date_only": false, "value": "2023-09-12T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2332", "record": "WID-SEC-W-2023-2332", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-09-12T22:00:00Z", "date_only": false, "value": "2023-09-12T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2332", "record": "WID-SEC-W-2023-2332", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-09-12T22:00:00Z", "date_only": false, "value": "2023-09-12T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2332", "record": "WID-SEC-W-2023-2332", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-09-13T00:00:00Z", "date_only": false, "value": "2023-09-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0743", "record": "CERTFR-2023-AVI-0743", "field": "revisions.0.revision_date"}, {"timestamp": "2023-09-15T00:00:00Z", "date_only": true, "value": "2023-09-15", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2023-72224", "record": "CNVD-2023-72224", "field": "submitTime"}, {"timestamp": "2023-09-15T16:28:00Z", "date_only": false, "value": "2023-09-15T16:28Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-36745", "record": "GSD-2023-36745", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-09-28T00:00:00Z", "date_only": true, "value": "2023-09-28", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2023-72224", "record": "CNVD-2023-72224", "field": "openTime"}, {"timestamp": "2023-10-24T04:52:48Z", "date_only": false, "value": "2023-10-24T04:52:48.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-f6CeRaW6J5lkXzlSrItVf3Yey54YrCECLLw-B0K8lNtBx0", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "b2338b13-1c7f-41e6-859e-1b3274acfab8"}, {"timestamp": "2023-10-24T11:59:19Z", "date_only": false, "value": "2023-10-24T11:59:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/1792", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "71825c9d-9ff8-4422-9edd-4ddc56f3b454", "content": "CVE-2023-36745\nMS Exchange Server Privilege Escalation\nexploit\n\n#exchange", "url": "https://t.me/proxy_bar/1792"}, {"timestamp": "2023-10-24T17:54:45Z", "date_only": false, "value": "2023-10-24T17:54:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1354", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "7c978980-65e5-420d-bf3f-4d13094c3ae0", "content": "https://n1k0la-t.github.io/2023/10/24/Microsoft-Exchange-Server-CVE-2023-36745/\nMicrosoft Exchange Server CVE-2023-36745", "url": "https://t.me/CNArsenal/1354"}, {"timestamp": "2023-10-24T23:32:39Z", "date_only": false, "value": "2023-10-24T23:32:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RalfHackerChannel/1402", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "4298ce00-1da3-4069-aac8-b355164e8752", "content": "CVE-2023-36745: Microsoft Exchange Server RCE\n\nhttps://securityonline.info/microsoft-exchange-server-rce-cve-2023-36745-flaw-gets-poc-exploit/\n\nPoC: https://github.com/N1k0la-T/CVE-2023-36745\n\n#exploit #ad #redteam #pentest", "url": "https://t.me/RalfHackerChannel/1402"}, {"timestamp": "2023-10-25T06:48:00Z", "date_only": false, "value": "2023-10-25T06:48:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ap_security/157", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "d762d3fd-6200-40e5-8595-3fdfcf6513e6", "content": "\u2604\ufe0fCVE-2023-36745: MS Exchange Server Privilege Escalation\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 PoC:\nhttps://github.com/N1k0la-T/CVE-2023-36745/blob/main/exp.py\n\n#cve #poc #exploit", "url": "https://t.me/ap_security/157"}, {"timestamp": "2023-10-25T06:48:00Z", "date_only": false, "value": "2023-10-25T06:48:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ap_security/215", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "84254833-d23b-4345-b564-295b30401765", "content": "\u2604\ufe0fCVE-2023-36745: MS Exchange Server Privilege Escalation\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 PoC:\nhttps://github.com/N1k0la-T/CVE-2023-36745/blob/main/exp.py\n\n#cve #poc #exploit", "url": "https://t.me/ap_security/215"}, {"timestamp": "2023-10-25T09:52:31Z", "date_only": false, "value": "2023-10-25T09:52:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3468", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "a1d744e8-01ac-4973-8b10-15d20f19eeeb", "content": "https://n1k0la-t.github.io/2023/10/24/Microsoft-Exchange-Server-CVE-2023-36745/\n\n\nMicrosoft Exchange Server CVE-2023-36745", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3468"}, {"timestamp": "2023-10-25T10:09:38Z", "date_only": false, "value": "2023-10-25T10:09:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/timcore_hacking/2864", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "f2bfd44f-c906-411d-ac1a-735ec47f184b", "content": "#exploit\n#rce \n\nCVE-2023-36745: Microsoft Exchange Server RCE\n\nhttps://securityonline.info/microsoft-exchange-server-rce-cve-2023-36745-flaw-gets-poc-exploit/\n\nPoC: https://github.com/N1k0la-T/CVE-2023-36745", "url": "https://t.me/timcore_hacking/2864"}, {"timestamp": "2023-10-25T10:09:38Z", "date_only": false, "value": "2023-10-25T10:09:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/timcore_hacking/2864", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "fef798ee-0d0f-4cc4-ba33-aead16e6cbee", "content": "#exploit\n#rce \n\nCVE-2023-36745: Microsoft Exchange Server RCE\n\nhttps://securityonline.info/microsoft-exchange-server-rce-cve-2023-36745-flaw-gets-poc-exploit/\n\nPoC: https://github.com/N1k0la-T/CVE-2023-36745", "url": "https://t.me/timcore_hacking/2864"}, {"timestamp": "2023-10-25T15:48:08Z", "date_only": false, "value": "2023-10-25T15:48:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hackingbra/49", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "dcee1d47-0b57-4354-8bb4-fdae8ca8bb56", "content": "CVE-2023-36745: Microsoft Exchange Server RCE\n#CVE-2023-36745\n\nhttps://securityonline.info/microsoft-exchange-server-rce-cve-2023-36745-flaw-gets-poc-exploit/\n\nPoC: https://github.com/N1k0la-T/CVE-2023-36745", "url": "https://t.me/hackingbra/49"}, {"timestamp": "2023-10-25T16:40:53Z", "date_only": false, "value": "2023-10-25T16:40:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qQDf_QbEQjFZp0Et7iiynljt2UEc3wP6rjcNCRIVxu0TNg", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "f285c374-9410-4da8-bc22-596693894e8b"}, {"timestamp": "2023-10-27T01:00:42Z", "date_only": false, "value": "2023-10-27T01:00:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverse_dungeon/3380", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "178e954a-3e6f-4f17-995e-7fa82b028add", "content": "#exchange\n\nMicrosoft Exchange Server CVE-2023-36745 \n\nhttps://n1k0la-t.github.io/2023/10/24/Microsoft-Exchange-Server-CVE-2023-36745/\n\nPOC", "url": "https://t.me/reverse_dungeon/3380"}, {"timestamp": "2023-10-30T06:40:45Z", "date_only": false, "value": "2023-10-30T06:40:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eT8lMd0FVqqzyqxvxxgy4aEJ6RyNZWYIkxnyBxpQJJeAfMc", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "0fde0648-26ca-4cbe-95fd-1fe816691d02"}, {"timestamp": "2023-10-30T09:48:09Z", "date_only": false, "value": "2023-10-30T09:48:09.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/9WEmnZW4gUShi36wFEKo_YOHGbW19JX5QBHeFT8hui0CLA", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "505451cb-20de-449b-abc3-2677ee2a2c1a"}, {"timestamp": "2023-10-30T10:50:03Z", "date_only": false, "value": "2023-10-30T10:50:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/5625", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "dca9e507-b02b-458c-b70d-65dd1f934409", "content": "CVE-2023-36745: Microsoft Exchange Server RCE CVE-2023-36745\n\nread \n\nPoc\n\n#cve #rce\n\u2014\u2014\u2014\u2014\u2014\u2014\u200c\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/5625"}, {"timestamp": "2023-10-31T06:46:02Z", "date_only": false, "value": "2023-10-31T06:46:02.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/6gYyVdYl9-acnpuiEjII8H8v4M_oiONGf4arKd-1SLHQ94Y", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "0f5c5dda-0c46-4be4-a3ad-3518ac2cde10"}, {"timestamp": "2023-10-31T20:50:37Z", "date_only": false, "value": "2023-10-31T20:50:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/redscriptfreelog/6845", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "0b96cb4c-203a-478a-933c-c101e74e3ede", "content": "CVE-2023-36745: Microsoft Exchange Server RCE\n\nhttps://securityonline.info/microsoft-exchange-server-rce-cve-2023-36745-flaw-gets-poc-exploit/\n\nPoC: https://github.com/N1k0la-T/CVE-2023-36745\n\nProject: https://t.me/malwaresupport\n\nAdministration: https://t.me/vpn809", "url": "https://t.me/redscriptfreelog/6845"}, {"timestamp": "2023-11-05T14:35:46Z", "date_only": false, "value": "2023-11-05T14:35:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/yGvj5EX2z2XHKM-IYEdTm5WzR8ebYOvYFlvF8VjTE_nHLw", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "d860e60a-e66c-46f3-92f4-ffe50787543d"}, {"timestamp": "2023-11-06T03:38:30Z", "date_only": false, "value": "2023-11-06T03:38:30.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ONdo6kSSiubBTLR9b8SYjF-HZGmrQ_i9_RMV50j7MrWMBQ", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "b1f5d5f9-db94-4114-91e5-f6b9e1b91b69"}, {"timestamp": "2023-11-10T10:57:44Z", "date_only": false, "value": "2023-11-10T10:57:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bh_cat/188", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "432ca6a4-0be3-4966-b8c3-a4e278eba4de", "content": "\ud83d\udcd5 \u041f\u043e\u0434\u0431\u043e\u0440\u043e\u0447\u043a\u0430 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\u042d\u0442\u043e \u043f\u0440\u043e\u0431\u043d\u0438\u043a.\n\n\ud83d\udca1 F5 BIG-IP Unauth RCE via AJP Smuggling\n\n\u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435:\nCVE-2023-46747\n\u0421\u043a\u043e\u0440\u0438\u043d\u0433 CVSS3.x:\n\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 BIG-IP \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438/\u0438\u043b\u0438 \u0441\u0430\u043c\u043e\u043f\u0438\u0441\u043d\u044b\u0435 \u0430\u0434\u0440\u0435\u0441\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\nPOC\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\n\n\n\ud83d\udca1 ActiveMQ Remote Code Execution\n\n\u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435:\nCVE-2023-46604\n\u0421\u043a\u043e\u0440\u0438\u043d\u0433 CVSS3.x:\n\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435: \n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0440\u043e\u043a\u0435\u0440\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044f \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0442\u0438\u043f\u0430\u043c\u0438 \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 OpenWire, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0431\u0440\u043e\u043a\u0435\u0440 \u0438\u043d\u0441\u0442\u0430\u043d\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u043a\u043b\u0430\u0441\u0441 \u0432 \u043f\u0443\u0442\u0438 \u043a\u043b\u0430\u0441\u0441\u0430.\nPOC\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\n\n\ud83d\udca1 \u041f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 UI Cisco IOS XE\n\n\u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435:\n- CVE-2023-20198\n\u0421\u043a\u043e\u0440\u0438\u043d\u0433 CVSS3.x: \n\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 15.\nPOC\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\n\n\ud83d\udca1 Microsoft Exchange Server Remote Code Execution\n\n\u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435:\nCVE-2023-36745\n\u0421\u043a\u043e\u0440\u0438\u043d\u0433 CVSS3.x:\n\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0436\u0435\u0440\u0442\u0432\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u0440\u043e\u0441\u0442\u043e\u044e \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\nPOC\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\n#poc", "url": "https://t.me/bh_cat/188"}, {"timestamp": "2023-11-30T17:33:29Z", "date_only": false, "value": "2023-11-30T17:33:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/redscriptfreelog/6876", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "95e70dcb-8a6b-43e3-9b4f-cb4a34a6c295", "content": "CVE-2023-36745: Microsoft Exchange Server RCE\n\nhttps://securityonline.info/microsoft-exchange-server-rce-cve-2023-36745-flaw-gets-poc-exploit/\n\nPoC: https://github.com/N1k0la-T/CVE-2023-36745\n\n#exploit #ad #redteam #pentest", "url": "https://t.me/redscriptfreelog/6876"}, {"timestamp": "2023-12-13T01:20:33.998Z", "date_only": false, "value": "2023-12-13T01:20:33.998487Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-36745", "record": "GSD-2023-36745", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-04T07:37:22Z", "date_only": false, "value": "2024-04-04T07:37:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-53R8-J48R-2W33", "record": "GHSA-53R8-J48R-2W33", "field": "modified"}, {"timestamp": "2024-08-02T16:52:54.191Z", "date_only": false, "value": "2024-08-02T16:52:54.191Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-36745", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:58:21.257Z", "date_only": false, "value": "2024-08-15T17:58:21.257+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2332", "record": "WID-SEC-W-2023-2332", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-16T08:40:05Z", "date_only": false, "value": "2024-08-16T08:40:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1503", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "cf013c87-a9f8-4cc1-9c06-9cbd7a4270f6", "content": "#exploit\n1. CVE-2023-21931:\nOracle Weblogic PreAuth RCE\nhttps://github.com/MMarch7/weblogic_CVE-2023-21931_POC-EXP\n\n2. CVE-2023-36745:\nMS Exchange Server Privilege Escalation\nhttps://github.com/N1k0la-T/CVE-2023-36745\n\n3. CVE-2023-4863:\nHeap buffer overflow in Google WebP\nhttps://paper.seebug.org/3056", "url": "https://t.me/Rootsec_2/1503"}, {"timestamp": "2024-08-16T08:40:08Z", "date_only": false, "value": "2024-08-16T08:40:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1553", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "8162763f-f461-4d37-8a8d-0922a37c3bbd", "content": "CVE-2023-36745: Microsoft Exchange Server RCE\n\nhttps://securityonline.info/microsoft-exchange-server-rce-cve-2023-36745-flaw-gets-poc-exploit/\n\nPoC: https://github.com/N1k0la-T/CVE-2023-36745\n\n#exploit #ad #redteam #pentest", "url": "https://t.me/Rootsec_2/1553"}, {"timestamp": "2024-09-12T15:00:00Z", "date_only": false, "value": "2024-09-12T15:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2024/9/11/exploiting-exchange-powershell-after-proxynotshell-part-2-approvedapplicationcollection", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "b9c84f4a-ce72-4abd-b707-57d17cf1440b", "url": "https://www.thezdi.com/blog/2024/9/11/exploiting-exchange-powershell-after-proxynotshell-part-2-approvedapplicationcollection"}, {"timestamp": "2024-09-19T18:02:10Z", "date_only": false, "value": "2024-09-19T18:02:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2024/9/18/exploiting-exchange-powershell-after-proxynotshell-part-3-dll-loading-chain-for-rce", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "2ad829a0-9571-4c28-ad27-3bb3f1db86f0", "url": "https://www.thezdi.com/blog/2024/9/18/exploiting-exchange-powershell-after-proxynotshell-part-3-dll-loading-chain-for-rce"}, {"timestamp": "2024-10-14T15:50:35.983Z", "date_only": false, "value": "2024-10-14T15:50:35.983245Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/92582bf5-d92c-47fe-b891-656d271bbfef", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "8f8e0842-cdf3-454b-be7b-071885fcf3e9", "url": "https://vulnerability.circl.lu/bundle/92582bf5-d92c-47fe-b891-656d271bbfef"}, {"timestamp": "2024-12-26T17:03:29Z", "date_only": false, "value": "2024-12-26T17:03:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9253", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "ceec6fc0-9a2b-427a-a24d-1cdafdde6f84", "content": "#exploit\n1. CVE-2023-21931:\nOracle Weblogic PreAuth RCE\nhttps://github.com/MMarch7/weblogic_CVE-2023-21931_POC-EXP\n\n2. CVE-2023-36745:\nMS Exchange Server Privilege Escalation\nhttps://securityonline.info/microsoft-exchange-server-rce-cve-2023-36745-flaw-gets-poc-exploit\n]-> PoC: https://github.com/N1k0la-T/CVE-2023-36745\n\n3. CVE-2023-4863:\nHeap buffer overflow in Google WebP\nhttps://paper.seebug.org/3056", "url": "https://t.me/CyberSecurityTechnologies/9253"}, {"timestamp": "2025-01-01T02:04:05.613Z", "date_only": false, "value": "2025-01-01T02:04:05.613Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36745", "record": "MSRC_CVE-2023-36745", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-21T01:01:38.686Z", "date_only": false, "value": "2025-02-21T01:01:38.686691Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/saltmyhash/statuses/114039171548967342", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "180f2260-c6f0-4cf5-96ae-b79e962bb1c6", "url": "https://infosec.exchange/users/saltmyhash/statuses/114039171548967342"}, {"timestamp": "2025-02-26T21:51:25.415Z", "date_only": false, "value": "2025-02-26T21:51:25.415733Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-36745", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-26T21:51:25.415Z", "date_only": false, "value": "2025-02-26T21:51:25.415733Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-36745", "record": "FKIE_CVE-2023-36745", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-27T20:54:31.290Z", "date_only": false, "value": "2025-02-27T20:54:31.290Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-36745", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-28T23:49:13.272Z", "date_only": false, "value": "2025-02-28T23:49:13.272798Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/fdda4963-0aa7-4d15-8a8f-969db8f304ca", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "ba285097-daa8-41b6-afee-71219f38d962", "url": "https://vulnerability.circl.lu/bundle/fdda4963-0aa7-4d15-8a8f-969db8f304ca"}, {"timestamp": "2025-10-30T18:17:58.797Z", "date_only": false, "value": "2025-10-30T18:17:58.797Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-36745", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-30T18:17:58.797Z", "date_only": false, "value": "2025-10-30T18:17:58.797Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2023-36745", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:06:59.287Z", "date_only": false, "value": "2026-06-17T06:06:59.287", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-36745", "record": "FKIE_CVE-2023-36745", "field": "lastModified"}, {"timestamp": "2026-07-26T07:01:24.410Z", "date_only": false, "value": "2026-07-26T07:01:24.410719Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/1860", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "c1bd55ab-f72e-4888-96ed-eb616af1d954", "content": "\ud83d\udd25 Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445\n\n\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2023-36745, CVE-2023-36756, CVE-2023-36744) \u0431\u044b\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0435\u0449\u0435 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u0438\u0445 \u043f\u0430\u0442\u0447\u0430\u0445, \u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0439\u0447\u0430\u0441.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0440\u044f\u0434\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Microsoft, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 (CVE-2023-38142, CVE-2023-38161, CVE-2023-36804, CVE-2023-36802).\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. \u0414\u043b\u044f \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u043e\u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u041e\u0421.\n\n\u0421\u043e\u0432\u0435\u0442\u0443\u0435\u043c \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-36761 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435. \u041e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 Microsoft Word \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c NTLM-\u0445\u0435\u0448\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a pass-the-hash \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u044b\u043c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u0441 \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0438\u0448\u0438\u043d\u0433. \n\n\u2757\ufe0f\u0427\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-36761 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0432\u0435\u043d\u0434\u043e\u0440\u0430. \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a \u0441 \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043e\u0432\u0435\u0442\u0443\u0435\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\n\u26a0\ufe0f \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c\n\n\u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0443\u0437\u043b\u044b \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-36761 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e MaxPatrol VM. \u0415\u0441\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u044b \u0437\u043d\u0430\u043d\u0438\u0439, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u044b \u0431\u0443\u0434\u0443\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u044b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438.\n\n@Positive_Technologies\n#\u0432\u0442\u0440\u0435\u043d\u0434\u0435VM", "url": "https://t.me/Positive_Technologies/1860"}, {"timestamp": "2026-09-01T17:00:16.555Z", "date_only": false, "value": "2026-09-01T17:00:16.555397Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7288", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "fa72e12c-49a5-4321-aa66-aae03a8e7018", "content": "Reversing\nAttacking Cisco RG/OpenRG modem\nhttps://reverse.put.as/2023/10/20/attacking-the-heart-of-an-openrg-modem\n\nexploit\n1. CVE-2023-21931:\nOracle Weblogic PreAuth RCE\ud83e\udd76\nhttps://github.com/MMarch7/weblogic_CVE-2023-21931_POC-EXP\n\n2. CVE-2023-36745:\nMS Exchange Server Privilege Escalation\ud83e\udd13\ud83e\udd78\nhttps://github.com/N1k0la-T/CVE-2023-36745\n\n3. CVE-2023-4863:\nHeap buffer overflow in Google WebP\nhttps://paper.seebug.org/3056\n\n\n\u2069-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.08.02", "url": "https://t.me/cissp/7288"}, {"timestamp": "2026-09-09T20:00:07.172Z", "date_only": false, "value": "2026-09-09T20:00:07.172011Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/7288", "record": "CVE-2023-36745", "field": "creation_timestamp", "uuid": "9eec9cc5-94b0-4831-baf3-dbbaf9ffaf64", "content": "Reversing\nAttacking Cisco RG/OpenRG modem\nhttps://reverse.put.as/2023/10/20/attacking-the-heart-of-an-openrg-modem\n\nexploit\n1. CVE-2023-21931:\nOracle Weblogic PreAuth RCE\ud83e\udd76\nhttps://github.com/MMarch7/weblogic_CVE-2023-21931_POC-EXP\n\n2. CVE-2023-36745:\nMS Exchange Server Privilege Escalation\ud83e\udd13\ud83e\udd78\nhttps://github.com/N1k0la-T/CVE-2023-36745\n\n3. CVE-2023-4863:\nHeap buffer overflow in Google WebP\nhttps://paper.seebug.org/3056\n\n\n\u2069-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.08.02", "url": "https://t.me/cissp/7288"}]}