{"metadata": {"vulnerability": "cve-2020-2883", "count": 85, "kinds": {"milestone": 5, "sighting": 51, "kev": 11, "other": 18}}, "data": [{"timestamp": "2019-12-10T00:00:00Z", "date_only": false, "value": "2019-12-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2020-2883", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-04-15T04:00:00Z", "date_only": false, "value": "2020-04-15T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=469", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "815d4297-fd3c-49df-8a97-e4e1899a21c9", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=469"}, {"timestamp": "2020-04-15T13:29:50Z", "date_only": false, "value": "2020-04-15T13:29:50.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2020-2883", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-04-15T14:15:00Z", "date_only": false, "value": "2020-04-15T14:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9X8Q-P3QP-R24W", "record": "GHSA-9X8Q-P3QP-R24W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-04-15T14:15:00Z", "date_only": false, "value": "2020-04-15T14:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-2883", "record": "GSD-2020-2883", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-04-15T14:15:33.513Z", "date_only": false, "value": "2020-04-15T14:15:33.513", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-2883", "record": "FKIE_CVE-2020-2883", "field": "published"}, {"timestamp": "2020-04-16T00:00:00Z", "date_only": true, "value": "2020-04-16", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-23015", "record": "CNVD-2020-23015", "field": "openTime"}, {"timestamp": "2020-04-16T00:00:00Z", "date_only": true, "value": "2020-04-16", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-23015", "record": "CNVD-2020-23015", "field": "submitTime"}, {"timestamp": "2020-05-01T17:05:46Z", "date_only": false, "value": "2020-05-01T17:05:46.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/37471", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "880fbd75-9084-46d7-a3d3-971a9d421d1b", "content": "Oracle Says Hackers Targeting Recently Patched Vulnerabilities\nhttp://feedproxy.google.com/~r/Securityweek/~3/A2quUqAB5mA/oracle-says-hackers-targeting-recently-patched-vulnerabilities\n\nOracle warned customers on Thursday that threat actors have been spotted attempting to exploit multiple recently patched vulnerabilities, including a critical WebLogic Server flaw tracked as CVE-2020-2883.\nread more (https://www.securityweek.com/oracle-says-hackers-targeting-recently-patched-vulnerabilities)", "url": "https://t.me/information_security_channel/37471"}, {"timestamp": "2020-05-02T06:07:50Z", "date_only": false, "value": "2020-05-02T06:07:50.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/37481", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "7d33b166-3950-49f4-ad6d-9a5c506342b4", "content": "Oracle warned that hackers actively attempting to exploit recently patched vulnerability CVE-2020-2883, which affects multiple versions of Oracle WebLogic Server. Oracle patched the vulnerability as a part of the April 2020 Critical Patch Update which resolves more than 405 vulnerabilities, including CVE-2020-2883. WebLogic Server Flaw \u2013 CVE-2020-2883 The vulnerability allows attackers to execute arbitrary code [\u2026]\nThe post Oracle Warns Active Exploitation of Recently Patched WebLogic RCE Flaw (https://gbhackers.com/oracle-weblogic-rce-flaw/) appeared first on GBHackers On Security (https://gbhackers.com/).", "url": "https://t.me/information_security_channel/37481"}, {"timestamp": "2020-05-02T11:46:14Z", "date_only": false, "value": "2020-05-02T11:46:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/kriittista-oracle-weblogic-server-palvelinohjelmiston-haavoittuvuutta-hyvaksikaytetaan", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "420dc830-47a5-4ff1-8b0f-5ece5b690a51", "url": "https://www.kyberturvallisuuskeskus.fi/fi/kriittista-oracle-weblogic-server-palvelinohjelmiston-haavoittuvuutta-hyvaksikaytetaan"}, {"timestamp": "2020-05-04T17:12:22Z", "date_only": false, "value": "2020-05-04T17:12:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/11798", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "4853366b-74ae-421d-9261-e8e5111ea5c9", "content": "\u274c Oracle: Unpatched Versions of WebLogic App Server Under Active Attack \u274c\n\nCVE-2020-2883 was patched in Oracle's April 2020 Critical Patch Update - but proof of concept exploit code was published shortly after.\n\n\ud83d\udcd6 Read\n\nvia \"Threatpost\".", "url": "https://t.me/cibsecurity/11798"}, {"timestamp": "2020-05-04T17:28:14Z", "date_only": false, "value": "2020-05-04T17:28:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Cybersecuritylb/277", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "bee9aa14-d8a6-4689-91ca-e74faf89ad64", "content": "Oracle: Unpatched Versions of WebLogic App Server Under Active Attack\nhttps://threatpost.com/oracle-unpatched-versions-of-weblogic-app-server-under-active-attack/155420/\n\nCVE-2020-2883 was patched in Oracle's April 2020 Critical Patch Update - but proof of concept exploit code was published shortly after.", "url": "https://t.me/Cybersecuritylb/277"}, {"timestamp": "2020-05-12T00:13:56Z", "date_only": false, "value": "2020-05-12T00:13:56.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/techpwnews/630", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "d2193166-2ff6-47b6-b085-431b3b88ed6d", "content": "Details on the Oracle WebLogic Vulnerability Being Exploited in the Wild\n\nEarlier this year, I blogged about a deserialization vulnerability in the Oracle WebLogic Server. This was patched by Oracle and assigned CVE-2020-2555. However, researcher Quynh Le of VNPT ISC submitted a bug to the ZDI that showed how the patch could be bypassed. This bug, labeled CVE-2020-2883, is now being reported by Oracle as being used in active attacks. In this blog post, we will go through the details of this recently...\n\nContinue reading at Zero Day Initiative - Blog", "url": "https://t.me/techpwnews/630"}, {"timestamp": "2020-06-04T01:03:57Z", "date_only": false, "value": "2020-06-04T01:03:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/weblogic_deserialize_badattr_extcomp.rb", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "72a88a2b-5325-43b4-95e9-69e0ba28a88a", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/weblogic_deserialize_badattr_extcomp.rb"}, {"timestamp": "2020-06-04T21:06:10Z", "date_only": false, "value": "2020-06-04T21:06:10.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / oracle", "record": "cve-2020-2883", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-03-27T21:09:01Z", "date_only": false, "value": "2021-03-27T21:09:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reconshell/599", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "5f48e0f3-5473-4dc0-98ae-298e487bda4e", "content": "Weblogic-Framework best tool for detecting weblogic vulnerabilities\n\n#vulnerabilities #weblogic #vulnerability \n#CVE-2020-2883 #CVE-2020-2555 #CVE-2020-2551\n\nhttps://upurl.me/rltsw", "url": "https://t.me/reconshell/599"}, {"timestamp": "2022-05-24T17:15:05Z", "date_only": false, "value": "2022-05-24T17:15:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9X8Q-P3QP-R24W", "record": "GHSA-9X8Q-P3QP-R24W", "field": "published"}, {"timestamp": "2022-10-14T18:23:00Z", "date_only": false, "value": "2022-10-14T18:23Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-2883", "record": "GSD-2020-2883", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-03-13T22:21:06Z", "date_only": false, "value": "2023-03-13T22:21:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/7921", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "b6325b3d-d1b1-431b-9447-2f7c62330c14", "content": "#exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC", "url": "https://t.me/CyberSecurityTechnologies/7921"}, {"timestamp": "2023-03-14T09:24:23Z", "date_only": false, "value": "2023-03-14T09:24:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/5T9p9Zashh8_t2QaMEcrWCxGmV69ND__6VmH0ET2CJ3Gp-A", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "cb210055-01a8-4b8a-ba7d-12e5acb72448"}, {"timestamp": "2023-11-10T15:34:11Z", "date_only": false, "value": "2023-11-10T15:34:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1479", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "10df09ca-350e-4e72-b2c0-b9b7953bd717", "content": "https://github.com/sp4zcmd/WeblogicExploit-GUI\nWeblogic\u6f0f\u6d1e\u5229\u7528\u56fe\u5f62\u5316\u5de5\u5177\n\nCVE-2020-2551\nCVE-2020-2555\nCVE-2020-2883\nCVE-2016-3510\nCVE-2016-0638\nCVE-2017-10271\nJdk7u21\nCVE-2017-3248\uff08JRMP\uff09\nCVE-2018-2628\uff08JRMP\uff09\nCVE-2018-2893\uff08JRMP\uff09\nCVE-2018-3245\uff08JRMP\uff09\nCVE-2018-3181\uff08JNDI\uff09\nCVE-2020-14882\u672a\u6388\u6743\u8bbf\u95ee+CVE-2021-2109\uff08JNDI\uff09\n\n#github #tools #exploit", "url": "https://t.me/CNArsenal/1479"}, {"timestamp": "2023-11-11T07:49:11Z", "date_only": false, "value": "2023-11-11T07:49:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/v3n0mhack/301", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "5ede650b-93dd-4435-ac93-87788bc505ca", "content": "https://github.com/sp4zcmd/WeblogicExploit-GUI\nWeblogic\u6f0f\u6d1e\u5229\u7528\u56fe\u5f62\u5316\u5de5\u5177\n\nCVE-2020-2551\nCVE-2020-2555\nCVE-2020-2883\nCVE-2016-3510\nCVE-2016-0638\nCVE-2017-10271\nJdk7u21\nCVE-2017-3248\uff08JRMP\uff09\nCVE-2018-2628\uff08JRMP\uff09\nCVE-2018-2893\uff08JRMP\uff09\nCVE-2018-3245\uff08JRMP\uff09\nCVE-2018-3181\uff08JNDI\uff09\nCVE-2020-14882\u672a\u6388\u6743\u8bbf\u95ee+CVE-2021-2109\uff08JNDI\uff09", "url": "https://t.me/v3n0mhack/301"}, {"timestamp": "2023-12-13T01:21:50.952Z", "date_only": false, "value": "2023-12-13T01:21:50.952902Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-2883", "record": "GSD-2020-2883", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T12:48:33Z", "date_only": false, "value": "2023-12-18T12:48:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1987", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "51d5b3c1-fbcb-45df-a82c-90ac22499c19", "content": "#ExploitObserverAlert\n\nCVE-2020-2883\n\nDESCRIPTION: Exploit Observer has 90 entries related to CVE-2020-2883. Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).\n\nFIRST-EPSS: 0.975160000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1987"}, {"timestamp": "2024-08-04T07:23:58.874Z", "date_only": false, "value": "2024-08-04T07:23:58.874Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2020-2883", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-23T16:44:02Z", "date_only": false, "value": "2024-10-23T16:44:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/1103", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "2e36256c-86cd-4e26-a218-e7ea112d9963", "content": "#exploit\n1. CVE-2020-12116:\nPoC code to exploit - Unauth arbitrary file read on ManageEngine OpManger\nhttps://github.com/BeetleChunks/CVE-2020-12116\n\n2. CVE-2020-2883:\nOracle WebLogic Server RCE Vulnerability\nhttps://github.com/Y4er/CVE-2020-2883\n]-> Research:\nhttps://www.zerodayinitiative.com/blog/2020/5/8/details-on-the-oracle-weblogic-vulnerability-being-exploited-in-the-wild", "url": "https://t.me/CyberSecurityTechnologies/1103"}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-2883", "field": "timestamps.asserted_at", "uuid": "554f9393-3cf5-4347-8b83-ea23fac5b5f8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-2883", "field": "timestamps.asserted_at", "uuid": "78949196-1803-4e13-a636-78b6c8a5745c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": true, "value": "2025-01-07", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-2883", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-2883", "field": "evidence.0.details.added_date", "uuid": "78949196-1803-4e13-a636-78b6c8a5745c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": true, "value": "2025-01-07", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2020-2883", "field": "evidence.0.details.date_added", "uuid": "554f9393-3cf5-4347-8b83-ea23fac5b5f8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2020-2883", "field": "timestamps.first_seen_at", "uuid": "554f9393-3cf5-4347-8b83-ea23fac5b5f8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-2883", "field": "timestamps.first_seen_at", "uuid": "78949196-1803-4e13-a636-78b6c8a5745c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2020-2883", "field": "status.status_updated_at", "uuid": "554f9393-3cf5-4347-8b83-ea23fac5b5f8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-2883", "field": "status.status_updated_at", "uuid": "78949196-1803-4e13-a636-78b6c8a5745c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T15:54:44.594Z", "date_only": false, "value": "2025-01-07T15:54:44.594391Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113787881639134332", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "a36e294d-c6a0-45d3-a31e-e135247af000", "url": "https://infosec.exchange/users/screaminggoat/statuses/113787881639134332"}, {"timestamp": "2025-01-07T16:08:10.148Z", "date_only": false, "value": "2025-01-07T16:08:10.148787Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113787934452940129", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "9cc65af0-9446-494a-aae6-98942b334144", "url": "https://infosec.exchange/users/screaminggoat/statuses/113787934452940129"}, {"timestamp": "2025-01-07T16:19:30.105Z", "date_only": false, "value": "2025-01-07T16:19:30.105766Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lf62hz3zbk2f", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "3bd62bcd-ffb5-4626-aba4-f276ee3f348a", "url": "https://bsky.app/profile/aakl.bsky.social/post/3lf62hz3zbk2f"}, {"timestamp": "2025-01-07T16:19:31.075Z", "date_only": false, "value": "2025-01-07T16:19:31.075054Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lf62hz3zbl2f", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "ea9fb091-f4d5-4a00-a481-6978c400404e", "url": "https://bsky.app/profile/aakl.bsky.social/post/3lf62hz3zbl2f"}, {"timestamp": "2025-01-07T17:39:53Z", "date_only": false, "value": "2025-01-07T17:39:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/484", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "7e634b62-6dba-434e-86c6-360a3743a812", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2020-2883\n\ud83d\udd39 Description: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).\n\ud83d\udccf Published: 2020-04-15T13:29:50\n\ud83d\udccf Modified: 2025-01-07T17:20:22.677Z\n\ud83d\udd17 References:\n1. https://www.oracle.com/security-alerts/cpuapr2020.html\n2. https://www.zerodayinitiative.com/advisories/ZDI-20-504/\n3. https://www.zerodayinitiative.com/advisories/ZDI-20-570/\n4. http://packetstormsecurity.com/files/157950/WebLogic-Server-Deserialization-Remote-Code-Execution.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/484"}, {"timestamp": "2025-01-07T17:56:49.610Z", "date_only": false, "value": "2025-01-07T17:56:49.610246Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lf67w3bkyh23", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "7c21550d-c358-4606-a492-ada9e9d6c2a2", "url": "https://bsky.app/profile/tmjintel.bsky.social/post/3lf67w3bkyh23"}, {"timestamp": "2025-01-07T18:10:02Z", "date_only": false, "value": "2025-01-07T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "78b18b32-862b-43d5-91de-2ab7ef60f35f"}, {"timestamp": "2025-01-07T18:52:12.886Z", "date_only": false, "value": "2025-01-07T18:52:12.886702Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3049071", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "74c20278-8c17-467d-b4ea-8f5b59b70802", "url": "https://feedsin.space/feed/CISAKevBot/items/3049071"}, {"timestamp": "2025-01-07T19:04:17.957Z", "date_only": false, "value": "2025-01-07T19:04:17.957162Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lf6dopw32w2w", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "f20d0bef-9604-4260-98f0-110a62f1b62b", "url": "https://bsky.app/profile/hackingne.ws/post/3lf6dopw32w2w"}, {"timestamp": "2025-01-07T20:02:08.191Z", "date_only": false, "value": "2025-01-07T20:02:08.191816Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lf6gw5gwnj2o", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "185faa97-6066-46ce-92dd-69977da6d655", "url": "https://bsky.app/profile/gothburz.bsky.social/post/3lf6gw5gwnj2o"}, {"timestamp": "2025-01-08T00:28:16.128Z", "date_only": false, "value": "2025-01-08T00:28:16.128667Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lf6vrzve4l2f", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "a4772bcb-83e6-486c-a5e7-cf2266b77d87", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3lf6vrzve4l2f"}, {"timestamp": "2025-01-08T05:58:16Z", "date_only": false, "value": "2025-01-08T05:58:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6126", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "9c323b4e-c259-4d9a-987b-1b038b83e7ef", "content": "CISA has flagged 3 actively exploited vulnerabilities\u2014two in Mitel MiCollab and one in Oracle WebLogic Server. \n \n\u2937 CVE-2024-41713: Remote access via path traversal. \n\u2937 CVE-2024-55550: Exploited by attackers with admin privileges. \n\u2937 CVE-2020-2883: A high-severity vulnerability in Oracle WebLogic with known exploits. \n \n\ud83d\udc49 Don\u2019t wait\u2014secure your systems now: https://thehackernews.com/2025/01/cisa-flags-critical-flaws-in-mitel-and.html", "url": "https://t.me/thehackernews/6126"}, {"timestamp": "2025-01-08T11:50:53.002Z", "date_only": false, "value": "2025-01-08T11:50:53.002090Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/tomcat/statuses/113792585077913343", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "f2d0efb9-1ae0-4855-988b-d2c14164d00d", "url": "https://infosec.exchange/users/tomcat/statuses/113792585077913343"}, {"timestamp": "2025-01-08T12:25:03.531Z", "date_only": false, "value": "2025-01-08T12:25:03.531499Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lfa5tloze22a", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "4b8721a2-240f-460c-8f12-0b40e7156d17", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lfa5tloze22a"}, {"timestamp": "2025-01-08T15:19:09.659Z", "date_only": false, "value": "2025-01-08T15:19:09.659882Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3lfahkzbvys2z", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "4ac946eb-dbc3-4ca0-885d-4c78cdacafd4", "url": "https://bsky.app/profile/bluecyber.bsky.social/post/3lfahkzbvys2z"}, {"timestamp": "2025-01-09T10:41:33Z", "date_only": false, "value": "2025-01-09T10:41:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasperskyb2b/1580", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "f0589786-f692-4408-b630-ee4ef1832ee2", "content": "\ud83e\ude79 Welcome back and Patch now!\n\n\u0425\u043e\u0442\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0442\u043e\u0436\u0435 \u0431\u0435\u0440\u0443\u0442 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u043d\u0430 \u043f\u0435\u0440\u0438\u043e\u0434 \u041d\u043e\u0432\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0438 \u0420\u043e\u0436\u0434\u0435\u0441\u0442\u0432\u0430, \u0434\u0440\u0443\u0433\u0438\u0435 \u0432 \u044d\u0442\u043e\u0442 \u043f\u0435\u0440\u0438\u043e\u0434 \u0430\u043a\u0442\u0438\u0432\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f. \u0417\u0430 \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043d\u0438\u043a\u0443\u043b \u043d\u0430\u0431\u0440\u0430\u043b\u043e\u0441\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445.\n\nSonicWall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0444\u0438\u043a\u0441 SonicOS, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 CVE-2024-53704 (CVSS 8.2), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f SSL VPN \u0438 SSH. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0434\u0435\u0444\u0435\u043a\u0442 \u00ab\u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u043c \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\u00bb (susceptible to actual exploitation), \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u043a\u0430\u043a \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0446\u0435\u043d\u043a\u0443 exploitability, \u0438 \u043a\u0430\u043a \u0437\u0430\u0432\u0443\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u044d\u0442\u043e \u0437\u0438\u0440\u043e\u0434\u0435\u0439. \n\u041a\u0440\u043e\u043c\u0435 \u043f\u0430\u0442\u0447\u0430, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u044b \u0442\u0438\u043f\u0438\u0447\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e \u0443\u0433\u0440\u043e\u0437\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u043f\u043e SSH.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f CVE-2024-52875, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a RCE \u0432 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0435 GFI KerioControl, \u043d\u0430\u0447\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0412 \u0421\u0435\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0431\u043e\u043b\u0435\u0435 23 \u0442\u044b\u0441\u044f\u0447 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 KerioControl.\n\n\u0410 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u044c\u043d\u0430\u044f Ivanti \u0443\u0441\u043f\u0435\u043b\u0430 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c\u0441\u044f \u0432 2025 \u0433\u043e\u0434\u0443 \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u043c. CVE-2025-0282 (CVSS 9.0) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0438\u0447\u044c RCE \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Connect Secure. \u0422\u043e\u0442 \u0436\u0435 \u0434\u0435\u0444\u0435\u043a\u0442 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Policy Secure \u0438 Neurons, \u043d\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0430 \u043d\u0438\u0445 \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 7 \u044f\u043d\u0432\u0430\u0440\u044f CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0441\u0442\u0430\u0440\u044b\u0439 \u0434\u0435\u0444\u0435\u043a\u0442 Oracle WebLogic (CVE-2020-2883) \u0438 \u043f\u0430\u0440\u0443 \u0431\u0430\u0433\u043e\u0432 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043e\u0431\u0449\u0435\u043d\u0438\u044f MiCollab (CVE-2024-41713, -55550). \u041d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e.\n\n\u041f\u043b\u043e\u0445\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b \u043d\u0430 WordPress \u0438 WooCommerce. \u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d Fancy Product Designer, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u0435\u0433\u043a\u043e \u043f\u0435\u0440\u0435\u043a\u0440\u0430\u0448\u0438\u0432\u0430\u0442\u044c \u0444\u0443\u0442\u0431\u043e\u043b\u043a\u0438 \u0438\u043b\u0438 \u043c\u0435\u043d\u044f\u0442\u044c \u0442\u0435\u043a\u0441\u0442 \u043d\u0430 \u043a\u0440\u0443\u0436\u043a\u0430\u0445, \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 9 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0434\u0432\u0435 \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043a\u0443\u043f\u0430\u0442\u0435\u043b\u0435\u0439. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430 20 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0442\u0430\u043a \u0438 \u043d\u0435 \u0432\u043d\u0435\u0441\u043b\u0438 \u043d\u0443\u0436\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c 20 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043f\u043b\u0430\u0433\u0438\u043d, \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0434\u0443\u043c\u0430\u0442\u044c \u0437\u0430\u043c\u0435\u043d\u0443 \u044d\u0442\u043e\u0433\u043e \u0438\u0437\u0434\u0435\u043b\u0438\u044f \u043d\u0430 \u043a\u0430\u043a\u043e\u0439-\u0442\u043e \u0434\u0440\u0443\u0433\u043e\u0439 \u00ab\u043a\u0430\u0441\u0442\u043e\u043c\u0438\u0437\u0430\u0442\u043e\u0440\u00bb.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1580"}, {"timestamp": "2025-01-09T17:29:51.905Z", "date_only": false, "value": "2025-01-09T17:29:51.905380Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ehcgroup.bsky.social/post/3lfd7dnn2uc2s", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "fb209bba-25cc-417c-a533-f25382456ea3", "url": "https://bsky.app/profile/ehcgroup.bsky.social/post/3lfd7dnn2uc2s"}, {"timestamp": "2025-01-11T04:55:18.856Z", "date_only": false, "value": "2025-01-11T04:55:18.856261Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-2883", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-11T04:55:18.856Z", "date_only": false, "value": "2025-01-11T04:55:18.856261Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-2883", "record": "FKIE_CVE-2020-2883", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-12T10:34:02.094Z", "date_only": false, "value": "2025-01-12T10:34:02.094178Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lfjzivl2yk2n", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "a85f74f3-9100-4e9c-8533-e94866c7b6ad", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lfjzivl2yk2n"}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": true, "value": "2025-01-28", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2020-2883", "field": "evidence.0.details.due_date", "uuid": "554f9393-3cf5-4347-8b83-ea23fac5b5f8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "55595d6e-b172-40f8-8ec4-6ca5bab677e3"}, {"timestamp": "2025-02-23T02:11:03Z", "date_only": false, "value": "2025-02-23T02:11:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "874b89b0-61ce-4864-8f68-89fdc2449939"}, {"timestamp": "2025-02-23T04:10:27Z", "date_only": false, "value": "2025-02-23T04:10:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "222ee0d5-8e99-449b-a75e-3437c1b71b9e"}, {"timestamp": "2025-04-08T14:06:04Z", "date_only": false, "value": "2025-04-08T14:06:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/oracle_access_manager_rce_cve_2021_35587.rb", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "5dc44a78-2830-42a7-a4e4-c34b7a3f4a2d", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/oracle_access_manager_rce_cve_2021_35587.rb"}, {"timestamp": "2025-08-26T09:52:01Z", "date_only": false, "value": "2025-08-26T09:52:01.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-261-05", "record": "ICSA-25-261-05", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-08-26T09:52:01Z", "date_only": false, "value": "2025-08-26T09:52:01.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-25-261-05", "record": "ICSA-25-261-05", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-08-26T09:52:01Z", "date_only": false, "value": "2025-08-26T09:52:01.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-25-261-05", "record": "ICSA-25-261-05", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-09-18T10:00:00Z", "date_only": false, "value": "2025-09-18T10:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-05", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "0a054412-2c1e-4114-8d44-d85bbbd8dc97", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-05"}, {"timestamp": "2025-09-18T16:28:31Z", "date_only": false, "value": "2025-09-18T16:28:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Darkcrai86/f7cd4caf7eead280dbe2c1c4eb7f9544", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "135e2b33-647d-4786-8944-e0f0ee96ba2e", "url": "https://gist.github.com/Darkcrai86/f7cd4caf7eead280dbe2c1c4eb7f9544"}, {"timestamp": "2025-09-18T19:40:09.850Z", "date_only": false, "value": "2025-09-18T19:40:09.850940Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-25-261-05", "record": "ICSA-25-261-05", "field": "document.tracking.generator.date"}, {"timestamp": "2025-09-18T20:02:20.148Z", "date_only": false, "value": "2025-09-18T20:02:20.148397Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lz55ee2upk2d", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "f228c4a2-8ac9-4a1d-9d16-11a425e51a58", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lz55ee2upk2d"}, {"timestamp": "2025-10-14T10:07:35Z", "date_only": false, "value": "2025-10-14T10:07:35.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/javascript/cves/2020/CVE-2020-2883.yaml", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "8a2d82b3-cc5a-4340-9f06-ceec527e68fe", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/javascript/cves/2020/CVE-2020-2883.yaml"}, {"timestamp": "2025-10-20T04:01:23Z", "date_only": false, "value": "2025-10-20T04:01:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/nguyentin1136-ops/f5bea0e7ad800547c3e9b5e241e2d65c", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "06701946-ef36-49df-b640-eb97de410f7d", "url": "https://gist.github.com/nguyentin1136-ops/f5bea0e7ad800547c3e9b5e241e2d65c"}, {"timestamp": "2025-10-20T05:01:51Z", "date_only": false, "value": "2025-10-20T05:01:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/nguyentin1136-ops/937b4359948bbce2e6e7cefbf97e8766", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "321e1ede-1356-4b41-abb2-cf6f3e710b59", "url": "https://gist.github.com/nguyentin1136-ops/937b4359948bbce2e6e7cefbf97e8766"}, {"timestamp": "2025-10-22T00:31:52Z", "date_only": false, "value": "2025-10-22T00:31:52Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9X8Q-P3QP-R24W", "record": "GHSA-9X8Q-P3QP-R24W", "field": "modified"}, {"timestamp": "2026-01-12T21:02:18.109Z", "date_only": false, "value": "2026-01-12T21:02:18.109Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2020-2883", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-01-12T21:02:18.109Z", "date_only": false, "value": "2026-01-12T21:02:18.109Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-2883", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2020-2883", "field": "timestamps.recorded_at", "uuid": "554f9393-3cf5-4347-8b83-ea23fac5b5f8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:26:17.060Z", "date_only": false, "value": "2026-02-02T12:26:17.060805Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/554f9393-3cf5-4347-8b83-ea23fac5b5f8", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "abc435d7-9409-4fa8-a86c-4fbc51bba609", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/554f9393-3cf5-4347-8b83-ea23fac5b5f8"}, {"timestamp": "2026-06-17T03:13:10.183Z", "date_only": false, "value": "2026-06-17T03:13:10.183", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-2883", "record": "FKIE_CVE-2020-2883", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:29.805Z", "date_only": false, "value": "2026-06-19T12:46:29.805266Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/139da261-8f8f-4d24-800d-6108b1ab8800", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "060ab699-9031-474f-bb05-95b6fffb45d8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/139da261-8f8f-4d24-800d-6108b1ab8800"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-2883", "field": "timestamps.recorded_at", "uuid": "78949196-1803-4e13-a636-78b6c8a5745c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:06:03.061Z", "date_only": false, "value": "2026-06-23T14:06:03.061182Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/78949196-1803-4e13-a636-78b6c8a5745c", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "7a091856-779a-4d33-bbc2-fbf76444423d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/78949196-1803-4e13-a636-78b6c8a5745c"}, {"timestamp": "2026-07-26T07:01:50.571Z", "date_only": false, "value": "2026-07-26T07:01:50.571460Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/8639", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "7dab6eac-c2ac-4d7a-b198-181bb86d4888", "content": "\u26a0\ufe0f \u0634\u0631\u06a9\u062a \u0627\u0648\u0631\u0627\u06a9\u0644 \u062f\u0631 \u0647\u0634\u062f\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0636\u0637\u0631\u0627\u0631\u06cc \u062e\u0648\u062f \u0627\u0632 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 WebLogic \u062e\u0648\u0627\u0633\u062a\u0647 \u062a\u0627 \u0646\u0633\u0628\u062a \u0628\u0647 \u0646\u0635\u0628 \u0641\u0648\u0631\u06cc \u0622\u062e\u0631\u06cc\u0646 \u0627\u0635\u0644\u0627\u062d\u06cc\u0647\u200c\u0647\u0627\u06cc \u0627\u06cc\u0646 \u0645\u062d\u0635\u0648\u0644 \u06a9\u0647 \u062f\u0631 26 \u0641\u0631\u0648\u0631\u062f\u06cc\u0646 \u0639\u0631\u0636\u0647 \u0634\u062f\u0646\u062f \u0627\u0642\u062f\u0627\u0645 \u06a9\u0646\u0646\u062f.\n\n\u0627\u0648\u0631\u0627\u06a9\u0644 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u06a9\u0647 \u06af\u0632\u0627\u0631\u0634\u200c\u0647\u0627\u06cc\u06cc \u0631\u0627 \u062f\u0631 \u062e\u0635\u0648\u0635 \u062a\u0644\u0627\u0634 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc WebLogic \u0628\u0647 \u0634\u0646\u0627\u0633\u0647 CVE-2020-2883 \u0631\u0627 \u0646\u06cc\u0632 \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\u0648\u0628 \u0644\u0627\u062c\u06cc\u06a9 \u06cc\u06a9 \u0633\u0631\u0648\u0631 \u0645\u06cc\u0627\u0646\u200c\u0627\u0641\u0632\u0627\u0631 (Middleware) \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 Java \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0628\u06cc\u0646 \u0628\u0631\u0646\u0627\u0645\u0647 \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0648 \u0633\u06cc\u0633\u062a\u0645 \u0628\u0627\u0646\u06a9 \u062f\u0627\u062f\u0647\u060c \u0648\u0638\u06cc\u0641\u0647 \u0647\u062f\u0627\u06cc\u062a \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0648 \u0628\u0627\u0632\u06af\u0631\u062f\u0627\u0646\u062f\u0646 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u0646\u0638\u0631 \u0631\u0627 \u0628\u0631 \u0639\u0647\u062f\u0647 \u062f\u0627\u0631\u062f. WebLogic \u0627\u0632 \u0645\u0639\u0631\u0648\u0641\u200c\u062a\u0631\u06cc\u0646 \u0631\u0627\u0647\u06a9\u0627\u0631\u0647\u0627\u06cc \u0645\u06cc\u0627\u0646\u200c\u0627\u0641\u0632\u0627\u0631 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631 \u0631\u0648\u06cc \u062f\u0647\u200c\u0647\u0627 \u0647\u0632\u0627\u0631 \u0633\u0631\u0648\u0631 \u062f\u0631 \u062d\u0627\u0644 \u0633\u0631\u0648\u06cc\u0633\u200c\u062f\u0647\u06cc \u0627\u0633\u062a.\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-\u06f2\u06f0\u06f2\u06f0-\u06f2\u06f8\u06f8\u06f3 \u0628\u0627\u06af\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631 \u0627\u0633\u0627\u0633 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f CVSSv\u06f3 \u062f\u0631\u062c\u0647 \u062d\u0633\u0627\u0633\u06cc\u062a \u06f9,\u06f8 \u0627\u0632 \u06f1\u06f0 \u0628\u0647 \u0622\u0646 \u062a\u062e\u0635\u06cc\u0635 \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0628\u0647\u200c\u0646\u0638\u0631 \u0645\u06cc\u200c\u0631\u0633\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0630\u06a9\u0648\u0631 \u06cc\u06a9 \u0631\u0648\u0632 \u067e\u0633 \u0627\u0632 \u0622\u0646 \u0622\u063a\u0627\u0632 \u0634\u062f \u06a9\u0647 \u06a9\u062f \u0646\u0645\u0648\u0646\u0647 \u0627\u062b\u0628\u0627\u062a\u200c\u06af\u0631 (Proof-of-Concept) \u0622\u0646 \u062f\u0631 \u0645\u0633\u06cc\u0631 \u0632\u06cc\u0631 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u06af\u0630\u0627\u0634\u062a\u0647 \u0634\u062f:\n\nhttps://github.com/hktalent/CVE_2020_2546\n\n@KaitNews", "url": "https://t.me/KaitNews/8639"}, {"timestamp": "2026-07-29T01:00:04.434Z", "date_only": false, "value": "2026-07-29T01:00:04.434405Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KaitNews/8639", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "2e85ebd6-b374-4031-a7ee-0da724e6b011", "content": "\u26a0\ufe0f \u0634\u0631\u06a9\u062a \u0627\u0648\u0631\u0627\u06a9\u0644 \u062f\u0631 \u0647\u0634\u062f\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0636\u0637\u0631\u0627\u0631\u06cc \u062e\u0648\u062f \u0627\u0632 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 WebLogic \u062e\u0648\u0627\u0633\u062a\u0647 \u062a\u0627 \u0646\u0633\u0628\u062a \u0628\u0647 \u0646\u0635\u0628 \u0641\u0648\u0631\u06cc \u0622\u062e\u0631\u06cc\u0646 \u0627\u0635\u0644\u0627\u062d\u06cc\u0647\u200c\u0647\u0627\u06cc \u0627\u06cc\u0646 \u0645\u062d\u0635\u0648\u0644 \u06a9\u0647 \u062f\u0631 26 \u0641\u0631\u0648\u0631\u062f\u06cc\u0646 \u0639\u0631\u0636\u0647 \u0634\u062f\u0646\u062f \u0627\u0642\u062f\u0627\u0645 \u06a9\u0646\u0646\u062f.\n\n\u0627\u0648\u0631\u0627\u06a9\u0644 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u06a9\u0647 \u06af\u0632\u0627\u0631\u0634\u200c\u0647\u0627\u06cc\u06cc \u0631\u0627 \u062f\u0631 \u062e\u0635\u0648\u0635 \u062a\u0644\u0627\u0634 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc WebLogic \u0628\u0647 \u0634\u0646\u0627\u0633\u0647 CVE-2020-2883 \u0631\u0627 \u0646\u06cc\u0632 \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\u0648\u0628 \u0644\u0627\u062c\u06cc\u06a9 \u06cc\u06a9 \u0633\u0631\u0648\u0631 \u0645\u06cc\u0627\u0646\u200c\u0627\u0641\u0632\u0627\u0631 (Middleware) \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 Java \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0628\u06cc\u0646 \u0628\u0631\u0646\u0627\u0645\u0647 \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0648 \u0633\u06cc\u0633\u062a\u0645 \u0628\u0627\u0646\u06a9 \u062f\u0627\u062f\u0647\u060c \u0648\u0638\u06cc\u0641\u0647 \u0647\u062f\u0627\u06cc\u062a \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0648 \u0628\u0627\u0632\u06af\u0631\u062f\u0627\u0646\u062f\u0646 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u0646\u0638\u0631 \u0631\u0627 \u0628\u0631 \u0639\u0647\u062f\u0647 \u062f\u0627\u0631\u062f. WebLogic \u0627\u0632 \u0645\u0639\u0631\u0648\u0641\u200c\u062a\u0631\u06cc\u0646 \u0631\u0627\u0647\u06a9\u0627\u0631\u0647\u0627\u06cc \u0645\u06cc\u0627\u0646\u200c\u0627\u0641\u0632\u0627\u0631 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631 \u0631\u0648\u06cc \u062f\u0647\u200c\u0647\u0627 \u0647\u0632\u0627\u0631 \u0633\u0631\u0648\u0631 \u062f\u0631 \u062d\u0627\u0644 \u0633\u0631\u0648\u06cc\u0633\u200c\u062f\u0647\u06cc \u0627\u0633\u062a.\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-\u06f2\u06f0\u06f2\u06f0-\u06f2\u06f8\u06f8\u06f3 \u0628\u0627\u06af\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631 \u0627\u0633\u0627\u0633 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f CVSSv\u06f3 \u062f\u0631\u062c\u0647 \u062d\u0633\u0627\u0633\u06cc\u062a \u06f9,\u06f8 \u0627\u0632 \u06f1\u06f0 \u0628\u0647 \u0622\u0646 \u062a\u062e\u0635\u06cc\u0635 \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0628\u0647\u200c\u0646\u0638\u0631 \u0645\u06cc\u200c\u0631\u0633\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0630\u06a9\u0648\u0631 \u06cc\u06a9 \u0631\u0648\u0632 \u067e\u0633 \u0627\u0632 \u0622\u0646 \u0622\u063a\u0627\u0632 \u0634\u062f \u06a9\u0647 \u06a9\u062f \u0646\u0645\u0648\u0646\u0647 \u0627\u062b\u0628\u0627\u062a\u200c\u06af\u0631 (Proof-of-Concept) \u0622\u0646 \u062f\u0631 \u0645\u0633\u06cc\u0631 \u0632\u06cc\u0631 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u06af\u0630\u0627\u0634\u062a\u0647 \u0634\u062f:\n\nhttps://github.com/hktalent/CVE_2020_2546\n\n@KaitNews", "url": "https://t.me/KaitNews/8639"}, {"timestamp": "2026-08-02T14:06:34.397Z", "date_only": false, "value": "2026-08-02T14:06:34.397904Z", "kind": "sighting", "label": "Seen", "source": "Telegram/e6bCcvKtheqq7sygjc1Oa27WvTxBG_pIGIRDkrE-jOk6sw", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "96bfb4c2-1d70-4df2-9867-faefe9f6fa4c"}, {"timestamp": "2026-09-01T17:00:21.546Z", "date_only": false, "value": "2026-09-01T17:00:21.546485Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6663", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "c50724ca-9591-4199-aa70-a7876c491842", "content": "exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC\n\n4\ud83e\udd78. CVE-2023-23397:\nMicrosoft Outlook EoP Vulnerability\nhttps://www.mdsec.co.uk/2023/03/exploiting-cve-2023-23397-microsoft-outlook-elevation-of-privilege-vulnerability\n]-> 0-day: https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY\n\n5. Producing a PoC for CVE-2022-42475 (Fortinet RCE)\nhttps://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.25", "url": "https://t.me/cissp/6663"}, {"timestamp": "2026-09-10T02:00:04.981Z", "date_only": false, "value": "2026-09-10T02:00:04.981815Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/6663", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "876fe677-423a-4c3d-b7c8-0d4e04b73ab4", "content": "exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC\n\n4\ud83e\udd78. CVE-2023-23397:\nMicrosoft Outlook EoP Vulnerability\nhttps://www.mdsec.co.uk/2023/03/exploiting-cve-2023-23397-microsoft-outlook-elevation-of-privilege-vulnerability\n]-> 0-day: https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY\n\n5. Producing a PoC for CVE-2022-42475 (Fortinet RCE)\nhttps://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.25", "url": "https://t.me/cissp/6663"}]}